last executing test programs: 1.908505507s ago: executing program 0 (id=370): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='cdg', 0x3) shutdown(r1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 1.886945468s ago: executing program 0 (id=373): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pause() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet6(0xa, 0x80001, 0x9) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010326bd7000fbdbdf25981d5b031f1c9f211400020000080001000000000000000000000000000000006f6984917d52fd8c9d4fe8f47d510ae203596609d3c5852b9642", @ANYRES32=r7], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40006) socket$inet6(0xa, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0xb) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) socket(0x10, 0x3, 0xa) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r10, r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) timerfd_create(0xb, 0x0) 1.473252546s ago: executing program 2 (id=381): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163", @ANYRESHEX], 0x5c}, 0x1, 0x0, 0x0, 0x814}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x2931890e, r1}, 0x33) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000001a0000000000010000000000008000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="796104000000000000007e", @ANYBLOB], 0x1c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40000) time(0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) llistxattr(0x0, 0x0, 0x0) sendmsg(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x2) 1.277321695s ago: executing program 4 (id=386): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socket(0x28, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, 0x0, 0x91, 0x20008800, 0x0, 0x0) 1.048523665s ago: executing program 2 (id=390): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000070000000000000000009500090000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9d}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) epoll_create1(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102381, 0x18fed) socketpair(0x1, 0x3, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000740)=ANY=[@ANYBLOB="563d00001500599c6d0e0000ded650492d"], 0xfe33) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r8}) close(r4) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r10, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x800) 1.040015575s ago: executing program 1 (id=391): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000060000000500000000000007000000000e00000002000006040000000c0000000300000000000000f7ffffff002e00305f008b8fde5718f44888dddcf8aa60fc0597836f8cff316aedf2ca7a93cc048837736bb8e33b98a48a1285cc65514b3d406a2fd3cbf15366d38b3c6efcb4426601d0"], &(0x7f00000003c0)=""/252, 0x46, 0xfc, 0x0, 0x501e, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000088000400", @ANYRES32, @ANYBLOB="00000000000000000000000000000035fb", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r4, 0x7, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x560d, &(0x7f0000000140)={0x5, 0x899, 0x1006}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r2, 0x4}, 0x5) r7 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xc, 0xe}, {0x9, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x408000, 0x0) renameat2(r9, &(0x7f0000000180)='./file0\x00', r10, &(0x7f0000000280)='./file0\x00', 0x2) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r11, &(0x7f0000000040)=0xfe8e, 0x12) 1.003942676s ago: executing program 0 (id=392): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x86, 0xffffffff, 0x40}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r3, r3, 0x0, 0x800000009) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x14a) fallocate(r4, 0x8, 0x0, 0x8000) 930.53214ms ago: executing program 2 (id=393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x3}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000480)={@rand_addr, @broadcast, 0x0}, &(0x7f00000004c0)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'geneve0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) (rerun: 32) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000940)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="000104000000ffdbdf2117000000340001801400020000000000000000001400020030696d7265673000000000000000000008000100badbb2dad6f77c06eb00d166ab75d9022ae3245942", @ANYRES32=r4, @ANYBLOB="0400018004000180a800018008000100", @ANYRES32=r5, @ANYBLOB="1400020074756e6c300000000000000000000000140002007663616e300000000000000000000000140002006e7230000000000000000000000000001400020076657468305f746f5f626f6e64000000140002006970366772653000000000000000000008000100", @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="1400020073697430000000000000000000000000040001801400018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x110}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000005c0)={'gre0\x00', r7, 0x40, 0x0, 0xa50, 0x8, {{0x12, 0x4, 0x0, 0x1, 0x48, 0x68, 0x0, 0x9, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0x10, "6cbbbf7676825a1010b4d4c3f085"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x52, 0x1, 0x6, [{@remote, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast}]}]}}}}}) (async) recvmsg$qrtr(r6, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)=[{&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000300)=""/101, 0x65}], 0x2, &(0x7f0000000440)=[{0x68, 0x0, 0x0, ""/88}], 0x68}, 0x38, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x42}, 0x50) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r9, r8}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x22, 0x0, &(0x7f0000000540)="f8f7f52cefb53e4139007f7b0800c22d79ce15d6ca002a5d067fcb9ee78e2efc99cf", 0x0, 0xf, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="14fd06cfb0c1"}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 929.92998ms ago: executing program 1 (id=394): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r6, 0x7, '\x00', "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"}}, 0x110) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000600), r6, 0x1}}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfffffffc}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "85592b69f12db5484e587dc234f9e55ffbba28ba4910bced26bedb619b81786d", "338aeb5475c1dcbe7d209ccec4e57c3d79bff41cab451179c0afdcfd1076a9db", "88d29ce6427948ce96bb80a684746f0108088f6feadfbb18d206f386bd56b9ae", "2aa3c36a0fdf0971b557deff0e6a5b5a92ea97ce04ffbd45082bfb87b67f8cfc", "4a384cb237f4bb88635f51a092d53d050b454517343c09ab96e529584155d5aa", "1de9a4423a8843ad3a3c3806", 0xfffffff9, 0x7ff, 0x4, 0xffffffff}}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 929.398739ms ago: executing program 0 (id=395): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) timerfd_gettime(r1, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x800, 0x4) fcntl$notify(r2, 0x402, 0x8000003d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r4, &(0x7f00000000c0), 0x10) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000000)=@generic={0x2, 0x100, 0x100}) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 857.185633ms ago: executing program 2 (id=396): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, 0x0, 0x91, 0x20008800, 0x0, 0x0) 856.522823ms ago: executing program 2 (id=397): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f00000005c0)="f1", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000000700)="da", 0x1}, {&(0x7f0000000440)="17", 0x1}], 0x4, 0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@nodelalloc}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nojournal_checksum}, {@stripe={'stripe', 0x3d, 0x12}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="4b000000020000000b"], 0x36f0516f) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fallocate(r3, 0x71, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 835.683654ms ago: executing program 0 (id=398): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @private=0xa010102}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180), 0x1, 0x59c, &(0x7f0000001840)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x202080, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 806.941835ms ago: executing program 1 (id=399): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x86, 0xffffffff, 0x40}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x14a) fallocate(r3, 0x8, 0x0, 0x8000) 724.784878ms ago: executing program 2 (id=400): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @dev}, &(0x7f0000000080)=0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) sendmsg$TIPC_CMD_SHOW_STATS(r1, 0x0, 0x24000050) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x2008080, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_mixed}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_mixed}, {@utf8no}, {@numtail}, {@rodir}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@fat=@nfs}, {@utf8no}]}, 0x81, 0x2ae, &(0x7f0000000480)="$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") r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r5}, 0x40) syz_emit_ethernet(0xd49, &(0x7f0000003000)=ANY=[@ANYBLOB="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"], 0x0) 724.475548ms ago: executing program 1 (id=401): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000580)={0x6, "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"}) 645.834132ms ago: executing program 1 (id=402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000020000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) (fail_nth: 4) 645.428172ms ago: executing program 1 (id=403): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) fcntl$setpipe(r1, 0x407, 0x6) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) futex(&(0x7f0000000440)=0x2, 0x6, 0x0, &(0x7f00000004c0)={r3, r4+60000000}, &(0x7f0000000500)=0x2, 0x2) nanosleep(&(0x7f0000000540)={0x0, 0x3938700}, 0x0) fcntl$notify(r2, 0x402, 0x80000000) pselect6(0x40, &(0x7f0000000580)={0x7ff, 0x4497, 0xffff, 0xa, 0x2, 0x7, 0x8, 0x4}, &(0x7f00000005c0)={0x7, 0x3, 0x3ff, 0x8, 0x7, 0x1, 0x7fff, 0x6}, &(0x7f0000000600)={0x7, 0x9b25, 0x5, 0xffffffffffff0001, 0xfffffffffffff000, 0x6, 0x7, 0x5}, &(0x7f0000000640), &(0x7f00000006c0)={&(0x7f0000000680)={[0x41]}, 0x8}) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000ac0)={0x0}, &(0x7f0000000b00)=0xc) fstat(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x1c, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @map_fd={0x18, 0xb}, @jmp={0x5, 0x1, 0x5, 0x9, 0x1, 0x80, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x8001, 0x45, &(0x7f0000000d00)=""/69, 0x41100, 0x8, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000d80)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000dc0)={0x4, 0xd, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000e00)=[0x1, r2, r2, r1, r1, r1, r1, r1], &(0x7f0000000e40)=[{0x5, 0x5, 0x4, 0x5}], 0x10, 0x7fff}, 0x94) r8 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000f40)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) syz_clone3(&(0x7f00000011c0)={0x80002000, &(0x7f0000000f80), &(0x7f0000000fc0)=0x0, &(0x7f0000001000), {0x1f}, &(0x7f0000001040)=""/33, 0x21, &(0x7f0000001080)=""/213, &(0x7f0000001180)=[0x0, 0x0], 0x2, {r2}}, 0x58) fstat(r2, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = accept$nfc_llcp(r2, &(0x7f0000001600), &(0x7f0000001680)=0x60) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000016c0), 0x10da02, 0x0) r13 = socket$igmp6(0xa, 0x3, 0x2) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001940)={0x6, 0x8, &(0x7f0000001700)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x3, 0x3, 0x7, 0x1, 0x8}], &(0x7f0000001740)='GPL\x00', 0x4, 0xb7, &(0x7f0000001780)=""/183, 0x41100, 0x4, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001840)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001880)={0x3, 0x3, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000018c0)=[{0x0, 0x4, 0x7, 0xb}, {0x3, 0x4, 0xe, 0x2}, {0x4, 0x2, 0x1, 0x7}, {0x0, 0x1, 0x0, 0x2}, {0x3, 0x2, 0x10, 0x4}, {0x3, 0x2}, {0x2, 0x3, 0x3, 0xb}, {0x40, 0x2, 0x10, 0xa}], 0x10, 0x2}, 0x94) r15 = getuid() r16 = syz_open_dev$evdev(&(0x7f0000002e80), 0x9, 0x20000) r17 = syz_usbip_server_init(0x4) pipe2$watch_queue(&(0x7f0000002ec0)={0xffffffffffffffff}, 0x80) stat(&(0x7f0000003240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000003340)=[0xffffffffffffffff]) sendmmsg$unix(r2, &(0x7f0000005000)=[{{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000800)="94a0ac2e1cccd45901c82c17d7a5252432201a012eb1e0bf8557bb739f530c107ccc69e916c022f1c842837ac64a134f0a5592d173c387bbf130552c553fe0ad82c26884fc25df639aa61c", 0x4b}, {&(0x7f0000000880)="deb5707ce6dd222b173de51afc00480494b9fd727f1b41901cdbad8aa4725406c934cfe815646f39866eaa17f57d7f5bfea4fc938173f9cff5ac15e8a66bd145da1a9e9117037bd350d5f5e68fa79ebf1409dedc9714b3310d67b321f6cdd9b4b689a6593fc5cb5b36c99d628bd77cca657625faf1a78425885c24c9da88749564fd93c96ca1181bb6363ed254f30bc27c27502a12c951e2923b38aecf86b0178db6526923f4e8fd88656444ac50725393423c07d5a248d0c5054aebd3653da6ee44b89a8b11544d95009eca19cefc2448c63c3d028be7e2fbad6afc4e4513474295557d213ceab74bfbb27aba2cb2db1c62161793e6f794", 0xf8}, {&(0x7f0000000980)="e9670c88034e6859850454041e99440e265e21cf09500752fe50dc6d6075837f87fc6bd873a2c477f2032501b16c40c11ffc783b65090a9dddde90aafbc2fe1cff4bd22ddb1c16d88fcde1abb038d1d1ce6b42c3b251367074cf6a7ba7c04f0022fdb6e28b615273393ec0fc8e05aa85dfbea8176527265b37082ecdcd1016ea960702569602ceacc85734646c6f53c8ae2b88cac21db3c291c33f61ac50f2e5238d2a3016a32e9f34d59b6321f8ff0a1ad0a58157f8c5021d5c682cb141aa5a5d9acc01a328fc605ad8cf438f29dce49e1a8ec1e3bb677af31fd5bd3ff35123adbabd0c9d", 0xe5}], 0x3, &(0x7f00000012c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r6}}}, @rights={{0x28, 0x1, 0x1, [r2, r2, r7, r2, r8, r2]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r10}}}], 0x68, 0x40}}, {{&(0x7f0000001340)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000013c0)="e6d3018268d62aaeb64b9894bb49f845", 0x10}, {&(0x7f0000001400)="0d8cdfa8ff10815f3cd52671b0f4d479667414e78bad9935c6164f86", 0x1c}, {&(0x7f0000001440)="1fb4fbd147f15141d8a3e0f427f6e441675a54b0a1d1dc23b764aff434104c0f99718e8dbf535b608cb68ced3c82eb69361e89d536c011cda2eb937ae0c49352eb94576d258eb805f377fa9c6ad5476008fcc31fe314d98404414e995e00129c9845d5497a", 0x65}, {&(0x7f00000014c0)="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", 0xff}], 0x4, &(0x7f0000001a00)=[@rights={{0x28, 0x1, 0x1, [r2, r0, r0, r11, r1, r12]}}, @rights={{0x2c, 0x1, 0x1, [r1, r13, r0, r1, r14, r0, r2]}}], 0x58, 0x4008094}}, {{&(0x7f0000001a80)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000001b00)="82fdf5e686894cba85260b57b132b1057c87aabbaa4cc12e1f23f1e707baa14ec02c179fa694118de541ef", 0x2b}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="0481abcd95c4e174b6192a6a65b5da36e1774e73048f694e144671e0d7072134a7dd33ce3ad7a37ab2e10c018c1797cfc49d8ba844e9f3200fffdec4fe8b4d28019208c5c7e6512aaa171ca22552737bb8f3d81162598b9bb7ec8f7b00a8b9d5923a703cddc739b062ddfcd7479d87c4bc97d4530aa5e7a2f04cfe6172065f", 0x7f}, {&(0x7f0000002bc0)="d631fef9575fad222807bc31f64156c0d933cfe35c035aacf67ef60133642f6c9a6ddfb5614d467a5768b966b4c7098438a29f38ab4918d988629a03bc87d380566d18883d8da78d48ed37fcbc1991e8358ccac99c423b7f31d65631711fcd08bb44899cc2", 0x65}, {&(0x7f0000002c40)="0a3f0c5531e75364338dd284c5d4965ff42147bd0c3d80b3b8fa9fc2a4599f319f", 0x21}, {&(0x7f0000002c80)="12dd3677c129e751c65c25d169be5f2f461354b946e9428709899864e679b5a6ccc6c622509f94345b93c93f74a3bb89048d81dcc973dd7457ce85e477f4b7a32eb78fe562f9da3cea5404c7161ce4a874db", 0x52}, {&(0x7f0000002d00)="a1120329eba93ba30dfd623b425f556abcfd6f5ba798cdb1132b7d90e3ee4db7e47bd2085eb9fd4f62f8a7f4c8599f2829e4fe7fb0d3c376fad786d7ad9bcdafce6a7b0b543761a1242e55afa11b9cc655c3a3200bbf6e2bc1691cc983937b935cafce0c59558b6879488d59468c648dabae7e5391d298f2c833a5cf2877ed867849ccbc58300038a1a484889a25eeefa710a5d48a6a93838968f09ea54ce48adf10b5fe2654705c068117e43ee1973615b293af04543675d63db58389197a22de8c8fc97b7e181543e1023de6df12281f54a30a", 0xd4}], 0x7, &(0x7f0000002f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r15, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r2, r16, r2, r0, r17, r2, r1, r2]}}, @rights={{0x20, 0x1, 0x1, [r0, r18, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}], 0x90, 0x1}}, {{&(0x7f0000002fc0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000003040)="edda7fa8231eab62958ba505dd01b4fba0aff929e726e85020555ba5cf1705277f2ea3d8e8b706c05bce5c72f21b04c2fb3df01db7a82985872917bbff17ffdcd2f60a3d9fb8be37044f9def2157929d24add3", 0x53}, {&(0x7f00000030c0)="714f06eda829d105fab0ee6b7452210bef9b57b2", 0x14}, {&(0x7f0000003100)="ad354295e789bf2e229fa60cfb2e5e2d7acb7197f9ed5d4ed474f672ac08c0c6a086b84928c281f059aaf9639a498419d772d7ec91ab17d3330e99610d5f3a05eba11994d121", 0x46}, {&(0x7f0000003180)="057032b8d9ee34b34cfd488ac62f50ce3149edd36f263e78fcd68b79f01dfd5fdbbd5a3f2bf98a2df0df0b4a44c1262be87515f11451e2c0fee4d4da04082a8a984648d71378a3ec5099d071f0efd3cfd3d14c4b700af529faf5b6e582", 0x5d}], 0x4, &(0x7f0000003380)=[@cred={{0x1c, 0x1, 0x2, {0x0, r19, r20}}}], 0x20, 0x4004844}}, {{&(0x7f00000033c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000003440)="84665853a3214601f7c74fb965810206325193effcec46f9de42685790a1b141b8ccfdd728657a072a851cb12d8581ea27771810d19b2f6caa0b253fb8c51bd7fc8f86dd450a09d3ccd8f02a130098ef871ace93e9feb24637b8b5b06a4d3e407d4d2218f01c58db2e1aca11bd5ab129fe2d999b1af08e463d8f0941707a5611cc45fa8b1350359a8eb419fbdd9af75c235cdd0a24167aa3b24d466d678e14dc1a5ee9f99beb4a1dbceadc78fd852c911fd7fb353d44534ac9cd1aba632253c0bc43a52a526acbde22c39bb0b44e7fa02ac643c2376278f7d2a84781e82b3bce55481895ae9556912d70321bc50166", 