last executing test programs: 47.444850972s ago: executing program 4 (id=1425): r0 = socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) r1 = socket(0x2a, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x2}}, 0x2e) socket$netlink(0x10, 0x3, 0xa) 47.028239378s ago: executing program 4 (id=1426): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$igmp6(0xa, 0x3, 0x3a) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x453) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/11, 0xb}], 0x1, 0xb1, 0x5) pread64(r3, &(0x7f0000000180)=""/43, 0x2b, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1ff, 0xed1, 0x200, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) 46.475937086s ago: executing program 4 (id=1431): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 46.43992948s ago: executing program 4 (id=1433): prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = socket(0x10, 0x2, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x103, 0x10, 0xe, 0x8, 0xff, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0x8, 0xdc66}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf252400000008000200", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7c, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 45.988024329s ago: executing program 4 (id=1437): r0 = socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) r1 = socket(0x2a, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x2}}, 0x2e) socket$netlink(0x10, 0x3, 0xa) 45.854647511s ago: executing program 4 (id=1439): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000014c0)) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x401, 0x4}, 0x10a4aa, 0x10004, 0xfffffff8, 0x8, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x4000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r4, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000180), &(0x7f0000000080)=0x4) 45.804791035s ago: executing program 32 (id=1439): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000014c0)) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x401, 0x4}, 0x10a4aa, 0x10004, 0xfffffff8, 0x8, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x4000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r4, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000180), &(0x7f0000000080)=0x4) 14.241124737s ago: executing program 3 (id=1706): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.128245837s ago: executing program 3 (id=1707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0xa4000061) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x54) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xb9, &(0x7f00000004c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@mpls_uc={0x8847, {[], @llc={@snap={0xaa, 0xaa, "c9", "0650c0", 0x9200, "2051b71d24459852c89032361d5563a477e1ea1a5c02f56169a4fa06f5c1f91fff765b952fc4dde2f89b51aa71381ee0e9c1ef0ac8e4d3bafc6a81cd7e73f08db357b742ca3ec11ab20a98dd1e5bb4d09530c3b10fcc86d300d4d9e7231d2a8c74e2b84ca30af10652f401394c6d4d9d626bfd9903ec34b54fa17361b4edfc04082688df992bd27abf992ddafcee8eeb30a67af9251a91ea4435e547585c35e19f7b1b"}}}}}}, 0x0) 13.165377712s ago: executing program 3 (id=1715): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010845d4000000000000400006020500010006000000"], 0x1c}}, 0x0) 8.291949136s ago: executing program 3 (id=1738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8004}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 7.753408633s ago: executing program 3 (id=1740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010845d4000000000000400006020500010006000000"], 0x1c}}, 0x0) 5.479141861s ago: executing program 0 (id=1752): inotify_rm_watch(0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x5b2, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000004c900200040000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="9800000010001ffffcffffff8000400000002000", @ANYRES32=0x0, @ANYBLOB="00030000003f000008000a00", @ANYRES32, @ANYBLOB="700012800b00010062726964676500006000028008001c40090000000c00220008280000000000000c0021007b"], 0x98}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280)) 5.287836368s ago: executing program 5 (id=1754): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) get_robust_list(r2, 0x0, &(0x7f00000006c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = dup(r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) 5.013431312s ago: executing program 5 (id=1755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0xa4000061) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r5, 0x0, 0x54) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xb9, &(0x7f00000004c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@mpls_uc={0x8847, {[], @llc={@snap={0xaa, 0xaa, "c9", "0650c0", 0x9200, "2051b71d24459852c89032361d5563a477e1ea1a5c02f56169a4fa06f5c1f91fff765b952fc4dde2f89b51aa71381ee0e9c1ef0ac8e4d3bafc6a81cd7e73f08db357b742ca3ec11ab20a98dd1e5bb4d09530c3b10fcc86d300d4d9e7231d2a8c74e2b84ca30af10652f401394c6d4d9d626bfd9903ec34b54fa17361b4edfc04082688df992bd27abf992ddafcee8eeb30a67af9251a91ea4435e547585c35e19f7b1b"}}}}}}, 0x0) 4.419990084s ago: executing program 0 (id=1757): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) file_getattr(r1, 0x0, &(0x7f0000000040), 0x64, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000660a020000000000180100002020782500000000002020207b1ae4ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f00000012c0)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x2) 4.265674157s ago: executing program 0 (id=1758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0xa4000061) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x54) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xb9, &(0x7f00000004c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@mpls_uc={0x8847, {[], @llc={@snap={0xaa, 0xaa, "c9", "0650c0", 0x9200, "2051b71d24459852c89032361d5563a477e1ea1a5c02f56169a4fa06f5c1f91fff765b952fc4dde2f89b51aa71381ee0e9c1ef0ac8e4d3bafc6a81cd7e73f08db357b742ca3ec11ab20a98dd1e5bb4d09530c3b10fcc86d300d4d9e7231d2a8c74e2b84ca30af10652f401394c6d4d9d626bfd9903ec34b54fa17361b4edfc04082688df992bd27abf992ddafcee8eeb30a67af9251a91ea4435e547585c35e19f7b1b"}}}}}}, 0x0) 4.059735115s ago: executing program 5 (id=1759): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000080000000000000008000000911165000000000095", @ANYRES64=r0], &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0x2006}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) chroot(0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 3.310907871s ago: executing program 1 (id=1760): gettid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.08394331s ago: executing program 1 (id=1761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000000000000dbaaf8fff1000000b5080000020000007b8af0ff4889645b15ff04000000000000000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0xfe, 0x0, 0x13}}}}}, 0x36) 3.074299031s ago: executing program 2 (id=1762): socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe801200000000000000000000000000fe8000000000000003000000000000aa87"], 0x0) 2.988361889s ago: executing program 0 (id=1763): syz_open_dev$usbfs(0x0, 0x205, 0x8401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x2000000, @b}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x4300}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xd}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) 2.884017038s ago: executing program 2 (id=1764): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.785957906s ago: executing program 1 (id=1765): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.785401106s ago: executing program 2 (id=1766): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x10, 0xa}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 2.502132801s ago: executing program 1 (id=1767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0xa4000061) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x54) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xb9, &(0x7f00000004c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@mpls_uc={0x8847, {[], @llc={@snap={0xaa, 0xaa, "c9", "0650c0", 0x9200, "2051b71d24459852c89032361d5563a477e1ea1a5c02f56169a4fa06f5c1f91fff765b952fc4dde2f89b51aa71381ee0e9c1ef0ac8e4d3bafc6a81cd7e73f08db357b742ca3ec11ab20a98dd1e5bb4d09530c3b10fcc86d300d4d9e7231d2a8c74e2b84ca30af10652f401394c6d4d9d626bfd9903ec34b54fa17361b4edfc04082688df992bd27abf992ddafcee8eeb30a67af9251a91ea4435e547585c35e19f7b1b"}}}}}}, 0x0) 1.840028719s ago: executing program 0 (id=1768): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x2) 1.619785468s ago: executing program 0 (id=1769): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000080000000000000008000000911165000000000095", @ANYRES64=r0], &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0x2006}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) chroot(0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) 1.529912536s ago: executing program 1 (id=1770): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071123200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b8, &(0x7f00000010c0)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1a2d, 0x0, 0xdce, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88020cc, 0x1000000000000000) write$eventfd(r3, &(0x7f0000000240)=0x2, 0x8) 1.347284692s ago: executing program 2 (id=1771): gettid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.175989217s ago: executing program 2 (id=1772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x5865, r7, 0x3e}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)='\'', 0x1}, {0x0}], 0x2}, 0x5) 943.635447ms ago: executing program 5 (id=1773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe800000f5ffffff00000000000000aaff020000000000000000000000000001330022eb"], 0x10da) 890.840922ms ago: executing program 2 (id=1774): r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r0, &(0x7f0000000740)=""/377, 0x179) ioctl$BLKRAGET(r0, 0x1263, &(0x7f00000000c0)) r1 = syz_clone(0x48000100, 0x0, 0xfffffffffffffd9f, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x64841}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='7', 0x1, 0x4}]) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x528, &(0x7f0000000740)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r2, &(0x7f00000002c0)=[{&(0x7f0000002200)=""/4086, 0xff6}], 0x1, 0x0, 0x40031, 0x1f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x27, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6657e988, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}, @jmp={0x5, 0x0, 0x1, 0x4, 0x7, 0xfffffffffffffff4, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x10, 0x7, 0x7, 0x9, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4212, r1, &(0x7f0000000140)={0xffffbffffffffffc}, &(0x7f00000000c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigtimedwait(&(0x7f0000000200)={[0xfffffffffffff24a]}, &(0x7f00000005c0), &(0x7f0000000580), 0x78) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657601696d3000000800730000000000"], 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x8000) 363.951748ms ago: executing program 1 (id=1775): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x8}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000100)=0x100, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) recvmmsg(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}, 0x6}], 0x1, 0x40030002, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r6, r4}}, 0x18) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, r0, 0x0) 190.801623ms ago: executing program 3 (id=1776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000000000000dbaaf8fff1000000b5080000020000007b8af0ff4889645b15ff04000000000000000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0xfe, 0x0, 0x13}}}}}, 0x36) 171.402265ms ago: executing program 5 (id=1777): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xd, 0x0, &(0x7f0000000600)="c9f7b986000000000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=1778): syz_open_dev$usbfs(0x0, 0x205, 0x8401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x2000000, @b}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x4300}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xd}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) kernel console output (not intermixed with test programs): denied { read write open } for pid=6584 comm="syz.2.1091" path="/208/file1/bus" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 122.623401][ T28] audit: type=1400 audit(1771701750.311:784): avc: denied { ioctl } for pid=6584 comm="syz.2.1091" path="/208/file1/bus" dev="loop2" ino=12 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 122.762249][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.915195][ T6590] syzkaller0: entered promiscuous mode [ 122.926726][ T6590] syzkaller0: entered allmulticast mode [ 123.092941][ T6598] syzkaller0: entered promiscuous mode [ 123.099236][ T6598] syzkaller0: entered allmulticast mode [ 123.281862][ T6604] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6604 comm=syz.3.1098 [ 123.356751][ T28] audit: type=1400 audit(1771701751.041:785): avc: denied { connect } for pid=6605 comm="syz.3.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.427898][ T28] audit: type=1400 audit(1771701751.111:786): avc: denied { bind } for pid=6605 comm="syz.3.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.501518][ T28] audit: type=1400 audit(1771701751.131:787): avc: denied { write } for pid=6605 comm="syz.3.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.521469][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 124.675817][ T6623] syzkaller0: entered promiscuous mode [ 124.687924][ T6623] syzkaller0: entered allmulticast mode [ 124.865906][ T6630] syzkaller0: entered promiscuous mode [ 124.892608][ T6630] syzkaller0: entered allmulticast mode [ 124.900588][ T28] audit: type=1400 audit(1771701752.581:788): avc: denied { connect } for pid=6640 comm="syz.0.