last executing test programs: 2.352528412s ago: executing program 0 (id=158): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0x20, 0xfd, 0x0, 0xfffff024}, {0x30, 0x0, 0xf9, 0x7}, {0x6, 0x8, 0x41, 0x8}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$nl_netfilter(0x10, 0x3, 0xc) 2.340677292s ago: executing program 3 (id=160): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40a981, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x6bf1c2d5adba8c32}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) close(0x3) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) close_range(r0, 0xffffffffffffffff, 0x0) 2.336592782s ago: executing program 4 (id=161): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_config_ext={0x1000, 0x8}, 0x2a02, 0x6, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009180)=@newtaction={0x70, 0x30, 0x519, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffe, 0x0, 0x7, 0x40000008, 0x4}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) (fail_nth: 1) 2.173263326s ago: executing program 4 (id=162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x2b8, 0x25c, 0xf0, 0x7, 0x1e0, 0x3a8, 0x3a8, 0x1e0, 0x3a8, 0x7fffffd, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xffffffff], [], 'macvlan1\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x4, 0x2}, 0x16c, 0xa8, 0xf0, 0xa010000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffb}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'veth0_virt_wifi\x00', 'wlan1\x00', {0xff}, {0xff}, 0x88, 0xa, 0x5, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 2.098905728s ago: executing program 4 (id=163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1a, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xc4}}, 0x24000041) 2.098610138s ago: executing program 4 (id=164): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000340)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b7, &(0x7f00000010c0)="$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") syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$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") r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000200)={0xa, 0x4e24, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf0d}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="20000000000000002900000036000000670000000000000004010400000000001400000000000000290000000b00000029000006"], 0x38}, 0x20000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0, 0x1}, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32], 0x44}}, 0x2000800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="0315000000200300480012800e00010069703665727370616e0000003400028006000200080000000400120014000700fc00000000000000000000000000000108000d000100000008000c00feffffff08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x84}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = syz_io_uring_setup(0x4329, &(0x7f0000000180)={0x0, 0x776c, 0x110c9, 0x6, 0x160}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) r5 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x80000008}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_io_uring_setup(0xefe, &(0x7f00000005c0)={0x0, 0x5b82, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000080)=0x8) syz_io_uring_modify_offsets$generic(r7, r8, 0x2c, 0x1000) io_uring_enter(r6, 0xfffff000, 0xb08a, 0x6d, 0x0, 0x0) 1.532771132s ago: executing program 0 (id=171): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x3}, 0x106c88, 0x1221, 0xfdffffff, 0x0, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 1.486665713s ago: executing program 1 (id=172): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xa) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6b) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x11, &(0x7f0000000000)={[{@noblock_validity}, {@nolazytime}, {@errors_remount}, {@mblk_io_submit}, {@block_validity}]}, 0x1, 0x60e, &(0x7f00000003c0)="$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") r3 = socket$unix(0x1, 0x1, 0x0) r4 = accept4$unix(r3, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x242, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r4, 0xc0805841, &(0x7f0000000a00)={0x5, 0x9, 0x2, 0x0, 0xa496}) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xd8, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0xb6, 0x19, "1a0b9a995e37e21a16b336eec75b2022860620cfbe587cfa2fcc6a24ea33a3d006a8a9ae2686c473bb1c346daf6aa6d50cc3136d7aa505eb1a2f00a2f697b58c814bc079f10b177f5d9e997a98d43c2a1bf1e9df3ee7bd40968c440924168974139487ed5e88938266406357a3f0755f0d695cb83f37837806f5f6b8f417d3e744c2e7d8150a7286ff22d9ad0240cfcfac0763d17061e34bed038296323a74d61ad2887fd5a0f386a9c3ba22da2566b21945"}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8}]}, 0xd8}}, 0x4000000) 1.475961194s ago: executing program 3 (id=173): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = dup(0xffffffffffffffff) perf_event_open(0x0, r0, 0x20000000000000e, r1, 0x3) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000040000900060073797a32000000000500040000000000050005000200000011000300686173683a6e65742c6e6574000000000c00078008000600fffffffc0500010007000000"], 0x58}}, 0x20000000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000080)={0x7, 0xe, 0x8, 0xb5c, 0xc, "a5fff6f365a3e37a"}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r4, 0x40085500, 0x2) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000380)="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", 0x1cf}, {&(0x7f0000000240)="9484fa3292397435dd88f7123d907fa56ff458f31a3afed243bde1036c6b480dff193dd4a6f3335562c88ad3ac6ddbede877625c83f3843443a2d4a30dae9ede3c05b9d62ff79f5f1ef1b9d90e09d72ebab546f57ee5195001e2a9eb51314cc2afe587d9b1fa83c0d8dbec38382b63a3b0cd6b5091ee85e6dc9eba246cc86b1588803b3fa8d7809c83ad18961c480ac059a98ae6bf402a30a1f62f421878bf78720a6b153de480c0541eee78494c272a0ee188471a7a25d3c11d00e169bb1eb469317b030c9200769e67d5", 0xcb}], 0x2) 1.416751925s ago: executing program 0 (id=174): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x24c0, 0x0, 0xfffffffc, 0x9, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x2a) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000200)={0x7, 0x1, 'client1\x00', 0x80000002, "62fee7217075a8b0", "4d923afe529a029c3c644f803a068c21498cc522fc94dd911f9909b52b59a30c", 0x200, 0x8001}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x8, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000440), 0x8}, 0x24, 0x8caf, 0x9, 0x5, 0x1ff, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x6, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000b, 0x11, r1, 0x0) (async) r2 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x11e}]}, 0x24}, 0x1, 0x0, 0x0, 0x13964e21ab223140}, 0x8000) r6 = openat$cgroup_devices(r3, &(0x7f0000000400)='devices.deny\x00', 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r9}, &(0x7f00000001c0), &(0x7f0000000200)=r7}, 0x20) (async) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:*\t\n', @ANYRESHEX], 0xa) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c000000000061134c0000000000bfa000000000000007000000ee0016055e03010000000000250500000000000069163e0000000000bf07000000000000260507000fff0720670600003f000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7166c23d28c0a7101b8b09736ecd34aa9dc1b498"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.339437427s ago: executing program 3 (id=175): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100020e9390050e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000007b, 0x4004) 1.316534218s ago: executing program 3 (id=176): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100020e9390050e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000007b, 0x4004) (fail_nth: 1) 1.223736s ago: executing program 3 (id=177): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000000206010300000000000000ea0500000014000780080008400000005208000640000000060900020073797a31000000000500040000000000050005000a000000050001000700000003fdc2221f34482c52d8007762273785490529679ac1601c29269b6592f157b755f90d1150961a1d0be04146122bb001a7cde488937f797545188471490ad78a1b907d4df784e83531abab61aae5ee13bf9204afe9219fdf1c9d6183316f8c8ff2d05ae6954c77eeab3586ffd272ee9096fc9706765d9ba8bba63b3752f58c57a929c7ddf4eec81a2b7125be2207bfde28e585c8ee0fe10e8ee7ad58d14a2f"], 0x4c}}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c0003"], 0xcd0}}, 0x0) r5 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x248, 0x0, 0xfeffffff, 0x150, 0x248, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@ip={@loopback, @empty, 0xff000000, 0xffffff00, 'veth1_to_batadv\x00', 'pim6reg1\x00', {}, {}, 0x2f, 0x2, 0x1}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x18, @multicast2, @multicast2, @port, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x7, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010102, @gre_key=0x2312, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x20}, @multicast1, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {}, 0x6c, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000b8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004804}, 0x40000) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0xff0b, 0xa}, {0x1, 0x8}, @period={0x5a, 0x8001, 0x5, 0x4, 0x7, {0x403, 0x4, 0xffff, 0x3}, 0x0, 0x0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r7, 0x0, 0x4ffe6, 0x0) r8 = epoll_create1(0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000080)=[@ioring_restriction_sqe_flags_required={0x3, 0x10}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_sqe_flags_allowed={0x2, 0x15}, @ioring_restriction_sqe_flags_allowed={0x2, 0x12}, @ioring_restriction_sqe_flags_required, @ioring_restriction_sqe_flags_allowed={0x2, 0x1a}, @ioring_restriction_register_op={0x0, 0x13}, @ioring_restriction_sqe_op={0x1, 0xe}], 0x8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000000040)={0x20000001}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') setns(0xc9, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x1}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x10f) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) 1.138747752s ago: executing program 0 (id=178): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000340)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b7, &(0x7f00000010c0)="$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") syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$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") r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000200)={0xa, 0x4e24, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf0d}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="20000000000000002900000036000000670000000000000004010400000000001400000000000000290000000b00000029000006"], 0x38}, 0x20000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0, 0x1}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32], 0x44}}, 0x2000800) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_io_uring_setup(0xefe, &(0x7f00000005c0)={0x0, 0x5b82, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x1000) io_uring_enter(r3, 0xfffff000, 0xb08a, 0x6d, 0x0, 0x0) 1.138457102s ago: executing program 4 (id=179): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000001c0)=[{{0x2, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x3}, {0x3, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x3, 0x1}}, {{0x2, 0x1}, {0x1, 0x1, 0x0, 0x1}}], 0x20) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033"], 0xfe33) r2 = memfd_secret(0x80000) sendmsg$inet(r1, &(0x7f0000003b00)={&(0x7f0000003940)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000003a80)=[{&(0x7f0000003980)="d2e6ce97a05ef1405d4fe863cf3170693213147a70a507fdb97acce53eace6dc2373330163ee04a3bfda68d021b846c8118ffb522f12e6b5896c93bd63ce899ffddd9e1894879fd319718d007c10b2da930203e0d87bca0fc0852eac2820647d633624f2090a5a5f9e8db684a2fbd6f581744bdbbd8be1301f388b3df14ef9e0077bf95bb90576fc2f6c8b7bbcb2758be23d78c25e7f", 0x96}, {&(0x7f0000003a40)="ec593cb2ff2d0dc025a701f99d2e34d5e79843c878a8bb4935ca3e4178e66aaf1300e677d62bbd725abb37", 0x2b}], 0x2, &(0x7f0000003ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}, 0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xa, 0x11, r2, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='smaps\x00', 0x0, r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0xce23, @rand_addr=0x64010101}}}, &(0x7f0000003900)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$kcm(r1, &(0x7f00000038c0)={&(0x7f0000002240)=@pptp={0x18, 0x2, {0x0, @private=0xa010100}}, 0x80, &(0x7f0000003400)=[{&(0x7f00000022c0)="20e4620372b109b04d85fe9dd96a7a5f95bb0ca948fa7cc3996e07fed05b82bb2d19d16a0dc7a2cec6ba43c16495608defc7658b950d751050b0edef7edd56de7e1ea0c72b39579850cb05ba32a8682f1746b6faacada24f792f148f77f55e7c1ddfe8a05978f0fde1fa09ba3a6cb546477d5ef5fe5174306636e1dea2a2db3b93ad5f00114acf63cc9d9153d22ab37085", 0x91}, {&(0x7f0000002380)="2bdfcb007215ed0b96f655514ce55b00a75f23343521769e42ae8279422ea944af186b9cf2c9a0fe93997dfab2ce1187b6c555897c1f0c65d6d2a29f253abe83fb9172ae47ad3d008ecbe825072cbd861efb1bec83118ee5509b0732f2639b8925afb9462fdc7f6286", 0x69}, {&(0x7f0000002400)="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", 