0xef}, {&(0x7f0000003540)="e3553a40bbb3f35ae2ce6720baa88f42d5c3a8822f8eb2d788b8abf335f090335f813ac90a96224d23f5897d86298661f46cd8b3f30654ac9fda49aba6733df5bc1a8fd08fff8f549cd7b044855ebd1e8255af895a6770faa914611057b9fca96280ac5a7c58daba8119fc19fb48def28f20b4f4ed4d9ee974cdf6188281d664d6e24612bcffe82949283e372622c0f71af6e9ef6584b9e998c90811010e5af4087b", 0xa2}], 0x2, 0x0, 0x0, 0xc040}}, {{&(0x7f0000003640)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000003ac0)=[{&(0x7f00000036c0)="75c4caadb1d229d9a99d2b860c769d379d3d41f9db1e294c3534c227b245883862ee953be13f5fac750b04e9624aed0cc4bd9963a92920a3304d20bf382d9cd90484abbeb152003f4193d3280a138d", 0x4f}, {&(0x7f0000003740)="ecc3911ab05e74c54a332440031a2d62ad6f5bb85fe607693159bebca2b5ae1f8bf091f62d7533e547e6dd07c01c731d1c58fc34d6f8a24f76bbdaf54be0c64cc0ec05e6edb4d9a3e7dadba6a64a23c79b955600db1f54fc06a1f25b74202a74e79bff202e9a72e28b0dfbeecb900640046ea8593b4dd33cfe47c119e68404db76adbf224e9ad808ec92185b1090df29518e24e9fd9ee1d24e868540c708ee53119dada394e91648f1f3909e5ccdba7018ceb193ad7b93046fe737d41fd61a8681255edad0577244b71b15", 0xcb}, {&(0x7f0000003840)="40deaebb4fedea6f46c148125d4dd43d515ecc30333d62bb897f2f1b6305fc3b533225287885447f8d29e80c0a", 0x2d}, {&(0x7f0000003880)="b57c8131eb4271d73a76d1187c54dd5a1af92e0e1751d6f3039f18b5ff0263c6b6de16fbeefce32629caa093d2b58f4bfd2f07b62c5f4c758dc993dd3c6e34314f8ee31ebe6b0379dcf78ab7768de8a6c395b4e0a7ad762f8a9c4b6a0969597ed3db738ecb46900f7fd636cfac897ec14420fd642128a68f8fdebb3f000243772fe18aaf151b96", 0x87}, {&(0x7f0000003940)="cbcfd6c1a83a21db8bba331ddf6c1d2eb875ed80cb0a3af38b61e5dde5a600617ea803dd1b818a084f2b98f582867837fce6e0dd3d454187673051326a1252754b82a337bc491f43c4b84c819bc871692ea780990c9dc60ae6bfbd5e48df78c23db50d8d4cfd3cef73803d028617c37e5d8740770abde9d4a57858a7f630ff5808e0fdc5a55f4b80293203151b1b7465fddd8e1a8c7a985bf20a2d419e0c28c6c7cbfa873bc6b54b19f83a4da858312db303ddc0c253099693b1e04c037cc2ae88cb0ad84839b5fa4d9470beaa450daf2095ca048d2772b05845fb570cebf5d4d070aa0d8386e1804acf472a2d98", 0xee}, {&(0x7f0000003a40)="f58c4e3e2ce0cf108f5b4f9eda74d7c49847c11eb6954c3986e4ec14398080aaa6c422a16f86e1c891a120d1b91004", 0x2f}, {&(0x7f0000003a80)="94caeed2d589e261c1fc39a20603710477fe45f671a34e4bc790f469", 0x1c}], 0x7, &(0x7f0000004200)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8, 0x4000000}}, {{&(0x7f0000004300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000045c0)=[{&(0x7f0000004380)="d2244445fa17239d2410f60b2b20be8a2c1a1f93cd44c4dc9cb04f24a1ba07", 0x1f}, {&(0x7f00000043c0)="d3e9c7ce9b63df52787ee88e61fd8a316f4ca011572043a0792616a65864d55c9a52cb63e2864b9531f58a761875ff80f1e3777166ba02a985f30aa99dddf78ed402ab3ddf0dd73f06d5a13ff729a70b26e6b364cc017c9702ba4fbcb3ccb036e9898e1398e5ea2ba717b32d56cae8af8bb858c654ab7fdf6a2f4df3fd0b4bb9bb55b77623f70413ab", 0x89}, {&(0x7f0000004480)="de74d652d88457afd488867defb68774838284151c22c26d6ea2d2f09a6789f22387db2bd3bfd950b5a969930ddab69d2d73a051a0", 0x35}, {&(0x7f00000044c0)="d43b155d80bdc74b02453027cc191f81fbf41e1514ab7f55894a2c3fcf62fe39af19117683311415cbcbf797bd8b0719cdb9ea5d97daf740593f0ad7c1e4b56fb44bbe6541f0447273173eab1df07d91bd6d396935d940e4c804048ea274c39e564d92e6eec4eda69bc2691a546efe39a768cd41a5bb820ab467c5bc8d8d6d33318a4ff32d5f8d261d6e3bf3d5d793d529a724704aaf8f9e69a9f0f0ce1cbc499f1c4f0ab8278b3b5a138022230f26d3d8c6e68e82b31dd7b78b3928f040d5f486", 0xc1}], 0x4, &(0x7f0000004ec0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r1, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r2]}}], 0x140, 0x1}}], 0x7, 0x8000) 644.483682ms ago: executing program 0 (id=404): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) fcntl$setpipe(r1, 0x407, 0x6) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) futex(&(0x7f0000000440)=0x2, 0x6, 0x0, &(0x7f00000004c0)={r3, r4+60000000}, &(0x7f0000000500)=0x2, 0x2) nanosleep(&(0x7f0000000540)={0x0, 0x3938700}, 0x0) fcntl$notify(r2, 0x402, 0x80000000) pselect6(0x40, &(0x7f0000000580)={0x7ff, 0x4497, 0xffff, 0xa, 0x2, 0x7, 0x8, 0x4}, &(0x7f00000005c0)={0x7, 0x3, 0x3ff, 0x8, 0x7, 0x1, 0x7fff, 0x6}, &(0x7f0000000600)={0x7, 0x9b25, 0x5, 0xffffffffffff0001, 0xfffffffffffff000, 0x6, 0x7, 0x5}, &(0x7f0000000640), &(0x7f00000006c0)={&(0x7f0000000680)={[0x41]}, 0x8}) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000ac0)={0x0}, &(0x7f0000000b00)=0xc) fstat(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x1c, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @map_fd={0x18, 0xb}, @jmp={0x5, 0x1, 0x5, 0x9, 0x1, 0x80, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x8001, 0x45, &(0x7f0000000d00)=""/69, 0x41100, 0x8, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000d80)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000dc0)={0x4, 0xd, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000e00)=[0x1, r2, r2, r1, r1, r1, r1, r1], &(0x7f0000000e40)=[{0x5, 0x5, 0x4, 0x5}], 0x10, 0x7fff}, 0x94) r8 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000f40)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) syz_clone3(&(0x7f00000011c0)={0x80002000, &(0x7f0000000f80), &(0x7f0000000fc0)=0x0, &(0x7f0000001000), {0x1f}, &(0x7f0000001040)=""/33, 0x21, &(0x7f0000001080)=""/213, &(0x7f0000001180)=[0x0, 0x0], 0x2, {r2}}, 0x58) fstat(r2, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = accept$nfc_llcp(r2, &(0x7f0000001600), &(0x7f0000001680)=0x60) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000016c0), 0x10da02, 0x0) r13 = socket$igmp6(0xa, 0x3, 0x2) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001940)={0x6, 0x8, &(0x7f0000001700)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x3, 0x3, 0x7, 0x1, 0x8}], &(0x7f0000001740)='GPL\x00', 0x4, 0xb7, &(0x7f0000001780)=""/183, 0x41100, 0x4, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001840)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001880)={0x3, 0x3, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000018c0)=[{0x0, 0x4, 0x7, 0xb}, {0x3, 0x4, 0xe, 0x2}, {0x4, 0x2, 0x1, 0x7}, {0x0, 0x1, 0x0, 0x2}, {0x3, 0x2, 0x10, 0x4}, {0x3, 0x2}, {0x2, 0x3, 0x3, 0xb}, {0x40, 0x2, 0x10, 0xa}], 0x10, 0x2}, 0x94) r15 = getuid() r16 = syz_open_dev$evdev(&(0x7f0000002e80), 0x9, 0x20000) r17 = syz_usbip_server_init(0x4) pipe2$watch_queue(&(0x7f0000002ec0)={0xffffffffffffffff}, 0x80) stat(&(0x7f0000003240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000003340)=[0xffffffffffffffff]) sendmmsg$unix(r2, &(0x7f0000005000)=[{{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000800)="94a0ac2e1cccd45901c82c17d7a5252432201a012eb1e0bf8557bb739f530c107ccc69e916c022f1c842837ac64a134f0a5592d173c387bbf130552c553fe0ad82c26884fc25df639aa61c", 0x4b}, {&(0x7f0000000880)="deb5707ce6dd222b173de51afc00480494b9fd727f1b41901cdbad8aa4725406c934cfe815646f39866eaa17f57d7f5bfea4fc938173f9cff5ac15e8a66bd145da1a9e9117037bd350d5f5e68fa79ebf1409dedc9714b3310d67b321f6cdd9b4b689a6593fc5cb5b36c99d628bd77cca657625faf1a78425885c24c9da88749564fd93c96ca1181bb6363ed254f30bc27c27502a12c951e2923b38aecf86b0178db6526923f4e8fd88656444ac50725393423c07d5a248d0c5054aebd3653da6ee44b89a8b11544d95009eca19cefc2448c63c3d028be7e2fbad6afc4e4513474295557d213ceab74bfbb27aba2cb2db1c62161793e6f794", 0xf8}, {&(0x7f0000000980)="e9670c88034e6859850454041e99440e265e21cf09500752fe50dc6d6075837f87fc6bd873a2c477f2032501b16c40c11ffc783b65090a9dddde90aafbc2fe1cff4bd22ddb1c16d88fcde1abb038d1d1ce6b42c3b251367074cf6a7ba7c04f0022fdb6e28b615273393ec0fc8e05aa85dfbea8176527265b37082ecdcd1016ea960702569602ceacc85734646c6f53c8ae2b88cac21db3c291c33f61ac50f2e5238d2a3016a32e9f34d59b6321f8ff0a1ad0a58157f8c5021d5c682cb141aa5a5d9acc01a328fc605ad8cf438f29dce49e1a8ec1e3bb677af31fd5bd3ff35123adbabd0c9d", 0xe5}], 0x3, &(0x7f00000012c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r6}}}, @rights={{0x28, 0x1, 0x1, [r2, r2, r7, r2, r8, r2]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r10}}}], 0x68, 0x40}}, {{&(0x7f0000001340)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000013c0)="e6d3018268d62aaeb64b9894bb49f845", 0x10}, {&(0x7f0000001400)="0d8cdfa8ff10815f3cd52671b0f4d479667414e78bad9935c6164f86", 0x1c}, {&(0x7f0000001440)="1fb4fbd147f15141d8a3e0f427f6e441675a54b0a1d1dc23b764aff434104c0f99718e8dbf535b608cb68ced3c82eb69361e89d536c011cda2eb937ae0c49352eb94576d258eb805f377fa9c6ad5476008fcc31fe314d98404414e995e00129c9845d5497a", 0x65}, {&(0x7f00000014c0)="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", 0xff}], 0x4, &(0x7f0000001a00)=[@rights={{0x28, 0x1, 0x1, [r2, r0, r0, r11, r1, r12]}}, @rights={{0x2c, 0x1, 0x1, [r1, r13, r0, r1, r14, r0, r2]}}], 0x58, 0x4008094}}, {{&(0x7f0000001a80)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000001b00)="82fdf5e686894cba85260b57b132b1057c87aabbaa4cc12e1f23f1e707baa14ec02c179fa694118de541ef", 0x2b}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="0481abcd95c4e174b6192a6a65b5da36e1774e73048f694e144671e0d7072134a7dd33ce3ad7a37ab2e10c018c1797cfc49d8ba844e9f3200fffdec4fe8b4d28019208c5c7e6512aaa171ca22552737bb8f3d81162598b9bb7ec8f7b00a8b9d5923a703cddc739b062ddfcd7479d87c4bc97d4530aa5e7a2f04cfe6172065f", 0x7f}, {&(0x7f0000002bc0)="d631fef9575fad222807bc31f64156c0d933cfe35c035aacf67ef60133642f6c9a6ddfb5614d467a5768b966b4c7098438a29f38ab4918d988629a03bc87d380566d18883d8da78d48ed37fcbc1991e8358ccac99c423b7f31d65631711fcd08bb44899cc2", 0x65}, {&(0x7f0000002c40)="0a3f0c5531e75364338dd284c5d4965ff42147bd0c3d80b3b8fa9fc2a4599f319f", 0x21}, {&(0x7f0000002c80)="12dd3677c129e751c65c25d169be5f2f461354b946e9428709899864e679b5a6ccc6c622509f94345b93c93f74a3bb89048d81dcc973dd7457ce85e477f4b7a32eb78fe562f9da3cea5404c7161ce4a874db", 0x52}, {&(0x7f0000002d00)="a1120329eba93ba30dfd623b425f556abcfd6f5ba798cdb1132b7d90e3ee4db7e47bd2085eb9fd4f62f8a7f4c8599f2829e4fe7fb0d3c376fad786d7ad9bcdafce6a7b0b543761a1242e55afa11b9cc655c3a3200bbf6e2bc1691cc983937b935cafce0c59558b6879488d59468c648dabae7e5391d298f2c833a5cf2877ed867849ccbc58300038a1a484889a25eeefa710a5d48a6a93838968f09ea54ce48adf10b5fe2654705c068117e43ee1973615b293af04543675d63db58389197a22de8c8fc97b7e181543e1023de6df12281f54a30a", 0xd4}], 0x7, &(0x7f0000002f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r15, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r2, r16, r2, r0, r17, r2, r1, r2]}}, @rights={{0x20, 0x1, 0x1, [r0, r18, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}], 0x90, 0x1}}, {{&(0x7f0000002fc0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000003040)="edda7fa8231eab62958ba505dd01b4fba0aff929e726e85020555ba5cf1705277f2ea3d8e8b706c05bce5c72f21b04c2fb3df01db7a82985872917bbff17ffdcd2f60a3d9fb8be37044f9def2157929d24add3", 0x53}, {&(0x7f00000030c0)="714f06eda829d105fab0ee6b7452210bef9b57b2", 0x14}, {&(0x7f0000003100)="ad354295e789bf2e229fa60cfb2e5e2d7acb7197f9ed5d4ed474f672ac08c0c6a086b84928c281f059aaf9639a498419d772d7ec91ab17d3330e99610d5f3a05eba11994d121", 0x46}, {&(0x7f0000003180)="057032b8d9ee34b34cfd488ac62f50ce3149edd36f263e78fcd68b79f01dfd5fdbbd5a3f2bf98a2df0df0b4a44c1262be87515f11451e2c0fee4d4da04082a8a984648d71378a3ec5099d071f0efd3cfd3d14c4b700af529faf5b6e582", 0x5d}], 0x4, &(0x7f0000003380)=[@cred={{0x1c, 0x1, 0x2, {0x0, r19, r20}}}], 0x20, 0x4004844}}, {{&(0x7f00000033c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000003440)="84665853a3214601f7c74fb965810206325193effcec46f9de42685790a1b141b8ccfdd728657a072a851cb12d8581ea27771810d19b2f6caa0b253fb8c51bd7fc8f86dd450a09d3ccd8f02a130098ef871ace93e9feb24637b8b5b06a4d3e407d4d2218f01c58db2e1aca11bd5ab129fe2d999b1af08e463d8f0941707a5611cc45fa8b1350359a8eb419fbdd9af75c235cdd0a24167aa3b24d466d678e14dc1a5ee9f99beb4a1dbceadc78fd852c911fd7fb353d44534ac9cd1aba632253c0bc43a52a526acbde22c39bb0b44e7fa02ac643c2376278f7d2a84781e82b3bce55481895ae9556912d70321bc50166", 0xef}, {&(0x7f0000003540)="e3553a40bbb3f35ae2ce6720baa88f42d5c3a8822f8eb2d788b8abf335f090335f813ac90a96224d23f5897d86298661f46cd8b3f30654ac9fda49aba6733df5bc1a8fd08fff8f549cd7b044855ebd1e8255af895a6770faa914611057b9fca96280ac5a7c58daba8119fc19fb48def28f20b4f4ed4d9ee974cdf6188281d664d6e24612bcffe82949283e372622c0f71af6e9ef6584b9e998c90811010e5af4087b", 0xa2}], 0x2, 0x0, 0x0, 0xc040}}, {{&(0x7f0000003640)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000003ac0)=[{&(0x7f00000036c0)="75c4caadb1d229d9a99d2b860c769d379d3d41f9db1e294c3534c227b245883862ee953be13f5fac750b04e9624aed0cc4bd9963a92920a3304d20bf382d9cd90484abbeb152003f4193d3280a138d", 0x4f}, {&(0x7f0000003740)="ecc3911ab05e74c54a332440031a2d62ad6f5bb85fe607693159bebca2b5ae1f8bf091f62d7533e547e6dd07c01c731d1c58fc34d6f8a24f76bbdaf54be0c64cc0ec05e6edb4d9a3e7dadba6a64a23c79b955600db1f54fc06a1f25b74202a74e79bff202e9a72e28b0dfbeecb900640046ea8593b4dd33cfe47c119e68404db76adbf224e9ad808ec92185b1090df29518e24e9fd9ee1d24e868540c708ee53119dada394e91648f1f3909e5ccdba7018ceb193ad7b93046fe737d41fd61a8681255edad0577244b71b15", 0xcb}, {&(0x7f0000003840)="40deaebb4fedea6f46c148125d4dd43d515ecc30333d62bb897f2f1b6305fc3b533225287885447f8d29e80c0a", 0x2d}, {&(0x7f0000003880)="b57c8131eb4271d73a76d1187c54dd5a1af92e0e1751d6f3039f18b5ff0263c6b6de16fbeefce32629caa093d2b58f4bfd2f07b62c5f4c758dc993dd3c6e34314f8ee31ebe6b0379dcf78ab7768de8a6c395b4e0a7ad762f8a9c4b6a0969597ed3db738ecb46900f7fd636cfac897ec14420fd642128a68f8fdebb3f000243772fe18aaf151b96", 0x87}, {&(0x7f0000003940)="cbcfd6c1a83a21db8bba331ddf6c1d2eb875ed80cb0a3af38b61e5dde5a600617ea803dd1b818a084f2b98f582867837fce6e0dd3d454187673051326a1252754b82a337bc491f43c4b84c819bc871692ea780990c9dc60ae6bfbd5e48df78c23db50d8d4cfd3cef73803d028617c37e5d8740770abde9d4a57858a7f630ff5808e0fdc5a55f4b80293203151b1b7465fddd8e1a8c7a985bf20a2d419e0c28c6c7cbfa873bc6b54b19f83a4da858312db303ddc0c253099693b1e04c037cc2ae88cb0ad84839b5fa4d9470beaa450daf2095ca048d2772b05845fb570cebf5d4d070aa0d8386e1804acf472a2d98", 0xee}, {&(0x7f0000003a40)="f58c4e3e2ce0cf108f5b4f9eda74d7c49847c11eb6954c3986e4ec14398080aaa6c422a16f86e1c891a120d1b91004", 0x2f}, {&(0x7f0000003a80)="94caeed2d589e261c1fc39a20603710477fe45f671a34e4bc790f469", 0x1c}], 0x7, &(0x7f0000004200)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8, 0x4000000}}, {{&(0x7f0000004300)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000045c0)=[{&(0x7f0000004380)="d2244445fa17239d2410f60b2b20be8a2c1a1f93cd44c4dc9cb04f24a1ba07", 0x1f}, {&(0x7f00000043c0)="d3e9c7ce9b63df52787ee88e61fd8a316f4ca011572043a0792616a65864d55c9a52cb63e2864b9531f58a761875ff80f1e3777166ba02a985f30aa99dddf78ed402ab3ddf0dd73f06d5a13ff729a70b26e6b364cc017c9702ba4fbcb3ccb036e9898e1398e5ea2ba717b32d56cae8af8bb858c654ab7fdf6a2f4df3fd0b4bb9bb55b77623f70413ab", 0x89}, {&(0x7f0000004480)="de74d652d88457afd488867defb68774838284151c22c26d6ea2d2f09a6789f22387db2bd3bfd950b5a969930ddab69d2d73a051a0", 0x35}, {&(0x7f00000044c0)="d43b155d80bdc74b02453027cc191f81fbf41e1514ab7f55894a2c3fcf62fe39af19117683311415cbcbf797bd8b0719cdb9ea5d97daf740593f0ad7c1e4b56fb44bbe6541f0447273173eab1df07d91bd6d396935d940e4c804048ea274c39e564d92e6eec4eda69bc2691a546efe39a768cd41a5bb820ab467c5bc8d8d6d33318a4ff32d5f8d261d6e3bf3d5d793d529a724704aaf8f9e69a9f0f0ce1cbc499f1c4f0ab8278b3b5a138022230f26d3d8c6e68e82b31dd7b78b3928f040d5f486", 0xc1}], 0x4, &(0x7f0000004ec0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r1, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r2]}}], 0x140, 0x1}}], 0x7, 0x8000) 401.229023ms ago: executing program 4 (id=406): syz_io_uring_setup(0xac9, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b0, &(0x7f0000000280)="$eJzs3T9vI0UYB+B3E3vtg8IuqBASK0FBdbpcS+MI5aQIVyAXQAEn7k5CsYV0J0XijzBX0dJQ8gmQkOj4EjQU9Ei0SHRccdKi9e7GTlg72QgnwD1Pk8ns/Gbe3YwTpfD4g5dmR/eyePD481+j309iZxSjeJLEMHai9mWcMvo6AID/sid5Hn/kpTa5JCL62ysLANiilb//Ny4U+GHrJQEAW/b2O+++uT8eH7yVZf24M/vqeFL8Z198La/vP4iPYhr341YM4mlEfqJs38nzfN7JCsN4dTY/nhTJ2fs/VfPv/x6xyO/FIIaLrtP5w/HBXlZayc+LOp6r1h8V+dsxiBca1j8cH9xuyMckjddeWan/Zgzi5w/j45jGvUURy/wXe1n2Rv7Nn5+9V5RX5JP58aS3GLeU717xjwYAAAAAAAAAAAAAAAAAAAAAgP+xm9XZOb1YnN9TdFXn7+w+Lb7pRlYbnj6fp8wn9URnzgea5/Ftfb7OrSzL8mrgMt+JFzvRuZ67BgAAAAAAAAAAAAAAAAAAgH+XR598enR3Or3/8B9p1KcB1G/rv+w8o5Wel6NhzDBOenrLJXeqZTfMHLv1mCRiYxnFjK2K756/+prGjXWp775v++j654/pXqLClo16dx3dTZqfYS/qnn69SX5cHZPGBddK113KW22/tPFS2voFkj6/aMw3jIlkU2Gv/1Y+uaonOXsX6eKpNsa7VaN8LTTtjVb7+e+/KxKndQAAAAAAAAAAAAAAAAAAwFYt3/TbcPHxmtAvh+WH/Mdwy9UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNVYfv5/i8a8Cl9gcBoPH13zLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAM+CsAAP//yylfnw==") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000f80)=ANY=[@ANYRESOCT=r2, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) renameat2(r2, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 346.019455ms ago: executing program 4 (id=407): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1da748e3}}, './file0\x00'}) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000140)=""/19) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000780)='netlink_extack\x00', r3, 0x0, 0xb0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x3c711676, 0x3fa, 0x10000001, 0xad, 0x0, 0x2000}, {0x0, 0x200000, 0x400}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x40000, 0xa, 0x4, 0x0, 0x74}}, 0xf0}}, 