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 124.992106][ T6644] loop0: detected capacity change from 0 to 512 [ 125.008093][ T6645] netlink: 'syz.3.1110': attribute type 10 has an invalid length. [ 125.018465][ T6644] ext4: Unknown parameter 'smackfstransmute' [ 125.052607][ T6645] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1110'. [ 125.097475][ T6647] mmap: syz.0.1111 (6647) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.328993][ T6662] syzkaller0: entered promiscuous mode [ 125.341123][ T6662] syzkaller0: entered allmulticast mode [ 125.469714][ T6664] syzkaller0: entered promiscuous mode [ 125.476047][ T6668] FAULT_INJECTION: forcing a failure. [ 125.476047][ T6668] name failslab, interval 1, probability 0, space 0, times 1 [ 125.488852][ T6664] syzkaller0: entered allmulticast mode [ 125.504783][ T6668] CPU: 1 UID: 0 PID: 6668 Comm: syz.0.1121 Not tainted syzkaller #0 PREEMPT(full) [ 125.504856][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.504893][ T6668] Call Trace: [ 125.504899][ T6668] [ 125.504907][ T6668] __dump_stack+0x1d/0x30 [ 125.504971][ T6668] dump_stack_lvl+0x95/0xd0 [ 125.504996][ T6668] dump_stack+0x15/0x1b [ 125.505019][ T6668] should_fail_ex+0x263/0x280 [ 125.505044][ T6668] should_failslab+0x8c/0xb0 [ 125.505065][ T6668] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 125.505111][ T6668] ? __alloc_skb+0x2d6/0x690 [ 125.505133][ T6668] __alloc_skb+0x2d6/0x690 [ 125.505191][ T6668] ? __alloc_skb+0x200/0x690 [ 125.505220][ T6668] netlink_alloc_large_skb+0xbf/0xf0 [ 125.505245][ T6668] netlink_sendmsg+0x40c/0x6f0 [ 125.505282][ T6668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.505357][ T6668] ____sys_sendmsg+0x5af/0x600 [ 125.505437][ T6668] ___sys_sendmsg+0x195/0x1e0 [ 125.505470][ T6668] __x64_sys_sendmsg+0xd4/0x160 [ 125.505500][ T6668] x64_sys_call+0x194c/0x3020 [ 125.505587][ T6668] do_syscall_64+0x12c/0x370 [ 125.505628][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.505723][ T6668] RIP: 0033:0x7fc81cf1c629 [ 125.505741][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.505755][ T6668] RSP: 002b:00007fc81b96f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.505782][ T6668] RAX: ffffffffffffffda RBX: 00007fc81d195fa0 RCX: 00007fc81cf1c629 [ 125.505794][ T6668] RDX: 0000000000008044 RSI: 0000200000000440 RDI: 0000000000000003 [ 125.505807][ T6668] RBP: 00007fc81b96f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.505817][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.505827][ T6668] R13: 00007fc81d196038 R14: 00007fc81d195fa0 R15: 00007ffc328f5b18 [ 125.505865][ T6668] [ 125.643814][ T6671] loop1: detected capacity change from 0 to 512 [ 125.898253][ T6676] bridge3: entered promiscuous mode [ 125.944574][ T6671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.099291][ T6671] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.393339][ T28] audit: type=1400 audit(1771701754.071:789): avc: denied { remount } for pid=6670 comm="syz.1.1122" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 126.914077][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 126.929010][ T6676] bridge3: entered allmulticast mode [ 126.941462][ T6671] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 127.099082][ T6693] syzkaller0: entered promiscuous mode [ 127.111539][ T6693] syzkaller0: entered allmulticast mode [ 127.741962][ T6691] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 127.771315][ T6696] loop0: detected capacity change from 0 to 4096 [ 127.786055][ T6696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.932859][ T6700] syzkaller0: entered promiscuous mode [ 127.942708][ T28] audit: type=1400 audit(1771701755.591:790): avc: denied { bind } for pid=6670 comm="syz.1.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.965890][ T6700] syzkaller0: entered allmulticast mode [ 128.108267][ T6704] bridge5: entered promiscuous mode [ 128.113623][ T6704] bridge5: entered allmulticast mode [ 128.215200][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.406001][ T28] audit: type=1400 audit(1771701755.661:791): avc: denied { read } for pid=6702 comm="syz.4.1130" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.429137][ T28] audit: type=1400 audit(1771701755.661:792): avc: denied { open } for pid=6702 comm="syz.4.1130" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.452797][ T28] audit: type=1400 audit(1771701755.731:793): avc: denied { ioctl } for pid=6702 comm="syz.4.1130" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.477776][ T28] audit: type=1400 audit(1771701755.761:794): avc: denied { map } for pid=6670 comm="syz.1.1122" path="/253/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.517854][ T28] audit: type=1400 audit(1771701755.761:795): avc: denied { execute } for pid=6670 comm="syz.1.1122" path="/253/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.644820][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.877063][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 128.908156][ T6723] loop1: detected capacity change from 0 to 1764 [ 128.914709][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 129.040851][ T6726] loop2: detected capacity change from 0 to 1764 [ 130.684301][ T6745] syzkaller0: entered promiscuous mode [ 130.710117][ T6745] syzkaller0: entered allmulticast mode [ 130.802114][ T6751] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1148'. [ 130.871366][ T6755] syzkaller0: entered promiscuous mode [ 130.887115][ T6755] syzkaller0: entered allmulticast mode [ 131.011671][ T28] audit: type=1400 audit(1771701758.691:796): avc: denied { create } for pid=6759 comm="syz.4.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 131.101245][ T28] audit: type=1400 audit(1771701758.781:797): avc: denied { setattr } for pid=6766 comm="syz.4.1155" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 131.199648][ T6775] syzkaller0: entered promiscuous mode [ 131.205327][ T6775] syzkaller0: entered allmulticast mode [ 131.347069][ T6781] syzkaller0: entered promiscuous mode [ 131.352749][ T6781] syzkaller0: entered allmulticast mode [ 131.967916][ T6813] syzkaller0: entered promiscuous mode [ 131.974286][ T6813] syzkaller0: entered allmulticast mode [ 132.082248][ T6820] syzkaller0: entered promiscuous mode [ 132.088099][ T6820] syzkaller0: entered allmulticast mode [ 132.350196][ T6831] loop0: detected capacity change from 0 to 4096 [ 132.357108][ T28] audit: type=1400 audit(1771701760.021:798): avc: denied { create } for pid=6825 comm="syz.4.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 132.380275][ T6833] loop2: detected capacity change from 0 to 4096 [ 132.388992][ T28] audit: type=1400 audit(1771701760.031:799): avc: denied { read } for pid=6825 comm="syz.4.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 132.411763][ T6831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.486842][ T6833] EXT4-fs: Ignoring removed oldalloc option [ 132.494405][ T6833] EXT4-fs: Ignoring removed orlov option [ 132.500085][ T6833] EXT4-fs: inline encryption not supported [ 132.522490][ T6833] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.560088][ T6833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.591918][ T6833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1181'. [ 133.004724][ T6844] bridge6: entered promiscuous mode [ 133.010116][ T6844] bridge6: entered allmulticast mode [ 133.324043][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.393630][ T6848] syzkaller0: entered promiscuous mode [ 133.399123][ T6848] syzkaller0: entered allmulticast mode [ 133.409812][ T6850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1187'. [ 133.493673][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 133.493687][ T28] audit: type=1400 audit(1771701761.171:827): avc: denied { listen } for pid=6855 comm="syz.4.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.558655][ T28] audit: type=1400 audit(1771701761.181:828): avc: denied { write } for pid=6855 comm="syz.4.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.625012][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.641567][ T28] audit: type=1400 audit(1771701761.181:829): avc: denied { accept } for pid=6855 comm="syz.4.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.668893][ T6860] syzkaller0: entered promiscuous mode [ 133.699965][ T6860] syzkaller0: entered allmulticast mode [ 133.730405][ T28] audit: type=1400 audit(1771701761.181:830): avc: denied { getopt } for pid=6855 comm="syz.4.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.773463][ T6874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1194'. [ 133.785192][ T6356] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.801633][ T6356] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.811619][ T4609] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.040600][ T4609] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.060076][ T4609] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.325959][ T6896] syzkaller0: entered promiscuous mode [ 134.344492][ T6896] syzkaller0: entered allmulticast mode [ 134.563330][ T6901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1203'. [ 134.581780][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 134.599654][ T6901] bridge0: entered promiscuous mode [ 134.609603][ T6901] ip6gretap0: entered promiscuous mode [ 134.618078][ T6901] debugfs: 'hsr1' already exists in 'hsr' [ 134.624107][ T6901] Cannot create hsr debugfs directory [ 134.724254][ T6901] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 134.734487][ T6901] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 135.018568][ T6911] syzkaller0: entered promiscuous mode [ 135.033307][ T6911] syzkaller0: entered allmulticast mode [ 135.145417][ T6915] loop2: detected capacity change from 0 to 256 [ 135.162411][ T6915] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.191798][ T6915] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.212841][ T6915] FAULT_INJECTION: forcing a failure. [ 135.212841][ T6915] name failslab, interval 1, probability 0, space 0, times 0 [ 135.236352][ T6915] CPU: 0 UID: 0 PID: 6915 Comm: syz.2.1208 Not tainted syzkaller #0 PREEMPT(full) [ 135.236381][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.236395][ T6915] Call Trace: [ 135.236403][ T6915] [ 135.236411][ T6915] __dump_stack+0x1d/0x30 [ 135.236433][ T6915] dump_stack_lvl+0x95/0xd0 [ 135.236517][ T6915] dump_stack+0x15/0x1b [ 135.236542][ T6915] should_fail_ex+0x263/0x280 [ 135.236567][ T6915] should_failslab+0x8c/0xb0 [ 135.236584][ T6915] kmem_cache_alloc_noprof+0x66/0x400 [ 135.236602][ T6915] ? alloc_empty_file+0x76/0x200 [ 135.236702][ T6915] alloc_empty_file+0x76/0x200 [ 135.236735][ T6915] path_openat+0x65/0x2050 [ 135.236768][ T6915] ? _parse_integer_limit+0x170/0x190 [ 135.236801][ T6915] ? _parse_integer+0x27/0x40 [ 135.236830][ T6915] ? kstrtoull+0x111/0x140 [ 135.236885][ T6915] ? kstrtouint+0x76/0xc0 [ 135.236921][ T6915] do_file_open+0x16c/0x290 [ 135.236983][ T6915] do_sys_openat2+0x94/0x130 [ 135.237013][ T6915] __x64_sys_openat+0xf2/0x120 [ 135.237052][ T6915] x64_sys_call+0x1e39/0x3020 [ 135.237147][ T6915] do_syscall_64+0x12c/0x370 [ 135.237244][ T6915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.237314][ T6915] RIP: 0033:0x7fa1edc8c629 [ 135.237331][ T6915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.237350][ T6915] RSP: 002b:00007fa1ec6df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.237371][ T6915] RAX: ffffffffffffffda RBX: 00007fa1edf05fa0 RCX: 00007fa1edc8c629 [ 135.237386][ T6915] RDX: 0000000000143142 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 135.237398][ T6915] RBP: 00007fa1ec6df090 R08: 0000000000000000 R09: 0000000000000000 [ 135.237434][ T6915] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 135.237452][ T6915] R13: 00007fa1edf06038 R14: 00007fa1edf05fa0 R15: 00007ffec1d45fe8 [ 135.237469][ T6915] [ 135.475908][ T28] audit: type=1326 audit(1771701763.161:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.1210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc81cf1c629 code=0x0 [ 135.528169][ T28] audit: type=1326 audit(1771701763.211:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.1210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc81cf1c629 code=0x0 [ 135.757296][ T6927] loop1: detected capacity change from 0 to 2048 [ 135.820567][ T6927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.022771][ T28] audit: type=1400 audit(1771701763.701:833): avc: denied { name_connect } for pid=6925 comm="syz.1.1213" dest=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 136.083877][ T28] audit: type=1400 audit(1771701763.771:834): avc: denied { name_connect } for pid=6925 comm="syz.1.1213" dest=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 136.560652][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.640902][ T6948] loop1: detected capacity change from 0 to 4096 [ 136.668178][ T6948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.987440][ T6953] syzkaller0: entered promiscuous mode [ 136.997885][ T6958] loop4: detected capacity change from 0 to 256 [ 137.001575][ T6953] syzkaller0: entered allmulticast mode [ 137.008798][ T6958] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.065028][ T6960] bridge2: entered promiscuous mode [ 137.070323][ T6960] bridge2: entered allmulticast mode [ 137.388925][ T6958] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.525961][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.746354][ T6969] loop2: detected capacity change from 0 to 736 [ 137.755716][ T6969] iso9660: Bad value for 'dmode' [ 137.781575][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.811883][ T28] audit: type=1400 audit(1771701765.501:835): avc: denied { connect } for pid=6967 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.894427][ T6968] loop2: detected capacity change from 0 to 512 [ 137.926394][ T6968] EXT4-fs: Ignoring removed nobh option [ 137.935850][ T6968] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 137.944030][ T6968] System zones: 1-12 [ 137.949119][ T6968] EXT4-fs (loop2): orphan cleanup on readonly fs [ 137.957713][ T6968] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 137.963588][ T6978] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 137.971209][ T6968] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.1225: corrupted inode contents [ 137.980338][ T6980] FAULT_INJECTION: forcing a failure. [ 137.980338][ T6980] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 137.990571][ T6968] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.020087][ T6968] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.1225: mark_inode_dirty error [ 138.022545][ T6979] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1227'. [ 138.029269][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 138.055936][ C1] EXT4-fs (loop2): initial error at time 1771701765: ext4_do_update_inode:5569: inode 15 [ 138.065849][ C1] EXT4-fs (loop2): last error at time 1771701765: ext4_do_update_inode:5569: inode 15 [ 138.091729][ T6980] CPU: 0 UID: 0 PID: 6980 Comm: syz.4.1229 Not tainted syzkaller #0 PREEMPT(full) [ 138.091756][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.091766][ T6980] Call Trace: [ 138.091772][ T6980] [ 138.091781][ T6980] __dump_stack+0x1d/0x30 [ 138.091858][ T6980] dump_stack_lvl+0x95/0xd0 [ 138.091898][ T6980] dump_stack+0x15/0x1b [ 138.091934][ T6980] should_fail_ex+0x263/0x280 [ 138.091957][ T6980] should_fail+0xb/0x20 [ 138.091977][ T6980] should_fail_usercopy+0x1a/0x20 [ 138.092028][ T6980] _copy_from_user+0x1c/0xb0 [ 138.092057][ T6980] blk_trace_setup+0x5e/0x3f0 [ 138.092084][ T6980] ? ioctl_has_perm+0x27e/0x2d0 [ 138.092110][ T6980] ? do_vfs_ioctl+0x84f/0xe70 [ 138.092170][ T6980] sg_ioctl+0x780/0x1350 [ 138.092202][ T6980] ? mutex_lock+0x57/0x90 [ 138.092230][ T6980] ? __pfx_sg_ioctl+0x10/0x10 [ 138.092330][ T6980] __se_sys_ioctl+0xce/0x140 [ 138.092366][ T6980] __x64_sys_ioctl+0x43/0x50 [ 138.092468][ T6980] x64_sys_call+0x1563/0x3020 [ 138.092497][ T6980] do_syscall_64+0x12c/0x370 [ 138.092553][ T6980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.092577][ T6980] RIP: 0033:0x7faf07aec629 [ 138.092606][ T6980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.092626][ T6980] RSP: 002b:00007faf06547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.092709][ T6980] RAX: ffffffffffffffda RBX: 00007faf07d65fa0 RCX: 00007faf07aec629 [ 138.092725][ T6980] RDX: 00002000000002c0 RSI: 00000000c0481273 RDI: 0000000000000003 [ 138.092739][ T6980] RBP: 00007faf06547090 R08: 0000000000000000 R09: 0000000000000000 [ 138.092761][ T6980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.092787][ T6980] R13: 00007faf07d66038 R14: 00007faf07d65fa0 R15: 00007ffccfc9c008 [ 138.092884][ T6980] [ 138.097759][ T6968] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.284456][ T6968] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.1225: corrupted inode contents [ 138.305484][ T6968] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.319403][ T6968] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.1225: mark_inode_dirty error [ 138.355125][ T6968] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.363197][ T6968] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.1225: mark inode dirty (error -117) [ 138.385947][ T6968] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.388315][ T6968] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 138.404963][ T6995] syzkaller0: entered promiscuous mode [ 138.407017][ T6968] EXT4-fs (loop2): 1 orphan inode deleted [ 138.418421][ T6968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 138.420321][ T6995] syzkaller0: entered allmulticast mode [ 138.559047][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.642132][ T7003] loop4: detected capacity change from 0 to 4096 [ 138.663184][ T7003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.735783][ T7012] netlink: 'syz.0.1240': attribute type 12 has an invalid length. [ 138.764259][ T7012] netlink: 'syz.0.1240': attribute type 29 has an invalid length. [ 138.786547][ T7012] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1240'. [ 138.815621][ T28] audit: type=1400 audit(1771701766.501:836): avc: denied { bind } for pid=7014 comm="syz.3.