0x1000}], 0x3, &(0x7f0000003440)=[{0x18, 0x10e, 0x7bb4, '\v'}, {0x100, 0x10d, 0x4, "f2305655707036bf1af11078c26d44b9f1a2a6222401cc684e26951902d7d246b1d0e82184baa6cec93e79ca18f3eaefd9eb4388e2b7c3ed1c9dd41ec247e050cbcfe23618d91c030bde187c0788ab693ade6e12957498853513a0e2e97abe38e52f5e1ee5e38f201ece451b55e7c014c72af8a9c1aadf28b2d4210dbb0e9aa8ee7d5683d061bd1883c6115d1cfdb136d9e0401991e41d9d51bfd8f552558dc0d93a04c52b96f290befecad88a9878c24542f55aea57be05f79de8ad7b23b35615603f6877980b7374330f13dde962988a11da2c54e7fc2eca416c8882bb6dfd875391d5fe0eaab66baee901"}, {0x60, 0x10f, 0xff, "536d495956c8e62ba8567a23965b6af1dd150cb7666543e935a5a2e36bf56ae8c5681be139ddbee9c79e71af30b4fcb05a14010ed1a4d281046b4081a50f577767ae4eb706ff2bbe3440650f5c4907"}, {0x110, 0x117, 0x8, "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"}, {0x28, 0x29, 0xd82, "8036f49704fb4e5415724a603c92006395fb19992055"}, {0xa8, 0x115, 0x80000001, "36cea47d18096960348e52d649a81fa9fdc687d5624402568e40fd37ef013a898182bfe3c299374651a351060d2f474f1b6fcf0e8034be51be43ece1b13ec45fce3559dbe0956f880bbe42be7f1cf6f284cffb3a21b9c6cb59c2f72a966f8ed401f011fe29ca521b783fb2dc135cf1c89a887d87e5e624c1e986da3fea672352188bb116f23a6760b030e4f23df300d184da787f7b74e939"}, {0xf8, 0x10b, 0x8, "f938e1bf2d74939df5c2e7c9426ead0c36a574c71f9be5bd0451dc441e56f33b696a7593e260b546fbdb6489f07987df1703165288d42efc7b481699410e8dc185c854d3b700920616215da5b963a1ea02edc0b66ff6ac281f25599ed5442bce96d0b044bd9f33820ce020a2480b3e45251be4c758216633b9100a8a0e2f0546cd36e7f297b805c94ee360d0866157bdb622e7bc212a3e2ab212f6e623dea20850650ac90f20dd95c8248328efd85d7c8524cb75b20af0f12eff9ba03704b66b15a1675985bfe840e62982e9d83877e1a6cc1ef3146dc0161202b550e3ebff22d39ea554bbed"}], 0x450}, 0x40) preadv(r0, &(0x7f0000002200)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/202}, {&(0x7f0000001200)=""/4096}], 0x0, 0x0, 0x0) 1.095376013s ago: executing program 2 (id=180): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x48, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'team_slave_0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, 0x8, r3, 0x20}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)="1b787ffc7d5cc2ea6a800d4dc7f190986936cb0135bb252c9b7d2804712e2aba973499c21190185b93fe742b0d99258cc7aeeaf86b61d524b3d2bfe03a88af8049dd556d96dc91fb3bb99d", 0x4b}, {&(0x7f00000001c0)="bbe949760d03e7ba8a59a5872c607d7081844756b684e891fd35c2ae802554379934577b860bf6543d31dbff54c1e692a450529b12037e7c22f3c010a7d494b497f364fa7da428d1d888e886b4d7a1c93a584dfaead7ba1a16ead0ae696dfebf6f61ffa0a204d9380bad254a3400f2f26092c7d157d1769588f4b38b8c28481d24cde5a832631e52290c2502f2c7af93c313d351a1c00d56df52664d31feb711df1aa4c71115a3fed2426bbb3d1c7ffb9cae9882e9e612220c3bc8", 0xbb}], 0x2}, 0x4) 1.004337876s ago: executing program 0 (id=181): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0x20, 0xfd, 0x0, 0xfffff024}, {0x30, 0x0, 0xf9, 0x7}, {0x6, 0x8, 0x41, 0x8}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$nl_netfilter(0x10, 0x3, 0xc) 946.550917ms ago: executing program 4 (id=182): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, 0x0) setregid(r3, r3) setuid(0xee00) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xf) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x59}, &(0x7f0000000040)=0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 946.161627ms ago: executing program 1 (id=183): r0 = socket(0x10, 0x803, 0x0) clock_getres(0x1, &(0x7f0000000000)) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x3aa, 0x0, &(0x7f0000003700)={0x77359400}) socket(0x10, 0x803, 0x0) (async) clock_getres(0x1, &(0x7f0000000000)) (async) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x3aa, 0x0, &(0x7f0000003700)={0x77359400}) (async) 945.909237ms ago: executing program 2 (id=184): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x104, 0x1224, 0x0, 0x8, 0x8, 0x20020005, 0x0, 0x0, 0x0, 0x0, 0x8000080000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_page_alloc/probability\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 907.939308ms ago: executing program 1 (id=185): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @broadcast, 0x4e20, 0x3, 'ovf\x00', 0x2, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000000000)={0xc, {"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", 0xdc7}}, 0x375) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x1, 0x44) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x111000, 0x180, 0xa}, 0x18) linkat(r5, &(0x7f0000001080)='./file0\x00', r6, &(0x7f0000001140)='./file0\x00', 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) close(r2) 849.940559ms ago: executing program 1 (id=186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) dup(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) geteuid() sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv6_delroute={0x28, 0x19, 0x1, 0xfffffffc, 0x25dfdc01, {0xa, 0x10, 0x0, 0x0, 0xfd, 0x4, 0x0, 0xb, 0x2300}, [@RTA_MULTIPATH={0xc, 0x9, {0x3, 0x1a, 0xfd}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004045}, 0x4050) 806.80411ms ago: executing program 2 (id=187): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301000, 0x20) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x6, 0x4, 0x7, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0xa5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d82}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="2b1c52be5f144dd0c2db5cd68c42", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', 0x0, 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001900), 0x0, 0x4044805) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="58010000100001002cbc700000000000ff020000000000000000000000000001ac14140d0000000000000000000000000000ecdf000000000a83060000004000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}}, 0x44050) (async) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x0, 0x3e}, 0x28) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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") ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000100)=0x3) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xfffd, 0xe9, @mcast1, 0x5}, 0x1c) (async) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000480)=0x100, 0x4) write(r2, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5', 0x20) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000780)=[r0], &(0x7f00000007c0)=[{0x3, 0x4, 0xe, 0x1}, {0x1, 0x1, 0x3, 0x6}, {0x5, 0x4, 0x8, 0x4}], 0x10, 0x1ff}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@cgroup, 0xffffffffffffffff, 0x1a, 0x4, 0x0, @void, @value=r6}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7800, 0x7, 0xa3dc, 0x4, {{0xa, 0x4, 0x1, 0x3c, 0x28, 0x64, 0x0, 0x9, 0x29, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x70, [@dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010102]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) 806.52877ms ago: executing program 2 (id=188): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv6_delroute={0x28, 0x19, 0x1, 0xfffffffc, 0x25dfdc01, {0xa, 0x10, 0x0, 0x0, 0xfd, 0x4, 0x0, 0xb, 0x2300}, [@RTA_MULTIPATH={0xc, 0x9, {0x3, 0x1a, 0xfd}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004045}, 0x4050) 806.41888ms ago: executing program 1 (id=189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv6_delroute={0x28, 0x19, 0x1, 0xfffffffc, 0x25dfdc01, {0xa, 0x10, 0x0, 0x0, 0xfd, 0x4, 0x0, 0xb, 0x2300}, [@RTA_MULTIPATH={0xc, 0x9, {0x3, 0x1a, 0xfd}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004045}, 0x4050) (fail_nth: 1) 738.498152ms ago: executing program 1 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@fallback, 0xffffffffffffffff, 0x1, 0x2000}, 0x20) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) listen(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 719.698913ms ago: executing program 2 (id=191): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) unshare(0x26020400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 504.686268ms ago: executing program 2 (id=192): r0 = getpid() r1 = socket$phonet_pipe(0x23, 0x5, 0x2) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x0, r0}) fcntl$getownex(r1, 0x10, &(0x7f0000001b80)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) shutdown(r3, 0x1) write$binfmt_elf32(r3, 0x0, 0x3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000005c0)={[{@journal_path={'journal_path', 0x3d, './trace'}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@resuid={'resuid', 0x3d, r4}}, {@stripe={'stripe', 0x3d, 0x4004}}, {@journal_checksum}, {@dax_inode}, {@resuid={'resuid', 0x3d, r4}}, {@test_dummy_encryption_v1}, {@nogrpid}]}, 0x3, 0x441, &(0x7f0000001080)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008440, &(0x7f0000000340)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'syzkaller\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@uid_lt={'uid<', r4}}, {@flag='rw'}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@measure}, {@uid_eq={'uid', 0x3d, r4}}, {@fsname={'fsname', 0x3d, 'stripe'}}]}, 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r5 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8000, 0x159) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r9 = inotify_add_watch(r8, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYRESDEC=r9, @ANYRESHEX=r6], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x62, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004081) setsockopt$sock_int(r10, 0x1, 0x31, &(0x7f00000001c0), 0x4) accept$unix(r6, &(0x7f0000000180), &(0x7f0000000200)=0x6e) fsetxattr$security_evm(r5, &(0x7f0000000240), &(0x7f0000000400)=ANY=[@ANYBLOB="831eab08a376baf04fe402ca479200"], 0x5, 0x1) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x80201, 0x100) 90.692468ms ago: executing program 3 (id=193): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x6a060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010003704000000000500000000000000", @ANYRES32=r3, @ANYBLOB="c3040580000000002800128008000100677265001c00028005000a000000000008000700ac"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) sendmmsg$inet(r1, &(0x7f0000001580)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @private=0x1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240049d5}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040), 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) r5 = syz_open_dev$usbfs(0x0, 0xb, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) close(r5) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x2, @perf_bp={0x0, 0xc}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000007600090000000000000000000000000025fc82571dd99b15bd1bd66a94e29b533b892780bf1cd8e8f0975a1a813b797ecf5849a23f3b2f23a9da5d83c5c7d2fa996011112bf95bddc6b341df2a188d0dc6901ff4b851d17656c1e50999888c85a12aabba0692b03f2ea1b3b20510fa06027bffe22877625b202c7f1e77a5cb81ba9ea49a45eed91d33c064c9edaa586a918e0db639f37874cf", @ANYRES32=0x0], 0x24}, 0x1, 0x5502000000000000}, 0x0) 0s ago: executing program 0 (id=194): r0 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0x2d0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x8, 0x5}}, @common=@addrtype={{0x30}, {0x8, 0x800, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x5}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff000000, 0xffffff00, 'wg0\x00', 'syzkaller0\x00', {}, {0xff}, 0x84, 0x1, 0x20}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000001]}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9, 0x0, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id, @gre_key=0x1}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @gre_key=0x3}}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'bond_slave_1\x00', {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x24, 0x39, 0x107, 0x70bd27, 0x259fdbfe, {0x3, 0x7c}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x1, 0x0, 0x0, @str='!