0x2008015) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000009508b771a8c45e8f9f99814dcb083b1e5e7df7aef7e89bbfe8a5fa7f36e83180040cae6f83579e425ebdccd5abcf1bf5fb32b27ae05c08dc980d149238b9d4eaa476c1013b1671d542b330fe6ae578527372952fa7327986bcead722a874a140d13da6b7933a990c17aa71e085d04cec48bc0704b06c84"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911089000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff4c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r7) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r8, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32=r9, @ANYBLOB="6ac5439c6dd05805ec6559ae72c87c3eb7bc06cc0d95d9fe6be45446a49968007282a04b7169e1030a68e437b12fd582907d02ee83f4ec8fef791f2de464a8c5330ee94b74ebcb1f4253fdac98ed1e1326143145c9a2d904a4c971dd2a1ebbd7303983b79ac8346864e1323bc2ead3c1ba05c25a1146119af930eac8b78338337b45cd4d234c584310d1d19c8f16a4480072636b1b2bcdb9d70912ec96c84335f583ff5958a3c08b409092fa2babd103b96ddbd350c4"], 0x28}}, 0x0) 292.019777ms ago: executing program 3 (id=408): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xffe}, 0x18) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000001440)={[{@errors_continue}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="80007f000a000200ff"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) ptrace$poke(0x4, 0x0, &(0x7f0000001480), 0xfffffffffffffff8) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") unlink(&(0x7f0000000180)='./file1\x00') 291.346027ms ago: executing program 4 (id=409): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r6, 0x7, '\x00', "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"}}, 0x110) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000600), r6, 0x1}}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfffffffc}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "85592b69f12db5484e587dc234f9e55ffbba28ba4910bced26bedb619b81786d", "338aeb5475c1dcbe7d209ccec4e57c3d79bff41cab451179c0afdcfd1076a9db", "88d29ce6427948ce96bb80a684746f0108088f6feadfbb18d206f386bd56b9ae", "2aa3c36a0fdf0971b557deff0e6a5b5a92ea97ce04ffbd45082bfb87b67f8cfc", "4a384cb237f4bb88635f51a092d53d050b454517343c09ab96e529584155d5aa", "1de9a4423a8843ad3a3c3806", 0xfffffff9, 0x7ff, 0x4, 0xffffffff}}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 161.999013ms ago: executing program 3 (id=410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40100) close_range(r0, 0xffffffffffffffff, 0x0) 161.330173ms ago: executing program 4 (id=411): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f00000005c0)="f1", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000000700)="da", 0x1}, {&(0x7f0000000440)="17", 0x1}], 0x4, 0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@nodelalloc}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nojournal_checksum}, {@stripe={'stripe', 0x3d, 0x12}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="4b000000020000000b"], 0x36f0516f) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fallocate(r3, 0x71, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 103.455725ms ago: executing program 3 (id=412): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000580)={0x6, "aba26ed49fba3b04f7454c5e2e7fb6ed1fb798f5da35aec570aae34c1042e70b719bd2c577ebdddc38c473974879db9762dfc0ffb144035abb1b8a62676f2088150d25c1422600fbe1abaa81e8687ea739dec1290e6a77960c223128281f4c7c2c6863add427580ef580045ff5f07e50901fc537a64eb1fd94782006fd6f184999e9e50059dca654e0c8dfcc0e7e3dae54a07ae544724153da157cd20dd6e5711485337eff9afc0369058a770db73246880e5d3f5fde72a78d8b87e6d9c6e52cf52e7431a3424fe6316218c3e071097d9c6f90b55a737ee3a78dc3beda50b410767f2b839a3bb6fa486b08e2084029e929c4eb23efa93d3817dd89cdd10dd979"}) 103.029065ms ago: executing program 3 (id=413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @empty, 0x40000000}, 0x1c) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000326bd7000fbdbdf250a00000030000680060005004e22000008000700", @ANYRES32=0x0, @ANYBLOB="1400040020010000200000000001060005004e20de3a558b23652773de794d847d5eaf0000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8008080}, 0x20004810) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 102.561995ms ago: executing program 3 (id=414): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180), 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x202080, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 40.605178ms ago: executing program 4 (id=415): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x47, 0x80000000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x1b, 0x0, 0x40000000, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x395, &(0x7f0000001980)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60000000035f3a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 0s ago: executing program 3 (id=416): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7fc, @dev={0xfe, 0x80, '\x00', 0x10}, 0xb}, 0x1c) shutdown(r0, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010000000000000000002c"], 0x14}}, 0x0) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x5, 0x19, "9e"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @local, 0x10000}, 0x1b) kernel console output (not intermixed with test programs): { siginh } for pid=3193 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.454858][ T29] audit: type=1400 audit(1765429486.612:62): avc: denied { search } for pid=3198 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.476852][ T29] audit: type=1400 audit(1765429486.612:63): avc: denied { search } for pid=3198 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.499413][ T29] audit: type=1400 audit(1765429486.612:64): avc: denied { search } for pid=3198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.524072][ T29] audit: type=1400 audit(1765429486.612:65): avc: denied { search } for pid=3198 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.550904][ T29] audit: type=1400 audit(1765429486.712:66): avc: denied { read open } for pid=3200 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts. [ 28.018779][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 28.018795][ T29] audit: type=1400 audit(1765429494.182:70): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.047791][ T29] audit: type=1400 audit(1765429494.212:71): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.048681][ T3305] cgroup: Unknown subsys name 'net' [ 28.075442][ T29] audit: type=1400 audit(1765429494.232:72): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.276750][ T3305] cgroup: Unknown subsys name 'cpuset' [ 28.282860][ T3305] cgroup: Unknown subsys name 'rlimit' [ 28.454073][ T29] audit: type=1400 audit(1765429494.612:73): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.477379][ T29] audit: type=1400 audit(1765429494.612:74): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.497862][ T29] audit: type=1400 audit(1765429494.612:75): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.506162][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.518250][ T29] audit: type=1400 audit(1765429494.612:76): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.547081][ T29] audit: type=1400 audit(1765429494.622:77): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.571842][ T29] audit: type=1400 audit(1765429494.622:78): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.583391][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.595120][ T29] audit: type=1400 audit(1765429494.642:79): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.730939][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.803917][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 29.839446][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.846650][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.853974][ T3315] bridge_slave_0: entered allmulticast mode [ 29.860582][ T3315] bridge_slave_0: entered promiscuous mode [ 29.883315][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.890456][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.897631][ T3315] bridge_slave_1: entered allmulticast mode [ 29.904044][ T3315] bridge_slave_1: entered promiscuous mode [ 29.910654][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 29.962531][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.969693][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.976986][ T3316] bridge_slave_0: entered allmulticast mode [ 29.983463][ T3316] bridge_slave_0: entered promiscuous mode [ 29.995391][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.007825][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.014897][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.022307][ T3316] bridge_slave_1: entered allmulticast mode [ 30.028695][ T3316] bridge_slave_1: entered promiscuous mode [ 30.040700][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.061963][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 30.097701][ T3315] team0: Port device team_slave_0 added [ 30.104419][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.114814][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.135038][ T3315] team0: Port device team_slave_1 added [ 30.166602][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.173766][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.180958][ T3318] bridge_slave_0: entered allmulticast mode [ 30.187504][ T3318] bridge_slave_0: entered promiscuous mode [ 30.196130][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.203261][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.210640][ T3318] bridge_slave_1: entered allmulticast mode [ 30.217098][ T3318] bridge_slave_1: entered promiscuous mode [ 30.228840][ T3316] team0: Port device team_slave_0 added [ 30.239869][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 30.253674][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.260740][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.286660][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.298334][ T3316] team0: Port device team_slave_1 added [ 30.315874][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.322874][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.348849][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.372492][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.379582][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.386758][ T3323] bridge_slave_0: entered allmulticast mode [ 30.393166][ T3323] bridge_slave_0: entered promiscuous mode [ 30.400984][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.422494][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.429623][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.436878][ T3323] bridge_slave_1: entered allmulticast mode [ 30.443242][ T3323] bridge_slave_1: entered promiscuous mode [ 30.451048][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.461096][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.468184][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.494210][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.523051][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.530119][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.556116][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.574428][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.598335][ T3318] team0: Port device team_slave_0 added [ 30.605658][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.621424][ T3315] hsr_slave_0: entered promiscuous mode [ 30.627433][ T3315] hsr_slave_1: entered promiscuous mode [ 30.633873][ T3318] team0: Port device team_slave_1 added [ 30.663564][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.670818][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.678016][ T3317] bridge_slave_0: entered allmulticast mode [ 30.684414][ T3317] bridge_slave_0: entered promiscuous mode [ 30.701770][ T3323] team0: Port device team_slave_0 added [ 30.707666][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.714776][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.722018][ T3317] bridge_slave_1: entered allmulticast mode [ 30.728639][ T3317] bridge_slave_1: entered promiscuous mode [ 30.739885][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.746863][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.772814][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.785879][ T3316] hsr_slave_0: entered promiscuous mode [ 30.792125][ T3316] hsr_slave_1: entered promiscuous mode [ 30.798016][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 30.803749][ T3316] Cannot create hsr debugfs directory [ 30.810100][ T3323] team0: Port device team_slave_1 added [ 30.834660][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.841738][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.867661][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.896548][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.903511][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.929449][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.941364][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.958769][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.965734][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.991665][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.003371][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.051771][ T3318] hsr_slave_0: entered promiscuous mode [ 31.057814][ T3318] hsr_slave_1: entered promiscuous mode [ 31.063716][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 31.069561][ T3318] Cannot create hsr debugfs directory [ 31.075675][ T3317] team0: Port device team_slave_0 added [ 31.094144][ T3317] team0: Port device team_slave_1 added [ 31.121069][ T3323] hsr_slave_0: entered promiscuous mode [ 31.127252][ T3323] hsr_slave_1: entered promiscuous mode [ 31.133196][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 31.138978][ T3323] Cannot create hsr debugfs directory [ 31.162771][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.169749][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.195709][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.211601][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.218619][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.244543][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.320229][ T3317] hsr_slave_0: entered promiscuous mode [ 31.326349][ T3317] hsr_slave_1: entered promiscuous mode [ 31.332210][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 31.337966][ T3317] Cannot create hsr debugfs directory [ 31.400354][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.411030][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.424058][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.439613][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.479074][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.500174][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.521796][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.532722][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.546199][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.560689][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.575108][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.592905][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.607603][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.626163][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.635887][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.645384][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.674505][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.681800][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.698561][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.708709][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.727708][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.739859][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.752755][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.759871][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.781067][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.788166][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.810405][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.840307][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.861911][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.869089][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.885248][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.893601][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.900748][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.917097][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.947798][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.957392][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.969192][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.976277][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.994816][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.001907][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.010876][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.017931][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.033770][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.040997][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.060196][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.070186][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.116922][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.141835][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.148973][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.168788][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.182073][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.189297][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.252574][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.299023][ T3315] veth0_vlan: entered promiscuous mode [ 32.311804][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.344987][ T3315] veth1_vlan: entered promiscuous mode [ 32.377713][ T3315] veth0_macvtap: entered promiscuous mode [ 32.389598][ T3315] veth1_macvtap: entered promiscuous mode [ 32.398326][ T3316] veth0_vlan: entered promiscuous mode [ 32.418187][ T3316] veth1_vlan: entered promiscuous mode [ 32.430913][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.448200][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.464263][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.483110][ T409] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.497486][ T3316] veth0_macvtap: entered promiscuous mode [ 32.505271][ T409] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.534196][ T409] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.546650][ T3316] veth1_macvtap: entered promiscuous mode [ 32.564894][ T409] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.584910][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.595638][ T3323] veth0_vlan: entered promiscuous mode [ 32.617807][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.626186][ T3318] veth0_vlan: entered promiscuous mode [ 32.643220][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.660257][ T3323] veth1_vlan: entered promiscuous mode [ 32.667611][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.677090][ T3318] veth1_vlan: entered promiscuous mode [ 32.694199][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.712131][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.722538][ T3317] veth0_vlan: entered promiscuous mode [ 32.728754][ T3485] loop0: detected capacity change from 0 to 1024 [ 32.735402][ T3485] ======================================================= [ 32.735402][ T3485] WARNING: The mand mount option has been deprecated and [ 32.735402][ T3485] and is ignored by this kernel. Remove the mand [ 32.735402][ T3485] option from the mount to silence this warning. [ 32.735402][ T3485] ======================================================= [ 32.762229][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.788501][ T3318] veth0_macvtap: entered promiscuous mode [ 32.798432][ T3485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.813471][ T3318] veth1_macvtap: entered promiscuous mode [ 32.814972][ T3485] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.830608][ T3485] netlink: zone id is out of range [ 32.831429][ T3323] veth0_macvtap: entered promiscuous mode [ 32.835732][ T3485] netlink: zone id is out of range [ 32.835839][ T3485] netlink: zone id is out of range [ 32.842782][ T3317] veth1_vlan: entered promiscuous mode [ 32.860676][ T3323] veth1_macvtap: entered promiscuous mode [ 32.863043][ T3485] netlink: zone id is out of range [ 32.872670][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.880507][ T3485] netlink: zone id is out of range [ 32.885722][ T3485] netlink: zone id is out of range [ 32.891549][ T3485] netlink: zone id is out of range [ 32.896818][ T3485] netlink: zone id is out of range [ 32.900476][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.902310][ T3485] netlink: zone id is out of range [ 32.914396][ T3485] netlink: zone id is out of range [ 32.926995][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.952253][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.959678][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.959768][ T3493] loop3: detected capacity change from 0 to 512 [ 32.973382][ T3317] veth0_macvtap: entered promiscuous mode [ 32.981107][ T3485] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 32.992560][ T3493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.008276][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.019023][ T3493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.027053][ T3317] veth1_macvtap: entered promiscuous mode [ 33.047974][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.056821][ T3493] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.062883][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.075685][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.085439][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 33.085449][ T29] audit: type=1400 audit(1765429499.242:111): avc: denied { add_name } for pid=3492 comm="syz.3.4" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.112733][ T29] audit: type=1400 audit(1765429499.242:112): avc: denied { create } for pid=3492 comm="syz.3.4" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.117773][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.134393][ T29] audit: type=1400 audit(1765429499.252:113): avc: denied { append open } for pid=3492 comm="syz.3.4" path="/0/bus/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.170902][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.182551][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.195034][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.209133][ T29] audit: type=1400 audit(1765429499.312:114): avc: denied { write } for pid=3492 comm="syz.3.4" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.231915][ T29] audit: type=1400 audit(1765429499.312:115): avc: denied { open } for pid=3492 comm="syz.3.4" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.255005][ T29] audit: type=1400 audit(1765429499.312:116): avc: denied { ioctl } for pid=3492 comm="syz.3.4" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.279612][ T29] audit: type=1326 audit(1765429499.362:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 33.302690][ T29] audit: type=1326 audit(1765429499.362:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 33.325839][ T29] audit: type=1326 audit(1765429499.362:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 33.348893][ T29] audit: type=1326 audit(1765429499.362:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.0.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 33.395948][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.417357][ T3506] netlink: 340 bytes leftover after parsing attributes in process `syz.0.8'. [ 33.437794][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.467222][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.511677][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.559485][ T3519] loop4: detected capacity change from 0 to 128 [ 33.571157][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.581208][ T3519] vfat: Unknown parameter 'GPL' [ 33.595821][ T3515] syzkaller0: entered promiscuous mode [ 33.601420][ T3515] syzkaller0: entered allmulticast mode [ 33.608769][ T1088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.641996][ T3524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.656395][ T1088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.677964][ T3515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=517 sclass=netlink_route_socket pid=3515 comm=syz.1.2 [ 33.705360][ T3523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.756019][ T3524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.769153][ T3528] tipc: Enabling of bearer rejected, failed to enable media [ 33.779870][ T3523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.811984][ T3524] tipc: Started in network mode [ 33.816997][ T3524] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 33.862282][ T3524] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 33.870696][ T3524] tipc: Enabled bearer , priority 10 [ 33.919294][ T3535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11'. [ 33.928432][ T3523] tipc: Enabling of bearer rejected, already enabled [ 33.936295][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 33.953135][ T3535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=3535 comm=syz.2.11 [ 34.013804][ T3542] loop1: detected capacity change from 0 to 512 [ 34.036487][ T3542] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.064110][ T3546] loop3: detected capacity change from 0 to 512 [ 34.069729][ T3545] loop2: detected capacity change from 0 to 1024 [ 34.088792][ T3542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.093053][ T3550] loop0: detected capacity change from 0 to 256 [ 34.109511][ T3546] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.126758][ T3542] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.152705][ T3545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.167256][ T3546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.181015][ T3546] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.185558][ T3545] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.231686][ T3545] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.15: bg 0: block 112: padding at end of block bitmap is not set [ 34.273765][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.359738][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.447643][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.503825][ C1] hrtimer: interrupt took 57890 ns [ 34.549703][ T3575] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 34.556270][ T3575] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 34.563732][ T3575] vhci_hcd vhci_hcd.0: Device attached [ 34.580146][ T3578] loop3: detected capacity change from 0 to 256 [ 34.581464][ T3582] vhci_hcd: connection closed [ 34.590269][ T12] vhci_hcd vhci_hcd.1: stop threads [ 34.600189][ T12] vhci_hcd vhci_hcd.1: release socket [ 34.605576][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 34.695545][ T3589] netlink: 'syz.2.26': attribute type 3 has an invalid length. [ 34.703273][ T3589] netlink: 'syz.2.26': attribute type 1 has an invalid length. [ 34.711083][ T3589] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.26'. [ 34.725821][ T3589] syz.2.26 uses obsolete (PF_INET,SOCK_PACKET) [ 34.759737][ T3589] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 34.769280][ T3589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.778943][ T3589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.958071][ T3606] capability: warning: `syz.4.31' uses deprecated v2 capabilities in a way that may be insecure [ 34.975117][ T3606] loop4: detected capacity change from 0 to 512 [ 34.982022][ T3606] EXT4-fs: Ignoring removed bh option [ 34.987705][ T3513] tipc: Node number set to 1 [ 34.992987][ T3606] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 35.007407][ T3606] EXT4-fs (loop4): 1 truncate cleaned up [ 35.014456][ T3606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.045018][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.082898][ T3611] loop4: detected capacity change from 0 to 512 [ 35.095505][ T3611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.145779][ T3611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.165082][ T3611] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.222504][ T3624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 35.296850][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.365231][ T3632] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.378356][ T3632] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 35.521104][ T3641] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 36.360490][ T3647] FAULT_INJECTION: forcing a failure. [ 36.360490][ T3647] name failslab, interval 1, probability 0, space 0, times 0 [ 36.373254][ T3647] CPU: 0 UID: 0 PID: 3647 Comm: syz.2.42 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.373283][ T3647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 36.373332][ T3647] Call Trace: [ 36.373345][ T3647] [ 36.373354][ T3647] __dump_stack+0x1d/0x30 [ 36.373389][ T3647] dump_stack_lvl+0xe8/0x140 [ 36.373411][ T3647] dump_stack+0x15/0x1b [ 36.373430][ T3647] should_fail_ex+0x265/0x280 [ 36.373452][ T3647] should_failslab+0x8c/0xb0 [ 36.373554][ T3647] __kmalloc_noprof+0xb9/0x5a0 [ 36.373595][ T3647] ? alloc_pipe_info+0x1c9/0x340 [ 36.373615][ T3647] ? alloc_pipe_info+0xae/0x340 [ 36.373635][ T3647] alloc_pipe_info+0x1c9/0x340 [ 36.373728][ T3647] splice_direct_to_actor+0x592/0x680 [ 36.373752][ T3647] ? kstrtouint_from_user+0x9f/0xf0 [ 36.373777][ T3647] ? __pfx_direct_splice_actor+0x10/0x10 [ 36.373802][ T3647] ? __rcu_read_unlock+0x4f/0x70 [ 36.373826][ T3647] ? get_pid_task+0x96/0xd0 [ 36.373956][ T3647] ? avc_policy_seqno+0x15/0x30 [ 36.373995][ T3647] ? selinux_file_permission+0x1e2/0x320 [ 36.374107][ T3647] do_splice_direct+0xda/0x150 [ 36.374190][ T3647] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 36.374222][ T3647] do_sendfile+0x380/0x650 [ 36.374251][ T3647] __x64_sys_sendfile64+0x105/0x150 [ 36.374284][ T3647] x64_sys_call+0x2db1/0x3000 [ 36.374385][ T3647] do_syscall_64+0xd8/0x2a0 [ 36.374418][ T3647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.374438][ T3647] RIP: 0033:0x7f0c47f9f749 [ 36.374458][ T3647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.374479][ T3647] RSP: 002b:00007f0c469bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 36.374578][ T3647] RAX: ffffffffffffffda RBX: 00007f0c481f6180 RCX: 00007f0c47f9f749 [ 36.374591][ T3647] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 36.374603][ T3647] RBP: 00007f0c469bd090 R08: 0000000000000000 R09: 0000000000000000 [ 36.374617][ T3647] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001 [ 36.374633][ T3647] R13: 00007f0c481f6218 R14: 00007f0c481f6180 R15: 00007ffc5f9f0d08 [ 36.374658][ T3647] [ 36.764674][ T3649] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 37.560202][ T3652] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.625215][ T3661] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 37.640822][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.648343][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.678325][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.685746][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.740542][ T3652] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.748597][ T3664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 37.763749][ T3666] EXT4-fs: Mount option(s) incompatible with ext3 [ 37.770608][ T3664] ip6_vti0 speed is unknown, defaulting to 1000 [ 37.777501][ T3664] ip6_vti0 speed is unknown, defaulting to 1000 [ 37.784271][ T3664] ip6_vti0 speed is unknown, defaulting to 1000 [ 37.841833][ T3652] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.888270][ T3664] infiniband syz2: set down [ 37.892834][ T3664] infiniband syz2: added ip6_vti0 [ 37.892860][ T1039] ip6_vti0 speed is unknown, defaulting to 1000 [ 37.917243][ T3664] RDS/IB: syz2: added [ 37.924640][ T3652] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.926673][ T3664] smc: adding ib device syz2 with port count 1 [ 38.004871][ T3664] smc: ib device syz2 port 1 has no pnetid [ 38.011111][ T3513] ip6_vti0 speed is unknown, defaulting to 1000 [ 38.023571][ T3664] ip6_vti0 speed is unknown, defaulting to 1000 [ 38.023581][ T2095] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.079786][ T2095] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.110258][ T2095] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.125447][ T3675] set_capacity_and_notify: 4 callbacks suppressed [ 38.125461][ T3675] loop1: detected capacity change from 0 to 2048 [ 38.138600][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 38.138614][ T29] audit: type=1400 audit(1765429504.272:495): avc: denied { bind } for pid=3674 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.155476][ T2095] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.163976][ T29] audit: type=1400 audit(1765429504.272:496): avc: denied { setopt } for pid=3674 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.199957][ T29] audit: type=1400 audit(1765429504.362:497): avc: denied { create } for pid=3665 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 38.224793][ T3664] ip6_vti0 speed is unknown, defaulting to 1000 [ 38.276893][ T3675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.327463][ T3664] ip6_vti0 speed is unknown, defaulting to 1000 [ 38.494972][ T3664] ip6_vti0 speed is unknown, defaulting to 1000 [ 38.575425][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.939028][ T3705] netlink: 'syz.0.55': attribute type 21 has an invalid length. [ 38.948828][ T29] audit: type=1400 audit(1765429505.092:498): avc: denied { perfmon } for pid=3699 comm="syz.1.56" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.969661][ T29] audit: type=1400 audit(1765429505.092:499): avc: denied { bpf } for pid=3697 comm="syz.0.55" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.005830][ T3704] loop1: detected capacity change from 0 to 256 [ 39.021538][ T3705] netlink: 'syz.0.55': attribute type 1 has an invalid length. [ 39.029248][ T3705] netlink: 132 bytes leftover after parsing attributes in process `syz.0.55'. [ 39.045657][ T37] nci: nci_ntf_packet: unknown ntf opcode 0x121 [ 39.087719][ T3664] ip6_vti0 speed is unknown, defaulting to 1000 [ 39.122421][ T29] audit: type=1326 audit(1765429505.282:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3697 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 39.136705][ T3710] loop3: detected capacity change from 0 to 256 [ 39.227115][ T29] audit: type=1326 audit(1765429505.312:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3697 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 39.250332][ T29] audit: type=1326 audit(1765429505.312:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3697 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 39.254745][ T3720] loop0: detected capacity change from 0 to 512 [ 39.273654][ T29] audit: type=1326 audit(1765429505.312:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3697 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 