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.209124][ T7028] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1246'. [ 139.603524][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.748385][ T7040] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1247'. [ 139.757858][ T7040] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 139.790995][ T7056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1251'. [ 139.801051][ T28] audit: type=1400 audit(1771701767.481:837): avc: denied { cpu } for pid=7054 comm="syz.3.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 139.837240][ T7045] syzkaller0: entered promiscuous mode [ 139.842747][ T7045] syzkaller0: entered allmulticast mode [ 139.896791][ T4594] IPVS: starting estimator thread 0... [ 139.905549][ T28] audit: type=1400 audit(1771701767.591:838): avc: denied { read } for pid=7058 comm="syz.2.1252" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 139.918132][ T7044] syzkaller0: entered promiscuous mode [ 139.935588][ T7044] syzkaller0: entered allmulticast mode [ 139.941187][ T28] audit: type=1400 audit(1771701767.591:839): avc: denied { open } for pid=7058 comm="syz.2.1252" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 139.971734][ T28] audit: type=1400 audit(1771701767.621:840): avc: denied { ioctl } for pid=7058 comm="syz.2.1252" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 140.008050][ T28] audit: type=1400 audit(1771701767.691:841): avc: denied { read } for pid=7058 comm="syz.2.1252" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.016746][ T7061] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1252'. [ 140.031007][ T7060] IPVS: using max 2496 ests per chain, 124800 per kthread [ 140.047798][ T28] audit: type=1400 audit(1771701767.691:842): avc: denied { open } for pid=7058 comm="syz.2.1252" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.074935][ T7063] syzkaller0: entered promiscuous mode [ 140.080478][ T7063] syzkaller0: entered allmulticast mode [ 140.089488][ T7063] tipc: Started in network mode [ 140.092888][ T7061] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1252'. [ 140.094990][ T7063] tipc: Node identity c2601859ee25, cluster identity 4711 [ 140.110830][ T28] audit: type=1400 audit(1771701767.691:843): avc: denied { ioctl } for pid=7058 comm="syz.2.1252" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x7009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.141634][ T7063] tipc: Enabled bearer , priority 0 [ 140.176224][ T7062] tipc: Resetting bearer [ 140.317130][ T7085] FAULT_INJECTION: forcing a failure. [ 140.317130][ T7085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.340629][ T7085] CPU: 0 UID: 0 PID: 7085 Comm: syz.4.1260 Not tainted syzkaller #0 PREEMPT(full) [ 140.340659][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.340674][ T7085] Call Trace: [ 140.340681][ T7085] [ 140.340728][ T7085] __dump_stack+0x1d/0x30 [ 140.340758][ T7085] dump_stack_lvl+0x95/0xd0 [ 140.340895][ T7085] dump_stack+0x15/0x1b [ 140.340918][ T7085] should_fail_ex+0x263/0x280 [ 140.340938][ T7085] should_fail+0xb/0x20 [ 140.340953][ T7085] should_fail_usercopy+0x1a/0x20 [ 140.341002][ T7085] _copy_from_iter+0xcf/0xea0 [ 140.341032][ T7085] ? alloc_pages_mpol+0x217/0x260 [ 140.341097][ T7085] copy_page_from_iter+0x178/0x2a0 [ 140.341144][ T7085] tun_get_user+0xbbd/0x27c0 [ 140.341170][ T7085] ? ref_tracker_alloc+0x1f2/0x2f0 [ 140.341193][ T7085] tun_chr_write_iter+0x15e/0x210 [ 140.341291][ T7085] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 140.341330][ T7085] vfs_write+0x5a6/0x9f0 [ 140.341385][ T7085] ksys_write+0xdc/0x1a0 [ 140.341425][ T7085] __x64_sys_write+0x40/0x50 [ 140.341462][ T7085] x64_sys_call+0x27e1/0x3020 [ 140.341486][ T7085] do_syscall_64+0x12c/0x370 [ 140.341569][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.341591][ T7085] RIP: 0033:0x7faf07aacece [ 140.341605][ T7085] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.341621][ T7085] RSP: 002b:00007faf06546fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.341642][ T7085] RAX: ffffffffffffffda RBX: 00007faf065476c0 RCX: 00007faf07aacece [ 140.341657][ T7085] RDX: 0000000000000046 RSI: 0000200000000d40 RDI: 00000000000000c8 [ 140.341671][ T7085] RBP: 00007faf06547090 R08: 0000000000000000 R09: 0000000000000000 [ 140.341695][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.341709][ T7085] R13: 00007faf07d66038 R14: 00007faf07d65fa0 R15: 00007ffccfc9c008 [ 140.341731][ T7085] [ 140.628881][ T7098] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1263'. [ 140.664229][ T7062] tipc: Disabling bearer [ 140.696253][ T7087] syzkaller0: entered promiscuous mode [ 140.746746][ T7087] syzkaller0: entered allmulticast mode [ 140.799989][ T7108] syzkaller0: entered promiscuous mode [ 140.805681][ T7108] syzkaller0: entered allmulticast mode [ 140.954429][ T7117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1267'. [ 141.000471][ T7117] bond0: entered promiscuous mode [ 141.041521][ T7117] bond_slave_0: entered promiscuous mode [ 141.053851][ T7117] bond_slave_1: entered promiscuous mode [ 141.066215][ T7117] gretap0: entered promiscuous mode [ 141.081626][ T7117] debugfs: 'hsr1' already exists in 'hsr' [ 141.087829][ T7117] Cannot create hsr debugfs directory [ 141.101700][ T7117] hsr1: entered promiscuous mode [ 141.451680][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 141.793833][ T7132] FAULT_INJECTION: forcing a failure. [ 141.793833][ T7132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.807286][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.2.1270 Not tainted syzkaller #0 PREEMPT(full) [ 141.807340][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.807351][ T7132] Call Trace: [ 141.807357][ T7132] [ 141.807365][ T7132] __dump_stack+0x1d/0x30 [ 141.807395][ T7132] dump_stack_lvl+0x95/0xd0 [ 141.807416][ T7132] dump_stack+0x15/0x1b [ 141.807435][ T7132] should_fail_ex+0x263/0x280 [ 141.807525][ T7132] should_fail+0xb/0x20 [ 141.807557][ T7132] should_fail_usercopy+0x1a/0x20 [ 141.807584][ T7132] _copy_from_user+0x1c/0xb0 [ 141.807622][ T7132] ___sys_sendmsg+0xc1/0x1e0 [ 141.807654][ T7132] ? path_openat+0x1b01/0x2050 [ 141.807703][ T7132] __sys_sendmmsg+0x185/0x320 [ 141.807747][ T7132] __x64_sys_sendmmsg+0x57/0x70 [ 141.807817][ T7132] x64_sys_call+0x27aa/0x3020 [ 141.807848][ T7132] do_syscall_64+0x12c/0x370 [ 141.807920][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.807947][ T7132] RIP: 0033:0x7fa1edc8c629 [ 141.807968][ T7132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.807989][ T7132] RSP: 002b:00007fa1ec6df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.808012][ T7132] RAX: ffffffffffffffda RBX: 00007fa1edf05fa0 RCX: 00007fa1edc8c629 [ 141.808029][ T7132] RDX: 0000000000000001 RSI: 0000200000001f80 RDI: 0000000000000003 [ 141.808084][ T7132] RBP: 00007fa1ec6df090 R08: 0000000000000000 R09: 0000000000000000 [ 141.808147][ T7132] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 141.808160][ T7132] R13: 00007fa1edf06038 R14: 00007fa1edf05fa0 R15: 00007ffec1d45fe8 [ 141.808184][ T7132] [ 141.985491][ T7134] loop3: detected capacity change from 0 to 512 [ 142.056683][ T7142] netlink: 'syz.4.1273': attribute type 10 has an invalid length. [ 142.071539][ T7142] geneve1: entered promiscuous mode [ 142.182357][ T7154] FAULT_INJECTION: forcing a failure. [ 142.182357][ T7154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.196575][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1280'. [ 142.207043][ T7146] syzkaller0: entered promiscuous mode [ 142.212922][ T7154] CPU: 1 UID: 0 PID: 7154 Comm: syz.4.1279 Not tainted syzkaller #0 PREEMPT(full) [ 142.213008][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.213023][ T7154] Call Trace: [ 142.213041][ T7154] [ 142.213048][ T7154] __dump_stack+0x1d/0x30 [ 142.213077][ T7154] dump_stack_lvl+0x95/0xd0 [ 142.213103][ T7154] dump_stack+0x15/0x1b [ 142.213170][ T7154] should_fail_ex+0x263/0x280 [ 142.213195][ T7154] should_fail+0xb/0x20 [ 142.213232][ T7154] should_fail_usercopy+0x1a/0x20 [ 142.213259][ T7154] _copy_from_user+0x1c/0xb0 [ 142.213290][ T7154] __sys_bpf+0x183/0x7e0 [ 142.213360][ T7154] __x64_sys_bpf+0x41/0x50 [ 142.213473][ T7154] x64_sys_call+0x10cb/0x3020 [ 142.213499][ T7154] do_syscall_64+0x12c/0x370 [ 142.213591][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.213615][ T7154] RIP: 0033:0x7faf07aec629 [ 142.213629][ T7154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.213645][ T7154] RSP: 002b:00007faf06547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.213669][ T7154] RAX: ffffffffffffffda RBX: 00007faf07d65fa0 RCX: 00007faf07aec629 [ 142.213745][ T7154] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000008 [ 142.213760][ T7154] RBP: 00007faf06547090 R08: 0000000000000000 R09: 0000000000000000 [ 142.213774][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.213791][ T7154] R13: 00007faf07d66038 R14: 00007faf07d65fa0 R15: 00007ffccfc9c008 [ 142.213814][ T7154] [ 142.214534][ T7146] syzkaller0: entered allmulticast mode [ 142.398279][ T7165] loop4: detected capacity change from 0 to 512 [ 142.406599][ T7165] EXT4-fs: Ignoring removed nobh option [ 142.428868][ T7165] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 142.456197][ T7165] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #3: comm syz.4.1281: corrupted inode contents [ 142.476447][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1280'. [ 142.486919][ T7165] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 142.487541][ T7165] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #3: comm syz.4.1281: mark_inode_dirty error [ 142.496616][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 142.496636][ C0] EXT4-fs (loop4): initial error at time 1771701770: ext4_do_update_inode:5569: inode 3 [ 142.496668][ C0] EXT4-fs (loop4): last error at time 1771701770: ext4_do_update_inode:5569: inode 3 [ 142.563850][ T7165] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 142.564146][ T7165] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1281: bg 0: block 131: padding at end of block bitmap is not set [ 142.603503][ T7165] loop4: lost filesystem error report for type 5 error -117 [ 142.603772][ T7165] Quota error (device loop4): write_blk: dquota write failed [ 142.638941][ T7165] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 142.649517][ T7165] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.1281: Failed to acquire dquot type 0 [ 142.665676][ T7180] syzkaller0: entered promiscuous mode [ 142.671276][ T7180] syzkaller0: entered allmulticast mode [ 142.680397][ T7165] loop4: lost filesystem error report for type 5 error -117 [ 142.681016][ T7165] EXT4-fs (loop4): 1 truncate cleaned up [ 142.695210][ T7165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.713365][ T7165] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.749824][ T7165] 9p: Bad value for 'rfdno' [ 142.754819][ T7165] 9p: Bad value for 'rfdno' [ 142.759545][ T7165] 9p: Bad value for 'rfdno' [ 142.764380][ T7165] 9p: Bad value for 'rfdno' [ 142.780918][ T7165] 9p: Bad value for 'rfdno' [ 142.795707][ T7165] 9p: Bad value for 'rfdno' [ 142.806561][ T7165] 9p: Bad value for 'rfdno' [ 142.811271][ T7165] 9p: Bad value for 'rfdno' [ 142.816202][ T7165] 9p: Bad value for 'rfdno' [ 142.823094][ T7191] tls_set_device_offload_rx: netdev not found [ 142.830602][ T7165] 9p: Bad value for 'rfdno' [ 142.851811][ T7165] 9p: Bad value for 'rfdno' [ 142.866057][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1280'. [ 142.868683][ T7165] 9p: Bad value for 'rfdno' [ 142.880650][ T7165] 9p: Bad value for 'rfdno' [ 142.885951][ T7165] 9p: Bad value for 'rfdno' [ 142.890895][ T7165] 9p: Bad value for 'rfdno' [ 142.913350][ T7165] 9p: Bad value for 'rfdno' [ 142.923655][ T7165] 9p: Bad value for 'rfdno' [ 142.948271][ T7165] 9p: Bad value for 'rfdno' [ 142.953538][ T7165] 9p: Bad value for 'rfdno' [ 142.958339][ T7165] 9p: Bad value for 'rfdno' [ 142.967470][ T7165] 9p: Bad value for 'rfdno' [ 142.977644][ T7165] 9p: Bad value for 'rfdno' [ 142.983619][ T7165] 9p: Bad value for 'rfdno' [ 142.993829][ T7165] 9p: Bad value for 'rfdno' [ 143.006124][ T7165] 9p: Bad value for 'rfdno' [ 143.020959][ T7165] 9p: Bad value for 'rfdno' [ 143.042011][ T7165] 9p: Bad value for 'rfdno' [ 143.048065][ T7165] 9p: Bad value for 'rfdno' [ 143.053301][ T7165] 9p: Bad value for 'rfdno' [ 143.057904][ T7165] 9p: Bad value for 'rfdno' [ 143.062771][ T7165] 9p: Bad value for 'rfdno' [ 143.067361][ T7165] 9p: Bad value for 'rfdno' [ 143.072239][ T7165] 9p: Bad value for 'rfdno' [ 143.076931][ T7165] 9p: Bad value for 'rfdno' [ 143.081970][ T7165] 9p: Bad value for 'rfdno' [ 143.086602][ T7165] 9p: Bad value for 'rfdno' [ 143.091159][ T7165] 9p: Bad value for 'rfdno' [ 143.096068][ T7165] 9p: Bad value for 'rfdno' [ 143.100717][ T7165] 9p: Bad value for 'rfdno' [ 143.106056][ T7165] 9p: Bad value for 'rfdno' [ 143.110654][ T7165] 9p: Bad value for 'rfdno' [ 143.116427][ T7165] 9p: Bad value for 'rfdno' [ 143.121037][ T7165] 9p: Bad value for 'rfdno' [ 143.125841][ T7165] 9p: Bad value for 'rfdno' [ 143.130518][ T7165] 9p: Bad value for 'rfdno' [ 143.135380][ T7165] 9p: Bad value for 'rfdno' [ 143.139949][ T7165] 9p: Bad value for 'rfdno' [ 143.144775][ T7165] 9p: Bad value for 'rfdno' [ 143.149378][ T7165] 9p: Bad value for 'rfdno' [ 143.154303][ T7165] 9p: Bad value for 'rfdno' [ 143.159158][ T7165] 9p: Bad value for 'rfdno' [ 143.164634][ T7165] 9p: Bad value for 'rfdno' [ 143.169211][ T7165] 9p: Bad value for 'rfdno' [ 143.173844][ T7165] 9p: Bad value for 'rfdno' [ 143.178744][ T7165] 9p: Bad value for 'rfdno' [ 143.183475][ T7165] 9p: Bad value for 'rfdno' [ 143.188040][ T7165] 9p: Bad value for 'rfdno' [ 143.192823][ T7165] 9p: Bad value for 'rfdno' [ 143.197402][ T7165] 9p: Bad value for 'rfdno' [ 143.202350][ T7165] 9p: Bad value for 'rfdno' [ 143.206976][ T7165] 9p: Bad value for 'rfdno' [ 143.211823][ T7165] 9p: Bad value for 'rfdno' [ 143.216606][ T7165] 9p: Bad value for 'rfdno' [ 143.221239][ T7165] 9p: Bad value for 'rfdno' [ 143.227124][ T7165] 9p: Bad value for 'rfdno' [ 143.253287][ T7165] syz.4.1281 (7165) used greatest stack depth: 9168 bytes left [ 143.314829][ T7208] syzkaller0: entered promiscuous mode [ 143.322920][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.330405][ T7208] syzkaller0: entered allmulticast mode [ 143.461551][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 143.467634][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 143.543471][ T7222] selection: kmalloc() failed [ 143.648854][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1303'. [ 143.903362][ T7249] loop2: detected capacity change from 0 to 128 [ 143.915313][ T7249] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.933209][ T7249] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.989435][ T7257] syzkaller0: entered promiscuous mode [ 143.995122][ T7257] syzkaller0: entered allmulticast mode [ 144.037173][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 144.037187][ T28] audit: type=1400 audit(1771701771.721:894): avc: denied { write } for pid=7264 comm="syz.1.