{:\\\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/make-it-fail\x00', 0x1, 0x0) ioctl(r5, 0x5, &(0x7f0000000080)="ea2dda49280191c0d760068a8f213f76c614ec4c3264250db3112b5d772bfa24fd669f112a8b37ac11cd24873febe0c85dff912236e0ddb92a5a477ae1a52be1f8bf84c234f63d9c09b575799c0fd2be930d27f5ada12418e9b553021f8bbcaaf85815d8f4992e07027caaceb31ecff0e62aee524e07010d934e46780c88c8b7bf23051878c29fcc950aae0277763ebd1f6d642b6c8baccd29105310fe19a8f26a16330556f83ddc3b8c8d85cd14c3416f4893a6819d88c8adc9bfce04cf49cf0715995ef083905c2d369fc983363bd127c62ac36d") bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) kernel console output (not intermixed with test programs): [ 24.386233][ T29] audit: type=1400 audit(1787811574.945:103): avc: denied { search } for pid=3181 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.386284][ T29] audit: type=1400 audit(1787811574.945:104): avc: denied { search } for pid=3181 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.259247][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 25.259288][ T29] audit: type=1400 audit(1787811575.825:118): avc: denied { write } for pid=3224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.293534][ T29] audit: type=1400 audit(1787811575.855:119): avc: denied { write } for pid=3235 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.364656][ T29] audit: type=1400 audit(1787811575.925:120): avc: denied { write } for pid=3238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.394536][ T29] audit: type=1400 audit(1787811575.955:121): avc: denied { write } for pid=3249 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.468781][ T29] audit: type=1400 audit(1787811576.035:122): avc: denied { write } for pid=3252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.499101][ T29] audit: type=1400 audit(1787811576.065:123): avc: denied { write } for pid=3263 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.033114][ T29] audit: type=1400 audit(1787811576.595:124): avc: denied { write } for pid=3266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.062850][ T29] audit: type=1400 audit(1787811576.625:125): avc: denied { write } for pid=3277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. [ 31.358816][ T29] audit: type=1400 audit(1787811581.925:126): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.381948][ T29] audit: type=1400 audit(1787811581.945:127): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.384402][ T3288] cgroup: Unknown subsys name 'net' [ 31.385396][ T29] audit: type=1400 audit(1787811581.945:128): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.528388][ T3288] cgroup: Unknown subsys name 'cpuset' [ 31.534467][ T3288] cgroup: Unknown subsys name 'rlimit' [ 31.645938][ T29] audit: type=1400 audit(1787811582.205:129): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.669401][ T29] audit: type=1400 audit(1787811582.215:130): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.669439][ T29] audit: type=1400 audit(1787811582.215:131): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.669469][ T29] audit: type=1400 audit(1787811582.215:132): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.707088][ T29] audit: type=1400 audit(1787811582.265:133): avc: denied { read } for pid=3024 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.758608][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.759597][ T29] audit: type=1400 audit(1787811582.325:134): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 31.760036][ T29] audit: type=1400 audit(1787811582.325:135): avc: denied { write } for pid=3292 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.831738][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.327724][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.327774][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.327894][ T3299] bridge_slave_0: entered allmulticast mode [ 33.328503][ T3299] bridge_slave_0: entered promiscuous mode [ 33.339716][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.339819][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.340083][ T3299] bridge_slave_1: entered allmulticast mode [ 33.341174][ T3299] bridge_slave_1: entered promiscuous mode [ 33.365786][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.368831][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.419728][ T3299] team0: Port device team_slave_0 added [ 33.441144][ T3299] team0: Port device team_slave_1 added [ 33.453892][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.453957][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.454080][ T3305] bridge_slave_0: entered allmulticast mode [ 33.454501][ T3305] bridge_slave_0: entered promiscuous mode [ 33.455945][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.456039][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.456244][ T3305] bridge_slave_1: entered allmulticast mode [ 33.457564][ T3305] bridge_slave_1: entered promiscuous mode [ 33.520813][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.520856][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.520970][ T3306] bridge_slave_0: entered allmulticast mode [ 33.521537][ T3306] bridge_slave_0: entered promiscuous mode [ 33.524491][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.526911][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.548450][ T3305] team0: Port device team_slave_0 added [ 33.550474][ T3305] team0: Port device team_slave_1 added [ 33.578908][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.578957][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.579051][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.601234][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.601336][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.601492][ T3304] bridge_slave_0: entered allmulticast mode [ 33.603307][ T3304] bridge_slave_0: entered promiscuous mode [ 33.606172][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.606267][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.606464][ T3304] bridge_slave_1: entered allmulticast mode [ 33.608306][ T3304] bridge_slave_1: entered promiscuous mode [ 33.620221][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.620324][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.620517][ T3306] bridge_slave_1: entered allmulticast mode [ 33.622310][ T3306] bridge_slave_1: entered promiscuous mode [ 33.624751][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.624822][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.624928][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.633014][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.633187][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.633361][ T3300] bridge_slave_0: entered allmulticast mode [ 33.634450][ T3300] bridge_slave_0: entered promiscuous mode [ 33.648907][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.648925][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.648961][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.650821][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.650861][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.651063][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.664896][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.664998][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.665167][ T3300] bridge_slave_1: entered allmulticast mode [ 33.666582][ T3300] bridge_slave_1: entered promiscuous mode [ 33.725628][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.732298][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.759936][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.763459][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.779610][ T3299] hsr_slave_0: entered promiscuous mode [ 33.780597][ T3299] hsr_slave_1: entered promiscuous mode [ 33.784154][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.830413][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.857300][ T3305] hsr_slave_0: entered promiscuous mode [ 33.858402][ T3305] hsr_slave_1: entered promiscuous mode [ 33.858971][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 33.859012][ T3305] Cannot create hsr debugfs directory [ 33.860878][ T3304] team0: Port device team_slave_0 added [ 33.862939][ T3304] team0: Port device team_slave_1 added [ 33.887323][ T3306] team0: Port device team_slave_0 added [ 33.912416][ T3300] team0: Port device team_slave_0 added [ 33.925100][ T3306] team0: Port device team_slave_1 added [ 33.925663][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.925696][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.925785][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.928599][ T3300] team0: Port device team_slave_1 added [ 33.973586][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.973628][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.973718][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.049927][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.049976][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.050062][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.051446][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.051478][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.051569][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.074052][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.074095][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.074251][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.075129][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.075170][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.075258][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.164586][ T3304] hsr_slave_0: entered promiscuous mode [ 34.165668][ T3304] hsr_slave_1: entered promiscuous mode [ 34.166301][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 34.166341][ T3304] Cannot create hsr debugfs directory [ 34.213789][ T3300] hsr_slave_0: entered promiscuous mode [ 34.214678][ T3300] hsr_slave_1: entered promiscuous mode [ 34.216334][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 34.216376][ T3300] Cannot create hsr debugfs directory [ 34.222645][ T3306] hsr_slave_0: entered promiscuous mode [ 34.223649][ T3306] hsr_slave_1: entered promiscuous mode [ 34.224187][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 34.224221][ T3306] Cannot create hsr debugfs directory [ 34.513881][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.522541][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.534140][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.542726][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.543455][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.555010][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.558268][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.568940][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.585600][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.594205][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.606071][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.614791][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.624057][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.632576][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.641916][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.645949][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.657369][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.666704][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.674516][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.683176][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.686257][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.693734][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.707673][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.716310][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.751359][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.760328][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.772771][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.777182][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.790407][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.799596][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.807954][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.816596][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.831040][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.846710][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.855535][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.865105][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.874560][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.884155][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.892644][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.902790][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.911295][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.917027][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.935328][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.935369][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.956472][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.956573][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.977891][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.012629][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.027128][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.035569][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.051618][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.051733][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.056717][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.056810][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.061892][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.098377][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.098427][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.115865][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.115931][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.128834][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.152121][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.167843][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.167884][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.182869][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.182989][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.208290][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.228261][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.228353][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.255438][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.255528][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.327249][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.427216][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.549475][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.594271][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.640826][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.652066][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.774001][ T3305] veth0_vlan: entered promiscuous mode [ 35.783722][ T3305] veth1_vlan: entered promiscuous mode [ 35.802547][ T3299] veth0_vlan: entered promiscuous mode [ 35.815411][ T3299] veth1_vlan: entered promiscuous mode [ 35.823849][ T3306] veth0_vlan: entered promiscuous mode [ 35.837573][ T3305] veth0_macvtap: entered promiscuous mode [ 35.839959][ T3306] veth1_vlan: entered promiscuous mode [ 35.850565][ T3305] veth1_macvtap: entered promiscuous mode [ 35.869161][ T3299] veth0_macvtap: entered promiscuous mode [ 35.881233][ T3299] veth1_macvtap: entered promiscuous mode [ 35.885238][ T3304] veth0_vlan: entered promiscuous mode [ 35.904296][ T3304] veth1_vlan: entered promiscuous mode [ 35.908390][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.911256][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.941909][ T3306] veth0_macvtap: entered promiscuous mode [ 35.950810][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.960129][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.964482][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.965741][ T3306] veth1_macvtap: entered promiscuous mode [ 35.970929][ T3300] veth0_vlan: entered promiscuous mode [ 35.999175][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.009741][ T3304] veth0_macvtap: entered promiscuous mode [ 36.018096][ T3300] veth1_vlan: entered promiscuous mode [ 36.025024][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.028406][ T3304] veth1_macvtap: entered promiscuous mode [ 36.061140][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.077021][ T38] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.077070][ T38] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.077169][ T38] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.077226][ T38] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.118342][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.135521][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.147119][ T3300] veth0_macvtap: entered promiscuous mode [ 36.157144][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.184059][ T3300] veth1_macvtap: entered promiscuous mode [ 36.198534][ T270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.224871][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.247503][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.258074][ T353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.258206][ T353] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.258328][ T353] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.258405][ T353] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.258493][ T353] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.263809][ T353] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.263908][ T353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.264068][ T353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.264182][ T353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.327886][ T3507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 36.328018][ T3507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 36.365138][ T3509] 9pnet_fd: p9_fd_create_tcp (3509): problem connecting socket to 127.0.0.1 [ 36.375350][ T3509] 9pnet_fd: p9_fd_create_tcp (3509): problem connecting socket to 127.0.0.1 [ 36.385090][ T3509] 9pnet_fd: p9_fd_create_tcp (3509): problem connecting socket to 127.0.0.1 [ 36.394810][ T3509] 9pnet_fd: p9_fd_create_tcp (3509): problem connecting socket to 127.0.0.1 [ 36.404491][ T3509] 9pnet_fd: p9_fd_create_tcp (3509): problem connecting socket to 127.0.0.1 [ 36.418392][ T3509] 9pnet_fd: p9_fd_create_tcp (3509): problem connecting socket to 127.0.0.1 [ 36.446035][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 36.446059][ T29] audit: type=1400 audit(1787811587.005:172): avc: denied { setopt } for pid=3502 comm="syz.4.5" lport=262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.477157][ T3503] sit0: entered promiscuous mode [ 36.477309][ T3503] sit0: entered allmulticast mode [ 36.500315][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.500655][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.501085][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.501568][ T29] audit: type=1400 audit(1787811587.065:173): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.501603][ T29] audit: type=1400 audit(1787811587.065:174): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.501703][ T29] audit: type=1400 audit(1787811587.065:175): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.529984][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.611092][ T29] audit: type=1400 audit(1787811587.175:176): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.677299][ T3515] loop3: detected capacity change from 0 to 8192 [ 36.689367][ T29] audit: type=1400 audit(1787811587.255:177): avc: denied { mount } for pid=3514 comm="syz.3.4" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.701919][ T29] audit: type=1400 audit(1787811587.255:178): avc: denied { tracepoint } for pid=3517 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.755968][ T29] audit: type=1400 audit(1787811587.315:179): avc: denied { create } for pid=3521 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.781162][ T29] audit: type=1400 audit(1787811587.345:180): avc: denied { create } for pid=3521 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.781295][ T29] audit: type=1400 audit(1787811587.345:181): avc: denied { write } for pid=3521 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.843495][ T3518] mmap: syz.0.6 (3518) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.996808][ T3515] Zero length message leads to an empty skb [ 37.035305][ T3529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 37.122184][ T3535] tipc: Started in network mode [ 37.122241][ T3535] tipc: Node identity ee0c894d5615, cluster identity 4711 [ 37.122384][ T3535] tipc: Enabled bearer , priority 0 [ 37.281379][ T3535] syzkaller0: MTU too low for tipc bearer [ 37.281423][ T3535] tipc: Disabling bearer [ 37.326226][ T3523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 37.415822][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.416307][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.445858][ T3552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 37.462851][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.475027][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.517536][ T270] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.517592][ T270] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.517648][ T270] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.517691][ T270] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.592758][ T3554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 37.739119][ T3550] syz.1.11 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 37.739182][ T3550] CPU: 0 UID: 0 PID: 3550 Comm: syz.1.11 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.739274][ T3550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.739295][ T3550] Call Trace: [ 37.739356][ T3550] [ 37.739367][ T3550] __dump_stack+0x1d/0x30 [ 37.739454][ T3550] dump_stack_lvl+0x95/0xd0 [ 37.739545][ T3550] dump_stack+0x15/0x1b [ 37.739605][ T3550] dump_header+0x80/0x240 [ 37.739689][ T3550] oom_kill_process+0x294/0x420 [ 37.739755][ T3550] out_of_memory+0x981/0xbc0 [ 37.739919][ T3550] try_charge_memcg+0x624/0xa10 [ 37.740023][ T3550] __obj_cgroup_charge+0x105/0x230 [ 37.740089][ T3550] __memcg_slab_post_alloc_hook+0x4c4/0x8d0 [ 37.740221][ T3550] kmem_cache_alloc_lru_noprof+0x1f4/0x3f0 [ 37.740328][ T3550] ? sock_alloc_inode+0x36/0xf0 [ 37.740400][ T3550] ? sock_alloc_inode+0x36/0xf0 [ 37.740502][ T3550] ? __pfx_sock_alloc_inode+0x10/0x10 [ 37.740610][ T3550] sock_alloc_inode+0x36/0xf0 [ 37.740701][ T3550] alloc_inode+0x40/0x170 [ 37.740802][ T3550] __sock_create+0x121/0x580 [ 37.740874][ T3550] ? __se_sys_futex+0x2f6/0x370 [ 37.740999][ T3550] ? xfd_validate_state+0x45/0xf0 [ 37.741093][ T3550] __sys_socket+0xaf/0x180 [ 37.741171][ T3550] __x64_sys_socket+0x3f/0x50 [ 37.741244][ T3550] x64_sys_call+0x246e/0x2550 [ 37.741328][ T3550] do_syscall_64+0x112/0x360 [ 37.741420][ T3550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.741511][ T3550] RIP: 0033:0x7f0f7e74e0d9 [ 37.741615][ T3550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.741676][ T3550] RSP: 002b:00007f0f7d1a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 37.741770][ T3550] RAX: ffffffffffffffda RBX: 00007f0f7e9d5fa0 RCX: 00007f0f7e74e0d9 [ 37.741814][ T3550] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 37.741936][ T3550] RBP: 00007f0f7e7e5024 R08: 0000000000000000 R09: 0000000000000000 [ 37.741976][ T3550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.742018][ T3550] R13: 00007f0f7e9d6038 R14: 00007f0f7e9d5fa0 R15: 00007ffd3c2b4628 [ 37.742080][ T3550] [ 37.752583][ T3550] memory: usage 0kB, limit 0kB, failcnt 19 [ 37.752637][ T3550] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 37.752697][ T3550] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 37.752737][ T3550] Memory cgroup stats for /syz1/test: [ 37.753254][ T3550] cache 0 [ 37.753277][ T3550] rss 0 [ 37.753298][ T3550] shmem 0 [ 37.753375][ T3550] mapped_file 0 [ 37.753397][ T3550] dirty 0 [ 37.753499][ T3550] writeback 0 [ 37.753527][ T3550] workingset_refault_anon 0 [ 37.753550][ T3550] workingset_refault_file 0 [ 37.753572][ T3550] swap 0 [ 37.753601][ T3550] swapcached 0 [ 37.753622][ T3550] pgpgin 0 [ 37.753643][ T3550] pgpgout 0 [ 37.753657][ T3550] pgfault 0 [ 37.753685][ T3550] pgmajfault 0 [ 37.753706][ T3550] inactive_anon 0 [ 37.753728][ T3550] active_anon 0 [ 37.753743][ T3550] inactive_file 0 [ 37.753830][ T3550] active_file 0 [ 37.753852][ T3550] unevictable 0 [ 37.753880][ T3550] hierarchical_memory_limit 0 [ 37.753903][ T3550] hierarchical_memsw_limit 9223372036854771712 [ 37.753935][ T3550] total_cache 0 [ 37.759215][ T3550] total_rss 0 [ 37.759255][ T3550] total_shmem 0 [ 37.759277][ T3550] total_mapped_file 0 [ 37.759299][ T3550] total_dirty 0 [ 37.759328][ T3550] total_writeback 0 [ 37.759350][ T3550] total_workingset_refault_anon 0 [ 37.759381][ T3550] total_workingset_refault_file 0 [ 37.759435][ T3550] total_swap 0 [ 37.759463][ T3550] total_swapcached 0 [ 37.759485][ T3550] total_pgpgin 0 [ 37.759507][ T3550] total_pgpgout 0 [ 37.759528][ T3550] total_pgfault 0 [ 37.759556][ T3550] total_pgmajfault 0 [ 37.759578][ T3550] total_inactive_anon 0 [ 37.759601][ T3550] total_active_anon 0 [ 37.759630][ T3550] total_inactive_file 0 [ 37.759652][ T3550] total_active_file 0 [ 37.759674][ T3550] total_unevictable 0 [ 37.759779][ T3550] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.11,pid=3549,uid=0 [ 37.760063][ T3550] Memory cgroup out of memory: Killed process 3549 (syz.1.11) total-vm:96296kB, anon-rss:1424kB, file-rss:22568kB, shmem-rss:12kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 37.797088][ T3550] socket: no more sockets [ 37.939281][ T3564] loop2: detected capacity change from 0 to 4096 [ 37.948236][ T3550] syz.1.11 (3550) used greatest stack depth: 11120 bytes left [ 37.999900][ T3564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.120578][ T3560] loop0: detected capacity change from 0 to 512 [ 38.213731][ T3571] loop3: detected capacity change from 0 to 512 [ 38.225301][ T3571] journal_path: Non-blockdev passed as './trace' [ 38.225424][ T3571] EXT4-fs: error: could not find journal device path [ 38.248272][ T3564] netlink: 'syz.2.16': attribute type 1 has an invalid length. [ 38.260415][ T3564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'. [ 38.310054][ T3571] loop3: detected capacity change from 0 to 2048 [ 38.310384][ T3571] ======================================================= [ 38.310384][ T3571] WARNING: The mand mount option has been deprecated and [ 38.310384][ T3571] and is ignored by this kernel. Remove the mand [ 38.310384][ T3571] option from the mount to silence this warning. [ 38.310384][ T3571] ======================================================= [ 38.310478][ T3571] ext4: Unknown parameter 'smackfstransmute' [ 38.388626][ T3564] netlink: 'syz.2.16': attribute type 10 has an invalid length. [ 38.455692][ T3560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.467982][ T3560] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.576425][ T3564] team0: Port device dummy0 added [ 38.633890][ T3564] syz.2.16 (3564) used greatest stack depth: 10624 bytes left [ 38.643441][ T3584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 38.650461][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.705719][ T3585] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.722585][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.722818][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.741463][ T3589] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3589 comm=syz.1.22 [ 38.849965][ T3595] netlink: 164 bytes leftover after parsing attributes in process `syz.0.15'. [ 38.862263][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.892326][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.972278][ T3560] syz.0.15 (3560) used greatest stack depth: 10112 bytes left [ 39.043979][ T3590] tipc: Started in network mode [ 39.044164][ T3590] tipc: Node identity 3a12478097e4, cluster identity 4711 [ 39.044359][ T3590] tipc: Enabled bearer , priority 0 [ 39.047554][ T270] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.047729][ T270] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.047852][ T270] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.047968][ T270] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.078026][ T3594] syzkaller0: MTU too low for tipc bearer [ 39.078106][ T3594] tipc: Disabling bearer [ 39.147444][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.440391][ T3608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 39.471777][ T3589] loop1: detected capacity change from 0 to 512 [ 39.841900][ T3609] syz.0.23 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 39.841949][ T3609] CPU: 0 UID: 0 PID: 3609 Comm: syz.0.23 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.841981][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.842052][ T3609] Call Trace: [ 39.842072][ T3609] [ 39.842082][ T3609] __dump_stack+0x1d/0x30 [ 39.842110][ T3609] dump_stack_lvl+0x95/0xd0 [ 39.842160][ T3609] dump_stack+0x15/0x1b [ 39.842188][ T3609] dump_header+0x80/0x240 [ 39.842218][ T3609] oom_kill_process+0x294/0x420 [ 39.842245][ T3609] out_of_memory+0x981/0xbc0 [ 39.842309][ T3609] try_charge_memcg+0x624/0xa10 [ 39.842352][ T3609] __obj_cgroup_charge+0x105/0x230 [ 39.842399][ T3609] __memcg_slab_post_alloc_hook+0x4c4/0x8d0 [ 39.842432][ T3609] kmem_cache_alloc_lru_noprof+0x1f4/0x3f0 [ 39.842468][ T3609] ? sock_alloc_inode+0x36/0xf0 [ 39.842531][ T3609] ? sock_alloc_inode+0x36/0xf0 [ 39.842579][ T3609] ? __pfx_sock_alloc_inode+0x10/0x10 [ 39.842729][ T3609] sock_alloc_inode+0x36/0xf0 [ 39.842794][ T3609] alloc_inode+0x40/0x170 [ 39.842936][ T3609] __sock_create+0x121/0x580 [ 39.843017][ T3609] __sys_socket+0xaf/0x180 [ 39.843090][ T3609] __x64_sys_socket+0x3f/0x50 [ 39.843202][ T3609] x64_sys_call+0x246e/0x2550 [ 39.843286][ T3609] do_syscall_64+0x112/0x360 [ 39.843371][ T3609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.843447][ T3609] RIP: 0033:0x7f853d09e0d9 [ 39.843529][ T3609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.843591][ T3609] RSP: 002b:00007f853bab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 39.843693][ T3609] RAX: ffffffffffffffda RBX: 00007f853d326180 RCX: 00007f853d09e0d9 [ 39.843737][ T3609] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 39.843780][ T3609] RBP: 00007f853d135024 R08: 0000000000000000 R09: 0000000000000000 [ 39.843822][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.843864][ T3609] R13: 00007f853d326218 R14: 00007f853d326180 R15: 00007fff35fc42b8 [ 39.843944][ T3609] [ 39.843997][ T3609] memory: usage 0kB, limit 0kB, failcnt 19 [ 39.844105][ T3609] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 39.844155][ T3609] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 39.844196][ T3609] Memory cgroup stats for /syz0/test: [ 39.844660][ T3609] cache 0 [ 39.844689][ T3609] rss 0 [ 39.844710][ T3609] shmem 0 [ 39.844731][ T3609] mapped_file 0 [ 39.844747][ T3609] dirty 0 [ 39.844768][ T3609] writeback 0 [ 39.844790][ T3609] workingset_refault_anon 0 [ 39.844811][ T3609] workingset_refault_file 0 [ 39.844834][ T3609] swap 0 [ 39.844883][ T3609] swapcached 0 [ 39.844904][ T3609] pgpgin 0 [ 39.844934][ T3609] pgpgout 0 [ 39.844955][ T3609] pgfault 0 [ 39.844976][ T3609] pgmajfault 0 [ 39.844996][ T3609] inactive_anon 0 [ 39.845018][ T3609] active_anon 0 [ 39.845039][ T3609] inactive_file 0 [ 39.845061][ T3609] active_file 0 [ 39.845089][ T3609] unevictable 0 [ 39.845165][ T3609] hierarchical_memory_limit 0 [ 39.845194][ T3609] hierarchical_memsw_limit 9223372036854771712 [ 39.845218][ T3609] total_cache 0 [ 39.845239][ T3609] total_rss 0 [ 39.845269][ T3609] total_shmem 0 [ 39.845290][ T3609] total_mapped_file 0 [ 39.845312][ T3609] total_dirty 0 [ 39.845333][ T3609] total_writeback 0 [ 39.845385][ T3609] total_workingset_refault_anon 0 [ 39.845487][ T3609] total_workingset_refault_file 0 [ 39.845518][ T3609] total_swap 0 [ 39.845525][ T3609] total_swapcached 0 [ 39.845532][ T3609] total_pgpgin 0 [ 39.845539][ T3609] total_pgpgout 0 [ 39.845546][ T3609] total_pgfault 0 [ 39.845554][ T3609] total_pgmajfault 0 [ 39.845561][ T3609] total_inactive_anon 0 [ 39.845591][ T3609] total_active_anon 0 [ 39.845632][ T3609] total_inactive_file 0 [ 39.845654][ T3609] total_active_file 0 [ 39.845676][ T3609] total_unevictable 0 [ 39.845705][ T3609] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.23,pid=3603,uid=0 [ 39.845936][ T3609] Memory cgroup out of memory: Killed process 3603 (syz.0.23) total-vm:104840kB, anon-rss:1448kB, file-rss:30468kB, shmem-rss:12kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 39.864026][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.864450][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.871738][ T3609] socket: no more sockets [ 39.904638][ T3587] syz.2.21 (3587) used greatest stack depth: 9728 bytes left [ 39.961782][ T3589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.962220][ T3589] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.091317][ T3621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22'. [ 40.213864][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.309125][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.372273][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.483796][ T3631] usb usb8: usbfs: process 3631 (syz.3.31) did not claim interface 0 before use [ 40.572147][ T3643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=3643 comm=syz.0.36 [ 40.606030][ T3646] loop2: detected capacity change from 0 to 1024 [ 40.616465][ T3616] tipc: Enabling of bearer rejected, failed to enable media [ 40.627262][ T38] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.628727][ T400] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.629547][ T353] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.629729][ T353] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.638541][ T3646] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.664739][ T3646] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.37: Invalid block bitmap block 0 in block_group 0 [ 40.664848][ T3646] loop2: lost filesystem error report for type 5 error -117 [ 40.665742][ T3646] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.37: Failed to acquire dquot type 0 [ 40.665816][ T3646] loop2: lost filesystem error report for type 5 error -117 [ 40.670032][ T3646] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.37: Freeing blocks not in datazone - block = 0, count = 4096 [ 40.670174][ T3646] loop2: lost filesystem error report for type 5 error -117 [ 40.670686][ T3646] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.37: Invalid inode bitmap blk 0 in block_group 0 [ 40.670769][ T3646] loop2: lost filesystem error report for type 5 error -117 [ 40.672040][ T3646] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 40.672100][ T3646] loop2: lost filesystem error report for type 5 error -117 [ 40.672356][ T3646] EXT4-fs (loop2): 1 orphan inode deleted [ 40.673307][ T3646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.688110][ T400] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:7: Failed to release dquot type 0 [ 40.740080][ T3634] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET) [ 40.794534][ T3651] sctp: [Deprecated]: syz.0.38 (pid 3651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 40.794534][ T3651] Use struct sctp_sack_info instead [ 40.798199][ T3646] netlink: 'syz.2.37': attribute type 10 has an invalid length. [ 40.854232][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.882996][ T3659] loop2: detected capacity change from 0 to 512 [ 40.890406][ T3659] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 40.904318][ T3659] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.41: bad orphan inode 15 [ 40.904358][ T3659] loop2: lost filesystem error report for type 5 error -117 [ 40.914294][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 40.914322][ C1] EXT4-fs (loop2): initial error at time 1787811599: ext4_orphan_get:1429 [ 40.914352][ C1] EXT4-fs (loop2): last error at time 1787811599: ext4_orphan_get:1429 [ 40.914546][ T3659] ext4_test_bit(bit=14, block=18) = 1 [ 40.914566][ T3659] is_bad_inode(inode)=0 [ 40.914573][ T3659] NEXT_ORPHAN(inode)=1023 [ 40.914581][ T3659] max_ino=32 [ 40.914587][ T3659] i_nlink=0 [ 40.952633][ T3659] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.41: bg 0: block 161: padding at end of block bitmap is not set [ 40.952742][ T3659] loop2: lost filesystem error report for type 5 error -117 [ 40.953164][ T3659] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 40.953225][ T3659] loop2: lost filesystem error report for type 5 error -117 [ 40.957807][ T3659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.965357][ T3659] ext2 filesystem being mounted at /10/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 41.022027][ T3666] loop1: detected capacity change from 0 to 128 [ 41.031707][ T3666] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.039795][ T3666] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.064862][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.210615][ T3671] loop4: detected capacity change from 0 to 1024 [ 41.219020][ T3671] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.230956][ T3671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.231119][ T3671] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.236551][ T3671] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.40: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 41.236756][ T3671] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 41.237322][ T3671] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.40: couldn't read orphan inode 11 (err -117) [ 41.237733][ T3671] loop4: lost filesystem error report for type 5 error -117 [ 41.240967][ T3671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.270136][ T38] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.363295][ T3673] tipc: Started in network mode [ 41.363336][ T3673] tipc: Node identity 4a8259b1b2bf, cluster identity 4711 [ 41.363447][ T3673] tipc: Enabled bearer , priority 0 [ 41.388102][ T3670] tipc: Disabling bearer [ 41.458867][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 41.458939][ T29] audit: type=1400 audit(1787811600.028:288): avc: denied { mount } for pid=3682 comm="syz.2.46" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 41.461484][ T3683] capability: warning: `syz.2.46' uses 32-bit capabilities (legacy support in use) [ 41.465308][ T29] audit: type=1400 audit(1787811600.028:289): avc: denied { setopt } for pid=3682 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 41.486593][ T29] audit: type=1400 audit(1787811600.048:290): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 41.530961][ T29] audit: type=1400 audit(1787811600.098:291): avc: denied { create } for pid=3685 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.533385][ T29] audit: type=1400 audit(1787811600.098:292): avc: denied { connect } for pid=3685 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.540633][ T29] audit: type=1400 audit(1787811600.108:293): avc: denied { search } for pid=3685 comm="syz.2.47" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 41.540796][ T29] audit: type=1400 audit(1787811600.108:294): avc: denied { read write } for pid=3685 comm="syz.2.47" name="uprobe_events" dev="tracefs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 41.540962][ T29] audit: type=1400 audit(1787811600.108:295): avc: denied { open } for pid=3685 comm="syz.2.47" path="/13/trace/uprobe_events" dev="tracefs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 41.565572][ T3684] __nla_validate_parse: 2 callbacks suppressed [ 41.565640][ T3684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 41.565828][ T3684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.45'. [ 41.599683][ T3684] xt_CT: No such helper "pptp" [ 41.690975][ T3684] loop1: detected capacity change from 0 to 764 [ 41.701686][ T3689] netlink: 'syz.2.48': attribute type 5 has an invalid length. [ 41.702753][ T3684] iso9660: Bad value for 'check' [ 41.770585][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.783539][ T29] audit: type=1400 audit(1787811600.348:296): avc: denied { write } for pid=3690 comm="syz.3.50" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.783591][ T29] audit: type=1400 audit(1787811600.348:297): avc: denied { open } for pid=3690 comm="syz.3.50" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.853970][ T3697] loop4: detected capacity change from 0 to 256 [ 41.899624][ T3693] usb usb8: usbfs: process 3693 (syz.0.49) did not claim interface 0 before use [ 42.005031][ T3699] tipc: Enabled bearer , priority 0 [ 42.056947][ T3702] FAULT_INJECTION: forcing a failure. [ 42.056947][ T3702] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.057023][ T3702] CPU: 1 UID: 0 PID: 3702 Comm: syz.0.53 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.057110][ T3702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.057123][ T3702] Call Trace: [ 42.057129][ T3702] [ 42.057137][ T3702] __dump_stack+0x1d/0x30 [ 42.057175][ T3702] dump_stack_lvl+0x95/0xd0 [ 42.057202][ T3702] dump_stack+0x15/0x1b [ 42.057257][ T3702] should_fail_ex+0x262/0x280 [ 42.057352][ T3702] should_fail+0xb/0x20 [ 42.057459][ T3702] should_fail_usercopy+0x1a/0x20 [ 42.057483][ T3702] _copy_from_user+0x1c/0xb0 [ 42.057507][ T3702] ___sys_sendmsg+0xc1/0x1e0 [ 42.057554][ T3702] __x64_sys_sendmsg+0xd4/0x160 [ 42.057663][ T3702] x64_sys_call+0x22ab/0x2550 [ 42.057697][ T3702] do_syscall_64+0x112/0x360 [ 42.057805][ T3702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.057942][ T3702] RIP: 0033:0x7f853d09e0d9 [ 42.058038][ T3702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.058099][ T3702] RSP: 002b:00007f853baf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.058200][ T3702] RAX: ffffffffffffffda RBX: 00007f853d325fa0 RCX: 00007f853d09e0d9 [ 42.058252][ T3702] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 42.058295][ T3702] RBP: 00007f853baf7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.058341][ T3702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.058429][ T3702] R13: 00007f853d326038 R14: 00007f853d325fa0 R15: 00007fff35fc42b8 [ 42.058492][ T3702] [ 42.131125][ T3694] tipc: Disabling bearer [ 42.268049][ T3707] loop6: detected capacity change from 0 to 7 [ 42.285380][ T3707] lo: entered allmulticast mode [ 42.425618][ T3706] lo: left allmulticast mode [ 42.635887][ T3737] netlink: 'syz.0.63': attribute type 4 has an invalid length. [ 42.635916][ T3737] netlink: 'syz.0.63': attribute type 11 has an invalid length. [ 42.635937][ T3737] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.63'. [ 42.852526][ T3739] loop3: detected capacity change from 0 to 512 [ 42.872207][ T3746] loop0: detected capacity change from 0 to 512 [ 42.888495][ T3746] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.898784][ T3746] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 42.900550][ T3746] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.67: inode #15: comm syz.0.67: iget: illegal inode # [ 42.900586][ T3746] loop0: lost filesystem error report for type 5 error -117 [ 42.907852][ T3746] EXT4-fs (loop0): Remounting filesystem read-only [ 42.908828][ T3746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.911249][ T3740] loop4: detected capacity change from 0 to 128 [ 42.931808][ T3740] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.932031][ T3740] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.014846][ T3739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.020167][ T3739] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.046185][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.085385][ T3739] hub 8-0:1.0: USB hub found [ 43.088679][ T3739] hub 8-0:1.0: 8 ports detected [ 43.140987][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.175814][ T3757] loop2: detected capacity change from 0 to 8192 [ 43.255950][ T3765] loop3: detected capacity change from 0 to 256 [ 43.275324][ T3765] bonding: unable to delete non-existent b [ 43.425211][ T3773] loop3: detected capacity change from 0 to 512 [ 43.425515][ T3773] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 43.441313][ T3772] loop1: detected capacity change from 0 to 512 [ 43.444991][ T3772] EXT4-fs: inline encryption not supported [ 43.453000][ T3772] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.453052][ T3772] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.458474][ T3772] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.462475][ T3772] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.76: inode #15: comm syz.1.76: iget: illegal inode # [ 43.463430][ T3772] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.76: couldn't read orphan inode 15 (err -117) [ 43.467420][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 43.467482][ C1] EXT4-fs (loop1): initial error at time 1787811602: ext4_orphan_get:1403 [ 43.467555][ C1] EXT4-fs (loop1): last error at time 1787811602: ext4_orphan_get:1408 [ 43.468220][ T3772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.576076][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.615209][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.841661][ T3786] tipc: Enabled bearer , priority 0 [ 43.849608][ T3775] tipc: Disabling bearer [ 43.906474][ T3793] FAULT_INJECTION: forcing a failure. [ 43.906474][ T3793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.906514][ T3793] CPU: 0 UID: 0 PID: 3793 Comm: syz.3.82 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.906546][ T3793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.906571][ T3793] Call Trace: [ 43.906594][ T3793] [ 43.906602][ T3793] __dump_stack+0x1d/0x30 [ 43.906648][ T3793] dump_stack_lvl+0x95/0xd0 [ 43.906679][ T3793] dump_stack+0x15/0x1b [ 43.906777][ T3793] should_fail_ex+0x262/0x280 [ 43.906818][ T3793] should_fail+0xb/0x20 [ 43.906850][ T3793] should_fail_usercopy+0x1a/0x20 [ 43.906904][ T3793] _copy_from_user+0x1c/0xb0 [ 43.906937][ T3793] ___sys_sendmsg+0xc1/0x1e0 [ 43.906984][ T3793] __x64_sys_sendmsg+0xd4/0x160 [ 43.907027][ T3793] x64_sys_call+0x22ab/0x2550 [ 43.907107][ T3793] do_syscall_64+0x112/0x360 [ 43.907147][ T3793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.907228][ T3793] RIP: 0033:0x7f622943e0d9 [ 43.907244][ T3793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.907275][ T3793] RSP: 002b:00007f6227e97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.907301][ T3793] RAX: ffffffffffffffda RBX: 00007f62296c5fa0 RCX: 00007f622943e0d9 [ 43.907385][ T3793] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 43.907401][ T3793] RBP: 00007f6227e97090 R08: 0000000000000000 R09: 0000000000000000 [ 43.907429][ T3793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.907445][ T3793] R13: 00007f62296c6038 R14: 00007f62296c5fa0 R15: 00007ffcb491f578 [ 43.907537][ T3793] [ 44.175433][ T3804] rock: directory entry would overflow storage [ 44.175450][ T3804] rock: sig=0x5252, size=5, remaining=3 [ 44.234726][ T3804] syzkaller0: entered promiscuous mode [ 44.234758][ T3804] syzkaller0: entered allmulticast mode [ 44.753403][ T3818] EXT4-fs: Ignoring removed orlov option [ 44.782622][ T3818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.947403][ T3818] netlink: 100 bytes leftover after parsing attributes in process `syz.1.92'. [ 45.080503][ T3826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 45.141717][ T3825] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.141904][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.252965][ T3825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.263517][ T3825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.277928][ T3827] socket: no more sockets [ 45.302290][ T3827] syz.2.93: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 45.302418][ T3827] CPU: 0 UID: 0 PID: 3827 Comm: syz.2.93 Not tainted syzkaller #0 PREEMPT(lazy) [ 45.302450][ T3827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.302466][ T3827] Call Trace: [ 45.302473][ T3827] [ 45.302483][ T3827] __dump_stack+0x1d/0x30 [ 45.302564][ T3827] dump_stack_lvl+0x95/0xd0 [ 45.302595][ T3827] dump_stack+0x15/0x1b [ 45.302686][ T3827] warn_alloc+0x146/0x1c0 [ 45.302721][ T3827] ? alloc_pages_mpol+0xdf/0x1d0 [ 45.302749][ T3827] ? alloc_pages_noprof+0xbb/0x140 [ 45.302776][ T3827] __vmalloc_node_range_noprof+0xdcf/0x1040 [ 45.302859][ T3827] ? copy_fpstate_to_sigframe+0xe5/0x7b0 [ 45.302952][ T3827] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 45.302986][ T3827] __vmalloc_noprof+0xa4/0xf0 [ 45.303094][ T3827] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 45.303147][ T3827] bpf_prog_alloc_no_stats+0x47/0x390 [ 45.303242][ T3827] ? bpf_prog_alloc+0x2a/0x150 [ 45.303269][ T3827] bpf_prog_alloc+0x3c/0x150 [ 45.303332][ T3827] bpf_prog_create_from_user+0x80/0x260 [ 45.303369][ T3827] ? __pfx_seccomp_check_filter+0x10/0x10 [ 45.303411][ T3827] do_seccomp+0x5ef/0xa40 [ 45.303454][ T3827] __x64_sys_seccomp+0x40/0x50 [ 45.303507][ T3827] x64_sys_call+0x3f0/0x2550 [ 45.303541][ T3827] do_syscall_64+0x112/0x360 [ 45.303571][ T3827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.303601][ T3827] RIP: 0033:0x7f6182e5e0d9 [ 45.303638][ T3827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.303662][ T3827] RSP: 002b:00007f6181875028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 45.303686][ T3827] RAX: ffffffffffffffda RBX: 00007f61830e6180 RCX: 00007f6182e5e0d9 [ 45.303811][ T3827] RDX: 0000200000000400 RSI: 0000000000000000 RDI: 0000000000000001 [ 45.303829][ T3827] RBP: 00007f6182ef5024 R08: 0000000000000000 R09: 0000000000000000 [ 45.303920][ T3827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.303937][ T3827] R13: 00007f61830e6218 R14: 00007f61830e6180 R15: 00007fff8e712038 [ 45.303964][ T3827] [ 45.307531][ T3827] Mem-Info: [ 45.307568][ T3827] active_anon:6344 inactive_anon:0 isolated_anon:0 [ 45.307568][ T3827] active_file:0 inactive_file:11405 isolated_file:0 [ 45.307568][ T3827] unevictable:0 dirty:1693 writeback:0 [ 45.307568][ T3827] slab_reclaimable:3143 slab_unreclaimable:15267 [ 45.307568][ T3827] mapped:30521 shmem:498 pagetables:1083 [ 45.307568][ T3827] sec_pagetables:0 bounce:0 [ 45.307568][ T3827] kernel_misc_reclaimable:0 [ 45.307568][ T3827] free:1896187 free_pcp:9318 free_cma:0 [ 45.307809][ T3827] Node 0 active_anon:25376kB inactive_anon:0kB active_file:0kB inactive_file:45620kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122084kB dirty:6772kB writeback:0kB shmem:1992kB kernel_stack:3488kB pagetables:4332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 45.308004][ T3827] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 45.308258][ T3827] lowmem_reserve[]: 0 2877 7856 7856 [ 45.308353][ T3827] Node 0 DMA32 free:2943448kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946972kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 45.308711][ T3827] lowmem_reserve[]: 0 0 4978 4978 [ 45.308804][ T3827] Node 0 Normal free:4625940kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25376kB inactive_anon:0kB active_file:0kB inactive_file:45620kB unevictable:0kB writepending:6772kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:33748kB local_pcp:17176kB free_cma:0kB [ 45.315662][ T3827] lowmem_reserve[]: 0 0 0 0 [ 45.315759][ T3827] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 45.316302][ T3827] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943448kB [ 45.318775][ T3827] Node 0 Normal: 318*4kB (ME) 124*8kB (ME) 61*16kB (UME) 26*32kB (M) 17*64kB (UME) 15*128kB (UME) 6*256kB (ME) 8*512kB (UME) 3*1024kB (U) 5*2048kB (UME) 1123*4096kB (UM) = 4625832kB [ 45.319359][ T3827] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 45.319420][ T3827] 11783 total pagecache pages [ 45.319442][ T3827] 0 pages in swap cache [ 45.319463][ T3827] Free swap = 124996kB [ 45.319478][ T3827] Total swap = 124996kB [ 45.319501][ T3827] 2097051 pages RAM [ 45.319522][ T3827] 0 pages HighMem/MovableOnly [ 45.319542][ T3827] 81911 pages reserved [ 45.511521][ T3798] EXT4-fs (loop0): 1 truncate cleaned up [ 45.513484][ T3798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.674359][ T3835] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.85: bg 0: block 465: padding at end of block bitmap is not set [ 45.679685][ T3835] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 45.679775][ T3835] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.679775][ T3835] [ 45.679819][ T3835] EXT4-fs (loop0): Total free blocks count 0 [ 45.679901][ T3835] EXT4-fs (loop0): Free/Dirty block details [ 45.679940][ T3835] EXT4-fs (loop0): free_blocks=0 [ 45.679981][ T3835] EXT4-fs (loop0): dirty_blocks=2 [ 45.680023][ T3835] EXT4-fs (loop0): Block reservation details [ 45.680063][ T3835] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 45.871816][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.877835][ T408] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.878050][ T408] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.878241][ T408] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.878397][ T408] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.017968][ T3839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 46.043960][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.070509][ T3837] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 46.092342][ T3843] FAULT_INJECTION: forcing a failure. [ 46.092342][ T3843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.092381][ T3843] CPU: 1 UID: 