39.303059][ T29] audit: type=1326 audit(1765429505.312:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3697 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 39.309316][ T3715] loop1: detected capacity change from 0 to 256 [ 39.334364][ T3720] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.369945][ T3720] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.384430][ T3664] syz.4.46 (3664) used greatest stack depth: 10328 bytes left [ 39.408700][ T3720] EXT4-fs (loop0): 1 truncate cleaned up [ 39.414899][ T3720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.428771][ T3727] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 39.437682][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.445083][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.452943][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.460364][ T3727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.536382][ T3720] ip6_vti0 speed is unknown, defaulting to 1000 [ 39.574341][ T3742] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.590386][ T3740] loop1: detected capacity change from 0 to 512 [ 39.603413][ T3745] 9p: Bad value for 'rfdno' [ 39.608254][ T3745] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.623273][ T3740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.637069][ T3745] netlink: 'syz.4.61': attribute type 10 has an invalid length. [ 39.657454][ T3745] team0: Port device dummy0 added [ 39.681146][ T3740] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.747368][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.821391][ T3771] bridge0: port 3(batadv1) entered blocking state [ 39.828138][ T3771] bridge0: port 3(batadv1) entered disabled state [ 39.895104][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.895181][ T3771] batadv1: entered allmulticast mode [ 39.895870][ T3771] batadv1: entered promiscuous mode [ 39.965712][ T3786] loop2: detected capacity change from 0 to 256 [ 39.977445][ T3579] IPVS: starting estimator thread 0... [ 39.984249][ T3792] net_ratelimit: 19 callbacks suppressed [ 39.984334][ T3792] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 40.058955][ T3792] Zero length message leads to an empty skb [ 40.096133][ T3793] IPVS: using max 1872 ests per chain, 93600 per kthread [ 40.691209][ T3809] ip6_vti0 speed is unknown, defaulting to 1000 [ 40.777112][ T589] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 40.786362][ T589] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 40.933971][ T3745] syz.4.61 (3745) used greatest stack depth: 9880 bytes left [ 40.948434][ T3805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 41.077336][ T3823] 9p: Bad value for 'rfdno' [ 41.098733][ T3823] netlink: 'syz.1.73': attribute type 10 has an invalid length. [ 41.138820][ T3823] team0: Port device dummy0 added [ 41.905280][ T3854] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.970139][ T3854] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.051105][ T3854] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.112117][ T3854] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.175511][ T2095] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.192375][ T2095] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.208635][ T2095] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.219969][ T2095] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.254793][ T3869] 9p: Bad value for 'rfdno' [ 42.260441][ T3869] netlink: 'syz.4.84': attribute type 10 has an invalid length. [ 42.297949][ T3871] netlink: 56 bytes leftover after parsing attributes in process `syz.2.88'. [ 42.348129][ T3875] loop2: detected capacity change from 0 to 4096 [ 42.357898][ T3876] loop1: detected capacity change from 0 to 256 [ 42.358327][ T3875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.392172][ T3876] FAT-fs (loop1): IO charset cp864 not found [ 42.406689][ T3875] FAULT_INJECTION: forcing a failure. [ 42.406689][ T3875] name failslab, interval 1, probability 0, space 0, times 0 [ 42.419356][ T3875] CPU: 0 UID: 0 PID: 3875 Comm: syz.2.90 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.419385][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.419399][ T3875] Call Trace: [ 42.419407][ T3875] [ 42.419416][ T3875] __dump_stack+0x1d/0x30 [ 42.419507][ T3875] dump_stack_lvl+0xe8/0x140 [ 42.419536][ T3875] dump_stack+0x15/0x1b [ 42.419560][ T3875] should_fail_ex+0x265/0x280 [ 42.419587][ T3875] should_failslab+0x8c/0xb0 [ 42.419646][ T3875] kmem_cache_alloc_noprof+0x69/0x4b0 [ 42.419672][ T3875] ? getname_flags+0x80/0x3b0 [ 42.419695][ T3875] getname_flags+0x80/0x3b0 [ 42.419716][ T3875] __x64_sys_lgetxattr+0xfd/0x140 [ 42.419822][ T3875] x64_sys_call+0x27a2/0x3000 [ 42.419846][ T3875] do_syscall_64+0xd8/0x2a0 [ 42.419876][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.419947][ T3875] RIP: 0033:0x7f0c47f9f749 [ 42.419964][ T3875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.419985][ T3875] RSP: 002b:00007f0c469ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 42.420015][ T3875] RAX: ffffffffffffffda RBX: 00007f0c481f5fa0 RCX: 00007f0c47f9f749 [ 42.420029][ T3875] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000 [ 42.420041][ T3875] RBP: 00007f0c469ff090 R08: 0000000000000000 R09: 0000000000000000 [ 42.420072][ T3875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.420086][ T3875] R13: 00007f0c481f6038 R14: 00007f0c481f5fa0 R15: 00007ffc5f9f0d08 [ 42.420108][ T3875] [ 42.602465][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.612375][ T3876] Illegal XDP return value 4294967274 on prog (id 66) dev syz_tun, expect packet loss! [ 42.711667][ T3889] loop2: detected capacity change from 0 to 4096 [ 42.737451][ T3889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.786458][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.849944][ T3894] EXT4-fs: inline encryption not supported [ 42.855786][ T3894] EXT4-fs: Ignoring removed orlov option [ 42.861928][ T3894] EXT4-fs: Mount option(s) incompatible with ext2 [ 43.076270][ T3908] FAULT_INJECTION: forcing a failure. [ 43.076270][ T3908] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.089452][ T3908] CPU: 0 UID: 0 PID: 3908 Comm: syz.0.100 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.089477][ T3908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.089490][ T3908] Call Trace: [ 43.089497][ T3908] [ 43.089510][ T3908] __dump_stack+0x1d/0x30 [ 43.089537][ T3908] dump_stack_lvl+0xe8/0x140 [ 43.089618][ T3908] dump_stack+0x15/0x1b [ 43.089639][ T3908] should_fail_ex+0x265/0x280 [ 43.089663][ T3908] should_fail+0xb/0x20 [ 43.089683][ T3908] should_fail_usercopy+0x1a/0x20 [ 43.089762][ T3908] _copy_from_user+0x1c/0xb0 [ 43.089877][ T3908] br_ioctl_stub+0x1f0/0x860 [ 43.089913][ T3908] ? __sanitizer_cov_trace_switch+0x8f/0x130 [ 43.089947][ T3908] ? __cond_resched+0x4e/0x90 [ 43.089976][ T3908] ? __pfx_br_ioctl_stub+0x10/0x10 [ 43.090040][ T3908] sock_ioctl+0x39c/0x610 [ 43.090080][ T3908] ? __pfx_sock_ioctl+0x10/0x10 [ 43.090116][ T3908] __se_sys_ioctl+0xce/0x140 [ 43.090236][ T3908] __x64_sys_ioctl+0x43/0x50 [ 43.090273][ T3908] x64_sys_call+0x14b0/0x3000 [ 43.090358][ T3908] do_syscall_64+0xd8/0x2a0 [ 43.090398][ T3908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.090423][ T3908] RIP: 0033:0x7f86984bf749 [ 43.090441][ T3908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.090462][ T3908] RSP: 002b:00007f8696f1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.090554][ T3908] RAX: ffffffffffffffda RBX: 00007f8698715fa0 RCX: 00007f86984bf749 [ 43.090569][ T3908] RDX: 0000200000000040 RSI: 00000000000089a1 RDI: 0000000000000004 [ 43.090583][ T3908] RBP: 00007f8696f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 43.090593][ T3908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.090602][ T3908] R13: 00007f8698716038 R14: 00007f8698715fa0 R15: 00007fff642e72e8 [ 43.090618][ T3908] [ 43.346114][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 43.346149][ T29] audit: type=1400 audit(1765429510.495:727): avc: denied { create } for pid=3914 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 43.371896][ T29] audit: type=1400 audit(1765429510.495:728): avc: denied { create } for pid=3914 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 43.420165][ T3922] set_capacity_and_notify: 2 callbacks suppressed [ 43.420182][ T3922] loop4: detected capacity change from 0 to 256 [ 43.488650][ T29] audit: type=1326 audit(1765429510.575:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b99abf749 code=0x7ffc0000 [ 43.512007][ T29] audit: type=1326 audit(1765429510.575:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b99abf749 code=0x7ffc0000 [ 43.535386][ T29] audit: type=1326 audit(1765429510.575:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b99abf749 code=0x7ffc0000 [ 43.558692][ T29] audit: type=1326 audit(1765429510.575:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f5b99abf749 code=0x7ffc0000 [ 43.576527][ T3930] loop0: detected capacity change from 0 to 128 [ 43.581900][ T29] audit: type=1326 audit(1765429510.575:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b99abf749 code=0x7ffc0000 [ 43.611406][ T29] audit: type=1326 audit(1765429510.575:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f5b99abf749 code=0x7ffc0000 [ 43.634565][ T29] audit: type=1326 audit(1765429510.575:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b99abf749 code=0x7ffc0000 [ 43.657896][ T29] audit: type=1326 audit(1765429510.575:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f5b99abf749 code=0x7ffc0000 [ 43.715843][ T3930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 43.735711][ T3930] tipc: Started in network mode [ 43.740630][ T3930] tipc: Node identity 4, cluster identity 4711 [ 43.746821][ T3930] tipc: Node number set to 4 [ 43.773622][ T3935] loop3: detected capacity change from 0 to 256 [ 43.782300][ T3937] loop0: detected capacity change from 0 to 512 [ 43.806193][ T3937] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.817723][ T3937] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 43.827874][ T3937] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.113: Corrupt directory, running e2fsck is recommended [ 43.867653][ T3937] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 43.876103][ T3937] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.113: corrupted in-inode xattr: e_name out of bounds [ 43.906480][ T3937] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.113: couldn't read orphan inode 15 (err -117) [ 43.932190][ T3937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.952411][ T3927] mmap: syz.1.108 (3927): VmData 17453056 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 43.968655][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.023015][ T3950] FAULT_INJECTION: forcing a failure. [ 44.023015][ T3950] name failslab, interval 1, probability 0, space 0, times 0 [ 44.035756][ T3950] CPU: 1 UID: 0 PID: 3950 Comm: gtp Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.035782][ T3950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.035795][ T3950] Call Trace: [ 44.035802][ T3950] [ 44.035809][ T3950] __dump_stack+0x1d/0x30 [ 44.035829][ T3950] dump_stack_lvl+0xe8/0x140 [ 44.035908][ T3950] dump_stack+0x15/0x1b [ 44.035929][ T3950] should_fail_ex+0x265/0x280 [ 44.035953][ T3950] should_failslab+0x8c/0xb0 [ 44.036055][ T3950] __kmalloc_cache_noprof+0x65/0x4c0 [ 44.036081][ T3950] ? alloc_pipe_info+0xae/0x340 [ 44.036105][ T3950] alloc_pipe_info+0xae/0x340 [ 44.036126][ T3950] splice_direct_to_actor+0x592/0x680 [ 44.036147][ T3950] ? kstrtouint_from_user+0x9f/0xf0 [ 44.036166][ T3950] ? __pfx_direct_splice_actor+0x10/0x10 [ 44.036188][ T3950] ? __rcu_read_unlock+0x4f/0x70 [ 44.036210][ T3950] ? get_pid_task+0x96/0xd0 [ 44.036295][ T3950] ? avc_policy_seqno+0x15/0x30 [ 44.036309][ T3950] ? selinux_file_permission+0x1e2/0x320 [ 44.036367][ T3950] do_splice_direct+0xda/0x150 [ 44.036383][ T3950] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 44.036404][ T3950] do_sendfile+0x380/0x650 [ 44.036484][ T3950] __x64_sys_sendfile64+0x105/0x150 [ 44.036529][ T3950] x64_sys_call+0x2db1/0x3000 [ 44.036597][ T3950] do_syscall_64+0xd8/0x2a0 [ 44.036638][ T3950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.036674][ T3950] RIP: 0033:0x7f86984bf749 [ 44.036690][ T3950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.036711][ T3950] RSP: 002b:00007f8696f1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 44.036727][ T3950] RAX: ffffffffffffffda RBX: 00007f8698715fa0 RCX: 00007f86984bf749 [ 44.036819][ T3950] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 44.036833][ T3950] RBP: 00007f8696f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.036846][ T3950] R10: 000000040000f63c R11: 0000000000000246 R12: 0000000000000001 [ 44.036857][ T3950] R13: 00007f8698716038 R14: 00007f8698715fa0 R15: 00007fff642e72e8 [ 44.036873][ T3950] [ 44.084488][ T3953] 9p: Bad value for 'rfdno' [ 44.208906][ T3952] netlink: 'syz.2.110': attribute type 10 has an invalid length. [ 44.262659][ T3952] team0: Port device dummy0 added [ 44.407712][ T3968] loop0: detected capacity change from 0 to 512 [ 44.424402][ T3968] ext4: Unknown parameter 'smackfsdef' [ 44.436157][ T3968] netlink: 'syz.0.123': attribute type 4 has an invalid length. [ 44.460978][ T3968] netlink: 'syz.0.123': attribute type 4 has an invalid length. [ 44.485095][ T3968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.123'. [ 44.511935][ T3982] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 44.546205][ T3968] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.553453][ T3968] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.612761][ T3987] Cannot find del_set index 0 as target [ 44.629686][ T3987] loop1: detected capacity change from 0 to 2048 [ 44.647934][ T3987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.660711][ T3987] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.672429][ T3987] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.128: bg 0: block 345: padding at end of block bitmap is not set [ 44.688829][ T3987] EXT4-fs (loop1): Remounting filesystem read-only [ 44.695524][ T3987] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1606: inode #18: comm syz.1.128: cleanup dec ref error -117 [ 44.713157][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.726522][ T3987] wireguard0: entered promiscuous mode [ 44.732039][ T3987] wireguard0: entered allmulticast mode [ 44.744557][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.757752][ T3994] loop3: detected capacity change from 0 to 512 [ 44.772375][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.801433][ T3994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.806172][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.841838][ T3994] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.875837][ T3994] netlink: 388 bytes leftover after parsing attributes in process `syz.3.129'. [ 44.886221][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.913638][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.925820][ T4013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 45.009408][ T4023] loop2: detected capacity change from 0 to 512 [ 45.111894][ T4034] loop1: detected capacity change from 0 to 512 [ 45.120159][ T4035] 9p: Bad value for 'rfdno' [ 45.125883][ T4035] netlink: 'syz.3.141': attribute type 10 has an invalid length. [ 45.142149][ T4034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.147127][ T4035] team0: Port device dummy0 added [ 45.162725][ T4034] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.188438][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.286099][ T4042] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 45.292626][ T4042] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 45.300128][ T4042] vhci_hcd vhci_hcd.0: Device attached [ 45.307571][ T4043] vhci_hcd: connection closed [ 45.307912][ T70] vhci_hcd vhci_hcd.1: stop threads [ 45.317887][ T70] vhci_hcd vhci_hcd.1: release socket [ 45.323265][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 45.429228][ T4046] openvswitch: netlink: Missing key (keys=40, expected=100) [ 45.852406][ T4051] loop1: detected capacity change from 0 to 256 [ 45.897466][ T4053] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.933098][ T4053] EXT4-fs (loop0): 1 orphan inode deleted [ 45.939056][ T4053] EXT4-fs (loop0): 1 truncate cleaned up [ 45.947960][ T4059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 45.950025][ T4053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.020687][ T4053] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.0.149: path /33/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 46.044125][ T4070] 9p: Bad value for 'rfdno' [ 46.049760][ T4053] EXT4-fs (loop0): Remounting filesystem read-only [ 46.051079][ T4070] netlink: 'syz.2.150': attribute type 10 has an invalid length. [ 46.092557][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.106127][ T4068] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.153062][ T4075] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 46.159660][ T4075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 46.167327][ T4075] vhci_hcd vhci_hcd.0: Device attached [ 46.202065][ T4076] vhci_hcd: connection closed [ 46.202208][ T1088] vhci_hcd vhci_hcd.1: stop threads [ 46.212205][ T1088] vhci_hcd vhci_hcd.1: release socket [ 46.217626][ T1088] vhci_hcd vhci_hcd.1: disconnect device [ 46.313839][ T4090] tQ6\bY4: renamed from lo [ 46.354784][ T4088] netlink: 556 bytes leftover after parsing attributes in process `syz.0.159'. [ 46.536805][ T4103] 9p: Bad value for 'rfdno' [ 46.549915][ T4103] netlink: 'syz.3.162': attribute type 10 has an invalid length. [ 46.726839][ T4122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 46.792254][ T4126] FAULT_INJECTION: forcing a failure. [ 46.792254][ T4126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.805430][ T4126] CPU: 0 UID: 0 PID: 4126 Comm: syz.0.167 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.805458][ T4126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.805472][ T4126] Call Trace: [ 46.805480][ T4126] [ 46.805488][ T4126] __dump_stack+0x1d/0x30 [ 46.805510][ T4126] dump_stack_lvl+0xe8/0x140 [ 46.805578][ T4126] dump_stack+0x15/0x1b [ 46.805662][ T4126] should_fail_ex+0x265/0x280 [ 46.805689][ T4126] should_fail+0xb/0x20 [ 46.805712][ T4126] should_fail_usercopy+0x1a/0x20 [ 46.805815][ T4126] strncpy_from_user+0x27/0x260 [ 46.805861][ T4126] getname_flags+0xae/0x3b0 [ 46.805884][ T4126] user_path_at+0x28/0x130 [ 46.805910][ T4126] do_fchownat+0xb0/0x210 [ 46.805978][ T4126] __x64_sys_chown+0x47/0x60 [ 46.806002][ T4126] x64_sys_call+0x2eb9/0x3000 [ 46.806032][ T4126] do_syscall_64+0xd8/0x2a0 [ 46.806062][ T4126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.806215][ T4126] RIP: 0033:0x7f86984bf749 [ 46.806233][ T4126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.806300][ T4126] RSP: 002b:00007f8696f1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 46.806318][ T4126] RAX: ffffffffffffffda RBX: 00007f8698715fa0 RCX: 00007f86984bf749 [ 46.806329][ T4126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 46.806340][ T4126] RBP: 00007f8696f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 46.806352][ T4126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.806366][ T4126] R13: 00007f8698716038 R14: 00007f8698715fa0 R15: 00007fff642e72e8 [ 46.806389][ T4126] [ 47.025997][ T4131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 47.162326][ T4138] FAULT_INJECTION: forcing a failure. [ 47.162326][ T4138] name failslab, interval 1, probability 0, space 0, times 0 [ 47.175139][ T4138] CPU: 1 UID: 0 PID: 4138 Comm: syz.1.170 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.175163][ T4138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.175174][ T4138] Call Trace: [ 47.175179][ T4138] [ 47.175185][ T4138] __dump_stack+0x1d/0x30 [ 47.175212][ T4138] dump_stack_lvl+0xe8/0x140 [ 47.175297][ T4138] dump_stack+0x15/0x1b [ 47.175319][ T4138] should_fail_ex+0x265/0x280 [ 47.175348][ T4138] should_failslab+0x8c/0xb0 [ 47.175368][ T4138] __kmalloc_cache_noprof+0x65/0x4c0 [ 47.175469][ T4138] ? __se_sys_memfd_create+0x1d6/0x6b0 [ 47.175528][ T4138] ? mutex_unlock+0x4f/0x90 [ 47.175557][ T4138] __se_sys_memfd_create+0x1d6/0x6b0 [ 47.175592][ T4138] __x64_sys_memfd_create+0x31/0x40 [ 47.175644][ T4138] x64_sys_call+0x28cb/0x3000 [ 47.175684][ T4138] do_syscall_64+0xd8/0x2a0 [ 47.175720][ T4138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.175745][ T4138] RIP: 0033:0x7f5b99abf749 [ 47.175795][ T4138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.175817][ T4138] RSP: 002b:00007f5b98526d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 47.175839][ T4138] RAX: ffffffffffffffda RBX: 0000000000004097 RCX: 00007f5b99abf749 [ 47.175866][ T4138] RDX: 00007f5b98526dec RSI: 0000000000000000 RDI: 00007f5b99b44960 [ 47.175956][ T4138] RBP: 00002000000040c0 R08: 00007f5b98526b07 R09: 0000000000000000 [ 47.175967][ T4138] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 47.175990][ T4138] R13: 00007f5b98526dec R14: 00007f5b98526df0 R15: 00007ffe10e60bf8 [ 47.176008][ T4138] [ 47.496929][ T4146] IPv6: NLM_F_CREATE should be specified when creating new route [ 47.545737][ T4141] ip6_vti0 speed is unknown, defaulting to 1000 [ 47.731656][ T4144] smc: removing ib device syz2 [ 47.840852][ T4148] netlink: 'syz.1.172': attribute type 39 has an invalid length. [ 48.068027][ T4150] FAULT_INJECTION: forcing a failure. [ 48.068027][ T4150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.081145][ T4150] CPU: 1 UID: 0 PID: 4150 Comm: syz.2.174 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.081174][ T4150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.081195][ T4150] Call Trace: [ 48.081203][ T4150] [ 48.081212][ T4150] __dump_stack+0x1d/0x30 [ 48.081251][ T4150] dump_stack_lvl+0xe8/0x140 [ 48.081282][ T4150] dump_stack+0x15/0x1b [ 48.081300][ T4150] should_fail_ex+0x265/0x280 [ 48.081325][ T4150] should_fail+0xb/0x20 [ 48.081342][ T4150] should_fail_usercopy+0x1a/0x20 [ 48.081371][ T4150] _copy_from_user+0x1c/0xb0 [ 48.081402][ T4150] ___sys_sendmsg+0xc1/0x1d0 [ 48.081512][ T4150] __x64_sys_sendmsg+0xd4/0x160 [ 48.081549][ T4150] x64_sys_call+0x17ba/0x3000 [ 48.081578][ T4150] do_syscall_64+0xd8/0x2a0 [ 48.081617][ T4150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.081652][ T4150] RIP: 0033:0x7f0c47f9f749 [ 48.081667][ T4150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.081686][ T4150] RSP: 002b:00007f0c469ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.081708][ T4150] RAX: ffffffffffffffda RBX: 00007f0c481f5fa0 RCX: 00007f0c47f9f749 [ 48.081751][ T4150] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000003 [ 48.081838][ T4150] RBP: 00007f0c469ff090 R08: 0000000000000000 R09: 0000000000000000 [ 48.081848][ T4150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.081933][ T4150] R13: 00007f0c481f6038 R14: 00007f0c481f5fa0 R15: 00007ffc5f9f0d08 [ 48.081950][ T4150] [ 48.286405][ T4154] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 48.436825][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 48.436910][ T29] audit: type=1326 audit(1765429515.595:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25c38f749 code=0x7ffc0000 [ 48.466465][ T29] audit: type=1326 audit(1765429515.595:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25c38f749 code=0x7ffc0000 [ 48.489817][ T29] audit: type=1326 audit(1765429515.595:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fd25c38f749 code=0x7ffc0000 [ 48.513155][ T29] audit: type=1326 audit(1765429515.595:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25c38f749 code=0x7ffc0000 [ 48.536569][ T29] audit: type=1326 audit(1765429515.595:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25c38f749 code=0x7ffc0000 [ 48.654397][ T4161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 48.907457][ T29] audit: type=1326 audit(1765429515.945:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25c38f749 code=0x7ffc0000 [ 48.930918][ T29] audit: type=1326 audit(1765429515.945:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd25c38f749 code=0x7ffc0000 [ 48.954413][ T29] audit: type=1326 audit(1765429515.945:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25c38f749 code=0x7ffc0000 [ 48.977791][ T29] audit: type=1326 audit(1765429515.955:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd25c38f749 code=0x7ffc0000 [ 49.001088][ T29] audit: type=1326 audit(1765429515.955:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25c38f749 code=0x7ffc0000 [ 49.060600][ T4176] 9p: Bad value for 'rfdno' [ 49.092364][ T4176] netlink: 'syz.2.182': attribute type 10 has an invalid length. [ 49.130093][ T4180] set_capacity_and_notify: 3 callbacks suppressed [ 49.130108][ T4180] loop3: detected capacity change from 0 to 256 [ 49.216083][ T4180] FAT-fs (loop3): IO charset cp864 not found [ 49.366512][ T4192] loop1: detected capacity change from 0 to 256 [ 49.932564][ T4202] IPv6: NLM_F_CREATE should be specified when creating new route [ 50.209428][ T4210] process 'syz.2.196' launched '/dev/fd/9' with NULL argv: empty string added [ 50.226574][ T4207] loop4: detected capacity change from 0 to 1024 [ 50.310589][ T4212] bridge: RTM_NEWNEIGH with invalid ether address [ 50.330054][ T4212] loop3: detected capacity change from 0 to 256 [ 50.367399][ T4207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.383585][ T4212] FAT-fs (loop3): Directory bread(block 64) failed [ 50.398112][ T4207] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.408625][ T4212] FAT-fs (loop3): Directory bread(block 65) failed [ 50.435907][ T4212] FAT-fs (loop3): Directory bread(block 66) failed [ 50.461669][ T4212] FAT-fs (loop3): Directory bread(block 67) failed [ 50.468245][ T4217] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 50.482963][ T4207] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.195: bg 0: block 112: padding at end of block bitmap is not set [ 50.508133][ T4212] FAT-fs (loop3): Directory bread(block 68) failed [ 50.526486][ T4212] FAT-fs (loop3): Directory bread(block 69) failed [ 50.541778][ T4221] netlink: 'syz.2.199': attribute type 10 has an invalid length. [ 50.560686][ T4212] FAT-fs (loop3): Directory bread(block 70) failed [ 50.572231][ T4212] FAT-fs (loop3): Directory bread(block 71) failed [ 50.579970][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.593320][ T4221] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 50.603562][ T4212] FAT-fs (loop3): Directory bread(block 72) failed [ 50.620699][ T4220] delete_channel: no stack [ 50.629347][ T4212] FAT-fs (loop3): Directory bread(block 73) failed [ 50.706935][ T4223] loop4: detected capacity change from 0 to 1024 [ 50.775531][ T4223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.817434][ T4230] loop3: detected capacity change from 0 to 256 [ 50.824104][ T4225] loop2: detected capacity change from 0 to 256 [ 50.848411][ T4223] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.925782][ T4223] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.200: bg 0: block 112: padding at end of block bitmap is not set [ 50.948351][ T4236] 9p: Bad value for 'rfdno' [ 50.953864][ T4236] netlink: 'syz.1.203': attribute type 10 has an invalid length. [ 51.014184][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.054947][ T4240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 51.093058][ T4242] loop4: detected capacity change from 0 to 4096 [ 51.134599][ T4242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.134740][ T4246] loop2: detected capacity change from 0 to 512 [ 51.160526][ T4242] loop7: detected capacity change from 0 to 7 [ 51.183844][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 51.193582][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.202828][ T4246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.206241][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 51.224872][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.233308][ T4242] loop7: unable to read partition table [ 51.239054][ T4242] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 51.255688][ T4246] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.296645][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 51.306251][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.314258][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 51.323866][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.331747][ T3309] loop7: unable to read partition table [ 51.339416][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.348760][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 51.358349][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.370168][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 51.379786][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.387730][ T4254] loop7: unable to read partition table [ 51.393906][ T4254] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 51.407888][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 51.417537][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.428962][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 51.438819][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.448090][ T4258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.468476][ T4258] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.476109][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 51.488445][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.497511][ T4262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.502293][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 51.512591][ T4262] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.519167][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 51.540150][ T4262] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.211: bg 0: block 112: padding at end of block bitmap is not set [ 51.540531][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.594933][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.610472][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.664820][ T4270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 51.702515][ T4274] EXT4-fs: Ignoring removed i_version option [ 51.737857][ T4274] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.767344][ T4274] EXT4-fs (loop3): 1 truncate cleaned up [ 51.774082][ T4274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.811594][ T4276] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 51.818124][ T4276] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.825720][ T4276] vhci_hcd vhci_hcd.0: Device attached [ 51.837723][ T4284] mmap: syz.2.220 (4284) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.860295][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.870929][ T4281] vhci_hcd: connection closed [ 51.871063][ T409] vhci_hcd vhci_hcd.1: stop threads [ 51.881055][ T409] vhci_hcd vhci_hcd.1: release socket [ 51.886500][ T409] vhci_hcd vhci_hcd.1: disconnect device [ 51.921878][ T4287] program syz.3.221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.056282][ T4284] futex_wake_op: syz.2.220 tries to shift op by -3; fix this program [ 52.119197][ T4300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 52.144204][ T4302] 9p: Could not find request transport: f [ 52.244121][ T4315] 9p: Bad value for 'rfdno' [ 52.249895][ T4315] netlink: 'syz.0.228': attribute type 10 has an invalid length. [ 52.259505][ T4315] team0: Port device dummy0 added [ 52.386541][ T4319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'. [ 52.420162][ T4321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.432815][ T4321] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.455969][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.154821][ T4337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 53.216243][ T4337] bridge_slave_1: left allmulticast mode [ 53.221980][ T4337] bridge_slave_1: left promiscuous mode [ 53.227655][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.274728][ T4339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.290351][ T4340] FAULT_INJECTION: forcing a failure. [ 53.290351][ T4340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.303445][ T4340] CPU: 1 UID: 0 PID: 4340 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.303528][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.303539][ T4340] Call Trace: [ 53.303544][ T4340] [ 53.303622][ T4340] __dump_stack+0x1d/0x30 [ 53.303643][ T4340] dump_stack_lvl+0xe8/0x140 [ 53.303671][ T4340] dump_stack+0x15/0x1b [ 53.303693][ T4340] should_fail_ex+0x265/0x280 [ 53.303717][ T4340] should_fail+0xb/0x20 [ 53.303839][ T4340] should_fail_usercopy+0x1a/0x20 [ 53.303877][ T4340] _copy_from_iter+0xcf/0xe70 [ 53.303900][ T4340] ? __alloc_skb+0x3bb/0x4d0 [ 53.303954][ T4340] ? __alloc_skb+0x24d/0x4d0 [ 53.303976][ T4340] netlink_sendmsg+0x471/0x6b0 [ 53.304006][ T4340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.304107][ T4340] __sock_sendmsg+0x145/0x180 [ 53.304131][ T4340] ____sys_sendmsg+0x31e/0x4a0 [ 53.304203][ T4340] ___sys_sendmsg+0x17b/0x1d0 [ 53.304254][ T4340] __x64_sys_sendmsg+0xd4/0x160 [ 53.304288][ T4340] x64_sys_call+0x17ba/0x3000 [ 53.304319][ T4340] do_syscall_64+0xd8/0x2a0 [ 53.304382][ T4340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.304408][ T4340] RIP: 0033:0x7f86984bf749 [ 53.304422][ T4340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.304439][ T4340] RSP: 002b:00007f8696efe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.304457][ T4340] RAX: ffffffffffffffda RBX: 00007f8698716090 RCX: 00007f86984bf749 [ 53.304468][ T4340] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000009 [ 53.304480][ T4340] RBP: 00007f8696efe090 R08: 0000000000000000 R09: 0000000000000000 [ 53.304565][ T4340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.304580][ T4340] R13: 00007f8698716128 R14: 00007f8698716090 R15: 00007fff642e72e8 [ 53.304624][ T4340] [ 53.591746][ T4339] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.616441][ T4337] bridge_slave_0: left allmulticast mode [ 53.622199][ T4337] bridge_slave_0: left promiscuous mode [ 53.628000][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.658770][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.757837][ T4347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.774913][ T4347] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.140022][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.176953][ T4354] set_capacity_and_notify: 7 callbacks suppressed [ 54.177033][ T4354] loop4: detected capacity change from 0 to 512 [ 54.190581][ T4354] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.203296][ T4355] loop1: detected capacity change from 0 to 512 [ 54.211378][ T4354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.224734][ T4354] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.246164][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 