last executing test programs: 33.204778452s ago: executing program 3 (id=117): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xc, 0x40008, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800001, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000200208000240000000000800044000000003080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) lseek(r6, 0xffffffffffffffff, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r5, 0x0) 32.922184788s ago: executing program 3 (id=124): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141303) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, 0x0) 32.746119851s ago: executing program 3 (id=126): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x34, r0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94dd}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 32.67664001s ago: executing program 3 (id=128): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x28}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x400) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x248041, 0x0) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x7, &(0x7f0000000640)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'caif0\x00', @random="e4be0fe552bf"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYRES16=r3, @ANYRESHEX=r3], 0x72) 32.299444589s ago: executing program 3 (id=129): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x59}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) 31.955966683s ago: executing program 3 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)='system_u:object_r:event_device_t:s0\x00', 0x24, 0x1) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x27, 0x6, 0x10, 0x9, 0x0, 0x9, 0xa2021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x100000000000005, 0x9}, 0x0, 0x9, 0x43a1bd76, 0x3, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r2 = syz_io_uring_setup(0x5ef9, &(0x7f0000000280)={0x0, 0x3b4f, 0x1, 0x3, 0x14}, &(0x7f0000000240)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x7dd6, 0x8029, 0x1, 0x0, 0x0) io_uring_enter(r2, 0xb82, 0xe875, 0x49, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) process_vm_readv(r4, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, &(0x7f0000000d00)=[{&(0x7f0000000640)=""/178, 0xb2}], 0x1, 0x0) r5 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000), &(0x7f0000000200)) io_uring_enter(r5, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) 31.89988142s ago: executing program 32 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)='system_u:object_r:event_device_t:s0\x00', 0x24, 0x1) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x27, 0x6, 0x10, 0x9, 0x0, 0x9, 0xa2021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x100000000000005, 0x9}, 0x0, 0x9, 0x43a1bd76, 0x3, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r2 = syz_io_uring_setup(0x5ef9, &(0x7f0000000280)={0x0, 0x3b4f, 0x1, 0x3, 0x14}, &(0x7f0000000240)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x7dd6, 0x8029, 0x1, 0x0, 0x0) io_uring_enter(r2, 0xb82, 0xe875, 0x49, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) process_vm_readv(r4, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, &(0x7f0000000d00)=[{&(0x7f0000000640)=""/178, 0xb2}], 0x1, 0x0) r5 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000), &(0x7f0000000200)) io_uring_enter(r5, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) 2.373503025s ago: executing program 5 (id=744): write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, {"ac4b292b84bd72a8d758c2b2ff1c72004134668d5e310b7d0088b3d7afc4ce236d4ac7c0365d389808a78b05023561f45af31a93113ba5f725e7e28370eee47ad75feff31d8835c190aa0f8e1a70095d64a50cc8cda17f827ba53540a6bb426526e912ab7f941dd459ab9bfcd6432eaf3598e278858b1e87554a958e31c2625045b8843a2853ea7f22be915fb9fb47c83624b3fa2be5c12acbe5eb4b2a67ecd5af46c393e88329deb4af45ebbe41f0e197245ca0b4b69c0168803c9fd27ac61b79bacb0da740f3aade73ecf04f363c4dfc691d939c573bb1222b0eb8e165d6d6edfbc770ce067bbef32856c6f514b0a38ce4cf86b89b5a4dca3dd0f48a4253cd3547f9a898f29836a51c60949ee877b24ecdb330ad61b5833a24e4e31d990dbf3a5195784d6dcd13cdad3869526b3531c5987dac7444d60e4b5334859825d5de308ade959d81e72f5593ce8adf26513d3a2c6037ac9c77c45ccae6d1de257b4dee8283fe2f47e8744ba7fd648697d55bd8582d9aba94a5caee75bad49b35f9465085d8f44b75a77515b6309bd284c305fd3a78c6526105c5d49e12d4d56938d259cebd663b6bf8e8b052be7e90c7c5a184c41068b14ec261b736e59b5a75a4f1db359971e653dc9ecdedb8ae9928fc6ca04d99995539be8ccc144dd3e0fdf46fa00638cff0e3f0ff92ae49cfe9a88c815971c52fff59935ed679fb7500b71bca52d5885c9d22fc5148b89c59bdc366786928c13430069666e03e42731c93c47508ff053d1193b15dfa6133dc3a3db587bc5ca05c697f498cb17496b5e8f6629164996f1b67f3aeb7aa282f5716d0d5bf8b9d0e674ebec3e6beccdd4e457254fd886457e4f51e454f1c1e7ce5ee5125bc825410e1303ac4e9fcff7eac2955bb43a6a01863f7f32cae717a7abc0afd2953396a19e930f06dcc5cf73aa089b6ff9b65ec2e954e87229670e42c2d44dfc79d7866968b08baee738ee6936539d22dec8a966f90fcce231c0c5232bbde8925da8abdae1efd04da31e9627bea70fb7941242588c2ed40b8e14a5d7406cf28c62b94530064b4b10dbce57ef97436d57e3cc81d05adb22838470e1c64bab7f198b3efaf753d12392465d285586fd484dfe0323536687523b175dacd2e91a959e1c0df2593a2954c44d489081915421114a38284cc6e62e43e3cb5073a8bc9989aef76332028b7c24178f47b1cba9a6a9e0a068445a75ae6f568031f617c37bc24a3ca3c950546aba27f7400029a7ffc11600e17cd5e4efd4e91963468d1185e8780db244c8da8ce027801a6ff13e2dfdb5add1800b66a1720c35f2a8219c7dbf439c7c524da32c64c7e6056b60b53c02cb620fb64c6d2f12f391a8b4a19fc0f2e0644b8302a24a2991291c726cef1d8cf765f63b1f994a479f0e81afd4e6e3300767c9debda23f2058d7f5d31497008fb1ff951ba3bcfac9abe0ea3fc8a3cfc770200d885b6fc758aef7df4b8bf305ce373e888205b90eed8f1528b33f198d0f0802eccce8ca133af7d8a27a00f8e9ec981c618f48486864cd782d3d803bdce926e1447b3ccc8f64314b6b07d3b42e563ecc4fe8fbe4ab414893191d5da7d00e30733c7b975aef14dd5a745927d10fb322ca2d079a698f8089ce1a7dd3cd83484cebdae7437dd988a00062ce950c77bf0eb1a4b40b4815685ada031fd16e4b89f66f7ec804e752efede8f3d79c78c1bd97d9e1eaa19f87715689ddc3ba55d787cae0b30dd950197da2b389838746fb853d5a65d1b281d51500b8c0c8430cc1b2b09e1794ce2ea0171d6e822ba87056dcf6663aa33396245897572ac8a762838a5738690dcc3f6bd2028a4a108355d69e801996f68828420919741b0af974856366d3196a71e606b20c153ce75a3ec121215a5b68ebccc5a15fadbfe2e703754c95dd5c77ca935944231557c480ed83b0b5a8b19f566f5003d51301a6b342cda98529b3a3ba2f76f19e70e8900a95e5de1153d6a302f985f6627a3d5d63cd7f1bc125236730ff3ddcc92a5fbbd1f4decd70752891dd71b1cd53f0841b8b3e9616b661f3b73f776c2ce7928bdeb978182c2a6eb3c94da356a9601fdf0b9b084b0bfa4b93323f0c49bf789699f77baa26ed98ac6d88e2c924f28715fa16a50d2f6382ef9f3eac4f71fc952b18c1f6710a8750921e130b7f90ac5d0006a3c8163f9a7962c87856600aec4e9cb28b7de3655eec56feb56afb525f63ab4efbb05458b702cb9c9998c241d33235e687fa16f17cc95d1e3903bc2da5b08dc511de3d7ed898eb29090b2afd2e894580c479e783374c2ae90034b55d05251d45106840b503e0b3211d0f2db7ff0bb45e9da9b900f4e80dabc95cc90d0606c72417a99794edd0fe10bf6d26248ddf04f43e565daa073832b47baf9953fb44e657dfe7beedf5bec4f0556e5cd5e308bf0857cfa984d4e2f65aff9beab8b4b000bfd9769986489f66ea5b242cb83403e47906ecaacb7dd627533d9bce8cd37d83147dc4fee263c96393a0f6cc41d502e9e49f232cbc3e2537a3aa76c1a7ccc6a83aea3041faf0f6df6a12fa6e6f7e9540e7a31c89d3c7645b5d6a17ede151761c607ce1456b303f9f64c80574690502ed3ec632bbd9860168ad5f2b7de7528c02fe2984bbc9b20ae0f1ec57a3d33b0432a96d92251a653ec39e6caf3f738485a41e38370d71da6fa538b54fa0976f9f7f3dd8763eef351d77b9b9354136d16326cf58022f1c67d801781daf637b092b43be7e467ab8b6382c570c8c32c7843b8ee7eb31db9a4fd484ba7f0f08dd87109caad8cd7b6f93ae606446b4be60baf61a65bbaa8d5309fea6aa151f12dc5725a890ba6f6c67a7ac6609ed44ba231aae3131ecc45bb69c92f98e843cc99b45fddd3ee672a3cc62d8e2056112b88995c586f56fcdb93362a018eee321e2ee9f6f5276f462486e255faaa8a7b65117cf9e744c82ab5795ce13078d8c76519d59f81013dc17083303dcad1847812a76f01b0d03d3c3621f6c75a0a749ae9d7a7c7da4d4f49a9f432a5418f40d5be850204b1ae66183c1bf83c7f74be4ccba2bc211383f9c1b9c6c5e216e5a93b091fffb0aee6aee2ccef5e200ba11428b8724690749aeb96ef39be5c4e63a7bd9dd093b96e0658cbbc54341a161356227795140d9bc5361c2c502e67acd84ef346c1e029465bd1329727f5056df7d63747cbd7c6f54a80f74bb824b07aa7006de2c18e31e49b04a52045a3895cd2567137937f22fa27f983a7e52eecf47652e2d80c4e03c55ad269550a97b37c94763cdf89b9244cddeb509429e2668fb088acdda97aea01f3bfd8df8910d8c39f5ccd46e851bb4077b392d66d56be56645295af3251aed0c8dd8cb097bfc77705e1f13c2ff79da0f9c26f08f903494295b1e1b566a4124b88f0536858039f9be3bfe7bcb66e57122bdf2fb679923ef156153d2ae1ba1de71a510d186dc9bed86265018299702e849a4ad99f655075aae194cc062d9b07c0573337538a5a6d6c6d2921fbd181d6e305df7a1d62a82154fcde4a1aafdd6f4e7e49a7f349f628ba372d49fcbcbbd71c23e234218b79cd80088b2b4ab4e20932eacaa2e91236a4c7fc82f6a49354436dcc806b50aca9264fcd9b199eafd6381178db163d4ce377389c67436fb07d58cd73e6a9204f447eb9c100c223ea391bcba8989426c5c8cdd0300279daa31bd5730d9ab69e5904d7386273a76f779335ce5e44f84d3f3686573ea71f2e64922e82bf2f08c877c54ee7cd160c79d68c500df6f69d033f2304d830c7cf109f5c993abacf15d94baefe49265e24f838af559cdb5695a8135ac2b6ca1d7b5600803b1f24dcc29148aa94905dda78a9f19b21fec2d780fb962dab7f1f7c7ea4aef475540fa0dc2b852f9cfdad43e8a6fed633854a1e1b96169f28961349a9ecd6d0f1f2473f036db92c0c0e64733668fc6d69becb06af2480ac856e9431439d914557a31e80badca76f85086fba1fc7374cc249c5983cc085c7bf3aa5ef12afb3bc72fe479507666bb38f50878fad0450dac4b39ea57ed01654b17590f9478dfab02e664ba0e34d4a764374d09de43b69d5007077b2bafb42e260aa8fd4aa3bef9a8d5dc8e2ecde7c2c2bfdaa21802b7d67588854288512602a41e25e09f59633fbd92df9478bc6e6a6b3b560dca5798a895e8dfa93ae9fea23729da6f3a40d4af3efcd4f6d2d02ffd2b0270960cdaea8af5004fdb18c5a510f2199724f17a8a18f3b1bc132df7affdf6f40310131e448c040fe446309352e24cb7fbc94ff9e1555e85f6479d4952854917eab50738aa6f4b70c445557703778056f7465f5d0d92bf10308a5a61574f5576702613770399805aed655d3443715dbf23190b6f0480e30c82840b59f69a71bbc19f00ac18d220af047ef89515d946dc77dd08c6abf28f6e796d3c70a4ae3d4ba01bb44fc6f03e31831ee89f583ef3d40f6c742778fac42ccf1e30367a469322d45a9725a1228ab0639de1f38c1f365c765ed9131a9d535cb6ffe49d556dee403e2202de0d04ec682c58e6d508fb377e3b7d9b748955ffc6b27b03207a3c15cd5114e631ca080c24e1147bb6d398629efcf288e3240d6311034057a031f9ff7efb07fc8ee34f19c32115f361f9e03b89f080111d141e2fbfbcd5a3d54e32c6ef1dde18c384d6bf2c4b5fa21e7efeb0b5c9c27a7740be213dce807e6a01acb09634aec0fe66bfb2ab4da89a13c42207577e38105e665afed154fb3805974d31289351937b4c67b937ae644d6cb3f913d2e05c3dce1917e1551304a5c437d69a2d13ab33989d729e6c2ed45f847b6cf5169ec4459d541c7a70199ebca316408f7adfb168e7ac452f507652ea3892e64a4d81d575825168426f39c41448beb5044ec5712f2e10b6d88d471eecf5f29085474fd2aae2791ffb41222a9dbb8c6d32847819c15201e95d0741ee1ab75ea046beca9bc8952b62ddd8a30fe2637996483d3104f540c9a985f8638ba17da2e618255f9a615fce90e1f96799d261cc551b9187cad7a9c5a9f6ff58e7cf9277856ca14e582efd62c3d384131e2fc21b9a01314bc69d54f235ce6118d756137b03c657bb26194b175a716ebe6ba03a01cb161a77815654da6a5ad327859e8af7d3f53cf1d34b84c0aafdbf8f3badaff20d010e97f794d83d5498b59a787ba94bb82d91637308313b4c92def68945b6d3d0e3654cb24b4926e46757e576d30024640fa293db106d789f41a1e481ace0c314920bdc82819e64720746ee22592a11f5917c1bde47db20902551fa838f81942fec3552f41261e2b7418e500ab9e5ea704141f0fc414a5cc6062c257214950de1c32b1951b169c7a613417695036e72bff2ce9c1a180fde1cf64cf85828f6eb9126465762686e64ab090e524e7edb6d03c3571f233f60ffc570b96a5c0839ce8d42bdc62499f8f56ee8c4a89ec4f35a7e38fe23c4b9b1625546c1a16087980d7a72c15fb7b50c9a212d9284a1cdaa1a4d45169a98ae6a730a2a07b8cb5adccdceb3131b1aa6c06b8fc7390f215a2c9ea2b2cac1026ed5965e92673608d28d55fc4e623034716ef0edf7d077809d09d8db38519d5d00a1a415b5bc431d8c6a4d558c930437565cd531c6e01631ee60d9e6e782580a409ab645c72a4b93f68100bc22a5275f66d54dbefc44365a07fafe99368b09a891767e5d376b1d0cbdc02679fb10f359d3ed8f7c268c7f0fbab77b483f44f08ee412c20a155d058addb21376fec84fbb3838c6b6aa4d5bd54e1b9770d87628f244e17e5ffc2b28eff9fb489f984b7", 0x1000}}, 0x1006) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 2.224193624s ago: executing program 5 (id=745): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000004, 0x4, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000006) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x841e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x82, 0x4, 0x4, 0x7, 0x6b60b9f2, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.774107052s ago: executing program 4 (id=755): unshare(0x400) r0 = socket$netlink(0x10, 0x3, 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000540)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='o', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x27}, 0xd}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000340)="88", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000180)={0x0, 0x8}, 0x8) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES32], 0x128}, 0x20048040) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r4, 0x852ac000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) pipe(&(0x7f0000000240)) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) syz_io_uring_setup(0x3ef7, &(0x7f0000000140)={0x0, 0xb5d8, 0x80, 0x1, 0x40}, &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$sock_int(r0, 0x1, 0x26, 0x0, 0x0) 1.720937908s ago: executing program 0 (id=757): syz_emit_ethernet(0x66, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffffffefffffff86dd6000800000000000000009000000000000008abdb3292cf1eb0284c302000000000000000000000000000102009078000007d0600000000000"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000180)}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3, 0x1, 0x7, 0x10, 0x0, 0x9, 0x480, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x8001, 0x10, 0x5, 0x7fff, 0x4f3d, 0x3, 0x0, 0x4, 0x0, 0x37}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000009000000000000000200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000004c4d74fe0d112c9bbde3ca141e301c66e618d5ee6e419822c33425d60b1718f1ab59c158d0fed8a0cc28337570dc6ace6373bc13534b20d8ca14e201b38cac252341b7b4ab7da1a6e74ffea57fb1903c85f2be7f5bc3ee2af988c4d653d22a43688e842b621a3f562e6df0f949606bc0db6191c108d510c097d995c8d02e9f7b7607142e88d389db85d7270252"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5}, 0x94) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000001c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r6}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r2, 0x0, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0xc63e}, {0x4}], 0x2) readlink(0x0, &(0x7f00000005c0)=""/15, 0xf) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r8) sendmsg$NET_DM_CMD_START(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r9, 0x401, 0x70bd22, 0x10400, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40c0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000180)=0x7fff, 0x4) lremovexattr(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)=@known='trusted.syz\x00') 1.720707009s ago: executing program 1 (id=758): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1.701571571s ago: executing program 1 (id=760): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="bba3040000000000005fdee2ac2b", 0x0, 0x2000e04, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x60}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0x40, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x3a, &(0x7f0000001e80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff000000ac2da728000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000186800000100000000e5000001000000a509fcfffcffffffb7080000000000007b8af8ff00000000b7080000010000807b8af0ff00000000bfa100020000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000e6d7272ec1053bc2159380e00523037177c84573070c8416d462dbc151564aa820f63ce3a599ddd0cb46799c2594df67e8cafdb8880b3f455e98b88ac422c35654cae6bba849f4cd8fe384bd0cf82853b2544c7c5ca3f1f3b12bdd65097a04c613a1fd0dd4b915810705898763790da00f722acc1c10f29cbb399213b23f6266f9f7ac6c9f8c4670eec68fb0c7f49d30c4c7ff030000933eada0762a03e7459961805bedf2918dd364fd15ce4a6652ea8e3ec8312dfebfa04fc2c3990ee926e150068beeed0e17c1f0b8db95f8cf69bfe3cbc6d23943c77e80be45bbe67bc32f3187c14c2f45bfaf3912a567a8d593a427ac18e87a0f0fa2b64446370b4897c366b860aac0ed84160bead555a6574ac2", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000000929fefff0ffffffb7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009b5000010400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185f00000800000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, &(0x7f00000002c0), 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x9, 0xfffffffd, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001900)={r5, 0x0, 0xc7, 0x1000, &(0x7f00000006c0)="b1ba7319abeff52944afc5b133ab67727255e99f26dccd5e669690e93316a367fa198d2006e9dde35e4337c0969375a147011c818749c6ac55b8fab3d6d8caa142e560ed56aacfc66ede93c88875abb92044d7d5a6923f3f7800264247b7bc7aec2a086bef8945abfeaffe01fb906729956b4ca214c897ab9cf653adc054193c3685d44f850ee2288f2abdc8c0dc4e6181bb53c9ae2a3b5c71c0289f1dd7781c53013c318016000b377696be2c4d3ea09765f19d20bd2904cdb9c67c941d9eaffbfaa61fd23181", &(0x7f00000007c0)=""/4096, 0x4, 0x0, 0xf5, 0xfdd3, &(0x7f00000017c0)="196a6066f915b1c6711a32ed921f2b986d1e46451e4aa99b7333a3df53e11a8956028d1a7e63613d5c5a5b85cede9abdaff58ff6892254208910e79ccc86d975e98ec5a14f6de50c5fe26acaac892c699fe7b63fbd6bf6910616633dabffe1df57ab2a5123bbf8bd4f5fa01c236ec7e1a5eda4e730b595fd7babafdb5a1d418b66c7f97994422a78cd1497fb0772806c19440bed64dfcf687c12dd2de48ba05108da213d004f6afbdc5b80cb829c98a21054a2b3c85a677180c1a5af0ce96557d8767affb7707974c8b687c2a05527e33092beb51fd3c90a6966fc50d58124d93f55c0b1d980e273c40ea664316e0d5c1075c88e22", &(0x7f00000018c0)="a0f363cf2eb59dc09ae861f469330da883b68f7a732946e6519bc1de63ebaa1354d425e3c8b364e9986a984e08c5c7f32262f3ec", 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES8=r2], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4}, 0x94) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, 0x0) ioctl$sock_ifreq(r3, 0x8942, &(0x7f00000019c0)={'batadv_slave_0\x00', @ifru_hwaddr=@local}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r9 = socket$kcm(0x23, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8001}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001980)=r7, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000940)) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xb}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x2, 