0 PID: 3843 Comm: syz.0.99 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.092449][ T3843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.092463][ T3843] Call Trace: [ 46.092471][ T3843] [ 46.092481][ T3843] __dump_stack+0x1d/0x30 [ 46.092512][ T3843] dump_stack_lvl+0x95/0xd0 [ 46.092574][ T3843] dump_stack+0x15/0x1b [ 46.092600][ T3843] should_fail_ex+0x262/0x280 [ 46.092646][ T3843] should_fail+0xb/0x20 [ 46.092705][ T3843] should_fail_usercopy+0x1a/0x20 [ 46.092728][ T3843] _copy_from_user+0x1c/0xb0 [ 46.092757][ T3843] ___sys_sendmsg+0xc1/0x1e0 [ 46.092804][ T3843] __x64_sys_sendmsg+0xd4/0x160 [ 46.092879][ T3843] x64_sys_call+0x22ab/0x2550 [ 46.092929][ T3843] do_syscall_64+0x112/0x360 [ 46.092966][ T3843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.092989][ T3843] RIP: 0033:0x7f853d09e0d9 [ 46.093005][ T3843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.093024][ T3843] RSP: 002b:00007f853baf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.093044][ T3843] RAX: ffffffffffffffda RBX: 00007f853d325fa0 RCX: 00007f853d09e0d9 [ 46.093091][ T3843] RDX: 00000000040040c4 RSI: 0000200000000200 RDI: 0000000000000003 [ 46.093165][ T3843] RBP: 00007f853baf7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.093178][ T3843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.093191][ T3843] R13: 00007f853d326038 R14: 00007f853d325fa0 R15: 00007fff35fc42b8 [ 46.093273][ T3843] [ 46.271021][ T3847] FAULT_INJECTION: forcing a failure. [ 46.271021][ T3847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.271070][ T3847] CPU: 1 UID: 0 PID: 3847 Comm: syz.2.101 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.271095][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.271110][ T3847] Call Trace: [ 46.271118][ T3847] [ 46.271128][ T3847] __dump_stack+0x1d/0x30 [ 46.271236][ T3847] dump_stack_lvl+0x95/0xd0 [ 46.271258][ T3847] dump_stack+0x15/0x1b [ 46.271279][ T3847] should_fail_ex+0x262/0x280 [ 46.271348][ T3847] should_fail+0xb/0x20 [ 46.271438][ T3847] should_fail_usercopy+0x1a/0x20 [ 46.271541][ T3847] strncpy_from_user+0x27/0x250 [ 46.271593][ T3847] strncpy_from_bpfptr+0x43/0x50 [ 46.271632][ T3847] bpf_prog_load+0x8e3/0x1060 [ 46.271663][ T3847] ? avc_has_perm_noaudit+0xa3/0x120 [ 46.271707][ T3847] ? vfs_write+0x800/0x9a0 [ 46.271781][ T3847] __sys_bpf+0xbae/0xc30 [ 46.271811][ T3847] ? vfs_write+0x800/0x9a0 [ 46.271843][ T3847] ? vfs_write+0x800/0x9a0 [ 46.271929][ T3847] __x64_sys_bpf+0x69/0x80 [ 46.271956][ T3847] x64_sys_call+0xf26/0x2550 [ 46.271994][ T3847] do_syscall_64+0x112/0x360 [ 46.272027][ T3847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.272131][ T3847] RIP: 0033:0x7f6182e5e0d9 [ 46.272152][ T3847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.272175][ T3847] RSP: 002b:00007f61818b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.272267][ T3847] RAX: ffffffffffffffda RBX: 00007f61830e5fa0 RCX: 00007f6182e5e0d9 [ 46.272285][ T3847] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 46.272303][ T3847] RBP: 00007f61818b7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.272327][ T3847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.272342][ T3847] R13: 00007f61830e6038 R14: 00007f61830e5fa0 R15: 00007fff8e712038 [ 46.272366][ T3847] [ 46.572501][ T3862] FAULT_INJECTION: forcing a failure. [ 46.572501][ T3862] name failslab, interval 1, probability 0, space 0, times 0 [ 46.572604][ T3862] CPU: 0 UID: 0 PID: 3862 Comm: syz.0.108 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.572633][ T3862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.572646][ T3862] Call Trace: [ 46.572653][ T3862] [ 46.572660][ T3862] __dump_stack+0x1d/0x30 [ 46.572686][ T3862] dump_stack_lvl+0x95/0xd0 [ 46.572732][ T3862] dump_stack+0x15/0x1b [ 46.572759][ T3862] should_fail_ex+0x262/0x280 [ 46.572853][ T3862] ? security_inode_alloc+0x37/0x100 [ 46.572875][ T3862] should_failslab+0x8c/0xb0 [ 46.572985][ T3862] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 46.573044][ T3862] ? security_inode_alloc+0x37/0x100 [ 46.573071][ T3862] security_inode_alloc+0x37/0x100 [ 46.573092][ T3862] inode_init_always_gfp+0x495/0x4e0 [ 46.573130][ T3862] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 46.573186][ T3862] alloc_inode+0x58/0x170 [ 46.573295][ T3862] new_inode+0x1d/0xe0 [ 46.573318][ T3862] __debugfs_create_file+0x97/0x2b0 [ 46.573365][ T3862] debugfs_create_file_full+0x3f/0x60 [ 46.573431][ T3862] ? __pfx_geneve_setup+0x10/0x10 [ 46.573461][ T3862] ref_tracker_dir_debugfs+0x10e/0x220 [ 46.573690][ T3862] alloc_netdev_mqs+0x1a9/0xa90 [ 46.573848][ T3862] rtnl_create_link+0x239/0x720 [ 46.574029][ T3862] rtnl_newlink_create+0x17a/0x4a0 [ 46.574103][ T3862] ? security_capable+0x7b/0x90 [ 46.574207][ T3862] ? netlink_ns_capable+0x86/0xa0 [ 46.574325][ T3862] rtnl_newlink+0x1255/0x1510 [ 46.574427][ T3862] ? try_charge_memcg+0x208/0xa10 [ 46.574502][ T3862] ? __rcu_read_unlock+0x4e/0x70 [ 46.574602][ T3862] ? avc_has_perm_noaudit+0xa3/0x120 [ 46.574746][ T3862] ? cred_has_capability+0x224/0x2a0 [ 46.574869][ T3862] ? selinux_capable+0x31/0x40 [ 46.575024][ T3862] ? security_capable+0x7b/0x90 [ 46.575175][ T3862] ? ns_capable+0x80/0xb0 [ 46.575238][ T3862] ? __pfx_rtnl_newlink+0x10/0x10 [ 46.575294][ T3862] rtnetlink_rcv_msg+0x64b/0x720 [ 46.575375][ T3862] netlink_rcv_skb+0x11e/0x220 [ 46.575469][ T3862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 46.575551][ T3862] rtnetlink_rcv+0x1c/0x30 [ 46.575613][ T3862] netlink_unicast+0x5a9/0x680 [ 46.575683][ T3862] netlink_sendmsg+0x5be/0x6f0 [ 46.575833][ T3862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.575994][ T3862] ____sys_sendmsg+0x532/0x580 [ 46.576098][ T3862] ___sys_sendmsg+0x195/0x1e0 [ 46.576305][ T3862] __x64_sys_sendmsg+0xd4/0x160 [ 46.576487][ T3862] x64_sys_call+0x22ab/0x2550 [ 46.576574][ T3862] do_syscall_64+0x112/0x360 [ 46.576663][ T3862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.576766][ T3862] RIP: 0033:0x7f853d09e0d9 [ 46.576828][ T3862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.576890][ T3862] RSP: 002b:00007f853baf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.576953][ T3862] RAX: ffffffffffffffda RBX: 00007f853d325fa0 RCX: 00007f853d09e0d9 [ 46.576995][ T3862] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 46.577037][ T3862] RBP: 00007f853baf7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.577146][ T3862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.577187][ T3862] R13: 00007f853d326038 R14: 00007f853d325fa0 R15: 00007fff35fc42b8 [ 46.577242][ T3862] [ 46.607196][ T3862] debugfs: out of free dentries, can not create file 'netdev@ffff88811b4665e0' [ 46.629878][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 46.629974][ T29] audit: type=1326 audit(1787811605.188:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6182e5e0d9 code=0x7ffc0000 [ 46.630008][ T29] audit: type=1326 audit(1787811605.188:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6182e5e0d9 code=0x7ffc0000 [ 46.630079][ T29] audit: type=1326 audit(1787811605.188:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6182e5e0d9 code=0x7ffc0000 [ 46.630114][ T29] audit: type=1326 audit(1787811605.188:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6182e5e0d9 code=0x7ffc0000 [ 46.686847][ T29] audit: type=1326 audit(1787811605.248:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6182e1e90e code=0x7ffc0000 [ 46.686892][ T29] audit: type=1326 audit(1787811605.248:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6182e1e90e code=0x7ffc0000 [ 46.692150][ T29] audit: type=1326 audit(1787811605.248:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6182e1e90e code=0x7ffc0000 [ 46.699391][ T29] audit: type=1326 audit(1787811605.258:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6182e1e90e code=0x7ffc0000 [ 46.699426][ T29] audit: type=1326 audit(1787811605.258:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6182e1e90e code=0x7ffc0000 [ 46.709375][ T29] audit: type=1326 audit(1787811605.268:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.106" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6182e1e90e code=0x7ffc0000 [ 46.782687][ T3867] netlink: 188 bytes leftover after parsing attributes in process `syz.0.109'. [ 46.978842][ T3863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 47.007453][ T3872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 47.210940][ T3863] bridge_slave_1 (unregistering): left allmulticast mode [ 47.210981][ T3863] bridge_slave_1 (unregistering): left promiscuous mode [ 47.211024][ T3863] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.247074][ T3872] socket: no more sockets [ 47.307980][ T3881] No such timeout policy "syz1" [ 47.346216][ T3885] FAULT_INJECTION: forcing a failure. [ 47.346216][ T3885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.346274][ T3885] CPU: 1 UID: 0 PID: 3885 Comm: syz.2.116 Not tainted syzkaller #0 PREEMPT(lazy) [ 47.346330][ T3885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.346412][ T3885] Call Trace: [ 47.346439][ T3885] [ 47.346473][ T3885] __dump_stack+0x1d/0x30 [ 47.346557][ T3885] dump_stack_lvl+0x95/0xd0 [ 47.346629][ T3885] dump_stack+0x15/0x1b [ 47.346692][ T3885] should_fail_ex+0x262/0x280 [ 47.346820][ T3885] should_fail+0xb/0x20 [ 47.346921][ T3885] should_fail_usercopy+0x1a/0x20 [ 47.346986][ T3885] _copy_from_iter+0xcc/0xe70 [ 47.347107][ T3885] ? __alloc_skb+0x516/0x6f0 [ 47.347188][ T3885] ? __alloc_skb+0x209/0x6f0 [ 47.347229][ T3885] netlink_sendmsg+0x4a4/0x6f0 [ 47.347339][ T3885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.347482][ T3885] ____sys_sendmsg+0x532/0x580 [ 47.347651][ T3885] ___sys_sendmsg+0x195/0x1e0 [ 47.347783][ T3885] __x64_sys_sendmsg+0xd4/0x160 [ 47.347951][ T3885] x64_sys_call+0x22ab/0x2550 [ 47.348042][ T3885] do_syscall_64+0x112/0x360 [ 47.348132][ T3885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.348205][ T3885] RIP: 0033:0x7f6182e5e0d9 [ 47.348274][ T3885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.348379][ T3885] RSP: 002b:00007f61818b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.348447][ T3885] RAX: ffffffffffffffda RBX: 00007f61830e5fa0 RCX: 00007f6182e5e0d9 [ 47.348489][ T3885] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 47.348592][ T3885] RBP: 00007f61818b7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.348634][ T3885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.348676][ T3885] R13: 00007f61830e6038 R14: 00007f61830e5fa0 R15: 00007fff8e712038 [ 47.348732][ T3885] [ 47.419049][ T3887] set_capacity_and_notify: 5 callbacks suppressed [ 47.419100][ T3887] loop2: detected capacity change from 0 to 128 [ 47.423508][ T3887] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.540660][ T3891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.119'. [ 47.540690][ T3891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.119'. [ 47.677293][ T3897] loop3: detected capacity change from 0 to 512 [ 47.679686][ T3897] journal_path: Non-blockdev passed as './trace' [ 47.679715][ T3897] EXT4-fs: error: could not find journal device path [ 47.726838][ T3897] loop3: detected capacity change from 0 to 2048 [ 47.732325][ T3897] ext4: Unknown parameter 'smackfstransmute' [ 47.778951][ T3901] IPVS: Error connecting to the multicast addr [ 47.924370][ T3910] netlink: 14 bytes leftover after parsing attributes in process `syz.3.127'. [ 47.924438][ T3910] openvswitch: netlink: Message has 6 unknown bytes. [ 48.002912][ T3915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.129'. [ 48.122945][ T3917] netlink: 'syz.3.130': attribute type 1 has an invalid length. [ 48.122992][ T3917] netlink: 'syz.3.130': attribute type 3 has an invalid length. [ 48.123009][ T3917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.130'. [ 48.139251][ T3917] pim6reg1: entered promiscuous mode [ 48.139280][ T3917] pim6reg1: entered allmulticast mode [ 48.140549][ T3917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3917 comm=syz.3.130 [ 48.296254][ T3915] loop2: detected capacity change from 0 to 1024 [ 48.336014][ T3915] EXT4-fs: Ignoring removed bh option [ 48.354555][ T3915] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 48.461190][ T3931] process 'syz.3.132' launched './file1' with NULL argv: empty string added [ 48.479506][ T3915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.482451][ T3915] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.539902][ T3934] netlink: 76 bytes leftover after parsing attributes in process `syz.4.133'. [ 48.596554][ T3915] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 48.619924][ T3936] netlink: 56 bytes leftover after parsing attributes in process `syz.3.134'. [ 48.655372][ T3915] loop2: detected capacity change from 0 to 128 [ 48.880992][ T3949] loop2: detected capacity change from 0 to 512 [ 48.892564][ T3949] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.903329][ T3949] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 48.914618][ T3949] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.139: inode #15: comm syz.2.139: iget: illegal inode # [ 48.914657][ T3949] fserror_report: 2 callbacks suppressed [ 48.914677][ T3949] loop2: lost filesystem error report for type 5 error -117 [ 48.927265][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 48.927293][ C1] EXT4-fs (loop2): initial error at time 1787811607: ext4_orphan_get:1403 [ 48.927426][ C1] EXT4-fs (loop2): last error at time 1787811607: ext4_orphan_get:1403 [ 48.964314][ T3949] EXT4-fs (loop2): Remounting filesystem read-only [ 48.964814][ T3949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.002182][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.054078][ T3952] FAULT_INJECTION: forcing a failure. [ 49.054078][ T3952] name failslab, interval 1, probability 0, space 0, times 0 [ 49.054124][ T3952] CPU: 0 UID: 0 PID: 3952 Comm: syz.2.140 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.054155][ T3952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.054172][ T3952] Call Trace: [ 49.054180][ T3952] [ 49.054189][ T3952] __dump_stack+0x1d/0x30 [ 49.054224][ T3952] dump_stack_lvl+0x95/0xd0 [ 49.054342][ T3952] dump_stack+0x15/0x1b [ 49.054387][ T3952] should_fail_ex+0x262/0x280 [ 49.054513][ T3952] ? xfrm_policy_alloc+0x62/0x1b0 [ 49.054609][ T3952] should_failslab+0x8c/0xb0 [ 49.054850][ T3952] __kmalloc_cache_noprof+0x7a/0x400 [ 49.055012][ T3952] ? xfrm_policy_alloc+0x62/0x1b0 [ 49.055103][ T3952] xfrm_policy_alloc+0x62/0x1b0 [ 49.055169][ T3952] xfrm_policy_construct+0x2f/0x320 [ 49.055284][ T3952] xfrm_add_policy+0x155/0x390 [ 49.055362][ T3952] xfrm_user_rcv_msg+0x4e9/0x970 [ 49.055466][ T3952] ? __rcu_read_unlock+0x4e/0x70 [ 49.055655][ T3952] netlink_rcv_skb+0x11e/0x220 [ 49.055732][ T3952] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 49.055844][ T3952] xfrm_netlink_rcv+0x48/0x60 [ 49.055918][ T3952] netlink_unicast+0x5a9/0x680 [ 49.055984][ T3952] netlink_sendmsg+0x5be/0x6f0 [ 49.056220][ T3952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.056312][ T3952] ____sys_sendmsg+0x532/0x580 [ 49.056422][ T3952] ___sys_sendmsg+0x195/0x1e0 [ 49.056584][ T3952] __x64_sys_sendmsg+0xd4/0x160 [ 49.056737][ T3952] x64_sys_call+0x22ab/0x2550 [ 49.056829][ T3952] do_syscall_64+0x112/0x360 [ 49.056923][ T3952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.056991][ T3952] RIP: 0033:0x7f6182e5e0d9 [ 49.057045][ T3952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.057160][ T3952] RSP: 002b:00007f61818b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.057189][ T3952] RAX: ffffffffffffffda RBX: 00007f61830e5fa0 RCX: 00007f6182e5e0d9 [ 49.057204][ T3952] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 49.057219][ T3952] RBP: 00007f61818b7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.057283][ T3952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.057332][ T3952] R13: 00007f61830e6038 R14: 00007f61830e5fa0 R15: 00007fff8e712038 [ 49.057403][ T3952] [ 49.531269][ T3967] FAULT_INJECTION: forcing a failure. [ 49.531269][ T3967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.531314][ T3967] CPU: 1 UID: 0 PID: 3967 Comm: syz.4.146 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.531346][ T3967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.531364][ T3967] Call Trace: [ 49.531373][ T3967] [ 49.531383][ T3967] __dump_stack+0x1d/0x30 [ 49.531492][ T3967] dump_stack_lvl+0x95/0xd0 [ 49.531516][ T3967] dump_stack+0x15/0x1b [ 49.531536][ T3967] should_fail_ex+0x262/0x280 [ 49.531673][ T3967] should_fail+0xb/0x20 [ 49.531771][ T3967] should_fail_usercopy+0x1a/0x20 [ 49.531793][ T3967] _copy_from_user+0x1c/0xb0 [ 49.531817][ T3967] ___sys_sendmsg+0xc1/0x1e0 [ 49.531872][ T3967] __x64_sys_sendmsg+0xd4/0x160 [ 49.531985][ T3967] x64_sys_call+0x22ab/0x2550 [ 49.532020][ T3967] do_syscall_64+0x112/0x360 [ 49.532094][ T3967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.532138][ T3967] RIP: 0033:0x7fde3474e0d9 [ 49.532160][ T3967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.532260][ T3967] RSP: 002b:00007fde331a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.532288][ T3967] RAX: ffffffffffffffda RBX: 00007fde349d5fa0 RCX: 00007fde3474e0d9 [ 49.532388][ T3967] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 49.532406][ T3967] RBP: 00007fde331a7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.532424][ T3967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.532441][ T3967] R13: 00007fde349d6038 R14: 00007fde349d5fa0 R15: 00007ffd8988c8e8 [ 49.532467][ T3967] [ 49.834794][ T3977] loop3: detected capacity change from 0 to 2048 [ 49.835209][ T3977] EXT4-fs: Ignoring removed nobh option [ 49.835410][ T3977] EXT4-fs: Ignoring removed i_version option [ 49.835560][ T3977] EXT4-fs: Ignoring removed nobh option [ 49.860809][ T3977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 49.897079][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 49.982884][ T4008] FAULT_INJECTION: forcing a failure. [ 49.982884][ T4008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.982927][ T4008] CPU: 1 UID: 0 PID: 4008 Comm: syz.4.161 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.982954][ T4008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.983029][ T4008] Call Trace: [ 49.983038][ T4008] [ 49.983047][ T4008] __dump_stack+0x1d/0x30 [ 49.983078][ T4008] dump_stack_lvl+0x95/0xd0 [ 49.983178][ T4008] dump_stack+0x15/0x1b [ 49.983202][ T4008] should_fail_ex+0x262/0x280 [ 49.983241][ T4008] should_fail+0xb/0x20 [ 49.983345][ T4008] should_fail_usercopy+0x1a/0x20 [ 49.983456][ T4008] _copy_from_user+0x1c/0xb0 [ 49.983485][ T4008] ___sys_sendmsg+0xc1/0x1e0 [ 49.983540][ T4008] __x64_sys_sendmsg+0xd4/0x160 [ 49.983599][ T4008] x64_sys_call+0x22ab/0x2550 [ 49.983632][ T4008] do_syscall_64+0x112/0x360 [ 49.983677][ T4008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.983707][ T4008] RIP: 0033:0x7fde3474e0d9 [ 49.983754][ T4008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.983836][ T4008] RSP: 002b:00007fde331a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.983862][ T4008] RAX: ffffffffffffffda RBX: 00007fde349d5fa0 RCX: 00007fde3474e0d9 [ 49.983932][ T4008] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 49.983985][ T4008] RBP: 00007fde331a7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.984003][ T4008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.984027][ T4008] R13: 00007fde349d6038 R14: 00007fde349d5fa0 R15: 00007ffd8988c8e8 [ 49.984072][ T4008] [ 50.198818][ T4017] loop4: detected capacity change from 0 to 256 [ 50.668316][ T4022] xt_CT: No such helper "snmp_trap" [ 50.696357][ T4026] loop1: detected capacity change from 0 to 512 [ 50.713469][ T408] IPVS: starting estimator thread 0... [ 50.746588][ T4031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.746949][ T4031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.791322][ T4006] 9pnet_fd: p9_fd_create_tcp (4006): problem connecting socket to 127.0.0.1 [ 50.807880][ T4028] IPVS: using max 2160 ests per chain, 108000 per kthread [ 51.002402][ T4053] FAULT_INJECTION: forcing a failure. [ 51.002402][ T4053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.002475][ T4053] CPU: 0 UID: 0 PID: 4053 Comm: syz.3.176 Not tainted syzkaller #0 PREEMPT(lazy) [ 51.002505][ T4053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.002518][ T4053] Call Trace: [ 51.002524][ T4053] [ 51.002532][ T4053] __dump_stack+0x1d/0x30 [ 51.002691][ T4053] dump_stack_lvl+0x95/0xd0 [ 51.002843][ T4053] dump_stack+0x15/0x1b [ 51.002906][ T4053] should_fail_ex+0x262/0x280 [ 51.003034][ T4053] should_fail+0xb/0x20 [ 51.003196][ T4053] should_fail_usercopy+0x1a/0x20 [ 51.003261][ T4053] _copy_from_user+0x1c/0xb0 [ 51.003333][ T4053] ___sys_sendmsg+0xc1/0x1e0 [ 51.003477][ T4053] __sys_sendmmsg+0x185/0x320 [ 51.003628][ T4053] __x64_sys_sendmmsg+0x57/0x70 [ 51.003722][ T4053] x64_sys_call+0x1fb4/0x2550 [ 51.003815][ T4053] do_syscall_64+0x112/0x360 [ 51.004019][ T4053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.004052][ T4053] RIP: 0033:0x7f622943e0d9 [ 51.004160][ T4053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.004305][ T4053] RSP: 002b:00007f6227e97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 51.004369][ T4053] RAX: ffffffffffffffda RBX: 00007f62296c5fa0 RCX: 00007f622943e0d9 [ 51.004414][ T4053] RDX: 040000000000007b RSI: 0000200000000180 RDI: 0000000000000003 [ 51.004475][ T4053] RBP: 00007f6227e97090 R08: 0000000000000000 R09: 0000000000000000 [ 51.004516][ T4053] R10: 0000000000004004 R11: 0000000000000246 R12: 0000000000000001 [ 51.004558][ T4053] R13: 00007f62296c6038 R14: 00007f62296c5fa0 R15: 00007ffcb491f578 [ 51.004621][ T4053] [ 51.045969][ T4041] loop1: detected capacity change from 0 to 1024 [ 51.060268][ T4041] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.063895][ T4041] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 51.063973][ T4041] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 51.064263][ T4041] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 51.066436][ T4041] EXT4-fs (loop1): journal inode is deleted [ 51.361275][ T4070] hugetlbfs: syz.4.182 (4070): Using mlock ulimits for SHM_HUGETLB is obsolete [ 51.373882][ T4074] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 51.382632][ T4074] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 51.417094][ T400] IPVS: starting estimator thread 0... [ 51.432178][ T4080] netlink: 'syz.1.185': attribute type 4 has an invalid length. [ 51.436473][ T4080] netlink: 'syz.1.185': attribute type 4 has an invalid length. [ 51.497547][ T4081] IPVS: using max 2160 ests per chain, 108000 per kthread [ 51.527270][ T4093] FAULT_INJECTION: forcing a failure. [ 51.527270][ T4093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.527970][ T4093] CPU: 1 UID: 0 PID: 4093 Comm: syz.1.189 Not tainted syzkaller #0 PREEMPT(lazy) [ 51.527997][ T4093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.528010][ T4093] Call Trace: [ 51.528017][ T4093] [ 51.528046][ T4093] __dump_stack+0x1d/0x30 [ 51.528095][ T4093] dump_stack_lvl+0x95/0xd0 [ 51.528124][ T4093] dump_stack+0x15/0x1b [ 51.528146][ T4093] should_fail_ex+0x262/0x280 [ 51.528196][ T4093] should_fail+0xb/0x20 [ 51.528233][ T4093] should_fail_usercopy+0x1a/0x20 [ 51.528371][ T4093] _copy_from_user+0x1c/0xb0 [ 51.528457][ T4093] ___sys_sendmsg+0xc1/0x1e0 [ 51.528603][ T4093] __x64_sys_sendmsg+0xd4/0x160 [ 51.528709][ T4093] x64_sys_call+0x22ab/0x2550 [ 51.528801][ T4093] do_syscall_64+0x112/0x360 [ 51.528884][ T4093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.528970][ T4093] RIP: 0033:0x7f0f7e74e0d9 [ 51.529016][ T4093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.529077][ T4093] RSP: 002b:00007f0f7d1a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.529149][ T4093] RAX: ffffffffffffffda RBX: 00007f0f7e9d5fa0 RCX: 00007f0f7e74e0d9 [ 51.529192][ T4093] RDX: 0000000000004050 RSI: 0000200000000200 RDI: 0000000000000003 [ 51.529234][ T4093] RBP: 00007f0f7d1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.529275][ T4093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.529317][ T4093] R13: 00007f0f7e9d6038 R14: 00007f0f7e9d5fa0 R15: 00007ffd3c2b4628 [ 51.529386][ T4093] [ 51.933097][ T4100] journal_path: Non-blockdev passed as './trace' [ 51.933486][ T4100] EXT4-fs: error: could not find journal device path [ 52.048874][ T4100] ext4: Unknown parameter 'smackfstransmute' [ 52.291530][ T2985] ================================================================== [ 52.291569][ T2985] BUG: KCSAN: data-race in dont_mount / step_into_slowpath [ 52.291606][ T2985] [ 52.291614][ T2985] read-write to 0xffff88811bc1c480 of 4 bytes by task 3524 on cpu 1: [ 52.291633][ T2985] dont_mount+0x2a/0x40 [ 52.291666][ T2985] vfs_unlink+0x202/0x490 [ 52.291722][ T2985] filename_unlinkat+0x1dc/0x410 [ 52.291759][ T2985] __se_sys_unlink+0x2b/0xe0 [ 52.291798][ T2985] __x64_sys_unlink+0x1f/0x30 [ 52.291831][ T2985] x64_sys_call+0x18ee/0x2550 [ 52.291862][ T2985] do_syscall_64+0x112/0x360 [ 52.291888][ T2985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.291913][ T2985] [ 52.291920][ T2985] read to 0xffff88811bc1c480 of 4 bytes by task 2985 on cpu 0: [ 52.291939][ T2985] step_into_slowpath+0xea/0x4c0 [ 52.291963][ T2985] path_lookupat+0x2eb/0x4c0 [ 52.291984][ T2985] filename_lookup+0x18f/0x390 [ 52.292005][ T2985] do_readlinkat+0x74/0x2f0 [ 52.292029][ T2985] __x64_sys_readlink+0x47/0x60 [ 52.292050][ T2985] x64_sys_call+0x1d41/0x2550 [ 52.292080][ T2985] do_syscall_64+0x112/0x360 [ 52.292105][ T2985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.292129][ T2985] [ 52.292134][ T2985] value changed: 0x00300080 -> 0x00004080 [ 52.292147][ T2985] [ 52.292152][ T2985] Reported by Kernel Concurrency Sanitizer on: [ 52.292165][ T2985] CPU: 0 UID: 0 PID: 2985 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 52.292194][ T2985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.292209][ T2985] ================================================================== [ 52.431525][ T4107] netlink: 'syz.0.194': attribute type 1 has an invalid length. [ 52.643220][ T4106] __nla_validate_parse: 9 callbacks suppressed [ 52.643324][ T4106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 52.658202][ T4106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.193'.