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.080016][ T28] audit: type=1400 audit(1771701771.761:895): avc: denied { connect } for pid=7267 comm="syz.1.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.123789][ T28] audit: type=1400 audit(1771701771.811:896): avc: denied { getopt } for pid=7267 comm="syz.1.1315" laddr=fe80::13 lport=60314 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.148186][ T28] audit: type=1400 audit(1771701771.811:897): avc: denied { ioctl } for pid=7267 comm="syz.1.1315" path="pid:[4026532379]" dev="nsfs" ino=4026532379 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 144.186071][ T28] audit: type=1400 audit(1771701771.871:898): avc: denied { write } for pid=7267 comm="syz.1.1315" name="icmp6" dev="proc" ino=4026532836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 144.266901][ T7280] netlink: 'syz.4.1318': attribute type 7 has an invalid length. [ 144.291326][ T7280] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 144.423940][ T7301] loop3: detected capacity change from 0 to 1024 [ 144.443221][ T7301] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 144.455972][ T7301] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.467852][ T7301] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 144.476493][ T7301] EXT4-fs (loop3): orphan cleanup on readonly fs [ 144.486498][ T7301] EXT4-fs error (device loop3): ext4_free_blocks:6726: comm syz.3.1326: Freeing blocks not in datazone - block = 0, count = 4096 [ 144.500143][ T7301] loop3: lost filesystem error report for type 5 error -117 [ 144.500323][ T7301] EXT4-fs (loop3): Remounting filesystem read-only [ 144.507648][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 144.507661][ C1] EXT4-fs (loop3): initial error at time 1771701772: ext4_free_blocks:6726 [ 144.507697][ C1] EXT4-fs (loop3): last error at time 1771701772: ext4_free_blocks:6726 [ 144.537688][ T7301] EXT4-fs (loop3): 1 orphan inode deleted [ 144.543899][ T7301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.614997][ T28] audit: type=1400 audit(1771701772.301:899): avc: granted { setsecparam } for pid=7299 comm="syz.3.1326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 144.634358][ T28] audit: type=1400 audit(1771701772.301:900): avc: granted { setsecparam } for pid=7299 comm="syz.3.1326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 144.859429][ T7334] netlink: 'syz.0.1337': attribute type 10 has an invalid length. [ 144.871539][ T7334] __nla_validate_parse: 8 callbacks suppressed [ 144.871631][ T7334] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1337'. [ 144.888320][ T7334] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 144.904184][ T28] audit: type=1326 audit(1771701772.581:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.2.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1edc8c629 code=0x7ffc0000 [ 144.966690][ T28] audit: type=1326 audit(1771701772.581:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.2.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1edc8c629 code=0x7ffc0000 [ 145.043065][ T7342] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 145.132106][ T28] audit: type=1326 audit(1771701772.581:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.2.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa1edc8c629 code=0x7ffc0000 [ 145.331930][ T7351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1340'. [ 145.441136][ T7351] bond0: entered promiscuous mode [ 145.446481][ T7351] bond_slave_0: entered promiscuous mode [ 145.452550][ T7351] bond_slave_1: entered promiscuous mode [ 145.458630][ T7351] bridge_slave_1: entered promiscuous mode [ 145.476347][ T7351] gretap0: entered promiscuous mode [ 145.483913][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.500131][ T7351] hsr2: entered promiscuous mode [ 145.699404][ T7358] loop3: detected capacity change from 0 to 128 [ 145.710384][ T7358] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.724801][ T7358] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.772184][ T7370] loop4: detected capacity change from 0 to 512 [ 145.807173][ T7370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.918525][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.957586][ T7384] loop1: detected capacity change from 0 to 512 [ 146.181597][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.239110][ T7404] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1357'. [ 146.336531][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1355'. [ 146.345623][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1355'. [ 146.829445][ T7418] loop2: detected capacity change from 0 to 256 [ 146.913128][ T7418] vfat: Unknown parameter '18446744073709551615' [ 147.282780][ T7434] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1365'. [ 147.442929][ T7437] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1366'. [ 147.618311][ T7446] tipc: Enabling of bearer rejected, failed to enable media [ 147.811839][ T7450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.820503][ T7450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.172449][ T7457] loop3: detected capacity change from 0 to 1024 [ 148.200712][ T7457] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29845!=20869) [ 148.222017][ T7446] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.237558][ T7457] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 148.264693][ T7457] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.1372: Invalid inode table block 0 in block_group 0 [ 148.277629][ T7457] loop3: lost filesystem error report for type 5 error -117 [ 148.277748][ T7457] EXT4-fs (loop3): no journal found [ 148.285070][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 148.285087][ C0] EXT4-fs (loop3): initial error at time 1771701775: __ext4_get_inode_loc:4782 [ 148.285106][ C0] EXT4-fs (loop3): last error at time 1771701775: __ext4_get_inode_loc:4782 [ 148.315742][ T7457] EXT4-fs (loop3): can't get journal size [ 148.323431][ T7457] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.1372: Invalid inode table block 0 in block_group 0 [ 148.336242][ T7457] loop3: lost filesystem error report for type 5 error -117 [ 148.336400][ T7457] EXT4-fs (loop3): get root inode failed [ 148.349506][ T7457] EXT4-fs (loop3): mount failed [ 148.403697][ T7446] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.537100][ T7446] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.617539][ T7470] loop1: detected capacity change from 0 to 2048 [ 148.632259][ T7469] loop3: detected capacity change from 0 to 512 [ 148.639943][ T7446] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.671620][ T7469] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.1375: corrupted in-inode xattr: invalid ea_ino [ 148.691884][ T7470] loop1: p2 < > p4 [ 148.701813][ T7469] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.707227][ T7470] loop1: p4 size 262144 extends beyond EOD, [ 148.708195][ T7469] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1375: couldn't read orphan inode 15 (err -117) [ 148.716393][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 148.716423][ C0] EXT4-fs (loop3): initial error at time 1771701776: ext4_iget_extra_inode:5025: inode 15 [ 148.716470][ C0] EXT4-fs (loop3): last error at time 1771701776: ext4_iget_extra_inode:5025: inode 15 [ 148.731597][ T7470] truncated [ 148.735598][ T7469] loop3: lost filesystem error report for type 5 error -117 [ 148.765337][ T7469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.794078][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.820713][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.834138][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.863269][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.933624][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.053000][ T28] kauditd_printk_skb: 408 callbacks suppressed [ 149.053025][ T28] audit: type=1400 audit(1771701776.741:1312): avc: denied { prog_load } for pid=7479 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 149.084051][ T7480] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7480 comm=syz.3.1378 [ 149.154623][ T28] audit: type=1400 audit(1771701776.741:1313): avc: denied { bpf } for pid=7479 comm="syz.3.1378" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.226314][ T28] audit: type=1400 audit(1771701776.741:1314): avc: denied { prog_load } for pid=7479 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 149.311797][ T28] audit: type=1400 audit(1771701776.741:1315): avc: denied { bpf } for pid=7479 comm="syz.3.1378" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.344844][ T7423] udevd[7423]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 149.358112][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 149.379295][ T28] audit: type=1400 audit(1771701776.741:1316): avc: denied { perfmon } for pid=7479 comm="syz.3.1378" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.438436][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 149.450351][ T28] audit: type=1400 audit(1771701776.741:1317): avc: denied { create } for pid=7479 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.475722][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.484348][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 149.500469][ T28] audit: type=1400 audit(1771701776.741:1318): avc: denied { prog_load } for pid=7479 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 149.525279][ T28] audit: type=1400 audit(1771701776.741:1319): avc: denied { bpf } for pid=7479 comm="syz.3.1378" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.547720][ T28] audit: type=1400 audit(1771701776.741:1320): avc: denied { prog_load } for pid=7479 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 149.567625][ T28] audit: type=1400 audit(1771701776.741:1321): avc: denied { perfmon } for pid=7479 comm="syz.3.1378" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.697044][ T3572] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.737829][ T3572] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.796899][ T3572] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.820262][ T3572] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.234265][ T7520] syzkaller0: entered promiscuous mode [ 150.251006][ T7520] syzkaller0: entered allmulticast mode [ 150.763192][ T7548] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1404'. [ 150.772814][ T7545] netlink: 'syz.1.1402': attribute type 3 has an invalid length. [ 150.780321][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1404'. [ 150.801093][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 150.837035][ T7545] loop1: detected capacity change from 0 to 256 [ 150.852892][ T7545] vfat: Unknown parameter 'un' [ 150.965828][ T7556] netlink: 'syz.0.1407': attribute type 2 has an invalid length. [ 150.993469][ T7559] loop3: detected capacity change from 0 to 256 [ 151.024669][ T7559] FAT-fs (loop3): Directory bread(block 64) failed [ 151.041370][ T7559] FAT-fs (loop3): Directory bread(block 65) failed [ 151.064456][ T7559] FAT-fs (loop3): Directory bread(block 66) failed [ 151.071050][ T7559] FAT-fs (loop3): Directory bread(block 67) failed [ 151.101647][ T7559] FAT-fs (loop3): Directory bread(block 68) failed [ 151.108174][ T7559] FAT-fs (loop3): Directory bread(block 69) failed [ 151.135094][ T7559] FAT-fs (loop3): Directory bread(block 70) failed [ 151.161573][ T7559] FAT-fs (loop3): Directory bread(block 71) failed [ 151.188526][ T7559] FAT-fs (loop3): Directory bread(block 72) failed [ 151.198218][ T7563] bridge7: entered promiscuous mode [ 151.204699][ T7559] FAT-fs (loop3): Directory bread(block 73) failed [ 151.215261][ T7563] bridge7: entered allmulticast mode [ 151.329829][ T7571] bridge8: entered promiscuous mode [ 151.341648][ T7571] bridge8: entered allmulticast mode [ 151.375729][ T7570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1413'. [ 151.589528][ T7589] loop3: detected capacity change from 0 to 128 [ 151.751618][ T7594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1423'. [ 151.805100][ T7594] bridge9: entered promiscuous mode [ 151.810399][ T7594] bridge9: entered allmulticast mode [ 151.827014][ T7597] qrtr: Invalid version 0 [ 151.882182][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 151.920038][ T7597] Driver unsupported XDP return value 0 on prog (id 140) dev N/A, expect packet loss! [ 152.601884][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 152.691085][ T7610] netlink: 'syz.3.1429': attribute type 2 has an invalid length. [ 152.699446][ T7615] netlink: 'syz.3.1429': attribute type 2 has an invalid length. [ 152.733521][ T7610] netlink: 'syz.3.1429': attribute type 4 has an invalid length. [ 152.751443][ T7615] netlink: 'syz.3.1429': attribute type 4 has an invalid length. [ 152.779693][ T7610] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1429'. [ 152.788836][ T7615] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1429'. [ 152.877912][ T7623] loop4: detected capacity change from 0 to 512 [ 152.891584][ T7623] EXT4-fs: Ignoring removed bh option [ 152.910036][ T7623] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 152.915836][ T7618] loop1: detected capacity change from 0 to 512 [ 152.973060][ T7623] EXT4-fs (loop4): 1 truncate cleaned up [ 152.979443][ T7623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.032569][ T7618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.058120][ T7618] ext4 filesystem being mounted at /332/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.197297][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.525554][ T7648] loop3: detected capacity change from 0 to 1764 [ 153.536924][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.861558][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 154.025246][ T7666] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1444'. [ 154.047808][ T3432] Bluetooth: hci0: Frame reassembly failed (-84) [ 154.195639][ T28] kauditd_printk_skb: 664 callbacks suppressed [ 154.195652][ T28] audit: type=1400 audit(1771701781.881:1987): avc: denied { prog_load } for pid=7667 comm="syz.0.