0x17, @l2tp6=r4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 1.521219454s ago: executing program 5 (id=763): perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x29, 0x3, 0x0, 0x0, 0x0, 0x8, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x7, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001002600"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300767863616e310000000000000000000008000a00", @ANYRES32=r1], 0x3c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x332b, &(0x7f0000000400)={0x0, 0xb350, 0x800, 0x5, 0x10039}, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x7, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x3, 0x0, 0xe9, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast1}}]}, 0x50}}, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000240)={0x80000011}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x0, 0x6}, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @loopback, 0x393}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) dup(r2) open(0x0, 0x48800, 0x50) 935.24965ms ago: executing program 4 (id=782): socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80210, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x18b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = syz_pidfd_open(r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e25, 0x2, @mcast1, 0x1}, {0xa, 0x4e1f, 0xa52, @remote, 0xca8}, 0x1, {[0x5, 0x6bfe, 0xffffff2f, 0x4, 0xb, 0x7, 0x7, 0xf4200000]}}, 0x5c) r5 = pidfd_getfd(r4, r4, 0x0) r6 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f0000000280)={0x0, "5e39b057554cec060467eef76404687002e1079365e05ecbbd68ccfe34c2ee1df7479e15843a4deac213b9d2c7164cbf79dcab45c0347bba83b041da6298f840", 0x36}, 0x48, 0xfffffffffffffffc) add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000003c0)="781962eaf4217f599ff40b5efa7e389dc96822ef53f47a8d5ebbab658da224794442b960d4078c494c6aac9f7b66511aeef1d6ec12735168343ed0959cceffbce6043fad7710b8f19dc3259cf8c5fdc84f69dc42447299ca80817575877f62c4227de930ff3dc446db831799397a28333f52d47a44223906ebabe965bb2c80d46538e5d803e31bad13d16eea8d1c982ad3bb6342ec6731317cb7aa78760e5a49f8b2e792517268e5af8587a5dc554be3a124b1d026dddcfef3170e78f5d0598f946fd1a4696b6aadce463d6425cd3d8a9fb37ea45027c86876e03c5fa0a3bc28d9821575447e4da10ccc13056e9364cbeb6a66b76967457e", 0xf8, r6) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") keyctl$link(0x8, r6, r6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000008c0), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lstat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000009c0)={{}, {}, [], {}, [{0x8, 0x3, r7}, {0x8, 0x2, r7}, {0x8, 0x4, r7}, {0x8, 0x1, r7}, {0x8, 0x5, r7}, {0x8, 0x2, r8}, {0x8, 0x1, r8}], {0x10, 0x2}}, 0x5c, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000880)={0x2, 0x0, 0x8000, 0x3}, 0x10) setns(r5, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) 893.107385ms ago: executing program 4 (id=784): r0 = syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000d40)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES16, @ANYRES8], 0x40, 0x2fb, &(0x7f00000005c0)="$eJzs3E1rE10UwPGTNG3SlDZZPDygIr3oRjdDG/dCkBbEgFIb8QWEaTPRkDEJmVCJiI0rt34NS5fdSEHrB+jGnSs34qYbwU1BaySZSTtpJ2mb2k5L/j8o93TuPcncmZtwJjCzcf/ts3zW0rJ6RYIRJUGRmmyJxBuRY35URAISkGYzZG+M2E1Nro78/HJRiUgylZqaUWo6OXstoZQaG//w/OXypbXKyL2VsdWwrMcfb/xIfFv/f/3cxp/ZpzlL5SxVKFaUruaKXyv6nGmoTM7Ka0rdMQ3dMlSuYBllu79Ycd5WSqWq0guZ0WipbFiW0gtVlTeqqlJUlXJV6U/0XEFpmqZGo9I/NsebTemweemlmRk92eObzveYh39urWtvudz68Hyqt/ekl45vnwAAwGnVqv/D7vp/s73+Dzht0F3/O2pSa9T/dx88vHWA+n91qEP9X9xT/zvXF9LWnzWL1P+9iuzdlF4a6L3+xxlRHpawLMvOJ/r1o+WJZkD9DwAAAAAAAAAAAAAAAAAAAADAWbBZr8fq9Xqs0QbFjht/YeeGkdb/fu8njof7/NvnOtQ465z/PuG6cS8iYr5ZSC+k7dbuT2YlJ6YYMiEx+d1cDw47nr6Zmgqoprh8NBed/MWF9EB7/qTEJO6dP2nnq/b8QYm68xMSk/+88xOe+UNy5bIrX5OYfJ6XopiSaa7rnfxXk0rduJ3alT8sGY875gAAAAAAOIs0tc3z+l3TOvXb+Qf5fWDC8/o8JOdD/s4dAAAAAIB+YVVf5HXTNMr7Bu+cjH0Hf3cGHviVjxoMHmIW20Gw+3TeN4NAp1eOHOrQHUPQeiZz18HDzqC2LufnmcWj7cagH3Mf9+WAhxqrxLUl2nHw2IDXAe8WhJ2nMje2bNV3jbm+cuGXf2vsxL6CAAAAAJyQnaLf7z0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB/ncTjxPyeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBa/A0AAP//bFIRsw==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x26) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x300, 0x0) read$msr(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) eventfd2(0x180, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40e8662e, &(0x7f0000000000)={0x8001, 0x2, 0x8000000000000003, 0x3, 0xfffffff8, 0x7}) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$TIOCCBRK(r7, 0x5428) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r4, r3, 0x0, 0x578410ed) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffffffe}, [@map_fd={0x18, 0x0, 0x2, 0x0, r8}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0xeb) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) write$P9_RREADLINK(r9, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 892.618085ms ago: executing program 0 (id=785): syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608720010000000000000001000000000001fc0200000000000000000000000000003a010000000000000502"], 0x0) 848.251171ms ago: executing program 0 (id=787): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 840.402532ms ago: executing program 1 (id=790): r0 = socket(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x10001, @loopback, 0x2}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000020103000000000000000000000000440840034000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000003c0)="fd42b9a7899170417b523f49b960f80b78d6dc0735d5531a633ad4272d1b6f4fe9c97ec1c6f9", 0x26}, 0x1, 0x0, 0x0, 0x24008085}, 0x4000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x14048001) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000004000000001000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008010000b7030000490900008500000006000000185a00000c00000000000000001000009500000000000000f061e26f915fc2a3e5514e5d1ad2db10be42660e5fd854204848e6424e0000c25837ca08d556b129e0a7a63fd540e9cfd980969c27af5a1a0c8ee5eb62f964367bcc87b9e16c"], &(0x7f0000000280)='GPL\x00', 0x7, 0x5a, &(0x7f0000000580)=""/90, 0x41100, 0x9, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000380)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000600)=[{0x0, 0x4, 0xf, 0x2}, {0x2, 0x3, 0x10, 0x3}, {0x5, 0x1, 0xf, 0x3}, {0x1, 0x4, 0x7}, {0x5, 0x5, 0x8, 0x9}, {0x1, 0x3, 0x3, 0x9}, {0x1, 0x4, 0x10}, {0x4, 0x5, 0xe, 0x7}], 0x10, 0xfffffff6}, 0x94) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000806010200000000000000000a00000105000100070000000900020073797a3100005ffa086ba098a05d6b00000500010007000000050001000700000005080100070000"], 0x48}}, 0x24064800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x10, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x400000, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x10000, &(0x7f0000000600)={[{@norecovery}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@nodioread_nolock}, {@usrquota}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@mblk_io_submit}, {@nombcache}, {@stripe}, {@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r5, 0x0, 0x0, 0x1001f0) r6 = socket(0x80000000000000a, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r9, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r6}, 0x20) 789.239199ms ago: executing program 0 (id=791): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000580)={{r2}, r3, 0x3e, @inherit={0x70, &(0x7f00000000c0)={0x0, 0x5, 0x7f, 0x8, {0x32, 0x100, 0x2, 0x80, 0x1}, [0xbc6, 0xf7, 0x7, 0x3, 0x6]}}, @name="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"}) fcntl$notify(r0, 0x402, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000002000000000020000000000085000000870000ffff00000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 782.601509ms ago: executing program 0 (id=793): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 782.228439ms ago: executing program 1 (id=794): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400fff800000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x915940ab3f6031c7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x40100, 0x100) preadv(r3, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = eventfd2(0x0, 0x0) ftruncate(r2, 0x9) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f00000002c0)={0xff, "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"}) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000000)={0x1, 0x808, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "c75c85e8b0e3eb49"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) close(0x3) 720.783547ms ago: executing program 0 (id=796): syz_emit_ethernet(0x66, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffffffefffffff86dd6000800000000000000009000000000000008abdb3292cf1eb0284c302000000000000000000000000000102009078000007d0600000000000"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000180)}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3, 0x1, 0x7, 0x10, 0x0, 0x9, 0x480, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x8001, 0x10, 0x5, 0x7fff, 0x4f3d, 0x3, 0x0, 0x4, 0x0, 0x37}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000009000000000000000200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000004c4d74fe0d112c9bbde3ca141e301c66e618d5ee6e419822c33425d60b1718f1ab59c158d0fed8a0cc28337570dc6ace6373bc13534b20d8ca14e201b38cac252341b7b4ab7da1a6e74ffea57fb1903c85f2be7f5bc3ee2af988c4d653d22a43688e842b621a3f562e6df0f949606bc0db6191c108d510c097d995c8d02e9f7b7607142e88d389db85d7270252"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5}, 0x94) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000001c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r6}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r2, 0x0, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0xc63e}, {0x4}], 0x2) readlink(0x0, &(0x7f00000005c0)=""/15, 0xf) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r8) sendmsg$NET_DM_CMD_START(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r9, 0x401, 0x70bd22, 0x10400, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40c0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000180)=0x7fff, 0x4) lremovexattr(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)=@known='trusted.syz\x00') 720.082778ms ago: executing program 2 (id=797): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x40, 0x7, 0x3, 0x6, 0x202, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0xfffffffffffffeda, &(0x7f0000000040)={&(0x7f0000000940)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x3}, {0xad, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044890) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000240)={@mcast1, 0x30, r7}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="400000001000010425bd7000fedbdf2500000000", @ANYRES32=r13, @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@loopback, @loopback, 0x0}, &(0x7f0000000080)=0xc) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r16, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x1, 0x700, 0x81, 0x4c0, {{0x18, 0x4, 0x1, 0x15, 0x60, 0x66, 0x0, 0x1, 0x0, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@lsrr={0x83, 0x6, 0x20, [@dev={0xac, 0x14, 0x14, 0x33}, @multicast1, @rand_addr=0x64010101, @broadcast]}, @rr={0x7, 0x1b, 0x1b, [@broadcast, @private=0xa010100, @broadcast, @multicast1, @private=0xa010100, @broadcast]}, @rr={0x7, 0x3, 0xdc}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x51, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000009c0)={0x400, r4, 0x20, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1b}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0xfffffffffffffed6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7792}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x7a, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0xfffffffffffffdeb}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1a47}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{}, {}, {0x0, 0x4, 0x80000000}}}]}}]}, 0x400}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="8400000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000005c0012800b00010062726964676500004c0002800c001f0001000000000000000500160001000000060027000e000000050029000000000008000400010100000c001e00a00000000000000008001b00fbffffff05002a000000000008000a00", @ANYRES32=0x0, @ANYBLOB="ae0a8f3a6ddd441d19ea99ec246c6f5fa4c1c7791036bb59db767d10b84f69bd325a09c082dae07049cebc3981dbd026e833d8ae94b6203b89d71c575e82c2c2b88529b50d94559d1eabc4647d1697493afbd8c7d34a7a4d7dc4387e0075a8d7b7034b96e3de26d325fda1de35a124c75220b356fc604186ee0c0c070cb78017ca02e1fbd29cba60d0feaf6ddebac1ed4e00410bf31a4138af0972ec61acd80d6bf341f6460c785f55bc388f21b48204f289d927615c359943414570f8fc612633f2fe"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a005}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0xfe, {0x3, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r18}]}, 0x54}, 0x1, 0xba01}, 0x0) 707.102459ms ago: executing program 1 (id=798): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000001080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="a318da000000005279ce556ae026", 0x0, 0x1, 0x0, 0x0, 0x300, 0x0, 0x0, 0x2, 0x9}, 0x50) 700.44654ms ago: executing program 5 (id=799): mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=@updsa={0x144, 0x1a, 0xffffffffffffffff, 0x4070bd28, 0x3, {{@in=@private=0xa010101, @in6=@mcast2, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x20, 0xa0, 0x11}, {@in=@multicast1, 0x84d4, 0x6c}, @in=@broadcast, {0x100000000, 0x0, 0x3d0c, 0xfffffffffffffffd, 0x7ff, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0x0, 0x0, 0xfffffffffffffffc, 0xa3}, {0xf4b, 0x3d49, 0x4000}, 0x3, 0x3503, 0xa, 0x1, 0x4, 0xe0}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4084}, 0x0) (async) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x47, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001380)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xabb8, 0x67, 0xa4c, 0xc4, 0x30, 0x35c3cd21, 0xa9}, 0x9c) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 645.044447ms ago: executing program 1 (id=800): r0 = syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x14c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x200, 0x1, 0x0, 0x6, 0xfff, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) mbind(&(0x7f00000cf000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000500)=0x3, 0x100000001, 0x6) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ce, &(0x7f0000002440)="$eJzs3V9Ls3UYB/BLH/doM83+WXrSjzqpk5v0oKNOJBSiQZGuqCC4xVljaxu7d7BJkNBZR72O6LCzIHoDvotOQoKoE49a6ExTDDPSPeDnc7JrfO+LXReDwT32Y4evf/1ZY7fIdvNeTE5MxFSnFOkoRYrJeBAj+/HKlxu/f7X58PR5ShtrWyuvpZTmX/jho8+/ffHH3ux7381/Px0HCx8f/rr608HiwdLhH1uf1otUL1Kr3Ut52m63e/l2s5Z26kUjS+mdZi0vaqneKmrdC/lus93pDFLe2pkrd7q1okh5a5AatUHqtVOvO0j5J3m9lbIsS3Pl4LLhcDj84l9eW/3maDgcHveU4uFJ52NRjtl4POZiPp6IhXgynoqn45l4NhbjuXg+lk6uuuUVAAAAAAAAAAAAAAAAAAAA4J5x/h8AAAAAAAAAAAAAAAAAAADG70bn/0vHHc7/AwAAAAAAAAAAAAAAAAAAwP/N//8DAAAAAAAAAAAAAAAAAADA+G1+8OFba5XK+rspzUT8st+v9qujx1G+8WZl/dV0YuG867d+v/rgLF8Z5eliPh3l03z1ynwmXn5plB9nb7xduZQvx87trw8AAAD3QpbOXHl/n2X/lI+qv30/cOn+fSqWp656xZnbWoX/oBjsNfJms9YtBqW/ir2xFROnU415DIXi+uLn9yNu3jX5aAx/fTHmDybuxPmbPu5JAAAAAAAAAAAAuIm7+DnhuHcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9mBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVwUAAP//GASTNA==") lsetxattr(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='b[rgs4}%.'], 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fcntl$lock(r0, 0x25, &(0x7f00000003c0)={0x1, 0x3, 0x3, 0x0, 0xffffffffffffffff}) r3 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee87910000000000000a7000000080000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x28) poll(&(0x7f0000000340)=[{r5, 0x2429}], 0x1, 0x400) syz_open_procfs(r3, &(0x7f0000000540)='net/vlan/config\x00') shutdown(r5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r6, 0x4b44, 0x10000000000004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586839) write$selinux_load(r1, &(0x7f0000000400)={0xf97cff8c, 0x8, 'SE Linux', "e07cfbbdd7078bd5057c3903424f01e42f3b6c20c72a14fbe01b297bf145d1be363aa8171e58740a2c1e80d9b73b79feb77ce69cb151358461"}, 0x49) 644.875357ms ago: executing program 5 (id=801): r0 = socket$kcm(0x23, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)) 638.023798ms ago: executing program 5 (id=802): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0xae8, 0x863, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff0000000061100000000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728ead42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10, 0x0, r0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_pidfd_open(0x0, 0x0) process_madvise(r2, 0x0, 0x0, 0x4, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000000200), 0x2) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) copy_file_range(r4, &(0x7f00000008c0)=0x4, r3, &(0x7f0000000100), 0x8, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r1) sendmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="bc", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="8335"], 0x10}}], 0x2, 0x440440c4) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') pread64(r6, &(0x7f0000000080)=""/17, 0x18, 0xf0b) 604.724602ms ago: executing program 2 (id=803): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)) r1 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0x2, 0x10100, 0x3, 0x171}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c000380"], 0x10c}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file1\x00', 0x26042, 0x103) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x18) creat(&(0x7f0000000040)='./bus\x00', 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180), 0xb) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) copy_file_range(r8, &(0x7f0000000100)=0xfffffffffffffffc, r7, 0x0, 0xffffffffffffbff8, 0x0) mbind(&(0x7f0000021000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0xffffffff, 0x1000, 0x3) 545.16185ms ago: executing program 2 (id=804): r0 = syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x14c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000003c0)={0x1, 0x3, 0x3, 0x0, 0xffffffffffffffff}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x28) poll(&(0x7f0000000340)=[{r4, 0x2429}], 0x1, 0x400) shutdown(r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586839) write$selinux_load(r1, &(0x7f0000000400)={0xf97cff8c, 0x8, 'SE Linux', "e07cfbbdd7078bd5057c3903424f01e42f3b6c20c72a14fbe01b297bf145d1be363aa8171e58740a2c1e80d9b73b79feb77ce69cb151358461"}, 0x49) 504.305425ms ago: executing program 2 (id=805): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010027bd7000fddbdf250c0000001800038006000500e8cb0000080001000000000004000400180001801400020076657468305f746f5f626f6e64"], 0x44}, 0x1, 0x0, 0x0, 0x4c045}, 0x40) 494.080786ms ago: executing program 2 (id=806): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) readv(0xffffffffffffffff, 0x0, 0x0) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) r1 = io_uring_setup(0x1694, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) 474.820739ms ago: executing program 2 (id=807): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = gettid() r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611862000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000480)={0x8, 0xf5, 0x5, 0x2}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r5, 0xe, 0x0, @void}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SIOCSIFHWADDR(r4, 0x40095505, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod$loop(0x0, 0x6000, 0x1) r7 = perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r8 = dup2(r7, r7) inotify_add_watch(r8, &(0x7f0000000000)='./file0\x00', 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x18, 0x2c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 9.183158ms ago: executing program 4 (id=808): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x1a0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @private2, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)='g', 0x1}], 0x1}}], 0x2, 0x20000800) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000010040)={0x0, 0x7ff}, &(0x7f0000010080)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000c12, &(0x7f0000002740)=ANY=[@ANYBLOB='check=relaxed,showassoc,overriderockperm,unhide,map=off,showassoc,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=stric,overriderockperm,map=acorn,hide,norock,mode=0x0000000000000003,overriderockperm,norock,showassoc,iocharset=ascii,\x00'], 0xff, 0xa24, &(0x7f0000000280)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00010029bd700000dcdf2507000000", @ANYRES32=r3, @ANYBLOB="80007f0a0a0002000180c2000003000006000500042c"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x4040004) r5 = socket$inet6(0xa, 0x800, 0x9) getsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000100), &(0x7f00000001c0)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) write$cgroup_int(r0, &(0x7f0000000040)=0x80080004, 0xfc1c) 8.983289ms ago: executing program 4 (id=809): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES16=r1, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 0s ago: executing program 4 (id=810): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000002c0), 0x4) kernel console output (not intermixed with test programs): context=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 78.102661][ T3322] veth1_vlan: entered promiscuous mode [ 78.135632][ T30] audit: type=1400 audit(1768709285.716:91): avc: denied { mount } for pid=3329 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.163096][ T30] audit: type=1400 audit(1768709285.716:92): avc: denied { mounton } for pid=3329 comm="syz-executor" path="/root/syzkaller.fMfmnI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.199478][ T30] audit: type=1400 audit(1768709285.776:93): avc: denied { mount } for pid=3329 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.234295][ T3327] veth1_vlan: entered promiscuous mode [ 78.238158][ T30] audit: type=1400 audit(1768709285.776:94): avc: denied { mounton } for pid=3329 comm="syz-executor" path="/root/syzkaller.fMfmnI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.286529][ T30] audit: type=1400 audit(1768709285.776:95): avc: denied { mounton } for pid=3329 comm="syz-executor" path="/root/syzkaller.fMfmnI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 78.321690][ T30] audit: type=1400 audit(1768709285.786:96): avc: denied { unmount } for pid=3329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 78.351370][ T30] audit: type=1400 audit(1768709285.846:97): avc: denied { mounton } for pid=3329 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 78.379702][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.391886][ T30] audit: type=1400 audit(1768709285.846:98): avc: denied { mount } for pid=3329 comm="syz-executor" name="/" dev="gadgetfs" ino=3931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 78.435949][ T3327] veth0_macvtap: entered promiscuous mode [ 78.448009][ T3329] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.477374][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.513021][ T3327] veth1_macvtap: entered promiscuous mode [ 78.527323][ T30] audit: type=1400 audit(1768709286.156:99): avc: denied { read write } for pid=3329 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.577477][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.612940][ T3494] loop3: detected capacity change from 0 to 512 [ 78.635523][ T3324] veth0_vlan: entered promiscuous mode [ 78.655150][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.674540][ T3322] veth0_macvtap: entered promiscuous mode [ 78.688121][ T3494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.699521][ T3324] veth1_vlan: entered promiscuous mode [ 78.717241][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.734451][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.757759][ T3322] veth1_macvtap: entered promiscuous mode [ 78.785129][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.820913][ T3494] Zero length message leads to an empty skb [ 78.835533][ T3499] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.841699][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.883021][ T1830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.918892][ T1830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.934863][ T3324] veth0_macvtap: entered promiscuous mode [ 78.960047][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.975166][ T1830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.009812][ T3324] veth1_macvtap: entered promiscuous mode [ 79.031531][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.047676][ T1830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.107987][ T1830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.127038][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.161341][ T1830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.177072][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.216726][ T1830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.250157][ T3509] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.282373][ T1830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.325351][ T1595] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.374389][ T3515] ip6tnl1: entered allmulticast mode [ 79.393510][ T1595] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.413522][ T3515] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3515 comm=syz.3.9 [ 79.462601][ T71] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.517749][ T3527] ======================================================= [ 79.517749][ T3527] WARNING: The mand mount option has been deprecated and [ 79.517749][ T3527] and is ignored by this kernel. Remove the mand [ 79.517749][ T3527] option from the mount to silence this warning. [ 79.517749][ T3527] ======================================================= [ 79.541503][ T3528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 79.568759][ T1830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.620998][ C0] hrtimer: interrupt took 28092 ns [ 79.659705][ T3534] FAULT_INJECTION: forcing a failure. [ 79.659705][ T3534] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.679432][ T3534] CPU: 0 UID: 0 PID: 3534 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.679506][ T3534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.679521][ T3534] Call Trace: [ 79.679531][ T3534] [ 79.679539][ T3534] __dump_stack+0x1d/0x30 [ 79.679569][ T3534] dump_stack_lvl+0x95/0xd0 [ 79.679641][ T3534] dump_stack+0x15/0x1b [ 79.679666][ T3534] should_fail_ex+0x263/0x280 [ 79.679697][ T3534] should_fail+0xb/0x20 [ 79.679719][ T3534] should_fail_usercopy+0x1a/0x20 [ 79.679805][ T3534] _copy_from_iter+0xcf/0xea0 [ 79.679880][ T3534] ? __alloc_skb+0x397/0x4b0 [ 79.679914][ T3534] ? __alloc_skb+0x219/0x4b0 [ 79.679947][ T3534] netlink_sendmsg+0x4ae/0x6f0 [ 79.679986][ T3534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.680007][ T3534] __sock_sendmsg+0x145/0x170 [ 79.680032][ T3534] ____sys_sendmsg+0x345/0x4a0 [ 79.680075][ T3534] ___sys_sendmsg+0x195/0x1e0 [ 79.680145][ T3534] __sys_sendmmsg+0x185/0x320 [ 79.680189][ T3534] __x64_sys_sendmmsg+0x57/0x70 [ 79.680230][ T3534] x64_sys_call+0x1e28/0x3000 [ 79.680338][ T3534] do_syscall_64+0xc0/0x2a0 [ 79.680400][ T3534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.680428][ T3534] RIP: 0033:0x7f6788bbacb9 [ 79.680455][ T3534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.680478][ T3534] RSP: 002b:00007f67875f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 79.680515][ T3534] RAX: ffffffffffffffda RBX: 00007f6788e36090 RCX: 00007f6788bbacb9 [ 79.680571][ T3534] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 79.680585][ T3534] RBP: 00007f67875f6090 R08: 0000000000000000 R09: 0000000000000000 [ 79.680597][ T3534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.680613][ T3534] R13: 00007f6788e36128 R14: 00007f6788e36090 R15: 00007ffd87588628 [ 79.680637][ T3534] [ 80.034786][ T3542] smc: net device hsr0 applied user defined pnetid SYZ2 [ 80.076305][ T3542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'. [ 80.140887][ T3531] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3531 comm=syz.0.11 [ 80.182539][ T3545] FAULT_INJECTION: forcing a failure. [ 80.182539][ T3545] name failslab, interval 1, probability 0, space 0, times 1 [ 80.201088][ T3545] CPU: 0 UID: 0 PID: 3545 Comm: syz.4.14 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.201132][ T3545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.201144][ T3545] Call Trace: [ 80.201152][ T3545] [ 80.201159][ T3545] __dump_stack+0x1d/0x30 [ 80.201186][ T3545] dump_stack_lvl+0x95/0xd0 [ 80.201214][ T3545] dump_stack+0x15/0x1b [ 80.201266][ T3545] should_fail_ex+0x263/0x280 [ 80.201320][ T3545] should_failslab+0x8c/0xb0 [ 80.201369][ T3545] __kmalloc_cache_noprof+0x64/0x4a0 [ 80.201430][ T3545] ? alloc_pipe_info+0xad/0x340 [ 80.201452][ T3545] alloc_pipe_info+0xad/0x340 [ 80.201471][ T3545] splice_direct_to_actor+0x591/0x670 [ 80.201491][ T3545] ? kstrtouint_from_user+0xa8/0xf0 [ 80.201612][ T3545] ? __pfx_direct_splice_actor+0x10/0x10 [ 80.201632][ T3545] ? __rcu_read_unlock+0x4e/0x70 [ 80.201656][ T3545] ? get_pid_task+0x96/0xd0 [ 80.201751][ T3545] ? avc_policy_seqno+0x15/0x30 [ 80.201799][ T3545] ? selinux_file_permission+0x1e1/0x320 [ 80.201830][ T3545] do_splice_direct+0x119/0x1a0 [ 80.201848][ T3545] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 80.201898][ T3545] do_sendfile+0x380/0x650 [ 80.201933][ T3545] __x64_sys_sendfile64+0xb8/0x150 [ 80.201959][ T3545] x64_sys_call+0x2db1/0x3000 [ 80.201988][ T3545] do_syscall_64+0xc0/0x2a0 [ 80.202052][ T3545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.202128][ T3545] RIP: 0033:0x7f6788bbacb9 [ 80.202149][ T3545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.202204][ T3545] RSP: 002b:00007f6787617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 80.202223][ T3545] RAX: ffffffffffffffda RBX: 00007f6788e35fa0 RCX: 00007f6788bbacb9 [ 80.202237][ T3545] RDX: 0000200000000240 RSI: 0000000000000004 RDI: 0000000000000004 [ 80.202253][ T3545] RBP: 00007f6787617090 R08: 0000000000000000 R09: 0000000000000000 [ 80.202334][ T3545] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 80.202350][ T3545] R13: 00007f6788e36038 R14: 00007f6788e35fa0 R15: 00007ffd87588628 [ 80.202374][ T3545] [ 80.615597][ T3531] tmpfs: Bad value for 'context' [ 80.721113][ T3553] bond1: option fail_over_mac: invalid value (15) [ 80.734936][ T3553] bond1 (unregistering): Released all slaves [ 80.766714][ T3531] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3531 comm=syz.0.11 [ 81.060949][ T3557] netlink: 136 bytes leftover after parsing attributes in process `syz.2.16'. [ 81.073762][ T3557] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 81.520983][ T3576] netlink: 'syz.4.24': attribute type 1 has an invalid length. [ 81.567489][ T3576] team0: Port device gretap1 added [ 81.595496][ T3576] macvlan2: entered promiscuous mode [ 81.604180][ T3576] macvlan2: entered allmulticast mode [ 81.614624][ T3576] team0: Device macvlan2 is already an upper device of the team interface [ 81.696764][ T3588] loop0: detected capacity change from 0 to 128 [ 81.723286][ T3588] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000006f) [ 81.738712][ T3588] FAT-fs (loop0): Filesystem has been set read-only [ 81.744771][ T3576] syz.4.24 (3576) used greatest stack depth: 9696 bytes left [ 81.751307][ T3588] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000006f) [ 81.799370][ T3590] capability: warning: `syz.2.27' uses deprecated v2 capabilities in a way that may be insecure [ 81.900957][ T3593] loop4: detected capacity change from 0 to 4096 [ 81.934101][ T3596] loop1: detected capacity change from 0 to 512 [ 81.958692][ T3593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.984745][ T3598] loop2: detected capacity change from 0 to 512 [ 81.990964][ T3596] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.013625][ T3593] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.29: bg 0: block 137: padding at end of block bitmap is not set [ 82.042473][ T3588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.054048][ T3588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.063912][ T3596] EXT4-fs (loop1): orphan cleanup on readonly fs [ 82.074105][ T3596] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.30: Allocating blocks 41-42 which overlap fs metadata [ 82.075289][ T3598] EXT4-fs (loop2): Invalid log cluster size: 184549377 [ 82.106183][ T3596] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.30: Allocating blocks 41-42 which overlap fs metadata [ 82.132539][ T3596] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.30: Failed to acquire dquot type 1 [ 82.150318][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 82.167488][ T3596] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 82.187895][ T3596] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.30: corrupted inode contents [ 82.217110][ T3596] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.30: mark_inode_dirty error [ 82.238250][ T3596] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.30: corrupted inode contents [ 82.253998][ T3596] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.30: mark_inode_dirty error [ 82.268933][ T3596] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.30: corrupted inode contents [ 82.289450][ T3596] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 82.306457][ T3596] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.30: corrupted inode contents [ 82.327488][ T3596] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.30: mark_inode_dirty error [ 82.343572][ T3596] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 82.360396][ T3596] EXT4-fs (loop1): 1 truncate cleaned up [ 82.369466][ T3596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.408150][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.440962][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.575643][ T3615] vlan0: entered promiscuous mode [ 82.633952][ T3617] Cannot find set identified by id 0 to match [ 82.714126][ T3623] syz.1.43 uses obsolete (PF_INET,SOCK_PACKET) [ 82.803080][ T3630] mmap: syz.4.44 (3630) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.904304][ T3647] FAULT_INJECTION: forcing a failure. [ 82.904304][ T3647] name failslab, interval 1, probability 0, space 0, times 0 [ 82.917529][ T3647] CPU: 0 UID: 0 PID: 3647 Comm: syz.1.49 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.917565][ T3647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.917629][ T3647] Call Trace: [ 82.917638][ T3647] [ 82.917649][ T3647] __dump_stack+0x1d/0x30 [ 82.917676][ T3647] dump_stack_lvl+0x95/0xd0 [ 82.917769][ T3647] dump_stack+0x15/0x1b [ 82.917797][ T3647] should_fail_ex+0x263/0x280 [ 82.917828][ T3647] ? __pfx_cgroup_show_path+0x10/0x10 [ 82.917870][ T3647] should_failslab+0x8c/0xb0 [ 82.917940][ T3647] __kmalloc_cache_noprof+0x64/0x4a0 [ 82.917980][ T3647] ? cgroup_show_path+0x6a/0x2b0 [ 82.918146][ T3647] ? __pfx_cgroup_show_path+0x10/0x10 [ 82.918261][ T3647] cgroup_show_path+0x6a/0x2b0 [ 82.918330][ T3647] ? kernfs_sop_show_path+0xa4/0xf0 [ 82.918354][ T3647] ? __pfx_cgroup_show_path+0x10/0x10 [ 82.918468][ T3647] kernfs_sop_show_path+0xb6/0xf0 [ 82.918499][ T3647] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 82.918529][ T3647] show_path+0x5a/0x80 [ 82.918560][ T3647] show_mountinfo+0xe5/0x610 [ 82.918605][ T3647] m_show+0x3e/0x50 [ 82.918643][ T3647] traverse+0x149/0x3a0 [ 82.918684][ T3647] seq_lseek+0xb5/0x170 [ 82.918797][ T3647] __x64_sys_lseek+0xe8/0x160 [ 82.918830][ T3647] x64_sys_call+0x285d/0x3000 [ 82.918857][ T3647] do_syscall_64+0xc0/0x2a0 [ 82.918885][ T3647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.918980][ T3647] RIP: 0033:0x7fc6affcacb9 [ 82.919055][ T3647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.919075][ T3647] RSP: 002b:00007fc6aea27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 82.919095][ T3647] RAX: ffffffffffffffda RBX: 00007fc6b0245fa0 RCX: 00007fc6affcacb9 [ 82.919137][ T3647] RDX: 0000000000000000 RSI: 000000000000fffd RDI: 0000000000000003 [ 82.919153][ T3647] RBP: 00007fc6aea27090 R08: 0000000000000000 R09: 0000000000000000 [ 82.919172][ T3647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.919250][ T3647] R13: 00007fc6b0246038 R14: 00007fc6b0245fa0 R15: 00007ffd9ceee998 [ 82.919274][ T3647] [ 83.257176][ T30] kauditd_printk_skb: 221 callbacks suppressed [ 83.257194][ T30] audit: type=1400 audit(1768709290.886:317): avc: denied { connect } for pid=3653 comm="syz.3.52" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.315212][ T30] audit: type=1400 audit(1768709290.926:318): avc: denied { write } for pid=3653 comm="syz.3.52" laddr=fe80::13 lport=60 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.339007][ T30] audit: type=1400 audit(1768709290.926:319): avc: denied { connect } for pid=3653 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 83.423735][ T3656] netlink: 'syz.1.53': attribute type 13 has an invalid length. [ 83.463768][ T3670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 83.473753][ T30] audit: type=1326 audit(1768709291.076:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3625 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce3f8acb9 code=0x7ffc0000 [ 83.500437][ T30] audit: type=1326 audit(1768709291.076:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3625 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce3f8acb9 code=0x7ffc0000 [ 83.603037][ T3677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 83.648856][ T30] audit: type=1400 audit(1768709291.106:322): avc: denied { nlmsg_write } for pid=3668 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.672487][ T3679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 83.715229][ T3656] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.723075][ T3656] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.739954][ T30] audit: type=1326 audit(1768709291.276:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3625 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ce3f8c547 code=0x7ffc0000 [ 83.765923][ T30] audit: type=1326 audit(1768709291.276:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3625 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2ce3f4b58e code=0x7ffc0000 [ 83.790996][ T30] audit: type=1326 audit(1768709291.326:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3625 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2ce3f4b58e code=0x7ffc0000 [ 83.814955][ T30] audit: type=1326 audit(1768709291.326:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3625 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2ce3f8aa22 code=0x7ffc0000 [ 83.892368][ T3656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.928975][ T3656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.099290][ T3694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 84.108463][ T3694] netlink: 56 bytes leftover after parsing attributes in process `syz.2.60'. [ 84.151084][ T2661] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.154285][ T2661] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.154330][ T2661] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.154396][ T2661] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.224571][ T3686] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 84.321273][ T3707] loop2: detected capacity change from 0 to 512 [ 84.329933][ T3707] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.64: invalid block [ 84.341447][ T3707] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.64: invalid indirect mapped block 4294967295 (level 1) [ 84.341649][ T3707] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.64: invalid indirect mapped block 4294967295 (level 1) [ 84.341923][ T3707] EXT4-fs (loop2): 2 truncates cleaned up [ 84.342451][ T3707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.505366][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.560287][ T3712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.560491][ T3712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.726677][ T3715] bond1: Removing last arp target with arp_interval on [ 84.740457][ T3715] bond1: entered promiscuous mode [ 84.745858][ T3715] bond1: entered allmulticast mode [ 84.770151][ T3715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.052461][ T3733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 85.061827][ T3733] netlink: 56 bytes leftover after parsing attributes in process `syz.1.74'. [ 85.138030][ T3735] netlink: 40 bytes leftover after parsing attributes in process `syz.2.75'. [ 85.181229][ T3737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.209683][ T3737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.595206][ T3741] loop3: detected capacity change from 0 to 128 [ 85.786737][ T3744] FAULT_INJECTION: forcing a failure. [ 85.786737][ T3744] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 85.801221][ T3744] CPU: 1 UID: 0 PID: 3744 Comm: syz.1.78 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.801296][ T3744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.801314][ T3744] Call Trace: [ 85.801321][ T3744] [ 85.801332][ T3744] __dump_stack+0x1d/0x30 [ 85.801366][ T3744] dump_stack_lvl+0x95/0xd0 [ 85.801424][ T3744] dump_stack+0x15/0x1b [ 85.801500][ T3744] should_fail_ex+0x263/0x280 [ 85.801531][ T3744] should_fail_alloc_page+0xf2/0x100 [ 85.801628][ T3744] __alloc_frozen_pages_noprof+0x108/0x350 [ 85.801674][ T3744] alloc_pages_mpol+0xb3/0x260 [ 85.801772][ T3744] alloc_pages_noprof+0x8f/0x130 [ 85.801910][ T3744] pte_alloc_one+0x1e/0xd0 [ 85.801946][ T3744] __pte_alloc+0x32/0x2c0 [ 85.802021][ T3744] handle_mm_fault+0x2057/0x3030 [ 85.802056][ T3744] ? vma_start_read+0x1c7/0x2c0 [ 85.802110][ T3744] do_user_addr_fault+0x62f/0x1050 [ 85.802145][ T3744] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 85.802175][ T3744] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 85.802259][ T3744] ? irqentry_exit+0x3c/0x510 [ 85.802422][ T3744] exc_page_fault+0x62/0xa0 [ 85.802603][ T3744] asm_exc_page_fault+0x26/0x30 [ 85.802628][ T3744] RIP: 0033:0x7fc6afe8288e [ 85.802711][ T3744] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 85.802738][ T3744] RSP: 002b:00007fc6aea263c0 EFLAGS: 00010206 [ 85.802758][ T3744] RAX: 00000000003f9001 RBX: 00007fc6aea26480 RCX: 0000000000000090 [ 85.802817][ T3744] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fc6aea26520 [ 85.802831][ T3744] RBP: 0000000000000102 R08: 00007fc6a6607000 R09: 00000000003f9000 [ 85.802846][ T3744] R10: 0000000000000000 R11: 00007fc6aea26490 R12: 0000000000000001 [ 85.802860][ T3744] R13: 00007fc6b0077880 R14: 0000000000000000 R15: 00007fc6aea26520 [ 85.802882][ T3744] [ 85.802910][ T3744] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 86.021897][ T1830] kworker/u8:11: attempt to access beyond end of device [ 86.021897][ T1830] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 86.040408][ T1830] kworker/u8:11: attempt to access beyond end of device [ 86.040408][ T1830] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 86.062148][ T3744] loop1: detected capacity change from 0 to 8192 [ 86.067214][ T1830] kworker/u8:11: attempt to access beyond end of device [ 86.067214][ T1830] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 86.110515][ T1830] kworker/u8:11: attempt to access beyond end of device [ 86.110515][ T1830] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 86.125415][ T3316] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 86.130855][ T3316] loop1: partition table partially beyond EOD, truncated [ 86.139909][ T1830] kworker/u8:11: attempt to access beyond end of device [ 86.139909][ T1830] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 86.168602][ T3316] loop1: p1 start 100663296 is beyond EOD, truncated [ 86.176045][ T3316] loop1: p2 size 134217732 extends beyond EOD, truncated [ 86.181019][ T1830] kworker/u8:11: attempt to access beyond end of device [ 86.181019][ T1830] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 86.206346][ T3316] loop1: p4 size 14876672 extends beyond EOD, truncated [ 86.216614][ T3316] loop1: p5 size 134217732 extends beyond EOD, truncated [ 86.226437][ T3431] IPVS: starting estimator thread 0... [ 86.239586][ T1830] kworker/u8:11: attempt to access beyond end of device [ 86.239586][ T1830] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 86.270238][ T1830] kworker/u8:11: attempt to access beyond end of device [ 86.270238][ T1830] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 86.275248][ T3316] loop1: p6 size 14876672 extends beyond EOD, truncated [ 86.304933][ T3757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.334220][ T3757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.342435][ T3753] IPVS: using max 2256 ests per chain, 112800 per kthread [ 86.356845][ T1830] kworker/u8:11: attempt to access beyond end of device [ 86.356845][ T1830] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 86.374388][ T3744] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 86.374444][ T1830] kworker/u8:11: attempt to access beyond end of device [ 86.374444][ T1830] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 86.380986][ T3744] loop1: partition table partially beyond EOD, truncated [ 86.406375][ T3761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.86'. [ 86.416725][ T3761] netlink: 56 bytes leftover after parsing attributes in process `syz.4.86'. [ 86.436972][ T3744] loop1: p1 start 100663296 is beyond EOD, truncated [ 86.444110][ T3744] loop1: p2 size 134217732 extends beyond EOD, truncated [ 86.491237][ T3744] loop1: p4 size 14876672 extends beyond EOD, truncated [ 86.527208][ T3744] loop1: p5 size 134217732 extends beyond EOD, truncated [ 86.555911][ T3771] Cannot find set identified by id 0 to match [ 86.560567][ T3744] loop1: p6 size 14876672 extends beyond EOD, truncated [ 86.653771][ T3767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 86.722609][ T3781] Unsupported ieee802154 address type: 0 [ 86.741806][ T3618] udevd[3618]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 86.758426][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 86.777266][ T3786] udevd[3786]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 86.793667][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 86.807997][ T3316] udevd[3316]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 86.836577][ T3773] netlink: 36 bytes leftover after parsing attributes in process `syz.3.91'. [ 86.881252][ T3786] udevd[3786]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 86.885398][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 86.895168][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 86.909214][ T3316] udevd[3316]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 86.919228][ T3788] loop1: detected capacity change from 0 to 512 [ 86.942262][ T3791] random: crng reseeded on system resumption [ 86.951820][ T3618] udevd[3618]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 86.967614][ T3770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 86.967646][ T3770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 86.967766][ T3770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 86.974345][ T3788] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.96: bad orphan inode 11862016 [ 87.010789][ T3788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 87.055955][ T3788] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.106784][ T3798] loop3: detected capacity change from 0 to 1024 [ 87.116980][ T3800] capability: warning: `syz.4.98' uses 32-bit capabilities (legacy support in use) [ 87.131743][ T3798] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.143310][ T3798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.158654][ T3800] program syz.4.98 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.205798][ T3798] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.97: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 87.243576][ T3798] EXT4-fs (loop3): Remounting filesystem read-only [ 87.252874][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 87.299705][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.344841][ T3810] program syz.3.102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.360545][ T3812] program syz.4.103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.371104][ T3810] FAULT_INJECTION: forcing a failure. [ 87.371104][ T3810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.385843][ T3810] CPU: 1 UID: 0 PID: 3810 Comm: syz.3.102 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.385877][ T3810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.385891][ T3810] Call Trace: [ 87.385900][ T3810] [ 87.385909][ T3810] __dump_stack+0x1d/0x30 [ 87.385982][ T3810] dump_stack_lvl+0x95/0xd0 [ 87.386004][ T3810] dump_stack+0x15/0x1b [ 87.386023][ T3810] should_fail_ex+0x263/0x280 [ 87.386076][ T3810] should_fail+0xb/0x20 [ 87.386100][ T3810] should_fail_usercopy+0x1a/0x20 [ 87.386129][ T3810] _copy_from_user+0x1c/0xb0 [ 87.386185][ T3810] scsi_ioctl+0x139c/0x1750 [ 87.386215][ T3810] ? avc_has_perm+0x101/0x190 [ 87.386246][ T3810] ? file_has_perm+0x36a/0x3b0 [ 87.386281][ T3810] ? do_vfs_ioctl+0x84f/0xe70 [ 87.386419][ T3810] sg_ioctl+0xebf/0x1350 [ 87.386444][ T3810] ? mutex_lock+0x57/0x90 [ 87.386527][ T3810] ? __pfx_sg_ioctl+0x10/0x10 [ 87.386552][ T3810] __se_sys_ioctl+0xce/0x140 [ 87.386617][ T3810] __x64_sys_ioctl+0x43/0x50 [ 87.386656][ T3810] x64_sys_call+0x14b0/0x3000 [ 87.386688][ T3810] do_syscall_64+0xc0/0x2a0 [ 87.386787][ T3810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.386815][ T3810] RIP: 0033:0x7fd0e97cacb9 [ 87.386838][ T3810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.386920][ T3810] RSP: 002b:00007fd0e8227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.386945][ T3810] RAX: ffffffffffffffda RBX: 00007fd0e9a45fa0 RCX: 00007fd0e97cacb9 [ 87.386964][ T3810] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 87.386979][ T3810] RBP: 00007fd0e8227090 R08: 0000000000000000 R09: 0000000000000000 [ 87.386991][ T3810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.387004][ T3810] R13: 00007fd0e9a46038 R14: 00007fd0e9a45fa0 R15: 00007ffc36699a18 [ 87.387031][ T3810] [ 87.893085][ T3847] loop1: detected capacity change from 0 to 512 [ 87.930448][ T3847] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 88.188217][ T3870] loop1: detected capacity change from 0 to 256 [ 88.212002][ T3870] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.344404][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 88.344423][ T30] audit: type=1400 audit(1768709295.976:514): avc: denied { read } for pid=3875 comm="syz.3.128" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 88.353129][ T3876] loop3: detected capacity change from 0 to 256 [ 88.405959][ T3876] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.465501][ T3870] caif0: entered allmulticast mode [ 88.654397][ T3876] caif0: entered allmulticast mode [ 88.798777][ T3329] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 88.809186][ T3329] FAT-fs (loop3): Filesystem has been set read-only [ 88.875746][ T3329] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 88.927142][ T3888] batadv_slave_0: entered promiscuous mode [ 88.989182][ T3887] batadv_slave_0: left promiscuous mode [ 89.085035][ T3892] loop4: detected capacity change from 0 to 8192 [ 89.126309][ T1650] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.187745][ T1650] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.298489][ T1650] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.323366][ T3912] netlink: 'syz.1.140': attribute type 4 has an invalid length. [ 89.350955][ T3899] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 89.358689][ T3899] FAT-fs (loop4): Filesystem has been set read-only [ 89.360446][ T3912] netlink: 'syz.1.140': attribute type 4 has an invalid length. [ 89.387954][ T1650] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.411354][ T3904] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 89.427332][ T3892] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 89.438001][ T3912] netlink: 'syz.1.140': attribute type 4 has an invalid length. [ 89.448085][ T3912] netlink: 'syz.1.140': attribute type 4 has an invalid length. [ 89.464515][ T3912] netlink: 'syz.1.140': attribute type 4 has an invalid length. [ 89.532488][ T1650] bridge_slave_1: left allmulticast mode [ 89.538479][ T1650] bridge_slave_1: left promiscuous mode [ 89.544317][ T1650] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.559400][ T3892] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 89.569197][ T1650] bridge_slave_0: left allmulticast mode [ 89.574949][ T1650] bridge_slave_0: left promiscuous mode [ 89.580996][ T1650] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.595912][ T3892] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 89.778413][ T30] audit: type=1400 audit(1768709297.406:515): avc: denied { sqpoll } for pid=3930 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.810660][ T1650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.832145][ T1650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.842841][ T1650] bond0 (unregistering): Released all slaves [ 89.855806][ T1650] bond1 (unregistering): Released all slaves [ 89.883972][ T3912] netlink: 'syz.1.140': attribute type 4 has an invalid length. [ 89.897223][ T3912] netlink: 'syz.1.140': attribute type 4 has an invalid length. [ 89.914598][ T1650] hsr_slave_0: left promiscuous mode [ 89.921211][ T1650] hsr_slave_1: left promiscuous mode [ 89.937297][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.945274][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.004319][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.011842][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.039384][ T1650] veth1_macvtap: left promiscuous mode [ 90.055239][ T1650] veth0_macvtap: left promiscuous mode [ 90.070130][ T1650] veth1_vlan: left promiscuous mode [ 90.194723][ T1650] team0 (unregistering): Port device team_slave_1 removed [ 90.212040][ T1650] team0 (unregistering): Port device team_slave_0 removed [ 90.461052][ T3324] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 90.490961][ T3970] Cannot find set identified by id 0 to match [ 90.497915][ T3902] chnl_net:caif_netlink_parms(): no params data found [ 90.606590][ T30] audit: type=1400 audit(1768709298.236:516): avc: denied { setopt } for pid=3982 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.643259][ T3986] loop4: detected capacity change from 0 to 512 [ 90.653133][ T30] audit: type=1400 audit(1768709298.236:517): avc: denied { connect } for pid=3982 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.707324][ T3986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.752321][ T4002] loop1: detected capacity change from 0 to 512 [ 90.757216][ T3902] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.766463][ T3902] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.774831][ T4002] EXT4-fs: Ignoring removed bh option [ 90.790398][ T4002] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.800906][ T3986] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.803968][ T4002] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.823530][ T4002] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 90.838166][ T3902] bridge_slave_0: entered allmulticast mode [ 90.846309][ T30] audit: type=1400 audit(1768709298.476:518): avc: denied { create } for pid=3984 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 90.874759][ T3902] bridge_slave_0: entered promiscuous mode [ 90.891663][ T3986] __nla_validate_parse: 8 callbacks suppressed [ 90.891681][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 90.894694][ T4002] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 90.908340][ T3902] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.923482][ T3902] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.931998][ T4002] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 90.955788][ T4002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.019328][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.030820][ T30] audit: type=1400 audit(1768709298.666:519): avc: denied { remount } for pid=4001 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.071421][ T3902] bridge_slave_1: entered allmulticast mode [ 91.090198][ T3902] bridge_slave_1: entered promiscuous mode [ 91.137912][ T30] audit: type=1400 audit(1768709298.686:520): avc: denied { create } for pid=4001 comm="syz.1.155" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 91.185113][ T3902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.217298][ T4017] loop4: detected capacity change from 0 to 128 [ 91.230391][ T3902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.287966][ T3902] team0: Port device team_slave_0 added [ 91.310536][ T3902] team0: Port device team_slave_1 added [ 91.354752][ T3902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.361935][ T3902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.388304][ T3902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.451669][ T3902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.458803][ T3902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.485375][ T3902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.506578][ T4028] netlink: 'syz.0.152': attribute type 3 has an invalid length. [ 91.637193][ T3902] hsr_slave_0: entered promiscuous mode [ 91.663036][ T3902] hsr_slave_1: entered promiscuous mode [ 91.675942][ T3902] debugfs: 'hsr0' already exists in 'hsr' [ 91.681814][ T3902] Cannot create hsr debugfs directory [ 91.740182][ T366] bio_check_eod: 101 callbacks suppressed [ 91.740201][ T366] kworker/u8:5: attempt to access beyond end of device [ 91.740201][ T366] loop4: rw=1, sector=145, nr_sectors = 16 limit=128 [ 91.772098][ T366] kworker/u8:5: attempt to access beyond end of device [ 91.772098][ T366] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 91.813954][ T366] kworker/u8:5: attempt to access beyond end of device [ 91.813954][ T366] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 91.841126][ T366] kworker/u8:5: attempt to access beyond end of device [ 91.841126][ T366] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 91.887707][ T366] kworker/u8:5: attempt to access beyond end of device [ 91.887707][ T366] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 91.913523][ T366] kworker/u8:5: attempt to access beyond end of device [ 91.913523][ T366] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 91.947831][ T366] kworker/u8:5: attempt to access beyond end of device [ 91.947831][ T366] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 91.954603][ T3902] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.980908][ T3902] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.991863][ T3902] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.001242][ T3902] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.003325][ T366] kworker/u8:5: attempt to access beyond end of device [ 92.003325][ T366] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 92.028433][ T4051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.159'. [ 92.051061][ T366] kworker/u8:5: attempt to access beyond end of device [ 92.051061][ T366] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 92.066610][ T30] audit: type=1326 audit(1768709299.676:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55300bacb9 code=0x7ffc0000 [ 92.090518][ T30] audit: type=1326 audit(1768709299.686:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55300bacb9 code=0x7ffc0000 [ 92.114288][ T30] audit: type=1326 audit(1768709299.686:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55300bacb9 code=0x7ffc0000 [ 92.134013][ T3902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.145768][ T366] kworker/u8:5: attempt to access beyond end of device [ 92.145768][ T366] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 92.177426][ T3902] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.198402][ T1830] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.205673][ T1830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.256909][ T2661] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.264143][ T2661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.354519][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.399716][ T4064] loop0: detected capacity change from 0 to 128 [ 92.439010][ T4063] Cannot find set identified by id 0 to match [ 92.476514][ T3902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.695562][ T4087] loop1: detected capacity change from 0 to 512 [ 92.715777][ T4087] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.778871][ T3902] veth0_vlan: entered promiscuous mode [ 92.788240][ T4087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.809017][ T3902] veth1_vlan: entered promiscuous mode [ 92.815027][ T4087] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.870622][ T3902] veth0_macvtap: entered promiscuous mode [ 92.888648][ T3902] veth1_macvtap: entered promiscuous mode [ 92.906268][ T3902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.922682][ T3902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.936585][ T1830] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.960788][ T1830] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.971377][ T1830] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.981502][ T1830] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.272862][ T4114] loop5: detected capacity change from 0 to 128 [ 93.333899][ T4114] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 93.380219][ T4114] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.426346][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 93.426372][ T30] audit: type=1400 audit(1768709301.056:551): avc: denied { nlmsg_read } for pid=4112 comm="syz.5.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.564566][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.582810][ T3902] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.593559][ T3947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.741373][ T4124] Cannot find set identified by id 0 to match [ 93.788842][ T4130] FAULT_INJECTION: forcing a failure. [ 93.788842][ T4130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.802094][ T4130] CPU: 1 UID: 0 PID: 4130 Comm: syz.0.175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.802180][ T4130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.802254][ T4130] Call Trace: [ 93.802262][ T4130] [ 93.802271][ T4130] __dump_stack+0x1d/0x30 [ 93.802304][ T4130] dump_stack_lvl+0x95/0xd0 [ 93.802334][ T4130] dump_stack+0x15/0x1b [ 93.802361][ T4130] should_fail_ex+0x263/0x280 [ 93.802393][ T4130] should_fail+0xb/0x20 [ 93.802501][ T4130] should_fail_usercopy+0x1a/0x20 [ 93.802611][ T4130] _copy_from_user+0x1c/0xb0 [ 93.802646][ T4130] do_sock_getsockopt+0xf1/0x210 [ 93.802677][ T4130] __x64_sys_getsockopt+0x11d/0x1a0 [ 93.802836][ T4130] x64_sys_call+0x2dc7/0x3000 [ 93.802868][ T4130] do_syscall_64+0xc0/0x2a0 [ 93.802891][ T4130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.802919][ T4130] RIP: 0033:0x7f55300bacb9 [ 93.802953][ T4130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.802971][ T4130] RSP: 002b:00007f552eb17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 93.802998][ T4130] RAX: ffffffffffffffda RBX: 00007f5530335fa0 RCX: 00007f55300bacb9 [ 93.803021][ T4130] RDX: 000000000000000e RSI: 0000000000000084 RDI: 0000000000000003 [ 93.803047][ T4130] RBP: 00007f552eb17090 R08: 00002000000000c0 R09: 0000000000000000 [ 93.803069][ T4130] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.803087][ T4130] R13: 00007f5530336038 R14: 00007f5530335fa0 R15: 00007fff9638af78 [ 93.803109][ T4130] [ 93.977672][ T4126] loop5: detected capacity change from 0 to 512 [ 94.000667][ T4126] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 94.040159][ T4133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.178'. [ 94.049942][ T30] audit: type=1400 audit(1768709301.666:552): avc: denied { getopt } for pid=4132 comm="syz.0.178" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.072349][ T4126] EXT4-fs (loop5): 1 truncate cleaned up [ 94.079895][ T4126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.102042][ T4136] cgroup2: Unexpected value for 'memory_localevents' [ 94.121279][ T30] audit: type=1400 audit(1768709301.736:553): avc: denied { mounton } for pid=4131 comm="syz.4.177" path="/syzcgroup/net/syz4/devices.allow" dev="cgroup" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 94.157506][ T3902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.394057][ T30] audit: type=1400 audit(1768709302.026:554): avc: denied { ioctl } for pid=4157 comm="syz.5.188" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.454827][ T4152] loop4: detected capacity change from 0 to 8192 [ 94.481941][ T30] audit: type=1326 audit(1768709302.086:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.5.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ace02acb9 code=0x7ffc0000 [ 94.505424][ T30] audit: type=1326 audit(1768709302.086:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.5.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ace02acb9 code=0x7ffc0000 [ 94.528855][ T30] audit: type=1326 audit(1768709302.086:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.5.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ace02acb9 code=0x7ffc0000 [ 94.553020][ T30] audit: type=1326 audit(1768709302.086:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.5.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ace02acb9 code=0x7ffc0000 [ 94.576454][ T30] audit: type=1326 audit(1768709302.086:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.5.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9ace02acb9 code=0x7ffc0000 [ 94.600005][ T30] audit: type=1326 audit(1768709302.086:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.5.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ace02acb9 code=0x7ffc0000 [ 94.637129][ T4152] FAULT_INJECTION: forcing a failure. [ 94.637129][ T4152] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 94.651060][ T4152] CPU: 1 UID: 0 PID: 4152 Comm: syz.4.186 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.651093][ T4152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.651110][ T4152] Call Trace: [ 94.651119][ T4152] [ 94.651130][ T4152] __dump_stack+0x1d/0x30 [ 94.651158][ T4152] dump_stack_lvl+0x95/0xd0 [ 94.651186][ T4152] dump_stack+0x15/0x1b [ 94.651208][ T4152] should_fail_ex+0x263/0x280 [ 94.651239][ T4152] should_fail_alloc_page+0xf2/0x100 [ 94.651270][ T4152] __alloc_frozen_pages_noprof+0x108/0x350 [ 94.651316][ T4152] alloc_pages_mpol+0xb3/0x260 [ 94.651352][ T4152] alloc_pages_noprof+0x8f/0x130 [ 94.651426][ T4152] pte_alloc_one+0x1e/0xd0 [ 94.651463][ T4152] handle_mm_fault+0x15b1/0x3030 [ 94.651501][ T4152] ? mt_find+0x291/0x3b0 [ 94.651592][ T4152] do_user_addr_fault+0x3fd/0x1050 [ 94.651622][ T4152] ? kstrtouint+0x76/0xc0 [ 94.651648][ T4152] exc_page_fault+0x62/0xa0 [ 94.651687][ T4152] asm_exc_page_fault+0x26/0x30 [ 94.651756][ T4152] RIP: 0010:__get_user_4+0x14/0x20 [ 94.651792][ T4152] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 94.651816][ T4152] RSP: 0018:ffffc90001bcbe08 EFLAGS: 00050287 [ 94.651906][ T4152] RAX: 00007f67875ee000 RBX: ffff88810a03e300 RCX: ffffffff81a191d6 [ 94.651921][ T4152] RDX: 00007ffffffff000 RSI: 0000000000000000 RDI: ffff88810a03e810 [ 94.651935][ T4152] RBP: ffffc90001bcbf48 R08: 000188810a03e817 R09: 0000000000000000 [ 94.651954][ T4152] R10: ffffc90001bcbe58 R11: 0001c90001bcbe58 R12: ffff88810005b600 [ 94.651972][ T4152] R13: 0000000000000000 R14: 00007f67875ee000 R15: 0000000000000001 [ 94.652085][ T4152] ? lookup_ioctx+0x26/0x1e0 [ 94.652198][ T4152] lookup_ioctx+0x35/0x1e0 [ 94.652278][ T4152] __se_sys_io_submit+0x57/0x280 [ 94.652308][ T4152] __x64_sys_io_submit+0x43/0x50 [ 94.652333][ T4152] x64_sys_call+0x2e40/0x3000 [ 94.652369][ T4152] do_syscall_64+0xc0/0x2a0 [ 94.652443][ T4152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.652465][ T4152] RIP: 0033:0x7f6788bbacb9 [ 94.652480][ T4152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.652497][ T4152] RSP: 002b:00007f6787617028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 94.652597][ T4152] RAX: ffffffffffffffda RBX: 00007f6788e35fa0 RCX: 00007f6788bbacb9 [ 94.652664][ T4152] RDX: 0000200000000540 RSI: 0000000000000001 RDI: 00007f67875ee000 [ 94.652676][ T4152] RBP: 00007f6787617090 R08: 0000000000000000 R09: 0000000000000000 [ 94.652688][ T4152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.652710][ T4152] R13: 00007f6788e36038 R14: 00007f6788e35fa0 R15: 00007ffd87588628 [ 94.652811][ T4152] [ 95.049950][ T4170] netlink: 'syz.4.191': attribute type 2 has an invalid length. [ 95.057879][ T4170] netlink: 100 bytes leftover after parsing attributes in process `syz.4.191'. [ 95.136715][ T4175] Cannot find set identified by id 0 to match [ 95.873731][ T4222] loop4: detected capacity change from 0 to 512 [ 95.880570][ T4222] msdos: Unknown parameter 'dma0000000000062' [ 95.956039][ T4227] netlink: 'syz.1.211': attribute type 2 has an invalid length. [ 95.964004][ T4227] netlink: 132 bytes leftover after parsing attributes in process `syz.1.211'. [ 95.981850][ T4228] FAULT_INJECTION: forcing a failure. [ 95.981850][ T4228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.995108][ T4228] CPU: 1 UID: 0 PID: 4228 Comm: syz.2.210 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.995142][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.995158][ T4228] Call Trace: [ 95.995168][ T4228] [ 95.995178][ T4228] __dump_stack+0x1d/0x30 [ 95.995209][ T4228] dump_stack_lvl+0x95/0xd0 [ 95.995237][ T4228] dump_stack+0x15/0x1b [ 95.995284][ T4228] should_fail_ex+0x263/0x280 [ 95.995308][ T4228] should_fail+0xb/0x20 [ 95.995328][ T4228] should_fail_usercopy+0x1a/0x20 [ 95.995361][ T4228] _copy_from_iter+0xcf/0xea0 [ 95.995418][ T4228] ? __rcu_read_unlock+0x4e/0x70 [ 95.995440][ T4228] tun_get_user+0x390/0x27c0 [ 95.995470][ T4228] ? ref_tracker_alloc+0x1f2/0x2f0 [ 95.995498][ T4228] ? selinux_file_permission+0x1e1/0x320 [ 95.995545][ T4228] tun_chr_write_iter+0x15e/0x210 [ 95.995577][ T4228] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 95.995675][ T4228] vfs_write+0x5a6/0x9f0 [ 95.995704][ T4228] ksys_write+0xdc/0x1a0 [ 95.995729][ T4228] __x64_sys_write+0x40/0x50 [ 95.995752][ T4228] x64_sys_call+0x2847/0x3000 [ 95.995800][ T4228] do_syscall_64+0xc0/0x2a0 [ 95.995835][ T4228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.995879][ T4228] RIP: 0033:0x7f2ce3f8acb9 [ 95.995899][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.995963][ T4228] RSP: 002b:00007f2ce29c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.995988][ T4228] RAX: ffffffffffffffda RBX: 00007f2ce4206090 RCX: 00007f2ce3f8acb9 [ 95.996022][ T4228] RDX: 000000000000007a RSI: 00002000000002c0 RDI: 0000000000000005 [ 95.996038][ T4228] RBP: 00007f2ce29c6090 R08: 0000000000000000 R09: 0000000000000000 [ 95.996124][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.996175][ T4228] R13: 00007f2ce4206128 R14: 00007f2ce4206090 R15: 00007fffd6c31518 [ 95.996201][ T4228] [ 96.301621][ T4223] loop5: detected capacity change from 0 to 8192 [ 96.364087][ T4223] infiniband syz!: set active [ 96.368964][ T4223] infiniband syz!: added team_slave_0 [ 96.382132][ T4223] RDS/IB: syz!: added [ 96.387749][ T4223] smc: adding ib device syz! with port count 1 [ 96.396598][ T4223] smc: ib device syz! port 1 has no pnetid [ 96.435171][ T4250] FAULT_INJECTION: forcing a failure. [ 96.435171][ T4250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.448460][ T4250] CPU: 0 UID: 0 PID: 4250 Comm: syz.2.216 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.448508][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.448586][ T4250] Call Trace: [ 96.448598][ T4250] [ 96.448607][ T4250] __dump_stack+0x1d/0x30 [ 96.448638][ T4250] dump_stack_lvl+0x95/0xd0 [ 96.448685][ T4250] dump_stack+0x15/0x1b [ 