54.246175][ T29] audit: type=1400 audit(1765429521.405:1354): avc: denied { remove_name } for pid=4353 comm="syz.4.244" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.274945][ T29] audit: type=1400 audit(1765429521.405:1355): avc: denied { unlink } for pid=4353 comm="syz.4.244" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.311530][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.352223][ T4355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.365001][ T4355] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.423861][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.473142][ T4369] loop4: detected capacity change from 0 to 1024 [ 54.495004][ T4369] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 54.521627][ T4369] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.534933][ T4369] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 54.543229][ T4369] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.543398][ T4375] FAULT_INJECTION: forcing a failure. [ 54.543398][ T4375] name failslab, interval 1, probability 0, space 0, times 0 [ 54.550557][ T4369] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.251: Inode bitmap for bg 0 marked uninitialized [ 54.562204][ T4375] CPU: 1 UID: 0 PID: 4375 Comm: syz.1.252 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.562231][ T4375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.562269][ T4375] Call Trace: [ 54.562275][ T4375] [ 54.562283][ T4375] __dump_stack+0x1d/0x30 [ 54.562309][ T4375] dump_stack_lvl+0xe8/0x140 [ 54.562336][ T4375] dump_stack+0x15/0x1b [ 54.562362][ T4375] should_fail_ex+0x265/0x280 [ 54.562397][ T4375] should_failslab+0x8c/0xb0 [ 54.562426][ T4375] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 54.562455][ T4375] ? __alloc_skb+0x324/0x4d0 [ 54.562553][ T4375] __alloc_skb+0x324/0x4d0 [ 54.562580][ T4375] ? __alloc_skb+0x24d/0x4d0 [ 54.562625][ T4375] netlink_alloc_large_skb+0xbf/0xf0 [ 54.562723][ T4375] netlink_sendmsg+0x3cf/0x6b0 [ 54.562793][ T4375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.562830][ T4375] __sock_sendmsg+0x145/0x180 [ 54.562853][ T4375] ____sys_sendmsg+0x31e/0x4a0 [ 54.562951][ T4375] ___sys_sendmsg+0x17b/0x1d0 [ 54.563016][ T4375] __x64_sys_sendmsg+0xd4/0x160 [ 54.563115][ T4375] x64_sys_call+0x17ba/0x3000 [ 54.563158][ T4375] do_syscall_64+0xd8/0x2a0 [ 54.563215][ T4375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.563266][ T4375] RIP: 0033:0x7f5b99abf749 [ 54.563286][ T4375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.563330][ T4375] RSP: 002b:00007f5b98527038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.563354][ T4375] RAX: ffffffffffffffda RBX: 00007f5b99d15fa0 RCX: 00007f5b99abf749 [ 54.563370][ T4375] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000003 [ 54.563386][ T4375] RBP: 00007f5b98527090 R08: 0000000000000000 R09: 0000000000000000 [ 54.563464][ T4375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.563477][ T4375] R13: 00007f5b99d16038 R14: 00007f5b99d15fa0 R15: 00007ffe10e60bf8 [ 54.563499][ T4375] [ 54.702929][ T29] audit: type=1326 audit(1765429521.865:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 54.747802][ T4369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.759460][ T4379] loop1: detected capacity change from 0 to 512 [ 54.771870][ T4369] netlink: 'syz.4.251': attribute type 4 has an invalid length. [ 54.821690][ T4369] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 54.831538][ T29] audit: type=1326 audit(1765429521.915:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 54.854902][ T29] audit: type=1326 audit(1765429521.915:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 54.878472][ T29] audit: type=1326 audit(1765429521.915:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 54.901844][ T29] audit: type=1326 audit(1765429521.955:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 54.925234][ T29] audit: type=1326 audit(1765429521.955:1361): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 54.948941][ T29] audit: type=1326 audit(1765429521.955:1362): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f86984bf749 code=0x7ffc0000 [ 54.972648][ T29] audit: type=1326 audit(1765429521.965:1363): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4376 comm="syz.0.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f86984bf783 code=0x7ffc0000 [ 55.018864][ T4379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.033946][ T4379] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.069791][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.203792][ T4394] loop0: detected capacity change from 0 to 256 [ 55.262990][ T4396] loop1: detected capacity change from 0 to 512 [ 55.297999][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.316602][ T4400] FAULT_INJECTION: forcing a failure. [ 55.316602][ T4400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.329682][ T4400] CPU: 1 UID: 0 PID: 4400 Comm: syz.3.262 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.329706][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.329731][ T4400] Call Trace: [ 55.329736][ T4400] [ 55.329742][ T4400] __dump_stack+0x1d/0x30 [ 55.329760][ T4400] dump_stack_lvl+0xe8/0x140 [ 55.329777][ T4400] dump_stack+0x15/0x1b [ 55.329791][ T4400] should_fail_ex+0x265/0x280 [ 55.329808][ T4400] should_fail+0xb/0x20 [ 55.329860][ T4400] should_fail_usercopy+0x1a/0x20 [ 55.329924][ T4400] _copy_from_user+0x1c/0xb0 [ 55.329947][ T4400] ___sys_sendmsg+0xc1/0x1d0 [ 55.329982][ T4400] __x64_sys_sendmsg+0xd4/0x160 [ 55.330008][ T4400] x64_sys_call+0x17ba/0x3000 [ 55.330029][ T4400] do_syscall_64+0xd8/0x2a0 [ 55.330057][ T4400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.330082][ T4400] RIP: 0033:0x7fd25c38f749 [ 55.330093][ T4400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.330107][ T4400] RSP: 002b:00007fd25adef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.330192][ T4400] RAX: ffffffffffffffda RBX: 00007fd25c5e5fa0 RCX: 00007fd25c38f749 [ 55.330201][ T4400] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000005 [ 55.330210][ T4400] RBP: 00007fd25adef090 R08: 0000000000000000 R09: 0000000000000000 [ 55.330219][ T4400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.330228][ T4400] R13: 00007fd25c5e6038 R14: 00007fd25c5e5fa0 R15: 00007ffd3063a9e8 [ 55.330246][ T4400] [ 55.331479][ T4396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.342792][ T4405] loop0: detected capacity change from 0 to 256 [ 55.351768][ T4396] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.533357][ T4407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 55.548663][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.566265][ T4405] FAT-fs (loop0): IO charset cp864 not found [ 55.597282][ T4410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.266'. [ 55.606228][ T4410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.266'. [ 55.711629][ T4415] 9p: Bad value for 'rfdno' [ 55.717869][ T4415] netlink: 'syz.3.267': attribute type 10 has an invalid length. [ 56.271233][ T4455] loop4: detected capacity change from 0 to 256 [ 56.288989][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 56.316221][ T4450] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 56.322798][ T4450] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.330277][ T4450] vhci_hcd vhci_hcd.0: Device attached [ 56.338052][ T4459] vhci_hcd: connection closed [ 56.338382][ T409] vhci_hcd vhci_hcd.1: stop threads [ 56.348356][ T409] vhci_hcd vhci_hcd.1: release socket [ 56.353744][ T409] vhci_hcd vhci_hcd.1: disconnect device [ 56.376309][ T4462] loop0: detected capacity change from 0 to 256 [ 56.545457][ T4471] loop3: detected capacity change from 0 to 256 [ 56.561592][ T4471] FAT-fs (loop3): IO charset cp864 not found [ 57.350388][ T4500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.359132][ T4500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.426957][ T4506] FAULT_INJECTION: forcing a failure. [ 57.426957][ T4506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.440208][ T4506] CPU: 0 UID: 0 PID: 4506 Comm: syz.3.295 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.440275][ T4506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.440290][ T4506] Call Trace: [ 57.440297][ T4506] [ 57.440305][ T4506] __dump_stack+0x1d/0x30 [ 57.440333][ T4506] dump_stack_lvl+0xe8/0x140 [ 57.440419][ T4506] dump_stack+0x15/0x1b [ 57.440438][ T4506] should_fail_ex+0x265/0x280 [ 57.440525][ T4506] should_fail+0xb/0x20 [ 57.440542][ T4506] should_fail_usercopy+0x1a/0x20 [ 57.440569][ T4506] _copy_from_iter+0xcf/0xe70 [ 57.440673][ T4506] ? __alloc_skb+0x3bb/0x4d0 [ 57.440777][ T4506] ? __alloc_skb+0x24d/0x4d0 [ 57.440829][ T4506] netlink_sendmsg+0x471/0x6b0 [ 57.440863][ T4506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.440895][ T4506] __sock_sendmsg+0x145/0x180 [ 57.440992][ T4506] ____sys_sendmsg+0x31e/0x4a0 [ 57.441027][ T4506] ___sys_sendmsg+0x17b/0x1d0 [ 57.441071][ T4506] __x64_sys_sendmsg+0xd4/0x160 [ 57.441104][ T4506] x64_sys_call+0x17ba/0x3000 [ 57.441129][ T4506] do_syscall_64+0xd8/0x2a0 [ 57.441183][ T4506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.441203][ T4506] RIP: 0033:0x7fd25c38f749 [ 57.441217][ T4506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.441296][ T4506] RSP: 002b:00007fd25adce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.441351][ T4506] RAX: ffffffffffffffda RBX: 00007fd25c5e6090 RCX: 00007fd25c38f749 [ 57.441370][ T4506] RDX: 0000000024040050 RSI: 00002000000000c0 RDI: 0000000000000006 [ 57.441424][ T4506] RBP: 00007fd25adce090 R08: 0000000000000000 R09: 0000000000000000 [ 57.441501][ T4506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.441512][ T4506] R13: 00007fd25c5e6128 R14: 00007fd25c5e6090 R15: 00007ffd3063a9e8 [ 57.441587][ T4506] [ 57.738199][ T4517] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.744845][ T4517] EXT4-fs: inline encryption not supported [ 57.752677][ T4517] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.789419][ T4521] EXT4-fs: inline encryption not supported [ 57.799605][ T4517] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm +}[@: lblock 2 mapped to illegal pblock 2 (length 1) [ 57.821858][ T4517] EXT4-fs (loop0): Remounting filesystem read-only [ 57.828563][ T4517] EXT4-fs (loop0): 1 orphan inode deleted [ 57.843405][ T4517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.848430][ T4521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.906869][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.924177][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.031613][ T4539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.046198][ T4539] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.127606][ T4543] FAULT_INJECTION: forcing a failure. [ 58.127606][ T4543] name failslab, interval 1, probability 0, space 0, times 0 [ 58.140304][ T4543] CPU: 0 UID: 0 PID: 4543 Comm: syz.3.309 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.140333][ T4543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.140348][ T4543] Call Trace: [ 58.140356][ T4543] [ 58.140364][ T4543] __dump_stack+0x1d/0x30 [ 58.140393][ T4543] dump_stack_lvl+0xe8/0x140 [ 58.140414][ T4543] dump_stack+0x15/0x1b [ 58.140476][ T4543] should_fail_ex+0x265/0x280 [ 58.140581][ T4543] should_failslab+0x8c/0xb0 [ 58.140609][ T4543] kmem_cache_alloc_noprof+0x69/0x4b0 [ 58.140635][ T4543] ? skb_clone+0x151/0x1f0 [ 58.140669][ T4543] skb_clone+0x151/0x1f0 [ 58.140755][ T4543] __netlink_deliver_tap+0x2c9/0x500 [ 58.140787][ T4543] netlink_unicast+0x66b/0x690 [ 58.140813][ T4543] netlink_sendmsg+0x58b/0x6b0 [ 58.140911][ T4543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.140948][ T4543] __sock_sendmsg+0x145/0x180 [ 58.140968][ T4543] ____sys_sendmsg+0x31e/0x4a0 [ 58.141067][ T4543] ___sys_sendmsg+0x17b/0x1d0 [ 58.141103][ T4543] __x64_sys_sendmsg+0xd4/0x160 [ 58.141139][ T4543] x64_sys_call+0x17ba/0x3000 [ 58.141241][ T4543] do_syscall_64+0xd8/0x2a0 [ 58.141354][ T4543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.141385][ T4543] RIP: 0033:0x7fd25c38f749 [ 58.141403][ T4543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.141425][ T4543] RSP: 002b:00007fd25adef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.141448][ T4543] RAX: ffffffffffffffda RBX: 00007fd25c5e5fa0 RCX: 00007fd25c38f749 [ 58.141463][ T4543] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 58.141476][ T4543] RBP: 00007fd25adef090 R08: 0000000000000000 R09: 0000000000000000 [ 58.141549][ T4543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.141571][ T4543] R13: 00007fd25c5e6038 R14: 00007fd25c5e5fa0 R15: 00007ffd3063a9e8 [ 58.141595][ T4543] [ 58.343359][ T4545] FAT-fs (loop1): IO charset cp864 not found [ 58.361927][ T4539] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.306: bg 0: block 112: padding at end of block bitmap is not set [ 58.444335][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.598521][ T4571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.621204][ T4571] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.675866][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.113893][ T4602] vlan0: entered promiscuous mode [ 59.119258][ T4602] vlan0: entered allmulticast mode [ 59.124364][ T4602] hsr_slave_1: entered allmulticast mode [ 59.136940][ T4604] lo speed is unknown, defaulting to 1000 [ 59.142987][ T4604] lo speed is unknown, defaulting to 1000 [ 59.153237][ T4602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 59.154902][ T4606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 59.179664][ T4604] lo speed is unknown, defaulting to 1000 [ 59.185930][ T4604] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.194440][ T4604] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 59.210813][ T4604] lo speed is unknown, defaulting to 1000 [ 59.219940][ T4604] lo speed is unknown, defaulting to 1000 [ 59.226951][ T4604] lo speed is unknown, defaulting to 1000 [ 59.247826][ T4604] lo speed is unknown, defaulting to 1000 [ 59.254015][ T4604] lo speed is unknown, defaulting to 1000 [ 59.318235][ T4616] set_capacity_and_notify: 7 callbacks suppressed [ 59.318251][ T4616] loop3: detected capacity change from 0 to 256 [ 59.363089][ T4616] FAT-fs (loop3): IO charset cp864 not found [ 59.374070][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 59.374081][ T29] audit: type=1400 audit(1765429526.535:1772): avc: denied { write } for pid=4620 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 59.482047][ T4624] capability: warning: `syz.0.335' uses 32-bit capabilities (legacy support in use) [ 59.640207][ T4630] lo speed is unknown, defaulting to 1000 [ 59.975993][ T29] audit: type=1400 audit(1765429527.135:1773): avc: denied { create } for pid=4638 comm="syz.0.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.058656][ T4637] loop2: detected capacity change from 0 to 256 [ 60.183178][ T29] audit: type=1400 audit(1765429527.165:1774): avc: denied { getopt } for pid=4638 comm="syz.0.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.430806][ T4643] FAULT_INJECTION: forcing a failure. [ 60.430806][ T4643] name failslab, interval 1, probability 0, space 0, times 0 [ 60.443473][ T4643] CPU: 1 UID: 0 PID: 4643 Comm: syz.4.342 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.443508][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.443522][ T4643] Call Trace: [ 60.443529][ T4643] [ 60.443537][ T4643] __dump_stack+0x1d/0x30 [ 60.443560][ T4643] dump_stack_lvl+0xe8/0x140 [ 60.443582][ T4643] dump_stack+0x15/0x1b [ 60.443604][ T4643] should_fail_ex+0x265/0x280 [ 60.443630][ T4643] should_failslab+0x8c/0xb0 [ 60.443689][ T4643] __kmalloc_cache_noprof+0x65/0x4c0 [ 60.443717][ T4643] ? do_proc_control+0x1d6/0x8b0 [ 60.443827][ T4643] do_proc_control+0x1d6/0x8b0 [ 60.443879][ T4643] ? should_fail_ex+0xdb/0x280 [ 60.443903][ T4643] proc_control_compat+0xae/0xe0 [ 60.443989][ T4643] usbdev_ioctl+0xed5/0x1700 [ 60.444012][ T4643] ? __pfx_usbdev_ioctl+0x10/0x10 [ 60.444049][ T4643] __se_sys_ioctl+0xce/0x140 [ 60.444087][ T4643] __x64_sys_ioctl+0x43/0x50 [ 60.444207][ T4643] x64_sys_call+0x14b0/0x3000 [ 60.444300][ T4643] do_syscall_64+0xd8/0x2a0 [ 60.444339][ T4643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.444363][ T4643] RIP: 0033:0x7f501a26f749 [ 60.444400][ T4643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.444421][ T4643] RSP: 002b:00007f5018ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.444440][ T4643] RAX: ffffffffffffffda RBX: 00007f501a4c5fa0 RCX: 00007f501a26f749 [ 60.444451][ T4643] RDX: 0000200000000000 RSI: 00000000c0105500 RDI: 0000000000000006 [ 60.444463][ T4643] RBP: 00007f5018ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 60.444544][ T4643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.444558][ T4643] R13: 00007f501a4c6038 R14: 00007f501a4c5fa0 R15: 00007ffff608e0c8 [ 60.444581][ T4643] [ 60.651696][ T4645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.343'. [ 60.660787][ T4645] netlink: 108 bytes leftover after parsing attributes in process `syz.3.343'. [ 60.692316][ T4645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.343'. [ 60.701814][ T4645] netlink: 108 bytes leftover after parsing attributes in process `syz.3.343'. [ 60.710814][ T4645] netlink: 84 bytes leftover after parsing attributes in process `syz.3.343'. [ 60.732508][ T4648] A link change request failed with some changes committed already. Interface tQ6\bY4 may have been left with an inconsistent configuration, please check. [ 60.817003][ T4652] netlink: 'syz.2.345': attribute type 1 has an invalid length. [ 60.828946][ T29] audit: type=1326 audit(1765429527.995:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a26f749 code=0x7ffc0000 [ 60.896186][ T29] audit: type=1326 audit(1765429528.015:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f501a26f749 code=0x7ffc0000 [ 60.919715][ T29] audit: type=1326 audit(1765429528.015:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a26f749 code=0x7ffc0000 [ 60.943184][ T29] audit: type=1326 audit(1765429528.015:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f501a26f749 code=0x7ffc0000 [ 60.966576][ T29] audit: type=1326 audit(1765429528.015:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a26f749 code=0x7ffc0000 [ 60.978381][ T4654] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 60.989899][ T29] audit: type=1326 audit(1765429528.015:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f501a26f749 code=0x7ffc0000 [ 60.996365][ T4654] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 61.019568][ T29] audit: type=1326 audit(1765429528.015:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.4.