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.234821][ T28] audit: type=1400 audit(1771701781.911:1988): avc: denied { bpf } for pid=7667 comm="syz.0.1445" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.270002][ T28] audit: type=1400 audit(1771701781.871:1986): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.294705][ T28] audit: type=1400 audit(1771701781.911:1989): avc: denied { read write open } for pid=3313 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.359679][ T7646] chnl_net:caif_netlink_parms(): no params data found [ 154.376600][ T28] audit: type=1400 audit(1771701781.911:1990): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.451572][ T28] audit: type=1400 audit(1771701781.941:1991): avc: denied { perfmon } for pid=7667 comm="syz.0.1445" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.501565][ T28] audit: type=1400 audit(1771701781.941:1992): avc: denied { prog_load } for pid=7667 comm="syz.0.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.555651][ T28] audit: type=1400 audit(1771701781.941:1993): avc: denied { perfmon } for pid=7667 comm="syz.0.1445" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.588106][ T28] audit: type=1400 audit(1771701781.941:1994): avc: denied { bpf } for pid=7667 comm="syz.0.1445" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.612911][ T28] audit: type=1400 audit(1771701781.941:1995): avc: denied { prog_run } for pid=7667 comm="syz.0.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 154.700998][ T7689] vhci_hcd vhci_hcd.0: invalid port number 0 [ 154.803346][ T7646] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.819461][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.836526][ T7646] bridge_slave_0: entered allmulticast mode [ 154.859248][ T7646] bridge_slave_0: entered promiscuous mode [ 154.873397][ T7646] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.897290][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.908544][ T7646] bridge_slave_1: entered allmulticast mode [ 154.922190][ T7646] bridge_slave_1: entered promiscuous mode [ 155.001938][ T7646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.032649][ T7646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.144528][ T7646] team0: Port device team_slave_0 added [ 155.170171][ T7646] team0: Port device team_slave_1 added [ 155.234051][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.272080][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.321711][ T7717] FAULT_INJECTION: forcing a failure. [ 155.321711][ T7717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.345474][ T7717] CPU: 0 UID: 0 PID: 7717 Comm: syz.3.1459 Not tainted syzkaller #0 PREEMPT(full) [ 155.345580][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.345594][ T7717] Call Trace: [ 155.345601][ T7717] [ 155.345609][ T7717] __dump_stack+0x1d/0x30 [ 155.345638][ T7717] dump_stack_lvl+0x95/0xd0 [ 155.345717][ T7717] dump_stack+0x15/0x1b [ 155.345740][ T7717] should_fail_ex+0x263/0x280 [ 155.345821][ T7717] should_fail+0xb/0x20 [ 155.345841][ T7717] should_fail_usercopy+0x1a/0x20 [ 155.345913][ T7717] _copy_from_user+0x1c/0xb0 [ 155.345940][ T7717] do_ipv6_setsockopt+0x124/0x21d0 [ 155.345968][ T7717] ? avc_has_perm_noaudit+0xf2/0x130 [ 155.346067][ T7717] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 155.346110][ T7717] ipv6_setsockopt+0x59/0x130 [ 155.346197][ T7717] tcp_setsockopt+0x98/0xb0 [ 155.346279][ T7717] sock_common_setsockopt+0x69/0x80 [ 155.346377][ T7717] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 155.346414][ T7717] __sys_setsockopt+0x184/0x200 [ 155.346441][ T7717] __x64_sys_setsockopt+0x64/0x80 [ 155.346536][ T7717] x64_sys_call+0x2327/0x3020 [ 155.346559][ T7717] do_syscall_64+0x12c/0x370 [ 155.346590][ T7717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.346626][ T7717] RIP: 0033:0x7f31bd5ec629 [ 155.346642][ T7717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.346661][ T7717] RSP: 002b:00007f31bc047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.346682][ T7717] RAX: ffffffffffffffda RBX: 00007f31bd865fa0 RCX: 00007f31bd5ec629 [ 155.346694][ T7717] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 155.346704][ T7717] RBP: 00007f31bc047090 R08: 00000000000003b8 R09: 0000000000000000 [ 155.346714][ T7717] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 155.346725][ T7717] R13: 00007f31bd866038 R14: 00007f31bd865fa0 R15: 00007ffd4aafb7e8 [ 155.346742][ T7717] [ 155.522616][ T7646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.559670][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.566693][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.610132][ T7646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.676449][ T3572] Bluetooth: hci1: Frame reassembly failed (-84) [ 155.694615][ T7646] hsr_slave_0: entered promiscuous mode [ 155.709855][ T7646] hsr_slave_1: entered promiscuous mode [ 155.719159][ T7646] debugfs: 'hsr0' already exists in 'hsr' [ 155.726507][ T7646] Cannot create hsr debugfs directory [ 155.839873][ T7726] loop3: detected capacity change from 0 to 512 [ 155.868211][ T7726] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.1462: corrupted inode contents [ 155.947577][ T7726] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.947781][ T7726] EXT4-fs (loop3): Remounting filesystem read-only [ 155.956955][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 155.956975][ C1] EXT4-fs (loop3): initial error at time 1771701783: ext4_do_update_inode:5569: inode 3 [ 155.956999][ C1] EXT4-fs (loop3): last error at time 1771701783: ext4_do_update_inode:5569: inode 3 [ 156.053590][ T5213] Bluetooth: hci0: command 0x1003 tx timeout [ 156.059628][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 156.106331][ T7726] EXT4-fs (loop3): 1 truncate cleaned up [ 156.115162][ T7726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.148123][ T7708] syz.0.1455 (7708) used greatest stack depth: 7264 bytes left [ 156.157971][ T7726] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.192688][ T7646] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 156.264420][ T7646] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 156.313555][ T7646] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 156.396468][ T7646] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.417357][ T7739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1464'. [ 156.501044][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.516535][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.524143][ T4582] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.555062][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.771756][ T4585] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.841093][ T7646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.847819][ T4585] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.898410][ T7646] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.942370][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.949474][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.016238][ T7766] loop1: detected capacity change from 0 to 128 [ 157.039090][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.046228][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.056030][ T7766] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.122175][ T7766] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.407838][ T7773] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1471'. [ 157.701827][ T43] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 157.887999][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.913823][ T7646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.011260][ T4594] hid-generic 0004:0352:000B.0002: unknown main item tag 0x4 [ 158.033311][ T4594] hid-generic 0004:0352:000B.0002: reserved main item tag 0xe [ 158.058820][ T4594] hid-generic 0004:0352:000B.0002: item fetching failed at offset 24/25 [ 158.079084][ T4594] hid-generic 0004:0352:000B.0002: probe with driver hid-generic failed with error -22 [ 158.545357][ T7646] veth0_vlan: entered promiscuous mode [ 158.585937][ T7646] veth1_vlan: entered promiscuous mode [ 158.663005][ T7646] veth0_macvtap: entered promiscuous mode [ 158.674948][ T7646] veth1_macvtap: entered promiscuous mode [ 158.704867][ T7646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.735938][ T7646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.770721][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.795273][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1484'. [ 158.809196][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.908591][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.918050][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.031770][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1487'. [ 159.118085][ T7831] loop3: detected capacity change from 0 to 1024 [ 159.161849][ T7831] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 159.192363][ T7831] System zones: 0-1, 3-36 [ 159.205254][ T28] kauditd_printk_skb: 528 callbacks suppressed [ 159.205268][ T28] audit: type=1400 audit(1771701786.891:2522): avc: denied { write } for pid=7836 comm="syz.5.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.206447][ T7838] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1440'. [ 159.223460][ T28] audit: type=1400 audit(1771701786.891:2523): avc: denied { nlmsg_write } for pid=7836 comm="syz.5.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.267415][ T7831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.282892][ T7840] loop2: detected capacity change from 0 to 512 [ 159.421566][ T28] audit: type=1400 audit(1771701786.951:2524): avc: denied { read write } for pid=7646 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.454320][ T7847] FAT-fs (loop2): error, invalid access to FAT (entry 0x000000c8) [ 159.463088][ T7844] loop5: detected capacity change from 0 to 2048 [ 159.470416][ T7844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.493539][ T7831] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.500060][ T7831] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 159.511131][ T7844] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 159.521507][ T28] audit: type=1400 audit(1771701786.951:2525): avc: denied { read write open } for pid=7646 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.523987][ T7850] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.553483][ T7849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.562386][ T7844] EXT4-fs: Ignoring removed orlov option [ 159.568204][ T7844] EXT4-fs: Ignoring removed oldalloc option [ 159.625509][ T7844] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 159.746145][ T7855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1496'. [ 159.778084][ T7844] 9p: Bad value for 'rfdno' [ 159.883098][ T7844] xfrm0 speed is unknown, defaulting to 1000 [ 159.940794][ T7844] xfrm0 speed is unknown, defaulting to 1000 [ 159.955635][ T7844] xfrm0 speed is unknown, defaulting to 1000 [ 160.052108][ T7867] loop1: detected capacity change from 0 to 2048 [ 160.091940][ T7867] loop1: p2 < > p4 [ 160.111845][ T7867] loop1: p4 size 262144 extends beyond EOD, truncated [ 160.156342][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.339668][ T7844] infiniband syz1: set active [ 160.344464][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.352346][ T4585] xfrm0 speed is unknown, defaulting to 1000 [ 160.378407][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 160.407879][ T7844] infiniband syz1: added xfrm0 [ 160.422998][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 160.441864][ T7844] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 160.442070][ T7844] infiniband syz1: Couldn't open port 1 [ 160.506313][ T7844] RDS/IB: syz1: added [ 160.534745][ T7844] smc: adding ib device syz1 with port count 1 [ 160.540924][ T7844] smc: ib device syz1 port 1 has no pnetid [ 160.557604][ T7887] loop3: detected capacity change from 0 to 256 [ 160.586877][ T7887] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.601089][ T7844] xfrm0 speed is unknown, defaulting to 1000 [ 160.631537][ T4585] xfrm0 speed is unknown, defaulting to 1000 [ 160.666485][ T7887] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.770518][ T7844] xfrm0 speed is unknown, defaulting to 1000 [ 160.931966][ T7844] xfrm0 speed is unknown, defaulting to 1000 [ 160.946575][ T7883] loop1: detected capacity change from 0 to 512 [ 161.003655][ T7883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.029222][ T7883] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.070968][ T7904] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20004 [ 161.080161][ T7844] xfrm0 speed is unknown, defaulting to 1000 [ 161.151328][ T7844] xfrm0 speed is unknown, defaulting to 1000 [ 161.213135][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.220641][ T7844] xfrm0 speed is unknown, defaulting to 1000 [ 161.255547][ T7912] netlink: 'syz.3.1512': attribute type 12 has an invalid length. [ 161.280871][ T7912] netlink: 'syz.3.1512': attribute type 29 has an invalid length. [ 161.295605][ T7912] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1512'. [ 161.655814][ T7935] FAULT_INJECTION: forcing a failure. [ 161.655814][ T7935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.690275][ T7933] loop5: detected capacity change from 0 to 4096 [ 161.696780][ T7935] CPU: 1 UID: 0 PID: 7935 Comm: syz.2.1521 Not tainted syzkaller #0 PREEMPT(full) [ 161.696933][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.696944][ T7935] Call Trace: [ 161.696949][ T7935] [ 161.696954][ T7935] __dump_stack+0x1d/0x30 [ 161.696976][ T7935] dump_stack_lvl+0x95/0xd0 [ 161.696996][ T7935] dump_stack+0x15/0x1b [ 161.697018][ T7935] should_fail_ex+0x263/0x280 [ 161.697110][ T7935] should_fail+0xb/0x20 [ 161.697125][ T7935] should_fail_usercopy+0x1a/0x20 [ 161.697144][ T7935] _copy_from_user+0x1c/0xb0 [ 161.697229][ T7935] __sys_sendto+0x1ca/0x4d0 [ 161.697256][ T7935] __x64_sys_sendto+0x76/0x90 [ 161.697339][ T7935] x64_sys_call+0x2d35/0x3020 [ 161.697386][ T7935] do_syscall_64+0x12c/0x370 [ 161.697416][ T7935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.697435][ T7935] RIP: 0033:0x7fa1edc8c629 [ 161.697474][ T7935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.697496][ T7935] RSP: 002b:00007fa1ec6df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 161.697518][ T7935] RAX: ffffffffffffffda RBX: 00007fa1edf05fa0 RCX: 00007fa1edc8c629 [ 161.697545][ T7935] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000003 [ 161.697634][ T7935] RBP: 00007fa1ec6df090 R08: 0000200000000200 R09: 0000000000000014 [ 161.697649][ T7935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.697662][ T7935] R13: 00007fa1edf06038 R14: 00007fa1edf05fa0 R15: 00007ffec1d45fe8 [ 161.697684][ T7935] [ 161.715569][ T7933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.725379][ T7926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.923488][ T7942] FAULT_INJECTION: forcing a failure. [ 161.923488][ T7942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.936585][ T7942] CPU: 1 UID: 0 PID: 7942 Comm: syz.2.1525 Not tainted syzkaller #0 PREEMPT(full) [ 161.936612][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.936626][ T7942] Call Trace: [ 161.936632][ T7942] [ 161.936639][ T7942] __dump_stack+0x1d/0x30 [ 161.936721][ T7942] dump_stack_lvl+0x95/0xd0 [ 161.936745][ T7942] dump_stack+0x15/0x1b [ 161.936769][ T7942] should_fail_ex+0x263/0x280 [ 161.936791][ T7942] should_fail+0xb/0x20 [ 161.936811][ T7942] should_fail_usercopy+0x1a/0x20 [ 161.936854][ T7942] _copy_from_user+0x1c/0xb0 [ 161.936880][ T7942] do_tcp_getsockopt+0xc8/0x1ba0 [ 161.936911][ T7942] ? _parse_integer_limit+0x170/0x190 [ 161.936992][ T7942] ? _parse_integer+0x27/0x40 [ 161.937026][ T7942] ? __rcu_read_unlock+0x4e/0x70 [ 161.937091][ T7942] ? avc_has_perm_noaudit+0xab/0x130 [ 161.937157][ T7942] ? avc_has_perm+0x101/0x190 [ 161.937179][ T7942] tcp_getsockopt+0x6e/0xe0 [ 161.937231][ T7942] sock_common_getsockopt+0x60/0x70 [ 161.937267][ T7942] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 161.937344][ T7942] do_sock_getsockopt+0x1c4/0x210 [ 161.937384][ T7942] __x64_sys_getsockopt+0x11d/0x1a0 [ 161.937409][ T7942] x64_sys_call+0x2dcf/0x3020 [ 161.937438][ T7942] do_syscall_64+0x12c/0x370 [ 161.937541][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.937559][ T7942] RIP: 0033:0x7fa1edc8c629 [ 161.937574][ T7942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.937666][ T7942] RSP: 002b:00007fa1ec6df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 161.937717][ T7942] RAX: ffffffffffffffda RBX: 00007fa1edf05fa0 RCX: 00007fa1edc8c629 [ 161.937729][ T7942] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000004 [ 161.937740][ T7942] RBP: 00007fa1ec6df090 R08: 0000200000000300 R09: 0000000000000000 [ 161.937750][ T7942] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 161.937760][ T7942] R13: 00007fa1edf06038 R14: 00007fa1edf05fa0 R15: 00007ffec1d45fe8 [ 161.937803][ T7942] [ 161.938080][ T7926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.349274][ T7944] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1526'. [ 162.394201][ T7944] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 162.589921][ T7953] team0 (unregistering): Port device team_slave_0 removed [ 162.634411][ T7953] team0 (unregistering): Port device team_slave_1 removed [ 162.715997][ T7646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.764915][ T7964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7964 comm=syz.5.1530 [ 162.794371][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1531'. [ 162.821612][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.861927][ T7967] netlink: 'syz.3.1532': attribute type 6 has an invalid length. [ 162.883230][ T7969] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1533'. [ 163.167833][ T7977] loop1: detected capacity change from 0 to 256 [ 163.206849][ T7977] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 163.642556][ T8006] loop3: detected capacity change from 0 to 1764 [ 163.863501][ T8018] syzkaller0: entered promiscuous mode [ 163.869012][ T8018] syzkaller0: entered allmulticast mode [ 164.025039][ T8021] loop2: detected capacity change from 0 to 4096 [ 164.035849][ T8021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.225613][ T28] kauditd_printk_skb: 926 callbacks suppressed [ 164.225629][ T28] audit: type=1400 audit(1771701791.911:3395): avc: denied { create } for pid=8026 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.258095][ T8028] bridge4: entered promiscuous mode [ 164.263429][ T8028] bridge4: entered allmulticast mode [ 164.293404][ T8027] syzkaller0: entered promiscuous mode [ 164.308271][ T8027] syzkaller0: entered allmulticast mode [ 164.352314][ T28] audit: type=1400 audit(1771701791.981:3396): avc: denied { create } for pid=8026 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.411843][ T28] audit: type=1400 audit(1771701791.981:3397): avc: denied { ioctl } for pid=8026 comm="syz.3.1555" path="socket:[20017]" dev="sockfs" ino=20017 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.447740][ T8031] syzkaller0: entered promiscuous mode [ 164.459447][ T8031] syzkaller0: entered allmulticast mode [ 164.472718][ T28] audit: type=1400 audit(1771701792.021:3398): avc: denied { setopt } for pid=8026 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.493912][ T28] audit: type=1400 audit(1771701792.021:3399): avc: denied { write } for pid=8026 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.515581][ T28] audit: type=1400 audit(1771701792.021:3400): avc: denied { create } for pid=8025 comm="syz.5.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.537321][ T28] audit: type=1400 audit(1771701792.031:3401): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.562536][ T28] audit: type=1400 audit(1771701792.031:3402): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.588779][ T28] audit: type=1400 audit(1771701792.031:3403): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.615833][ T28] audit: type=1400 audit(1771701792.031:3404): avc: denied { write } for pid=8025 comm="syz.5.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.035067][ T8045] loop3: detected capacity change from 0 to 128 [ 165.044690][ T8045] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.134037][ T8045] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.279878][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.441349][ T8049] syzkaller0: entered promiscuous mode [ 165.442080][ T8052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1565'. [ 165.455924][ T8049] syzkaller0: entered allmulticast mode [ 165.623007][ T8058] netlink: 'syz.2.1566': attribute type 10 has an invalid length. [ 165.647137][ T8058] geneve1: entered promiscuous mode [ 165.761905][ T8061] syzkaller0: entered promiscuous mode [ 165.767424][ T8061] syzkaller0: entered allmulticast mode [ 165.872530][ T8067] syzkaller0: entered promiscuous mode [ 165.888250][ T8067] syzkaller0: entered allmulticast mode [ 166.173790][ T8081] syzkaller0: entered promiscuous mode [ 166.198406][ T8081] syzkaller0: entered allmulticast mode [ 166.220044][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'. [ 166.359401][ T8090] SELinux: Context system_u:object_r:system_map_t:s0 is not valid (left unmapped). [ 166.365865][ T8088] syzkaller0: entered promiscuous mode [ 166.376600][ T8079] loop1: detected capacity change from 0 to 128 [ 166.383482][ T8088] syzkaller0: entered allmulticast mode [ 166.405489][ T8079] msdos: Unknown parameter 'L 'uIZ5akuQ gٶ3Fi.km?9D9L4j YCTt0FeεS}[' [ 167.071536][ T8099] loop2: detected capacity change from 0 to 164 [ 167.132419][ T8107] syzkaller0: entered promiscuous mode [ 167.140488][ T8107] syzkaller0: entered allmulticast mode [ 167.222602][ T8112] syzkaller0: entered promiscuous mode [ 167.228147][ T8112] syzkaller0: entered allmulticast mode [ 167.473834][ T8119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=8119 comm=syz.1.1588 [ 167.493131][ T8118] syzkaller0: entered promiscuous mode [ 167.498764][ T8118] syzkaller0: entered allmulticast mode [ 167.507057][ T8116] xfrm0 speed is unknown, defaulting to 1000 [ 167.557095][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1590'. [ 167.662671][ T8134] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1593'. [ 167.773661][ T8132] syzkaller0: entered promiscuous mode [ 167.779282][ T8132] syzkaller0: entered allmulticast mode [ 167.854290][ T8144] netlink: 'syz.5.1597': attribute type 21 has an invalid length. [ 167.894900][ T8144] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.904997][ T8144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.912256][ T8144] IPv6: NLM_F_CREATE should be set when creating new route [ 167.919485][ T8144] IPv6: NLM_F_CREATE should be set when creating new route [ 167.926744][ T8144] IPv6: NLM_F_CREATE should be set when creating new route [ 167.935677][ T8147] netlink: 'syz.5.1597': attribute type 21 has an invalid length. [ 167.952663][ T8147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.990193][ T8148] xfrm0 speed is unknown, defaulting to 1000 [ 168.383187][ T8163] loop3: detected capacity change from 0 to 128 [ 168.406468][ T8163] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.435682][ T8163] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 168.581582][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.611050][ T8159] loop1: detected capacity change from 0 to 1764 [ 168.760553][ T8165] syzkaller0: entered promiscuous mode [ 168.766216][ T8165] syzkaller0: entered allmulticast mode [ 168.994776][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1605'. [ 169.231532][ T28] kauditd_printk_skb: 543 callbacks suppressed [ 169.231544][ T28] audit: type=1400 audit(1771701796.911:3946): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.373298][ T28] audit: type=1400 audit(1771701796.911:3947): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.427426][ T8184] syzkaller0: entered promiscuous mode [ 169.441507][ T8184] syzkaller0: entered allmulticast mode [ 169.538889][ T28] audit: type=1400 audit(1771701796.951:3948): avc: denied { map_create } for pid=8177 comm="syz.2.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 169.566994][ T28] audit: type=1400 audit(1771701796.951:3949): avc: denied { read } for pid=8177 comm="syz.2.1608" dev="nsfs" ino=4026532874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 169.588847][ T28] audit: type=1400 audit(1771701796.951:3950): avc: denied { open } for pid=8177 comm="syz.2.1608" path="net:[4026532874]" dev="nsfs" ino=4026532874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 169.651811][ T28] audit: type=1400 audit(1771701796.961:3951): avc: denied { create } for pid=8177 comm="syz.2.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 169.710119][ T8193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.717629][ T8196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.731559][ T8193] audit: audit_lost=23 audit_rate_limit=0 audit_backlog_limit=64 [ 169.740150][ T28] audit: type=1400 audit(1771701796.971:3952): avc: denied { write } for pid=8177 comm="syz.2.1608" path="socket:[20725]" dev="sockfs" ino=20725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 169.939041][ T8201] FAULT_INJECTION: forcing a failure. [ 169.939041][ T8201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.952136][ T8201] CPU: 1 UID: 0 PID: 8201 Comm: syz.1.1616 Not tainted syzkaller #0 PREEMPT(full) [ 169.952157][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.952169][ T8201] Call Trace: [ 169.952176][ T8201] [ 169.952184][ T8201] __dump_stack+0x1d/0x30 [ 169.952275][ T8201] dump_stack_lvl+0x95/0xd0 [ 169.952301][ T8201] dump_stack+0x15/0x1b [ 169.952325][ T8201] should_fail_ex+0x263/0x280 [ 169.952384][ T8201] should_fail+0xb/0x20 [ 169.952398][ T8201] should_fail_usercopy+0x1a/0x20 [ 169.952418][ T8201] _copy_to_user+0x20/0xa0 [ 169.952443][ T8201] simple_read_from_buffer+0xb5/0x130 [ 169.952466][ T8201] proc_fail_nth_read+0x10e/0x150 [ 169.952565][ T8201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.952595][ T8201] vfs_read+0x1ab/0x7f0 [ 169.952811][ T8201] ? __rcu_read_unlock+0x4e/0x70 [ 169.952829][ T8201] ? __fget_files+0x184/0x1c0 [ 169.952905][ T8201] ? mutex_lock+0x57/0x90 [ 169.952935][ T8201] ksys_read+0xdc/0x1a0 [ 169.953009][ T8201] __x64_sys_read+0x40/0x50 [ 169.953036][ T8201] x64_sys_call+0x2886/0x3020 [ 169.953059][ T8201] do_syscall_64+0x12c/0x370 [ 169.953096][ T8201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.953117][ T8201] RIP: 0033:0x7f1025b0cece [ 169.953130][ T8201] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.953170][ T8201] RSP: 002b:00007f1024585fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.953216][ T8201] RAX: ffffffffffffffda RBX: 00007f10245866c0 RCX: 00007f1025b0cece [ 169.953234][ T8201] RDX: 000000000000000f RSI: 00007f10245860a0 RDI: 0000000000000009 [ 169.953250][ T8201] RBP: 00007f1024586090 R08: 0000000000000000 R09: 0000000000000000 [ 169.953283][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.953345][ T8201] R13: 00007f1025dc6128 R14: 00007f1025dc6090 R15: 00007fffcb44e808 [ 169.953365][ T8201] [ 170.334967][ T8202] loop5: detected capacity change from 0 to 1764 [ 170.495113][ T8211] loop2: detected capacity change from 0 to 128 [ 170.517787][ T8211] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.641535][ T8208] syzkaller0: entered promiscuous mode [ 170.647218][ T8208] syzkaller0: entered allmulticast mode [ 170.777641][ T8211] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.957870][ T8218] loop1: detected capacity change from 0 to 512 [ 170.988530][ T8218] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.028678][ T8218] EXT4-fs (loop1): orphan cleanup on readonly fs [ 171.047131][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'. [ 171.062206][ T8218] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4224: comm syz.1.1622: Allocating blocks 41-42 which overlap fs metadata [ 171.077275][ T8218] loop1: lost filesystem error report for type 5 error -117 [ 171.077466][ T8218] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4224: comm syz.1.1622: Allocating blocks 41-42 which overlap fs metadata [ 171.084918][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 171.084932][ C1] EXT4-fs (loop1): initial error at time 1771701798: ext4_mb_mark_diskspace_used:4224 [ 171.084949][ C1] EXT4-fs (loop1): last error at time 1771701798: ext4_mb_mark_diskspace_used:4224 [ 171.174968][ T8218] loop1: lost filesystem error report for type 5 error -117 [ 171.181584][ T8218] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.1622: Failed to acquire dquot type 1 [ 171.224601][ T8218] loop1: lost filesystem error report for type 5 error -117 [ 171.235357][ T8227] syzkaller0: entered promiscuous mode [ 171.248280][ T8227] syzkaller0: entered allmulticast mode [ 171.265310][ T8218] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 171.291776][ T8218] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #12: comm syz.1.1622: corrupted inode contents [ 171.356271][ T8218] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 171.356446][ T8218] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #12: comm syz.1.1622: mark_inode_dirty error [ 171.401883][ T8218] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 171.402138][ T8218] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #12: comm syz.1.1622: corrupted inode contents [ 171.423276][ T8218] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 171.423504][ T8218] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.1622: mark_inode_dirty error [ 171.444627][ T8218] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 171.444817][ T8218] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #12: comm syz.1.1622: corrupted inode contents [ 171.466227][ T8218] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 171.466348][ T8218] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 171.485100][ T8218] loop1: lost filesystem error report for type 5 error -117 [ 171.485233][ T8218] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #12: comm syz.1.1622: corrupted inode contents [ 171.506097][ T8218] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 171.506199][ T8218] EXT4-fs error (device loop1): ext4_truncate:4587: inode #12: comm syz.1.1622: mark_inode_dirty error [ 171.527430][ T8218] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 171.527542][ T8218] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 171.546190][ T8218] loop1: lost filesystem error report for type 5 error -117 [ 171.546388][ T8218] EXT4-fs (loop1): 1 truncate cleaned up [ 171.580629][ T8218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.600258][ T8218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.815918][ T8238] loop5: detected capacity change from 0 to 2048 [ 171.844343][ T8238] EXT4-fs: Ignoring removed orlov option [ 171.850018][ T8238] EXT4-fs: Ignoring removed oldalloc option [ 171.892272][ T8238] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 171.977897][ T8248] syzkaller0: entered promiscuous mode [ 171.987866][ T8238] 9p: Bad value for 'rfdno' [ 172.003582][ T8248] syzkaller0: entered allmulticast mode [ 172.056939][ T8250] syz1: rxe_newlink: already configured on xfrm0 [ 173.393241][ T8268] loop2: detected capacity change from 0 to 128 [ 173.401419][ T8268] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.416676][ T8268] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.556939][ T8273] loop5: detected capacity change from 0 to 1764 [ 174.216441][ T8281] loop1: detected capacity change from 0 to 256 [ 174.248319][ T28] kauditd_printk_skb: 537 callbacks suppressed [ 174.248336][ T28] audit: type=1400 audit(1771701801.931:4438): avc: denied { create } for pid=8279 comm="syz.1.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.352762][ T28] audit: type=1400 audit(1771701801.951:4439): avc: denied { append } for pid=8282 comm="syz.0.1643" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 174.443610][ T28] audit: type=1400 audit(1771701801.951:4440): avc: denied { append } for pid=8282 comm="syz.0.1643" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 174.504089][ T28] audit: type=1400 audit(1771701801.951:4441): avc: denied { map_create } for pid=8282 comm="syz.0.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 174.530574][ T28] audit: type=1400 audit(1771701801.971:4442): avc: denied { read } for pid=8279 comm="syz.1.1642" dev="nsfs" ino=4026532745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 174.568512][ T8285] syzkaller0: entered promiscuous mode [ 174.593887][ T8285] syzkaller0: entered allmulticast mode [ 174.601264][ T28] audit: type=1400 audit(1771701801.971:4443): avc: denied { open } for pid=8279 comm="syz.1.1642" path="net:[4026532745]" dev="nsfs" ino=4026532745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 174.666158][ T8289] netlink: 'syz.3.1645': attribute type 10 has an invalid length. [ 174.684482][ T8289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1645'. [ 174.698375][ T28] audit: type=1400 audit(1771701801.971:4444): avc: denied { create } for pid=8279 comm="syz.1.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 174.719576][ T8289] dummy0: entered promiscuous mode [ 174.724775][ T8289] dummy0: entered allmulticast mode [ 174.731433][ T8289] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 174.751188][ T28] audit: type=1400 audit(1771701801.981:4445): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.777488][ T28] audit: type=1400 audit(1771701801.981:4446): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.802929][ T28] audit: type=1400 audit(1771701801.981:4447): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.192519][ T8301] loop3: detected capacity change from 0 to 512 [ 176.267583][ T8301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.563738][ T8306] bridge9: entered promiscuous mode [ 176.568991][ T8306] bridge9: entered allmulticast mode [ 176.652321][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.775379][ T8320] loop1: detected capacity change from 0 to 512 [ 176.818217][ T8320] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 176.839257][ T8320] FAT-fs (loop1): Filesystem has been set read-only [ 176.875229][ T8323] syzkaller0: entered promiscuous mode [ 176.887085][ T8323] syzkaller0: entered allmulticast mode [ 177.222657][ T8331] loop3: detected capacity change from 0 to 1764 [ 177.389005][ T8339] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1661'. [ 177.428777][ T8333] syzkaller0: entered promiscuous mode [ 177.447401][ T8333] syzkaller0: entered allmulticast mode [ 177.582289][ T8343] netlink: 'syz.2.1663': attribute type 10 has an invalid length. [ 177.590982][ T8343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.599719][ T8343] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 177.959303][ T8354] loop1: detected capacity change from 0 to 128 [ 177.983526][ T8354] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.998672][ T8354] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.273261][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.323484][ T8359] loop3: detected capacity change from 0 to 2048 [ 178.409442][ T3305] Alternate GPT is invalid, using primary GPT. [ 178.418627][ T3305] loop3: p1 p2 p3 [ 178.431510][ T3305] loop3: partition table partially beyond EOD, truncated [ 178.449690][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.473157][ T8359] Alternate GPT is invalid, using primary GPT. [ 178.505109][ T8359] loop3: p1 p2 p3 [ 178.514645][ T8359] loop3: partition table partially beyond EOD, truncated [ 178.536961][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.537049][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.554317][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.563314][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.570918][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.580050][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.589374][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.598569][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.607450][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.616325][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.625471][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.685172][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.721345][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.725147][ T8369] loop1: detected capacity change from 0 to 1024 [ 178.752944][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.752978][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.791135][ T8369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.819000][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.819034][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.838698][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.847504][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.855734][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.863947][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.872864][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.881631][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.889807][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.898068][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.900166][ T8370] syzkaller0: entered promiscuous mode [ 178.906998][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.914516][ T8369] netlink: 'syz.1.1673': attribute type 1 has an invalid length. [ 178.918915][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.934643][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.942904][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.975887][ T8370] syzkaller0: entered allmulticast mode [ 178.986887][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.995293][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 179.019781][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 179.036728][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1676'. [ 179.059204][ T8377] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 179.067167][ T8369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.067557][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 179.107981][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 179.117848][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 179.129130][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 179.141459][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 179.152795][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 179.166748][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 179.184818][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 179.205208][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 179.205237][ T8356] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 179.257769][ T7423] udevd[7423]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 179.266260][ T28] kauditd_printk_skb: 439 callbacks suppressed [ 179.266273][ T28] audit: type=1400 audit(1771701806.951:4887): avc: denied { perfmon } for pid=8367 comm="syz.1.1673" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.266301][ T28] audit: type=1400 audit(1771701806.951:4888): avc: denied { bpf } for pid=8367 comm="syz.1.1673" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.288155][ T7424] udevd[7424]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 179.317262][ T28] audit: type=1400 audit(1771701807.001:4889): avc: denied { bpf } for pid=8367 comm="syz.1.1673" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.319799][ T28] audit: type=1400 audit(1771701807.001:4890): avc: denied { prog_run } for pid=8367 comm="syz.1.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.322373][ T28] audit: type=1400 audit(1771701807.011:4891): avc: denied { append } for pid=8382 comm="syz.5.1677" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 179.330019][ T28] audit: type=1400 audit(1771701807.011:4892): avc: denied { append } for pid=8382 comm="syz.5.1677" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 179.340686][ T28] audit: type=1400 audit(1771701807.021:4893): avc: denied { map_create } for pid=8382 comm="syz.5.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.379892][ T28] audit: type=1400 audit(1771701807.071:4894): avc: denied { read write } for pid=8382 comm="syz.5.1677" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.380622][ T28] audit: type=1400 audit(1771701807.071:4895): avc: denied { open } for pid=8382 comm="syz.5.1677" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.380654][ T28] audit: type=1400 audit(1771701807.071:4896): avc: denied { ioctl } for pid=8382 comm="syz.5.1677" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.380722][ T8384] loop5: detected capacity change from 0 to 4096 [ 179.478584][ T8384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.576930][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 179.616031][ T7423] udevd[7423]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 179.657794][ T7424] udevd[7424]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 179.821354][ T8392] loop2: detected capacity change from 0 to 128 [ 179.863006][ T8392] msdos: Bad value for 'gid' [ 179.867627][ T8392] msdos: Bad value for 'gid' [ 179.942336][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.051683][ T8398] bridge1: entered promiscuous mode [ 180.057008][ T8398] bridge1: entered allmulticast mode [ 180.413337][ T8406] loop3: detected capacity change from 0 to 128 [ 180.434067][ T8406] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.466292][ T8406] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.341766][ T96] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.380321][ T96] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.848054][ T7646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.051342][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.165514][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.289859][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.305967][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.323402][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.341094][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.366218][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.383730][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.402475][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.420898][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.436546][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.454007][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.472331][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.487566][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.506151][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.523285][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.542019][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.549592][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.565003][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.583406][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.616518][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.657713][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.689733][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.717534][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.755784][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.794288][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.835054][ T8423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 182.886244][ T8426] syzkaller0: entered promiscuous mode [ 182.939679][ T8426] syzkaller0: entered allmulticast mode [ 183.223992][ T8431] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 183.302550][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.407165][ T8435] xfrm0 speed is unknown, defaulting to 1000 [ 183.583915][ T8443] loop5: detected capacity change from 0 to 512 [ 183.638551][ T8443] EXT4-fs (loop5): orphan cleanup on readonly fs [ 183.655154][ T8443] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 183.701149][ T8443] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 183.731477][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 183.737942][ C0] EXT4-fs (loop5): initial error at time 1771701811: ext4_mb_generate_buddy:1315 [ 183.747107][ C0] EXT4-fs (loop5): last error at time 1771701811: ext4_mb_generate_buddy:1315 [ 183.759766][ T8443] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1697: attempt to clear invalid blocks 2 len 1 [ 183.776471][ T8443] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 183.776704][ T8443] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1697: invalid indirect mapped block 1819239214 (level 0) [ 183.805269][ T8443] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 183.821580][ T8443] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1697: invalid indirect mapped block 1819239214 (level 1) [ 183.853231][ T8443] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 183.853495][ T8443] EXT4-fs (loop5): 1 truncate cleaned up [ 183.871246][ T8443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.893595][ T8448] loop2: detected capacity change from 0 to 1764 [ 184.066542][ T8456] bridge10: entered promiscuous mode [ 184.072080][ T8456] bridge10: entered allmulticast mode [ 184.443197][ T28] kauditd_printk_skb: 302 callbacks suppressed [ 184.443211][ T28] audit: type=1400 audit(1771701812.131:5199): avc: denied { unmount } for pid=7646 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 184.469753][ T7646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.501549][ T28] audit: type=1400 audit(1771701812.161:5200): avc: denied { create } for pid=8457 comm="syz.3.