96.448705][ T4250] should_fail_ex+0x263/0x280 [ 96.448732][ T4250] should_fail+0xb/0x20 [ 96.448759][ T4250] should_fail_usercopy+0x1a/0x20 [ 96.448823][ T4250] _copy_from_user+0x1c/0xb0 [ 96.448859][ T4250] core_sys_select+0x26f/0x730 [ 96.448894][ T4250] ? set_user_sigmask+0x86/0x1a0 [ 96.448934][ T4250] __se_sys_pselect6+0x23c/0x2a0 [ 96.449007][ T4250] ? putname+0x90/0x100 [ 96.449048][ T4250] __x64_sys_pselect6+0x78/0x90 [ 96.449119][ T4250] x64_sys_call+0x2e98/0x3000 [ 96.449152][ T4250] do_syscall_64+0xc0/0x2a0 [ 96.449178][ T4250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.449202][ T4250] RIP: 0033:0x7f2ce3f8acb9 [ 96.449218][ T4250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.449295][ T4250] RSP: 002b:00007f2ce29e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 96.449348][ T4250] RAX: ffffffffffffffda RBX: 00007f2ce4205fa0 RCX: 00007f2ce3f8acb9 [ 96.449367][ T4250] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 96.449384][ T4250] RBP: 00007f2ce29e7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.449401][ T4250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.449414][ T4250] R13: 00007f2ce4206038 R14: 00007f2ce4205fa0 R15: 00007fffd6c31518 [ 96.449437][ T4250] [ 96.788705][ T4264] netlink: 'syz.4.221': attribute type 1 has an invalid length. [ 96.804089][ T4264] bond1: entered promiscuous mode [ 96.809824][ T4264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.828708][ T4264] program syz.4.221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.896938][ T4270] bond1: (slave bridge2): making interface the new active one [ 96.904536][ T4270] bridge2: entered promiscuous mode [ 96.933257][ T4269] loop0: detected capacity change from 0 to 8192 [ 96.952812][ T3902] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 96.960748][ T3902] FAT-fs (loop5): Filesystem has been set read-only [ 97.002340][ T4270] bridge2: left promiscuous mode [ 97.021355][ T4269] loop0: p1 < > p3 p4 < > [ 97.026715][ T4269] loop0: p3 size 33554432 extends beyond EOD, truncated [ 97.042172][ T3011] loop0: p1 < > p3 p4 < > [ 97.062054][ T3011] loop0: p3 size 33554432 extends beyond EOD, truncated [ 97.165221][ T3316] udevd[3316]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 97.173793][ T3618] udevd[3618]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 97.175741][ T3786] udevd[3786]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 97.204080][ T4279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.217491][ T4279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.231324][ T3618] udevd[3618]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 97.233206][ T3786] udevd[3786]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 97.252098][ T3316] udevd[3316]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 97.438969][ T4295] loop2: detected capacity change from 0 to 512 [ 97.442924][ T4299] FAULT_INJECTION: forcing a failure. [ 97.442924][ T4299] name failslab, interval 1, probability 0, space 0, times 0 [ 97.458181][ T4299] CPU: 1 UID: 0 PID: 4299 Comm: syz.1.235 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.458208][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.458220][ T4299] Call Trace: [ 97.458227][ T4299] [ 97.458274][ T4299] __dump_stack+0x1d/0x30 [ 97.458299][ T4299] dump_stack_lvl+0x95/0xd0 [ 97.458326][ T4299] dump_stack+0x15/0x1b [ 97.458351][ T4299] should_fail_ex+0x263/0x280 [ 97.458384][ T4299] should_failslab+0x8c/0xb0 [ 97.458479][ T4299] __kmalloc_noprof+0xb8/0x580 [ 97.458506][ T4299] ? sel_write_access+0x152/0x2e0 [ 97.458530][ T4299] sel_write_access+0x152/0x2e0 [ 97.458608][ T4299] selinux_transaction_write+0xc6/0x110 [ 97.458727][ T4299] vfs_writev+0x42b/0x900 [ 97.458827][ T4299] ? __pfx_selinux_transaction_write+0x10/0x10 [ 97.458854][ T4299] __x64_sys_pwritev+0xfd/0x1c0 [ 97.458949][ T4299] x64_sys_call+0x161b/0x3000 [ 97.458971][ T4299] do_syscall_64+0xc0/0x2a0 [ 97.459063][ T4299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.459137][ T4299] RIP: 0033:0x7fc6affcacb9 [ 97.459151][ T4299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.459167][ T4299] RSP: 002b:00007fc6aea27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 97.459185][ T4299] RAX: ffffffffffffffda RBX: 00007fc6b0245fa0 RCX: 00007fc6affcacb9 [ 97.459249][ T4299] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 97.459260][ T4299] RBP: 00007fc6aea27090 R08: 0000000000000004 R09: 0000000000000000 [ 97.459271][ T4299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.459282][ T4299] R13: 00007fc6b0246038 R14: 00007fc6b0245fa0 R15: 00007ffd9ceee998 [ 97.459349][ T4299] [ 97.678559][ T4295] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.232: invalid indirect mapped block 4294967295 (level 1) [ 97.699557][ T4295] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.232: invalid indirect mapped block 4294967295 (level 1) [ 97.714616][ T4295] EXT4-fs (loop2): 2 truncates cleaned up [ 97.727791][ T4295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.852076][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.935747][ T4324] loop5: detected capacity change from 0 to 128 [ 97.964709][ T4324] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.000170][ T4324] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.046338][ T4329] loop2: detected capacity change from 0 to 512 [ 98.075255][ T4329] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.246: invalid indirect mapped block 4294967295 (level 1) [ 98.103571][ T3902] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.122121][ T4329] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.246: invalid indirect mapped block 4294967295 (level 1) [ 98.187421][ T4334] loop5: detected capacity change from 0 to 512 [ 98.205239][ T4334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.218765][ T4334] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.234339][ T4329] EXT4-fs (loop2): 2 truncates cleaned up [ 98.245566][ T4335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 98.265048][ T4329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.279534][ T4334] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.248: corrupted inode contents [ 98.304734][ T4334] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #2: comm syz.5.248: mark_inode_dirty error [ 98.320929][ T4334] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.248: corrupted inode contents [ 98.341225][ T4334] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.248: mark_inode_dirty error [ 98.412444][ T3902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.447632][ T30] kauditd_printk_skb: 425 callbacks suppressed [ 98.447713][ T30] audit: type=1400 audit(1768709306.076:986): avc: denied { create } for pid=4348 comm="syz.5.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.475763][ T30] audit: type=1400 audit(1768709306.076:987): avc: denied { open } for pid=4348 comm="syz.5.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 98.494954][ T30] audit: type=1400 audit(1768709306.076:988): avc: denied { kernel } for pid=4348 comm="syz.5.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 98.514590][ T30] audit: type=1400 audit(1768709306.136:989): avc: denied { create } for pid=4348 comm="syz.5.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.534063][ T30] audit: type=1400 audit(1768709306.136:990): avc: denied { setopt } for pid=4348 comm="syz.5.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.553437][ T30] audit: type=1400 audit(1768709306.136:991): avc: denied { getopt } for pid=4348 comm="syz.5.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.574166][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.584135][ T30] audit: type=1400 audit(1768709306.206:992): avc: denied { tracepoint } for pid=4350 comm="syz.4.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 98.606461][ T30] audit: type=1326 audit(1768709306.236:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6788bbacb9 code=0x7ffc0000 [ 98.630069][ T30] audit: type=1326 audit(1768709306.236:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6788bbacb9 code=0x7ffc0000 [ 98.653592][ T30] audit: type=1326 audit(1768709306.236:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6788bbacb9 code=0x7ffc0000 [ 98.680848][ T4353] loop4: detected capacity change from 0 to 512 [ 98.689306][ T4353] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.252: invalid block [ 98.763266][ T4353] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.252: invalid indirect mapped block 4294967295 (level 1) [ 98.794448][ T4353] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.252: invalid indirect mapped block 4294967295 (level 1) [ 98.829448][ T4366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.838493][ T4366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.874849][ T4353] EXT4-fs (loop4): 2 truncates cleaned up [ 98.887834][ T4353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.932389][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.012200][ T4380] loop5: detected capacity change from 0 to 256 [ 99.043540][ T4380] netlink: 'syz.5.261': attribute type 1 has an invalid length. [ 99.206100][ T4393] loop5: detected capacity change from 0 to 512 [ 99.213441][ T4393] EXT4-fs: Mount option(s) incompatible with ext2 [ 99.462662][ T4400] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.270: invalid indirect mapped block 4294967295 (level 1) [ 99.481068][ T4400] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.270: invalid indirect mapped block 4294967295 (level 1) [ 99.495388][ T4400] EXT4-fs (loop0): 2 truncates cleaned up [ 99.501717][ T4400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.591608][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.897454][ T4413] IPVS: set_ctl: invalid protocol: 49152 44.127.0.0:0 [ 99.907990][ T4413] IPVS: set_ctl: invalid protocol: 49152 44.127.0.0:0 [ 99.971319][ T4419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.981558][ T4419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.032843][ T4425] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.281: invalid block [ 100.045700][ T4425] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.281: invalid indirect mapped block 4294967295 (level 1) [ 100.061368][ T4425] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.281: invalid indirect mapped block 4294967295 (level 1) [ 100.075827][ T4425] EXT4-fs (loop2): 2 truncates cleaned up [ 100.082307][ T4425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.148129][ T4423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.169923][ T4423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.188616][ T4432] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.272205][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.499600][ T4449] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.506891][ T4449] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.581322][ T4449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.597610][ T4449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.644222][ T1830] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.654223][ T385] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.665813][ T4465] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.296: invalid block [ 100.674212][ T385] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.709787][ T4465] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.296: invalid indirect mapped block 4294967295 (level 1) [ 100.715127][ T385] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.733630][ T4465] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.296: invalid indirect mapped block 4294967295 (level 1) [ 100.747926][ T4465] EXT4-fs (loop0): 2 truncates cleaned up [ 100.759111][ T4465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.954480][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.049438][ T4496] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 101.064481][ T4496] set_capacity_and_notify: 3 callbacks suppressed [ 101.064496][ T4496] loop4: detected capacity change from 0 to 1024 [ 101.086666][ T4496] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.309: bad orphan inode 134217728 [ 101.097944][ T4496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.183780][ T4499] vlan0: entered allmulticast mode [ 101.189017][ T4499] bond0: entered allmulticast mode [ 101.194256][ T4499] bond_slave_0: entered allmulticast mode [ 101.200083][ T4499] bond_slave_1: entered allmulticast mode [ 101.301385][ T4502] loop5: detected capacity change from 0 to 128 [ 101.439622][ T1830] bio_check_eod: 212 callbacks suppressed [ 101.439659][ T1830] kworker/u8:11: attempt to access beyond end of device [ 101.439659][ T1830] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 101.460861][ T1830] kworker/u8:11: attempt to access beyond end of device [ 101.460861][ T1830] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 101.474626][ T1830] kworker/u8:11: attempt to access beyond end of device [ 101.474626][ T1830] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 101.488654][ T1830] kworker/u8:11: attempt to access beyond end of device [ 101.488654][ T1830] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 101.502542][ T1830] kworker/u8:11: attempt to access beyond end of device [ 101.502542][ T1830] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 101.516575][ T1830] kworker/u8:11: attempt to access beyond end of device [ 101.516575][ T1830] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 101.530850][ T1830] kworker/u8:11: attempt to access beyond end of device [ 101.530850][ T1830] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 101.544816][ T1830] kworker/u8:11: attempt to access beyond end of device [ 101.544816][ T1830] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 101.558537][ T1830] kworker/u8:11: attempt to access beyond end of device [ 101.558537][ T1830] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 101.573491][ T1830] kworker/u8:11: attempt to access beyond end of device [ 101.573491][ T1830] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 101.711174][ T4513] loop5: detected capacity change from 0 to 512 [ 101.731189][ T4513] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.314: invalid block [ 101.753526][ T4513] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.314: invalid indirect mapped block 4294967295 (level 1) [ 101.789430][ T4513] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.314: invalid indirect mapped block 4294967295 (level 1) [ 101.808755][ T4513] EXT4-fs (loop5): 2 truncates cleaned up [ 101.831687][ T4513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.992690][ T3902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.035577][ T4524] netlink: 32 bytes leftover after parsing attributes in process `syz.5.319'. [ 102.144409][ T4536] loop0: detected capacity change from 0 to 256 [ 102.198876][ T4536] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 102.345128][ T4552] loop1: detected capacity change from 0 to 512 [ 102.353403][ T4552] /dev/loop1: Can't open blockdev [ 102.383060][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.328'. [ 102.392654][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.328'. [ 102.500087][ T4557] loop0: detected capacity change from 0 to 4096 [ 102.513522][ T4557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.591719][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.636449][ T4562] loop5: detected capacity change from 0 to 512 [ 102.661186][ T4562] EXT4-fs: Ignoring removed bh option [ 102.670796][ T4562] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.679924][ T4562] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 102.721569][ T4562] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 102.748674][ T4562] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 102.775268][ T4562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.791022][ T4562] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #12: block 32: comm syz.5.334: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0 [ 102.836270][ T4562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.334'. [ 102.863684][ T4562] 9p: Bad value for 'trans' [ 102.916046][ T3902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.238632][ T4599] loop5: detected capacity change from 0 to 512 [ 103.262512][ T4599] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.343: invalid indirect mapped block 4294967295 (level 1) [ 103.342942][ T4599] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.343: invalid indirect mapped block 4294967295 (level 1) [ 103.373626][ T4601] loop0: detected capacity change from 0 to 2048 [ 103.507532][ T4599] EXT4-fs (loop5): 2 truncates cleaned up [ 103.528330][ T4599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.566284][ T4601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.578958][ T30] kauditd_printk_skb: 679 callbacks suppressed [ 103.578975][ T30] audit: type=1400 audit(1768709311.206:1675): avc: denied { ioctl } for pid=4642 comm="syz.1.347" path="socket:[8094]" dev="sockfs" ino=8094 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.650699][ T30] audit: type=1326 audit(1768709311.256:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.5.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9acdfeb58e code=0x7ffc0000 [ 103.674610][ T30] audit: type=1326 audit(1768709311.256:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.5.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f9ace029167 code=0x7ffc0000 [ 103.698449][ T30] audit: type=1326 audit(1768709311.256:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.5.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9acdfeb58e code=0x7ffc0000 [ 103.723176][ T30] audit: type=1326 audit(1768709311.256:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.5.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ace02acb9 code=0x7ffc0000 [ 103.747148][ T30] audit: type=1326 audit(1768709311.256:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.5.