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a26f749 code=0x7ffc0000 [ 61.027058][ T4654] vhci_hcd vhci_hcd.0: Device attached [ 61.067495][ T4662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.349'. [ 61.105035][ T4658] vhci_hcd: connection closed [ 61.105195][ T1088] vhci_hcd vhci_hcd.3: stop threads [ 61.115135][ T1088] vhci_hcd vhci_hcd.3: release socket [ 61.120548][ T1088] vhci_hcd vhci_hcd.3: disconnect device [ 61.283644][ T4672] loop4: detected capacity change from 0 to 512 [ 61.354639][ T4672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.382773][ T4672] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.385739][ T4682] loop1: detected capacity change from 0 to 512 [ 61.413811][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.444526][ T4682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.446892][ T4688] loop0: detected capacity change from 0 to 512 [ 61.457229][ T4682] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.464357][ T4688] EXT4-fs: Ignoring removed i_version option [ 61.481709][ T4688] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.517437][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.526374][ T4688] EXT4-fs (loop0): 1 truncate cleaned up [ 61.532592][ T4688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.568805][ T4694] loop2: detected capacity change from 0 to 512 [ 61.578426][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.599483][ T4694] EXT4-fs: Ignoring removed i_version option [ 61.623455][ T4694] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.640949][ T4694] EXT4-fs (loop2): 1 truncate cleaned up [ 61.711514][ T4714] loop3: detected capacity change from 0 to 512 [ 61.737994][ T4717] loop0: detected capacity change from 0 to 128 [ 61.752900][ T4714] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.766934][ T4722] loop2: detected capacity change from 0 to 512 [ 61.784800][ T4717] loop0: detected capacity change from 0 to 512 [ 61.807486][ T4717] ------------[ cut here ]------------ [ 61.812996][ T4717] EA inode 11 i_nlink=2 [ 61.813032][ T4717] WARNING: fs/ext4/xattr.c:1058 at 0x0, CPU#0: syz.0.366/4717 [ 61.825071][ T4717] Modules linked in: [ 61.829127][ T4717] CPU: 0 UID: 0 PID: 4717 Comm: syz.0.366 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.838882][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.846706][ T4722] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.849050][ T4717] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 61.866093][ T4717] Code: c1 d2 9c ff 4c 8d 2d 4a bf 20 05 49 8d 7e 40 e8 01 65 b8 ff 49 8b 6e 40 4c 89 e7 e8 15 60 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 7c df ba 03 66 66 66 2e 0f 1f 84 [ 61.885747][ T4717] RSP: 0018:ffffc90010a1b5a0 EFLAGS: 00010246 [ 61.891984][ T4717] RAX: ffff88810c659b10 RBX: ffff88811a014610 RCX: ffffffff81bb4bab [ 61.900004][ T4717] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0ae0 [ 61.908175][ T4717] RBP: 000000000000000b R08: 000188811a0145c3 R09: 0000000000000000 [ 61.916261][ T4717] R10: ffffc90010a1b4d0 R11: 0001c90010a1b4d0 R12: ffff88811a0145c0 [ 61.924244][ T4717] R13: ffffffff86dc0ae0 R14: ffff88811a014578 R15: 0000000000000001 [ 61.932268][ T4717] FS: 00007f8696f1f6c0(0000) GS:ffff8882aedc3000(0000) knlGS:0000000000000000 [ 61.941248][ T4717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.947866][ T4717] CR2: 00007fd571e4f000 CR3: 000000011b8f2000 CR4: 00000000003506f0 [ 61.955921][ T4717] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.963922][ T4717] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 61.972000][ T4717] Call Trace: [ 61.975277][ T4717] [ 61.978256][ T4717] ext4_xattr_set_entry+0x77f/0x1020 [ 61.983577][ T4717] ext4_xattr_ibody_set+0x184/0x3c0 [ 61.988872][ T4717] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 61.994764][ T4717] __ext4_expand_extra_isize+0x246/0x280 [ 62.000440][ T4717] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 62.005964][ T4717] ext4_evict_inode+0x7c4/0xd40 [ 62.010889][ T4717] ? __pfx_ext4_evict_inode+0x10/0x10 [ 62.016301][ T4717] evict+0x2af/0x510 [ 62.020321][ T4717] ? __dquot_initialize+0x146/0x7c0 [ 62.025529][ T4717] iput+0x4bd/0x650 [ 62.029396][ T4717] ext4_process_orphan+0x1a9/0x1c0 [ 62.034550][ T4717] ext4_orphan_cleanup+0x6a8/0xa00 [ 62.039757][ T4717] ext4_fill_super+0x3411/0x37a0 [ 62.044719][ T4717] ? set_blocksize+0x1a8/0x310 [ 62.049508][ T4717] ? sb_set_blocksize+0xfc/0x170 [ 62.054509][ T4717] ? setup_bdev_super+0x30e/0x370 [ 62.059639][ T4717] ? __pfx_ext4_fill_super+0x10/0x10 [ 62.064989][ T4717] get_tree_bdev_flags+0x291/0x300 [ 62.070251][ T4717] ? __pfx_ext4_fill_super+0x10/0x10 [ 62.075630][ T4717] get_tree_bdev+0x1f/0x30 [ 62.080101][ T4717] ext4_get_tree+0x1c/0x30 [ 62.084528][ T4717] vfs_get_tree+0x57/0x1d0 [ 62.089012][ T4717] do_new_mount+0x24d/0x6a0 [ 62.093522][ T4717] path_mount+0x4ab/0xb80 [ 62.097874][ T4717] ? user_path_at+0xbf/0x130 [ 62.102601][ T4717] __se_sys_mount+0x28c/0x2e0 [ 62.107343][ T4717] __x64_sys_mount+0x67/0x80 [ 62.111956][ T4717] x64_sys_call+0x2cca/0x3000 [ 62.116660][ T4717] do_syscall_64+0xd8/0x2a0 [ 62.121330][ T4717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.127250][ T4717] RIP: 0033:0x7f86984c0eea [ 62.131839][ T4717] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.151501][ T4717] RSP: 002b:00007f8696f1ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 62.159988][ T4717] RAX: ffffffffffffffda RBX: 00007f8696f1eef0 RCX: 00007f86984c0eea [ 62.167985][ T4717] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f8696f1eeb0 [ 62.175963][ T4717] RBP: 0000200000000180 R08: 00007f8696f1eef0 R09: 0000000000800718 [ 62.184024][ T4717] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 62.192123][ T4717] R13: 00007f8696f1eeb0 R14: 000000000000046f R15: 0000200000000200 [ 62.200128][ T4717] [ 62.203242][ T4717] ---[ end trace 0000000000000000 ]--- [ 62.209372][ T4717] EXT4-fs (loop0): 1 orphan inode deleted [ 62.255533][ T4730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.321626][ T4739] EXT4-fs: Ignoring removed i_version option [ 62.329782][ T4739] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.341183][ T4739] EXT4-fs (loop3): 1 truncate cleaned up [ 62.412490][ T4749] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.450059][ T4749] EXT4-fs (loop3): 1 truncate cleaned up [ 62.467233][ T4754] FAULT_INJECTION: forcing a failure. [ 62.467233][ T4754] name failslab, interval 1, probability 0, space 0, times 0 [ 62.480054][ T4754] CPU: 0 UID: 0 PID: 4754 Comm: syz.1.376 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 62.480087][ T4754] Tainted: [W]=WARN [ 62.480143][ T4754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.480160][ T4754] Call Trace: [ 62.480167][ T4754] [ 62.480217][ T4754] __dump_stack+0x1d/0x30 [ 62.480248][ T4754] dump_stack_lvl+0xe8/0x140 [ 62.480288][ T4754] dump_stack+0x15/0x1b [ 62.480310][ T4754] should_fail_ex+0x265/0x280 [ 62.480340][ T4754] should_failslab+0x8c/0xb0 [ 62.480369][ T4754] kmem_cache_alloc_noprof+0x69/0x4b0 [ 62.480399][ T4754] ? getname_flags+0x80/0x3b0 [ 62.480498][ T4754] getname_flags+0x80/0x3b0 [ 62.480531][ T4754] user_path_at+0x28/0x130 [ 62.480566][ T4754] do_utimes+0xd9/0x210 [ 62.480602][ T4754] __x64_sys_utime+0xbc/0x140 [ 62.480627][ T4754] ? syscall_trace_enter+0x102/0x1e0 [ 62.480656][ T4754] x64_sys_call+0x2776/0x3000 [ 62.480748][ T4754] do_syscall_64+0xd8/0x2a0 [ 62.480793][ T4754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.480821][ T4754] RIP: 0033:0x7f5b99abf749 [ 62.480841][ T4754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.480859][ T4754] RSP: 002b:00007f5b98527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 62.480905][ T4754] RAX: ffffffffffffffda RBX: 00007f5b99d15fa0 RCX: 00007f5b99abf749 [ 62.480918][ T4754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.480934][ T4754] RBP: 00007f5b98527090 R08: 0000000000000000 R09: 0000000000000000 [ 62.480949][ T4754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.480963][ T4754] R13: 00007f5b99d16038 R14: 00007f5b99d15fa0 R15: 00007ffe10e60bf8 [ 62.480990][ T4754] [ 62.486327][ T4749] netlink: 44 bytes leftover after parsing attributes in process `syz.3.375'. [ 62.638368][ T4761] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.644937][ T4749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.375'. [ 62.707728][ T4760] netlink: 'syz.4.379': attribute type 3 has an invalid length. [ 62.747444][ T4765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.760450][ T4765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.778614][ T4769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.793879][ T3508] lo speed is unknown, defaulting to 1000 [ 62.833146][ T4765] netlink: 'syz.3.380': attribute type 13 has an invalid length. [ 62.862849][ T4779] EXT4-fs: Ignoring removed i_version option [ 62.879236][ T4779] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.905833][ T4767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.915017][ T4782] 9p: Bad value for 'rfdno' [ 62.936717][ T4779] EXT4-fs (loop1): 1 truncate cleaned up [ 62.966923][ T4765] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.974149][ T4765] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.008327][ T4788] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.060230][ T4796] 9p: Bad value for 'rfdno' [ 63.141553][ T2095] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.164995][ T2095] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.173817][ T2095] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.182513][ T2095] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.210813][ T4803] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 63.238362][ T4805] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.274786][ T4810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4810 comm=syz.2.393 [ 63.305886][ T4816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.384689][ T4821] EXT4-fs: Ignoring removed i_version option [ 63.398510][ T4821] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.434110][ T4821] EXT4-fs (loop2): 1 truncate cleaned up [ 63.443285][ T4826] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.455098][ T4824] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.495753][ T4824] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.398: bg 0: block 112: padding at end of block bitmap is not set [ 63.573001][ T4836] FAT-fs (loop2): IO charset cp864 not found [ 63.651670][ T4841] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 63.658281][ T4841] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.665798][ T4841] vhci_hcd vhci_hcd.0: Device attached [ 63.672351][ T4846] vhci_hcd: connection closed [ 63.672750][ T1088] vhci_hcd vhci_hcd.1: stop threads [ 63.676108][ T4845] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 63.677597][ T1088] vhci_hcd vhci_hcd.1: release socket [ 63.682645][ T4845] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.682703][ T4845] vhci_hcd vhci_hcd.0: Device attached [ 63.708349][ T1088] vhci_hcd vhci_hcd.1: disconnect device [ 63.717089][ T4848] vhci_hcd: connection closed [ 63.717167][ T1088] vhci_hcd vhci_hcd.0: stop threads [ 63.727140][ T1088] vhci_hcd vhci_hcd.0: release socket [ 63.732658][ T1088] vhci_hcd vhci_hcd.0: disconnect device [ 63.771533][ T4851] EXT4-fs: Ignoring removed oldalloc option [ 63.777571][ T4851] EXT4-fs: Ignoring removed bh option [ 63.818582][ T4851] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 63.937673][ T4860] A link change request failed with some changes committed already. Interface tQ6\bY4 may have been left with an inconsistent configuration, please check. [ 63.990202][ T4862] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.408: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 64.066884][ T4867] EXT4-fs: Ignoring removed i_version option [ 64.074244][ T4867] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.117206][ T4867] EXT4-fs (loop4): 1 truncate cleaned up [ 64.137567][ T4873] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.162187][ T4873] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.414: bg 0: block 112: padding at end of block bitmap is not set [ 64.219762][ T3045] ================================================================== [ 64.227866][ T3045] BUG: KCSAN: data-race in d_invalidate / fast_dput [ 64.234470][ T3045] [ 64.236796][ T3045] write to 0xffff888105f89490 of 8 bytes by task 4879 on cpu 1: [ 64.244420][ T3045] d_invalidate+0x5b/0x200 [ 64.248841][ T3045] proc_invalidate_siblings_dcache+0x1c0/0x2a0 [ 64.255009][ T3045] drop_sysctl_table+0xbd/0x270 [ 64.259870][ T3045] drop_sysctl_table+0x1cb/0x270 [ 64.264820][ T3045] unregister_sysctl_table+0x30/0x50 [ 64.270115][ T3045] unregister_net_sysctl_table+0x15/0x20 [ 64.275750][ T3045] inetdev_event+0x6e4/0xba0 [ 64.280339][ T3045] raw_notifier_call_chain+0x6f/0x1b0 [ 64.285731][ T3045] unregister_netdevice_many_notify+0xea0/0x16d0 [ 64.292092][ T3045] unregister_netdev+0x14c/0x1b0 [ 64.297040][ T3045] slip_close+0xe4/0x100 [ 64.301293][ T3045] tty_ldisc_kill+0x8d/0x140 [ 64.305890][ T3045] tty_ldisc_release+0x171/0x1d0 [ 64.310823][ T3045] tty_release_struct+0x1d/0xb0 [ 64.315686][ T3045] tty_release+0x856/0xb10 [ 64.320100][ T3045] __fput+0x29b/0x650 [ 64.324095][ T3045] ____fput+0x1c/0x30 [ 64.328091][ T3045] task_work_run+0x131/0x1a0 [ 64.332688][ T3045] exit_to_user_mode_loop+0x1fe/0x740 [ 64.338063][ T3045] do_syscall_64+0x202/0x2a0 [ 64.342669][ T3045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.348565][ T3045] [ 64.350922][ T3045] read to 0xffff888105f89490 of 8 bytes by task 3045 on cpu 0: [ 64.358488][ T3045] fast_dput+0x5f/0x2c0 [ 64.362649][ T3045] dput+0x24/0x60 [ 64.366284][ T3045] terminate_walk+0x77/0x210 [ 64.370887][ T3045] path_openat+0x1e40/0x23b0 [ 64.375488][ T3045] do_filp_open+0x109/0x230 [ 64.380008][ T3045] do_sys_openat2+0xa6/0x150 [ 64.384607][ T3045] __x64_sys_openat+0xf2/0x120 [ 64.389375][ T3045] x64_sys_call+0x2b07/0x3000 [ 64.394056][ T3045] do_syscall_64+0xd8/0x2a0 [ 64.398566][ T3045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.404460][ T3045] [ 64.406782][ T3045] value changed: 0xffff888237a4f478 -> 0x0000000000000000 [ 64.413884][ T3045] [ 64.416200][ T3045] Reported by Kernel Concurrency Sanitizer on: [ 64.422347][ T3045] CPU: 0 UID: 0 PID: 3045 Comm: dhcpcd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.433278][ T3045] Tainted: [W]=WARN [ 64.437078][ T3045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.447134][ T3045] ================================================================== [ 64.455361][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 64.455374][ T29] audit: type=1400 audit(1765429531.385:1961): avc: denied { search } for pid=3045 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.482892][ T29] audit: type=1400 audit(1765429531.385:1962): avc: denied { search } for pid=3045 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.504445][ T29] audit: type=1400 audit(1765429531.385:1963): avc: denied { search } for pid=3045 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.526132][ T29] audit: type=1400 audit(1765429531.385:1964): avc: denied { read } for pid=3045 comm="dhcpcd" name="n27" dev="tmpfs" ino=3761 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.547855][ T29] audit: type=1400 audit(1765429531.385:1965): avc: denied { open } for pid=3045 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=3761 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.570996][ T29] audit: type=1400 audit(1765429531.385:1966): avc: denied { getattr } for pid=3045 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=3761 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.649198][ T29] audit: type=1400 audit(1765429531.815:1967): avc: denied { read open } for pid=4884 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.674893][ T29] audit: type=1400 audit(1765429531.815:1968): avc: denied { getattr } for pid=4884 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.726290][ T29] audit: type=1400 audit(1765429531.895:1969): avc: denied { add_name } for pid=4883 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.748868][ T29] audit: type=1400 audit(1765429531.895:1970): avc: denied { create } for pid=4883 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1