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 184.552864][ T28] audit: type=1400 audit(1771701812.221:5201): avc: denied { read write } for pid=7646 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.581637][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.604390][ T28] audit: type=1400 audit(1771701812.221:5202): avc: denied { open } for pid=7646 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.610518][ T8458] syzkaller0: entered promiscuous mode [ 184.659189][ T8458] syzkaller0: entered allmulticast mode [ 184.701400][ T28] audit: type=1400 audit(1771701812.221:5203): avc: denied { ioctl } for pid=7646 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.735220][ T28] audit: type=1400 audit(1771701812.231:5204): avc: denied { write } for pid=8457 comm="syz.3.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 184.756269][ T28] audit: type=1400 audit(1771701812.291:5205): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 184.840944][ T28] audit: type=1400 audit(1771701812.341:5206): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.893888][ T8468] loop2: detected capacity change from 0 to 2048 [ 184.961314][ T28] audit: type=1400 audit(1771701812.341:5207): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.979769][ T8462] audit: audit_backlog=65 > audit_backlog_limit=64 [ 185.011885][ T3305] loop2: p2 < > p4 [ 185.020780][ T3305] loop2: p4 size 262144 extends beyond EOD, truncated [ 185.063621][ T8468] loop2: p2 < > p4 [ 185.073120][ T8468] loop2: p4 size 262144 extends beyond EOD, truncated [ 185.405097][ T8484] loop3: detected capacity change from 0 to 128 [ 185.424669][ T8484] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.464690][ T8484] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 185.828230][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 185.859442][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 186.121737][ T3572] Bluetooth: hci0: Frame reassembly failed (-84) [ 186.283895][ T8492] loop2: detected capacity change from 0 to 2048 [ 186.334255][ T8492] EXT4-fs: Ignoring removed orlov option [ 186.369694][ T8492] EXT4-fs: Ignoring removed oldalloc option [ 186.415846][ T8492] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 186.622133][ T8494] 9p: Bad value for 'rfdno' [ 186.647307][ T8494] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 186.799975][ T8501] loop5: detected capacity change from 0 to 1764 [ 186.827747][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 186.861247][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 187.080580][ T8506] syzkaller0: entered promiscuous mode [ 187.100689][ T8506] syzkaller0: entered allmulticast mode [ 187.832480][ T8519] netlink: 'syz.2.1722': attribute type 1 has an invalid length. [ 188.101506][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 189.517288][ T28] kauditd_printk_skb: 418 callbacks suppressed [ 189.517305][ T28] audit: type=1400 audit(1771701817.201:5597): avc: denied { create } for pid=8543 comm="syz.0.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 189.813646][ T28] audit: type=1400 audit(1771701817.241:5598): avc: denied { getopt } for pid=8543 comm="syz.0.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 189.855555][ T8546] netlink: 'syz.0.1732': attribute type 2 has an invalid length. [ 189.890551][ T28] audit: type=1400 audit(1771701817.251:5599): avc: denied { map_create } for pid=8543 comm="syz.0.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 189.954201][ T28] audit: type=1400 audit(1771701817.251:5600): avc: denied { read } for pid=8543 comm="syz.0.1731" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 190.005901][ T8542] syzkaller0: entered promiscuous mode [ 190.011417][ T8542] syzkaller0: entered allmulticast mode [ 190.051334][ T28] audit: type=1400 audit(1771701817.251:5601): avc: denied { open } for pid=8543 comm="syz.0.1731" path="net:[4026532393]" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 190.075309][ T96] Bluetooth: hci1: Frame reassembly failed (-84) [ 190.124348][ T28] audit: type=1400 audit(1771701817.261:5602): avc: denied { create } for pid=8543 comm="syz.0.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.183078][ T28] audit: type=1400 audit(1771701817.271:5603): avc: denied { write } for pid=8543 comm="syz.0.1731" path="socket:[21244]" dev="sockfs" ino=21244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.289215][ T28] audit: type=1400 audit(1771701817.271:5604): avc: denied { prog_load } for pid=8543 comm="syz.0.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 190.358863][ T28] audit: type=1400 audit(1771701817.271:5605): avc: denied { bpf } for pid=8543 comm="syz.0.1731" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.414588][ T28] audit: type=1400 audit(1771701817.271:5606): avc: denied { perfmon } for pid=8543 comm="syz.0.1731" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.561995][ T8556] bridge4: entered promiscuous mode [ 190.571532][ T8556] bridge4: entered allmulticast mode [ 191.063524][ T6356] Bluetooth: hci2: Frame reassembly failed (-84) [ 191.161549][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 192.111673][ T3493] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 192.380451][ T8579] loop2: detected capacity change from 0 to 512 [ 192.772226][ T8596] loop5: detected capacity change from 0 to 2048 [ 192.779988][ T8596] EXT4-fs: Ignoring removed orlov option [ 192.805717][ T8596] EXT4-fs: Ignoring removed oldalloc option [ 192.931728][ T8596] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 192.981495][ T5213] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 193.060974][ T8600] bridge11: entered promiscuous mode [ 193.066363][ T8600] bridge11: entered allmulticast mode [ 193.138736][ T8602] 9p: Bad value for 'rfdno' [ 193.241935][ T8602] syz1: rxe_newlink: already configured on xfrm0 [ 193.617145][ T8610] syzkaller0: entered promiscuous mode [ 193.622690][ T8610] syzkaller0: entered allmulticast mode [ 193.763026][ T8616] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1752'. [ 194.095705][ T8624] loop2: detected capacity change from 0 to 1764 [ 194.181531][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.230492][ T8616] bridge12: entered promiscuous mode [ 194.249227][ T8616] bridge12: entered allmulticast mode [ 194.573871][ T28] kauditd_printk_skb: 292 callbacks suppressed [ 194.573894][ T28] audit: type=1400 audit(1771701822.141:5899): avc: denied { prog_load } for pid=8626 comm="syz.5.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.753587][ T28] audit: type=1400 audit(1771701822.141:5900): avc: denied { bpf } for pid=8626 comm="syz.5.1755" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.865716][ T28] audit: type=1400 audit(1771701822.141:5901): avc: denied { prog_load } for pid=8626 comm="syz.5.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.922366][ T28] audit: type=1400 audit(1771701822.141:5902): avc: denied { bpf } for pid=8626 comm="syz.5.1755" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.980378][ T28] audit: type=1400 audit(1771701822.141:5903): avc: denied { perfmon } for pid=8626 comm="syz.5.1755" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.037435][ T28] audit: type=1400 audit(1771701822.141:5904): avc: denied { prog_load } for pid=8626 comm="syz.5.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 195.541886][ T8647] audit: audit_backlog=65 > audit_backlog_limit=64 [ 195.579684][ T28] audit: type=1400 audit(1771701822.141:5905): avc: denied { perfmon } for pid=8626 comm="syz.5.1755" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.604540][ T28] audit: type=1400 audit(1771701822.141:5906): avc: denied { bpf } for pid=8626 comm="syz.5.1755" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.625412][ T28] audit: type=1400 audit(1771701822.151:5907): avc: denied { prog_run } for pid=8626 comm="syz.5.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 195.881569][ T3432] Bluetooth: hci0: Frame reassembly failed (-84) [ 196.498866][ T8670] bridge12: entered promiscuous mode [ 196.504363][ T8670] bridge12: entered allmulticast mode [ 196.919316][ T8668] syzkaller0: entered promiscuous mode [ 196.924983][ T8668] syzkaller0: entered allmulticast mode [ 197.076314][ T8674] loop1: detected capacity change from 0 to 128 [ 197.089684][ T8674] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.115032][ T8674] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.856806][ T8682] loop1: detected capacity change from 0 to 256 [ 198.021495][ T5213] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 198.158036][ T8686] syzkaller0: entered promiscuous mode [ 198.168545][ T8686] syzkaller0: entered allmulticast mode [ 198.495926][ T3432] Bluetooth: hci0: Frame reassembly failed (-84) [ 198.688871][ T8695] xfrm0 speed is unknown, defaulting to 1000 [ 198.700249][ T8693] loop2: detected capacity change from 0 to 512 [ 198.773226][ T8693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.809890][ T8693] ext4 filesystem being mounted at /345/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.898024][ T8703] loop1: detected capacity change from 0 to 4096 [ 198.933387][ T8703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.186303][ T3318] ================================================================== [ 199.194510][ T3318] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 199.201999][ T3318] [ 199.204327][ T3318] read-write to 0xffff88811c0ec108 of 8 bytes by task 8705 on cpu 1: [ 199.212397][ T3318] inode_add_bytes+0x47/0xe0 [ 199.217006][ T3318] __dquot_alloc_space+0x180/0x8a0 [ 199.222148][ T3318] shmem_inode_acct_blocks+0x125/0x230 [ 199.227619][ T3318] shmem_get_folio_gfp+0x5b2/0xd60 [ 199.232749][ T3318] shmem_write_begin+0xfc/0x1f0 [ 199.237619][ T3318] generic_perform_write+0x183/0x490 [ 199.242917][ T3318] shmem_file_write_iter+0xc5/0xf0 [ 199.248053][ T3318] __kernel_write_iter+0x319/0x590 [ 199.253183][ T3318] dump_user_range+0xa7d/0xdb0 [ 199.257971][ T3318] elf_core_dump+0x21a2/0x2330 [ 199.262752][ T3318] coredump_write+0xacf/0xdf0 [ 199.267436][ T3318] vfs_coredump+0x26c7/0x3130 [ 199.272132][ T3318] get_signal+0xd80/0xf60 [ 199.276493][ T3318] arch_do_signal_or_restart+0x96/0x450 [ 199.282072][ T3318] irqentry_exit+0xf7/0x520 [ 199.286591][ T3318] asm_exc_page_fault+0x26/0x30 [ 199.291457][ T3318] [ 199.293787][ T3318] read to 0xffff88811c0ec108 of 8 bytes by task 3318 on cpu 0: [ 199.301337][ T3318] generic_fillattr+0x27d/0x340 [ 199.306202][ T3318] shmem_getattr+0x181/0x200 [ 199.310819][ T3318] vfs_getattr_nosec+0x146/0x1e0 [ 199.315792][ T3318] vfs_getattr+0x48/0x60 [ 199.320056][ T3318] vfs_statx_path+0x28/0x140 [ 199.324660][ T3318] vfs_statx+0xc4/0x170 [ 199.328830][ T3318] vfs_fstatat+0x118/0x170 [ 199.333266][ T3318] __se_sys_newfstatat+0x55/0x3e0 [ 199.338302][ T3318] __x64_sys_newfstatat+0x55/0x70 [ 199.343347][ T3318] x64_sys_call+0x2c64/0x3020 [ 199.348130][ T3318] do_syscall_64+0x12c/0x370 [ 199.352747][ T3318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.358735][ T3318] [ 199.361069][ T3318] value changed: 0x0000000000007e90 -> 0x0000000000007ea8 [ 199.368192][ T3318] [ 199.370525][ T3318] Reported by Kernel Concurrency Sanitizer on: [ 199.376683][ T3318] CPU: 0 UID: 0 PID: 3318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 199.386154][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.396247][ T3318] ================================================================== [ 199.424697][ T8711] loop5: detected capacity change from 0 to 4096 [ 199.447456][ T8711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.562961][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.599348][ T28] kauditd_printk_skb: 326 callbacks suppressed [ 199.599475][ T28] audit: type=1400 audit(1771701827.281:6220): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.692192][ T8714] bridge2: entered promiscuous mode [ 199.697449][ T8714] bridge2: entered allmulticast mode [ 200.042073][ T28] audit: type=1400 audit(1771701827.501:6221): avc: denied { read write open } for pid=3318 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.067154][ T28] audit: type=1400 audit(1771701827.501:6222): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.095811][ T28] audit: type=1400 audit(1771701827.781:6223): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 200.118727][ T28] audit: type=1400 audit(1771701827.801:6224): avc: denied { unmount } for pid=7646 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 200.178403][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.189002][ T8718] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 200.201753][ T7646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.234482][ T28] audit: type=1400 audit(1771701827.841:6225): avc: denied { read } for pid=8717 comm="syz.2.1779" dev="nsfs" ino=4026532874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 200.257136][ T28] audit: type=1400 audit(1771701827.841:6226): avc: denied { open } for pid=8717 comm="syz.2.1779" path="net:[4026532874]" dev="nsfs" ino=4026532874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 200.340909][ T28] audit: type=1400 audit(1771701827.851:6227): avc: denied { create } for pid=8717 comm="syz.2.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 200.409896][ T28] audit: type=1400 audit(1771701827.861:6228): avc: denied { bind } for pid=8717 comm="syz.2.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 200.463300][ T28] audit: type=1400 audit(1771701827.871:6229): avc: denied { read } for pid=8717 comm="syz.2.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 200.501691][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110