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ace02acb9 code=0x7ffc0000 [ 103.771282][ T30] audit: type=1326 audit(1768709311.256:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.5.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f9ace02acb9 code=0x7ffc0000 [ 103.795154][ T30] audit: type=1326 audit(1768709311.256:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.5.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ace02acb9 code=0x7ffc0000 [ 103.818882][ T30] audit: type=1326 audit(1768709311.256:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.5.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ace02acb9 code=0x7ffc0000 [ 103.842743][ T30] audit: type=1326 audit(1768709311.266:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.5.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9ace02acb9 code=0x7ffc0000 [ 103.874969][ T4650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.349'. [ 103.884570][ T4650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.349'. [ 103.893534][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 103.955456][ T4650] Illegal XDP return value 4294967274 on prog (id 47) dev N/A, expect packet loss! [ 103.990897][ T4656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.351'. [ 104.044575][ T3902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.091672][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.174175][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.196757][ T4673] netlink: 56 bytes leftover after parsing attributes in process `syz.1.356'. [ 104.196854][ T4673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.356'. [ 104.296471][ T4680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.296559][ T4680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.299959][ T4688] FAULT_INJECTION: forcing a failure. [ 104.299959][ T4688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.344031][ T4688] CPU: 1 UID: 0 PID: 4688 Comm: syz.1.359 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.344057][ T4688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.344082][ T4688] Call Trace: [ 104.344090][ T4688] [ 104.344101][ T4688] __dump_stack+0x1d/0x30 [ 104.344133][ T4688] dump_stack_lvl+0x95/0xd0 [ 104.344161][ T4688] dump_stack+0x15/0x1b [ 104.344187][ T4688] should_fail_ex+0x263/0x280 [ 104.344271][ T4688] should_fail+0xb/0x20 [ 104.344297][ T4688] should_fail_usercopy+0x1a/0x20 [ 104.344325][ T4688] _copy_from_user+0x1c/0xb0 [ 104.344378][ T4688] get_nodes+0x101/0x2c0 [ 104.344595][ T4688] __x64_sys_set_mempolicy+0x115/0x180 [ 104.344745][ T4688] x64_sys_call+0x18c2/0x3000 [ 104.344823][ T4688] do_syscall_64+0xc0/0x2a0 [ 104.344941][ T4688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.345016][ T4688] RIP: 0033:0x7fc6affcacb9 [ 104.345068][ T4688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.345129][ T4688] RSP: 002b:00007fc6aea27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 104.345171][ T4688] RAX: ffffffffffffffda RBX: 00007fc6b0245fa0 RCX: 00007fc6affcacb9 [ 104.345184][ T4688] RDX: 0000000000000aee RSI: 00002000000001c0 RDI: 0000000000004000 [ 104.345196][ T4688] RBP: 00007fc6aea27090 R08: 0000000000000000 R09: 0000000000000000 [ 104.345209][ T4688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.345220][ T4688] R13: 00007fc6b0246038 R14: 00007fc6b0245fa0 R15: 00007ffd9ceee998 [ 104.345342][ T4688] [ 104.534522][ T4703] FAULT_INJECTION: forcing a failure. [ 104.534522][ T4703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.534557][ T4703] CPU: 1 UID: 0 PID: 4703 Comm: syz.1.363 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.534648][ T4703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.534709][ T4703] Call Trace: [ 104.534741][ T4703] [ 104.534772][ T4703] __dump_stack+0x1d/0x30 [ 104.534865][ T4703] dump_stack_lvl+0x95/0xd0 [ 104.534932][ T4703] dump_stack+0x15/0x1b [ 104.535068][ T4703] should_fail_ex+0x263/0x280 [ 104.535139][ T4703] should_fail+0xb/0x20 [ 104.535204][ T4703] should_fail_usercopy+0x1a/0x20 [ 104.535281][ T4703] _copy_from_user+0x1c/0xb0 [ 104.535392][ T4703] memdup_user_nul+0x5f/0xe0 [ 104.535455][ T4703] sel_write_enforce+0x9c/0x2d0 [ 104.535565][ T4703] vfs_writev+0x42b/0x900 [ 104.535636][ T4703] ? __pfx_sel_write_enforce+0x10/0x10 [ 104.535861][ T4703] do_writev+0xe9/0x210 [ 104.535939][ T4703] __x64_sys_writev+0x45/0x50 [ 104.536005][ T4703] x64_sys_call+0x1ba5/0x3000 [ 104.536118][ T4703] do_syscall_64+0xc0/0x2a0 [ 104.536200][ T4703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.536288][ T4703] RIP: 0033:0x7fc6affcacb9 [ 104.536339][ T4703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.536396][ T4703] RSP: 002b:00007fc6aea27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 104.536534][ T4703] RAX: ffffffffffffffda RBX: 00007fc6b0245fa0 RCX: 00007fc6affcacb9 [ 104.536557][ T4703] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 104.536586][ T4703] RBP: 00007fc6aea27090 R08: 0000000000000000 R09: 0000000000000000 [ 104.536629][ T4703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.536672][ T4703] R13: 00007fc6b0246038 R14: 00007fc6b0245fa0 R15: 00007ffd9ceee998 [ 104.536741][ T4703] [ 104.784527][ T4715] netlink: 'syz.0.369': attribute type 13 has an invalid length. [ 104.859921][ T4719] 8021q: VLANs not supported on ipvlan1 [ 104.948244][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.955618][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.969686][ T4724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4724 comm=syz.2.371 [ 105.060563][ T4715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.074315][ T4715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.215430][ T385] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.225133][ T385] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.244250][ T385] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.254975][ T385] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.301208][ T4740] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 105.321663][ T4740] bond1 (unregistering): Released all slaves [ 105.612650][ T4768] FAULT_INJECTION: forcing a failure. [ 105.612650][ T4768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.625999][ T4768] CPU: 1 UID: 0 PID: 4768 Comm: syz.0.389 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.626070][ T4768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.626085][ T4768] Call Trace: [ 105.626093][ T4768] [ 105.626103][ T4768] __dump_stack+0x1d/0x30 [ 105.626132][ T4768] dump_stack_lvl+0x95/0xd0 [ 105.626160][ T4768] dump_stack+0x15/0x1b [ 105.626231][ T4768] should_fail_ex+0x263/0x280 [ 105.626261][ T4768] should_fail+0xb/0x20 [ 105.626281][ T4768] should_fail_usercopy+0x1a/0x20 [ 105.626316][ T4768] _copy_from_iter+0xcf/0xea0 [ 105.626392][ T4768] ? __rcu_read_unlock+0x4e/0x70 [ 105.626416][ T4768] tun_get_user+0x390/0x27c0 [ 105.626446][ T4768] ? ref_tracker_alloc+0x1f2/0x2f0 [ 105.626506][ T4768] ? selinux_file_permission+0x1e1/0x320 [ 105.626579][ T4768] tun_chr_write_iter+0x15e/0x210 [ 105.626607][ T4768] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 105.626664][ T4768] vfs_write+0x5a6/0x9f0 [ 105.626688][ T4768] ksys_write+0xdc/0x1a0 [ 105.626707][ T4768] __x64_sys_write+0x40/0x50 [ 105.626760][ T4768] x64_sys_call+0x2847/0x3000 [ 105.626792][ T4768] do_syscall_64+0xc0/0x2a0 [ 105.626816][ T4768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.626838][ T4768] RIP: 0033:0x7f55300bacb9 [ 105.626853][ T4768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.626877][ T4768] RSP: 002b:00007f552eb17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.626941][ T4768] RAX: ffffffffffffffda RBX: 00007f5530335fa0 RCX: 00007f55300bacb9 [ 105.626956][ T4768] RDX: 000000000000007a RSI: 00002000000002c0 RDI: 0000000000000003 [ 105.626968][ T4768] RBP: 00007f552eb17090 R08: 0000000000000000 R09: 0000000000000000 [ 105.626988][ T4768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.627000][ T4768] R13: 00007f5530336038 R14: 00007f5530335fa0 R15: 00007fff9638af78 [ 105.627102][ T4768] [ 105.976111][ T4782] netlink: 'syz.1.396': attribute type 5 has an invalid length. [ 106.000457][ T4784] netlink: 'syz.0.398': attribute type 11 has an invalid length. [ 106.130636][ T4794] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.206976][ T3491] IPVS: starting estimator thread 0... [ 106.222146][ T4794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.232440][ T4794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.273565][ T2661] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.298063][ T2661] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.303290][ T4819] IPVS: using max 2352 ests per chain, 117600 per kthread [ 106.321994][ T2661] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.331367][ T2661] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.353050][ T4830] netlink: 'syz.1.415': attribute type 4 has an invalid length. [ 106.522149][ T385] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.805647][ T4868] xt_cgroup: invalid path, errno=-2 [ 107.103770][ T4901] __nla_validate_parse: 7 callbacks suppressed [ 107.103789][ T4901] netlink: 172 bytes leftover after parsing attributes in process `syz.2.445'. [ 107.119236][ T4901] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 107.143266][ T4901] netlink: 27 bytes leftover after parsing attributes in process `syz.2.445'. [ 107.394346][ T4936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.461'. [ 107.526492][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 107.535392][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 108.071976][ T4969] FAULT_INJECTION: forcing a failure. [ 108.071976][ T4969] name failslab, interval 1, probability 0, space 0, times 0 [ 108.084714][ T4969] CPU: 0 UID: 0 PID: 4969 Comm: syz.0.474 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.084749][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.084770][ T4969] Call Trace: [ 108.084777][ T4969] [ 108.084785][ T4969] __dump_stack+0x1d/0x30 [ 108.084866][ T4969] dump_stack_lvl+0x95/0xd0 [ 108.084907][ T4969] dump_stack+0x15/0x1b [ 108.084929][ T4969] should_fail_ex+0x263/0x280 [ 108.084953][ T4969] should_failslab+0x8c/0xb0 [ 108.085011][ T4969] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 108.085045][ T4969] ? sidtab_sid2str_get+0xa0/0x130 [ 108.085167][ T4969] kmemdup_noprof+0x2b/0x70 [ 108.085280][ T4969] sidtab_sid2str_get+0xa0/0x130 [ 108.085375][ T4969] security_sid_to_context_core+0x1eb/0x2e0 [ 108.085407][ T4969] security_sid_to_context_force+0x2a/0x40 [ 108.085489][ T4969] selinux_inode_init_security+0x31c/0x3b0 [ 108.085528][ T4969] security_inode_init_security+0x13a/0x320 [ 108.085552][ T4969] ? __pfx_shmem_initxattrs+0x10/0x10 [ 108.085591][ T4969] shmem_mknod+0xaa/0x170 [ 108.085693][ T4969] shmem_mkdir+0x33/0x70 [ 108.085723][ T4969] vfs_mkdir+0x2da/0x3d0 [ 108.085801][ T4969] do_mkdirat+0x133/0x3b0 [ 108.085821][ T4969] __x64_sys_mkdir+0x42/0x50 [ 108.085838][ T4969] x64_sys_call+0x2f32/0x3000 [ 108.085918][ T4969] do_syscall_64+0xc0/0x2a0 [ 108.085947][ T4969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.086016][ T4969] RIP: 0033:0x7f55300bacb9 [ 108.086035][ T4969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.086132][ T4969] RSP: 002b:00007f552eb17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 108.086153][ T4969] RAX: ffffffffffffffda RBX: 00007f5530335fa0 RCX: 00007f55300bacb9 [ 108.086171][ T4969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 108.086188][ T4969] RBP: 00007f552eb17090 R08: 0000000000000000 R09: 0000000000000000 [ 108.086248][ T4969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.086264][ T4969] R13: 00007f5530336038 R14: 00007f5530335fa0 R15: 00007fff9638af78 [ 108.086284][ T4969] [ 108.541557][ T4856] Bluetooth: hci0: command 0x1003 tx timeout [ 108.547734][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.613396][ T30] kauditd_printk_skb: 725 callbacks suppressed [ 108.613429][ T30] audit: type=1326 audit(1768709316.246:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55300bacb9 code=0x7ffc0000 [ 108.643326][ T30] audit: type=1400 audit(1768709316.266:2411): avc: denied { open } for pid=4999 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 108.662573][ T30] audit: type=1400 audit(1768709316.266:2412): avc: denied { map_create } for pid=4999 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 108.682141][ T30] audit: type=1400 audit(1768709316.266:2413): avc: denied { prog_load } for pid=4999 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 108.701206][ T30] audit: type=1400 audit(1768709316.266:2414): avc: denied { prog_load } for pid=4999 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 108.720559][ T30] audit: type=1400 audit(1768709316.266:2415): avc: denied { prog_load } for pid=4999 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 108.739808][ T30] audit: type=1326 audit(1768709316.276:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55300bacb9 code=0x7ffc0000 [ 108.775080][ T30] audit: type=1326 audit(1768709316.326:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f553007b58e code=0x7ffc0000 [ 108.798555][ T30] audit: type=1326 audit(1768709316.326:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55300bacb9 code=0x7ffc0000 [ 108.822062][ T30] audit: type=1326 audit(1768709316.326:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f55300bacb9 code=0x7ffc0000 [ 109.779414][ T5046] netlink: 28 bytes leftover after parsing attributes in process `syz.5.501'. [ 110.201997][ T5068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.509'. [ 110.370728][ T5074] ipvlan2: entered promiscuous mode [ 111.103422][ T5139] syzkaller0: entered promiscuous mode [ 111.109116][ T5139] syzkaller0: entered allmulticast mode [ 111.140799][ T5144] FAULT_INJECTION: forcing a failure. [ 111.140799][ T5144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.141663][ T5146] FAULT_INJECTION: forcing a failure. [ 111.141663][ T5146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.154069][ T5144] CPU: 1 UID: 0 PID: 5144 Comm: syz.2.542 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.154242][ T5144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.154303][ T5144] Call Trace: [ 111.154325][ T5144] [ 111.154361][ T5144] __dump_stack+0x1d/0x30 [ 111.154444][ T5144] dump_stack_lvl+0x95/0xd0 [ 111.154583][ T5144] dump_stack+0x15/0x1b [ 111.154640][ T5144] should_fail_ex+0x263/0x280 [ 111.154725][ T5144] should_fail+0xb/0x20 [ 111.154835][ T5144] should_fail_usercopy+0x1a/0x20 [ 111.154913][ T5144] _copy_from_user+0x1c/0xb0 [ 111.155001][ T5144] kstrtouint_from_user+0x69/0xf0 [ 111.155075][ T5144] ? 0xffffffff81000000 [ 111.155120][ T5144] ? selinux_file_permission+0x1e1/0x320 [ 111.155234][ T5144] proc_fail_nth_write+0x50/0x160 [ 111.155300][ T5144] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 111.155395][ T5144] vfs_write+0x269/0x9f0 [ 111.155462][ T5144] ? __rcu_read_unlock+0x4e/0x70 [ 111.155578][ T5144] ? __fget_files+0x184/0x1c0 [ 111.155645][ T5144] ? kmem_cache_free+0xdf/0x380 [ 111.155732][ T5144] ? mutex_lock+0x57/0x90 [ 111.155903][ T5144] ksys_write+0xdc/0x1a0 [ 111.155970][ T5144] __x64_sys_write+0x40/0x50 [ 111.156034][ T5144] x64_sys_call+0x2847/0x3000 [ 111.156194][ T5144] do_syscall_64+0xc0/0x2a0 [ 111.156294][ T5144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.156361][ T5144] RIP: 0033:0x7f2ce3f4b58e [ 111.156414][ T5144] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.156480][ T5144] RSP: 002b:00007f2ce29e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.156543][ T5144] RAX: ffffffffffffffda RBX: 00007f2ce29e76c0 RCX: 00007f2ce3f4b58e [ 111.156641][ T5144] RDX: 0000000000000001 RSI: 00007f2ce29e70a0 RDI: 0000000000000003 [ 111.156684][ T5144] RBP: 00007f2ce29e7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.156727][ T5144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.156761][ T5144] R13: 00007f2ce4206038 R14: 00007f2ce4205fa0 R15: 00007fffd6c31518 [ 111.156866][ T5144] [ 111.375923][ T5146] CPU: 0 UID: 0 PID: 5146 Comm: syz.5.543 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.375954][ T5146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.375968][ T5146] Call Trace: [ 111.375976][ T5146] [ 111.375984][ T5146] __dump_stack+0x1d/0x30 [ 111.376082][ T5146] dump_stack_lvl+0x95/0xd0 [ 111.376172][ T5146] dump_stack+0x15/0x1b [ 111.376196][ T5146] should_fail_ex+0x263/0x280 [ 111.376223][ T5146] should_fail+0xb/0x20 [ 111.376243][ T5146] should_fail_usercopy+0x1a/0x20 [ 111.376270][ T5146] _copy_from_user+0x1c/0xb0 [ 111.376380][ T5146] kstrtouint_from_user+0x69/0xf0 [ 111.376403][ T5146] ? 0xffffffff81000000 [ 111.376416][ T5146] ? selinux_file_permission+0x1e1/0x320 [ 111.376453][ T5146] proc_fail_nth_write+0x50/0x160 [ 111.376563][ T5146] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 111.376651][ T5146] vfs_write+0x269/0x9f0 [ 111.376668][ T5146] ? __rcu_read_unlock+0x4e/0x70 [ 111.376693][ T5146] ? __fget_files+0x184/0x1c0 [ 111.376760][ T5146] ? mutex_lock+0x57/0x90 [ 111.376796][ T5146] ksys_write+0xdc/0x1a0 [ 111.376820][ T5146] __x64_sys_write+0x40/0x50 [ 111.376862][ T5146] x64_sys_call+0x2847/0x3000 [ 111.376921][ T5146] do_syscall_64+0xc0/0x2a0 [ 111.376964][ T5146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.376991][ T5146] RIP: 0033:0x7f9acdfeb58e [ 111.377009][ T5146] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.377030][ T5146] RSP: 002b:00007f9acca86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.377054][ T5146] RAX: ffffffffffffffda RBX: 00007f9acca876c0 RCX: 00007f9acdfeb58e [ 111.377102][ T5146] RDX: 0000000000000001 RSI: 00007f9acca870a0 RDI: 0000000000000003 [ 111.377117][ T5146] RBP: 00007f9acca87090 R08: 0000000000000000 R09: 0000000000000000 [ 111.377132][ T5146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.377144][ T5146] R13: 00007f9ace2a6038 R14: 00007f9ace2a5fa0 R15: 00007ffeb9b268b8 [ 111.377162][ T5146] [ 111.859838][ T5188] netlink: 'syz.5.557': attribute type 4 has an invalid length. [ 111.867595][ T5188] netlink: 152 bytes leftover after parsing attributes in process `syz.5.557'. [ 111.908513][ T5188] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 111.941947][ T5194] No such timeout policy "syz1" [ 111.964184][ T5200] ipvlan2: entered promiscuous mode [ 111.971695][ T5194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 112.104785][ T5210] FAULT_INJECTION: forcing a failure. [ 112.104785][ T5210] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 112.118151][ T5210] CPU: 0 UID: 0 PID: 5210 Comm: syz.5.567 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.118183][ T5210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.118195][ T5210] Call Trace: [ 112.118203][ T5210] [ 112.118213][ T5210] __dump_stack+0x1d/0x30 [ 112.118244][ T5210] dump_stack_lvl+0x95/0xd0 [ 112.118313][ T5210] dump_stack+0x15/0x1b [ 112.118333][ T5210] should_fail_ex+0x263/0x280 [ 112.118434][ T5210] should_fail_alloc_page+0xf2/0x100 [ 112.118460][ T5210] __alloc_frozen_pages_noprof+0x108/0x350 [ 112.118531][ T5210] alloc_pages_mpol+0xb3/0x260 [ 112.118575][ T5210] vma_alloc_folio_noprof+0x1a9/0x300 [ 112.118607][ T5210] do_wp_page+0xf6d/0x2560 [ 112.118637][ T5210] ? css_rstat_updated+0xbb/0x280 [ 112.118679][ T5210] ? __rcu_read_lock+0x36/0x50 [ 112.118700][ T5210] handle_mm_fault+0x8c7/0x3030 [ 112.118732][ T5210] ? mt_find+0x291/0x3b0 [ 112.118840][ T5210] do_user_addr_fault+0x3fd/0x1050 [ 112.118874][ T5210] exc_page_fault+0x62/0xa0 [ 112.118927][ T5210] asm_exc_page_fault+0x26/0x30 [ 112.118955][ T5210] RIP: 0010:__put_user_4+0xd/0x20 [ 112.118979][ T5210] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 07 9f 01 00 90 90 90 90 90 90 90 90 90 90 [ 112.119012][ T5210] RSP: 0018:ffffc90001a27d08 EFLAGS: 00050206 [ 112.119074][ T5210] RAX: 00000000fffffff2 RBX: 0000000000000000 RCX: 0000200000006000 [ 112.119088][ T5210] RDX: ffff88811a78d280 RSI: 00000000fffffff2 RDI: 0000000000000000 [ 112.119100][ T5210] RBP: ffffc90001a27eb0 R08: 0001c90001a27cc3 R09: 0000000000000000 [ 112.119113][ T5210] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 112.119129][ T5210] R13: 0000000000001800 R14: 0000000000000000 R15: 00000000fffffff2 [ 112.119153][ T5210] __se_sys_move_pages+0xaa8/0x1420 [ 112.119198][ T5210] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 112.119237][ T5210] ? __fget_files+0x184/0x1c0 [ 112.119260][ T5210] ? mutex_lock+0x57/0x90 [ 112.119327][ T5210] ? fput+0x8f/0xc0 [ 112.119359][ T5210] ? ksys_write+0x194/0x1a0 [ 112.119390][ T5210] __x64_sys_move_pages+0x78/0x90 [ 112.119422][ T5210] x64_sys_call+0x27c3/0x3000 [ 112.119553][ T5210] do_syscall_64+0xc0/0x2a0 [ 112.119574][ T5210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.119595][ T5210] RIP: 0033:0x7f9ace02acb9 [ 112.119691][ T5210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.119714][ T5210] RSP: 002b:00007f9acca87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 112.119737][ T5210] RAX: ffffffffffffffda RBX: 00007f9ace2a5fa0 RCX: 00007f9ace02acb9 [ 112.119750][ T5210] RDX: 0000200000000040 RSI: 00000000000020a0 RDI: 0000000000000000 [ 112.119763][ T5210] RBP: 00007f9acca87090 R08: 0000200000000000 R09: 0000000000000000 [ 112.119775][ T5210] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001 [ 112.119863][ T5210] R13: 00007f9ace2a6038 R14: 00007f9ace2a5fa0 R15: 00007ffeb9b268b8 [ 112.119882][ T5210] [ 112.493833][ T5222] bridge0: port 3(macsec1) entered blocking state [ 112.500686][ T5222] bridge0: port 3(macsec1) entered disabled state [ 112.562735][ T5222] macsec1: entered allmulticast mode [ 112.568203][ T5222] bridge0: entered allmulticast mode [ 112.600653][ T5222] macsec1: left allmulticast mode [ 112.605796][ T5222] bridge0: left allmulticast mode [ 112.625604][ T5234] FAULT_INJECTION: forcing a failure. [ 112.625604][ T5234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.639111][ T5234] CPU: 1 UID: 0 PID: 5234 Comm: syz.4.577 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.639140][ T5234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.639153][ T5234] Call Trace: [ 112.639234][ T5234] [ 112.639243][ T5234] __dump_stack+0x1d/0x30 [ 112.639273][ T5234] dump_stack_lvl+0x95/0xd0 [ 112.639302][ T5234] dump_stack+0x15/0x1b [ 112.639393][ T5234] should_fail_ex+0x263/0x280 [ 112.639500][ T5234] should_fail+0xb/0x20 [ 112.639538][ T5234] should_fail_usercopy+0x1a/0x20 [ 112.639600][ T5234] _copy_to_user+0x20/0xa0 [ 112.639635][ T5234] simple_read_from_buffer+0xb5/0x130 [ 112.639700][ T5234] proc_fail_nth_read+0x10e/0x150 [ 112.639804][ T5234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.639840][ T5234] vfs_read+0x1ab/0x7f0 [ 112.639872][ T5234] ? __rcu_read_unlock+0x4e/0x70 [ 112.639892][ T5234] ? __fget_files+0x184/0x1c0 [ 112.639913][ T5234] ? __rcu_read_unlock+0x4e/0x70 [ 112.639999][ T5234] ? mutex_lock+0x57/0x90 [ 112.640034][ T5234] ksys_read+0xdc/0x1a0 [ 112.640056][ T5234] __x64_sys_read+0x40/0x50 [ 112.640080][ T5234] x64_sys_call+0x2889/0x3000 [ 112.640177][ T5234] do_syscall_64+0xc0/0x2a0 [ 112.640200][ T5234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.640229][ T5234] RIP: 0033:0x7f6788b7b58e [ 112.640249][ T5234] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.640272][ T5234] RSP: 002b:00007f6787616fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.640355][ T5234] RAX: ffffffffffffffda RBX: 00007f67876176c0 RCX: 00007f6788b7b58e [ 112.640374][ T5234] RDX: 000000000000000f RSI: 00007f67876170a0 RDI: 0000000000000004 [ 112.640398][ T5234] RBP: 00007f6787617090 R08: 0000000000000000 R09: 0000000000000000 [ 112.640414][ T5234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.640477][ T5234] R13: 00007f6788e36038 R14: 00007f6788e35fa0 R15: 00007ffd87588628 [ 112.640498][ T5234] [ 113.076593][ T5264] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 113.092170][ T5264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.111994][ T5264] netlink: 68 bytes leftover after parsing attributes in process `syz.2.590'. [ 113.392887][ T3491] IPVS: starting estimator thread 0... [ 113.544464][ T5292] IPVS: using max 2208 ests per chain, 110400 per kthread [ 113.632282][ T30] kauditd_printk_skb: 1048 callbacks suppressed [ 113.632301][ T30] audit: type=1400 audit(1768709321.266:3466): avc: denied { read write } for pid=3328 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 113.690689][ T30] audit: type=1400 audit(1768709321.326:3467): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 113.740030][ T5307] bond_slave_0: entered promiscuous mode [ 113.745922][ T5307] bond_slave_1: entered promiscuous mode [ 113.773644][ T5307] macvtap1: entered allmulticast mode [ 113.786747][ T5307] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 113.811005][ T30] audit: type=1400 audit(1768709321.436:3468): avc: denied { read write } for pid=5306 comm="syz.4.605" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 113.843572][ T5307] bond_slave_0: left promiscuous mode [ 113.849066][ T5307] bond_slave_1: left promiscuous mode [ 113.865455][ T30] audit: type=1400 audit(1768709321.446:3469): avc: denied { create } for pid=5306 comm="syz.4.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 113.901769][ T5309] bond_slave_0: entered promiscuous mode [ 113.907671][ T5309] bond_slave_1: entered promiscuous mode [ 113.928355][ T30] audit: type=1400 audit(1768709321.556:3470): avc: denied { read write } for pid=3328 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 113.963571][ T5309] macvtap1: entered allmulticast mode [ 113.976023][ T5309] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 114.000635][ T30] audit: type=1400 audit(1768709321.606:3471): avc: denied { open } for pid=5312 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 114.008102][ T5315] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 114.020056][ T30] audit: type=1400 audit(1768709321.606:3472): avc: denied { create } for pid=5312 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 114.027788][ T5315] audit: out of memory in audit_log_start [ 114.053275][ T30] audit: type=1400 audit(1768709321.606:3473): avc: denied { prog_load } for pid=5312 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.074288][ T5309] bond_slave_0: left promiscuous mode [ 114.079871][ T5309] bond_slave_1: left promiscuous mode [ 114.154640][ T5323] netlink: 92 bytes leftover after parsing attributes in process `syz.5.612'. [ 114.189236][ T5329] netlink: 'syz.2.615': attribute type 9 has an invalid length. [ 114.197354][ T5329] netlink: 36 bytes leftover after parsing attributes in process `syz.2.615'. [ 114.250125][ T5338] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 114.258892][ T5338] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 114.520771][ T5361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.628'. [ 114.529728][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.628'. [ 114.541982][ T5361] wireguard0: entered promiscuous mode [ 114.547543][ T5361] wireguard0: entered allmulticast mode [ 114.555709][ T5361] netlink: 24 bytes leftover after parsing attributes in process `syz.5.628'. [ 114.565560][ T5361] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5361 comm=syz.5.628 [ 115.174554][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'. [ 115.297348][ T5408] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5408 comm=syz.0.648 [ 115.560435][ T5436] FAULT_INJECTION: forcing a failure. [ 115.560435][ T5436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.573650][ T5436] CPU: 0 UID: 0 PID: 5436 Comm: syz.5.657 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.573745][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.573761][ T5436] Call Trace: [ 115.573770][ T5436] [ 115.573780][ T5436] __dump_stack+0x1d/0x30 [ 115.573812][ T5436] dump_stack_lvl+0x95/0xd0 [ 115.573840][ T5436] dump_stack+0x15/0x1b [ 115.573908][ T5436] should_fail_ex+0x263/0x280 [ 115.573997][ T5436] should_fail+0xb/0x20 [ 115.574020][ T5436] should_fail_usercopy+0x1a/0x20 [ 115.574052][ T5436] _copy_from_user+0x1c/0xb0 [ 115.574089][ T5436] kstrtouint_from_user+0x69/0xf0 [ 115.574193][ T5436] ? 0xffffffff81000000 [ 115.574212][ T5436] ? selinux_file_permission+0x1e1/0x320 [ 115.574248][ T5436] proc_fail_nth_write+0x50/0x160 [ 115.574282][ T5436] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 115.574383][ T5436] vfs_write+0x269/0x9f0 [ 115.574411][ T5436] ? __rcu_read_unlock+0x4e/0x70 [ 115.574436][ T5436] ? __fget_files+0x184/0x1c0 [ 115.574464][ T5436] ? fdget_pos+0x26/0x1d0 [ 115.574492][ T5436] ? mutex_lock+0x57/0x90 [ 115.574600][ T5436] ksys_write+0xdc/0x1a0 [ 115.574630][ T5436] __x64_sys_write+0x40/0x50 [ 115.574654][ T5436] x64_sys_call+0x2847/0x3000 [ 115.574685][ T5436] do_syscall_64+0xc0/0x2a0 [ 115.574782][ T5436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.574805][ T5436] RIP: 0033:0x7f9acdfeb58e [ 115.574820][ T5436] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.574911][ T5436] RSP: 002b:00007f9acca86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.574932][ T5436] RAX: ffffffffffffffda RBX: 00007f9acca876c0 RCX: 00007f9acdfeb58e [ 115.574950][ T5436] RDX: 0000000000000001 RSI: 00007f9acca870a0 RDI: 0000000000000003 [ 115.575028][ T5436] RBP: 00007f9acca87090 R08: 0000000000000000 R09: 0000000000000000 [ 115.575044][ T5436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.575058][ T5436] R13: 00007f9ace2a6038 R14: 00007f9ace2a5fa0 R15: 00007ffeb9b268b8 [ 115.575080][ T5436] [ 116.002569][ T5438] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.658'. [ 117.088467][ T5528] FAULT_INJECTION: forcing a failure. [ 117.088467][ T5528] name failslab, interval 1, probability 0, space 0, times 0 [ 117.101438][ T5528] CPU: 0 UID: 0 PID: 5528 Comm: syz.4.696 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.101509][ T5528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.101522][ T5528] Call Trace: [ 117.101529][ T5528] [ 117.101536][ T5528] __dump_stack+0x1d/0x30 [ 117.101564][ T5528] dump_stack_lvl+0x95/0xd0 [ 117.101591][ T5528] dump_stack+0x15/0x1b [ 117.101655][ T5528] should_fail_ex+0x263/0x280 [ 117.101686][ T5528] should_failslab+0x8c/0xb0 [ 117.101786][ T5528] kmem_cache_alloc_noprof+0x68/0x490 [ 117.101813][ T5528] ? fib6_add_1+0x4f8/0xa80 [ 117.101844][ T5528] fib6_add_1+0x4f8/0xa80 [ 117.101905][ T5528] fib6_add+0x109/0xe70 [ 117.101944][ T5528] ? __ipv6_addr_type+0xe2/0x210 [ 117.102060][ T5528] ? ip6_route_info_create_nh+0x5e5/0x6b0 [ 117.102101][ T5528] ip6_route_add+0xc7/0x170 [ 117.102199][ T5528] inet6_addr_modify+0xa75/0xba0 [ 117.102311][ T5528] inet6_rtm_newaddr+0x7d5/0x9b0 [ 117.102341][ T5528] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 117.102371][ T5528] rtnetlink_rcv_msg+0x64b/0x720 [ 117.102399][ T5528] netlink_rcv_skb+0x123/0x220 [ 117.102448][ T5528] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.102481][ T5528] rtnetlink_rcv+0x1c/0x30 [ 117.102505][ T5528] netlink_unicast+0x5c0/0x690 [ 117.102580][ T5528] netlink_sendmsg+0x5c8/0x6f0 [ 117.102607][ T5528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.102627][ T5528] __sock_sendmsg+0x145/0x170 [ 117.102690][ T5528] ____sys_sendmsg+0x31e/0x4a0 [ 117.102732][ T5528] ___sys_sendmsg+0x195/0x1e0 [ 117.102780][ T5528] __x64_sys_sendmsg+0xd4/0x160 [ 117.102880][ T5528] x64_sys_call+0x17ba/0x3000 [ 117.102927][ T5528] do_syscall_64+0xc0/0x2a0 [ 117.102956][ T5528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.103011][ T5528] RIP: 0033:0x7f6788bbacb9 [ 117.103072][ T5528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.103090][ T5528] RSP: 002b:00007f6787617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.103112][ T5528] RAX: ffffffffffffffda RBX: 00007f6788e35fa0 RCX: 00007f6788bbacb9 [ 117.103130][ T5528] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 117.103146][ T5528] RBP: 00007f6787617090 R08: 0000000000000000 R09: 0000000000000000 [ 117.103217][ T5528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.103229][ T5528] R13: 00007f6788e36038 R14: 00007f6788e35fa0 R15: 00007ffd87588628 [ 117.103247][ T5528] [ 117.722497][ T5584] Cannot find add_set index 0 as target [ 117.728904][ T5586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 117.798124][ T5590] netlink: 132 bytes leftover after parsing attributes in process `syz.4.722'. [ 117.892173][ T5595] hsr0: entered allmulticast mode [ 117.897742][ T5595] hsr_slave_0: entered allmulticast mode [ 117.903864][ T5595] hsr_slave_1: entered allmulticast mode [ 118.083213][ T5612] ªªªªªª: renamed from hsr0 [ 118.162611][ T5618] netlink: 'syz.0.733': attribute type 3 has an invalid length. [ 118.171556][ T5625] FAULT_INJECTION: forcing a failure. [ 118.171556][ T5625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.175229][ T5618] netlink: 'syz.0.733': attribute type 3 has an invalid length. [ 118.185031][ T5625] CPU: 1 UID: 0 PID: 5625 Comm: syz.2.736 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.185180][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.185221][ T5625] Call Trace: [ 118.185242][ T5625] [ 118.185264][ T5625] __dump_stack+0x1d/0x30 [ 118.185388][ T5625] dump_stack_lvl+0x95/0xd0 [ 118.185461][ T5625] dump_stack+0x15/0x1b [ 118.185527][ T5625] should_fail_ex+0x263/0x280 [ 118.185606][ T5625] should_fail+0xb/0x20 [ 118.185737][ T5625] should_fail_usercopy+0x1a/0x20 [ 118.185821][ T5625] _copy_from_user+0x1c/0xb0 [ 118.185916][ T5625] kstrtouint_from_user+0x69/0xf0 [ 118.186039][ T5625] ? 0xffffffff81000000 [ 118.186083][ T5625] ? selinux_file_permission+0x1e1/0x320 [ 118.186244][ T5625] proc_fail_nth_write+0x50/0x160 [ 118.186396][ T5625] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 118.186519][ T5625] vfs_write+0x269/0x9f0 [ 118.186611][ T5625] ? __rcu_read_unlock+0x4e/0x70 [ 118.186720][ T5625] ? __fget_files+0x184/0x1c0 [ 118.186794][ T5625] ? mutex_lock+0x57/0x90 [ 118.186900][ T5625] ksys_write+0xdc/0x1a0 [ 118.186964][ T5625] __x64_sys_write+0x40/0x50 [ 118.187028][ T5625] x64_sys_call+0x2847/0x3000 [ 118.187143][ T5625] do_syscall_64+0xc0/0x2a0 [ 118.187210][ T5625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.187304][ T5625] RIP: 0033:0x7f2ce3f4b58e [ 118.187356][ T5625] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 118.187492][ T5625] RSP: 002b:00007f2ce29e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.187556][ T5625] RAX: ffffffffffffffda RBX: 00007f2ce29e76c0 RCX: 00007f2ce3f4b58e [ 118.187599][ T5625] RDX: 0000000000000001 RSI: 00007f2ce29e70a0 RDI: 0000000000000003 [ 118.187697][ T5625] RBP: 00007f2ce29e7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.187739][ T5625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.187791][ T5625] R13: 00007f2ce4206038 R14: 00007f2ce4205fa0 R15: 00007fffd6c31518 [ 118.187922][ T5625] [ 118.677796][ T30] kauditd_printk_skb: 879 callbacks suppressed [ 118.677810][ T30] audit: type=1400 audit(1768709326.306:4353): avc: denied { read write } for pid=3902 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 118.759088][ T30] audit: type=1400 audit(1768709326.356:4354): avc: denied { create } for pid=5652 comm="syz.5.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 118.779301][ T30] audit: type=1400 audit(1768709326.356:4355): avc: denied { create } for pid=5652 comm="syz.5.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 118.799141][ T30] audit: type=1400 audit(1768709326.366:4356): avc: denied { read write } for pid=3902 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 118.824820][ T30] audit: type=1400 audit(1768709326.376:4357): avc: denied { open } for pid=5654 comm="syz.5.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 118.844512][ T30] audit: type=1400 audit(1768709326.376:4358): avc: denied { read write } for pid=5654 comm="syz.5.745" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 118.868608][ T30] audit: type=1400 audit(1768709326.376:4359): avc: denied { read } for pid=5654 comm="syz.5.745" dev="nsfs" ino=4026532586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 118.890127][ T30] audit: type=1400 audit(1768709326.386:4360): avc: denied { create } for pid=5654 comm="syz.5.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 118.911039][ T30] audit: type=1400 audit(1768709326.386:4361): avc: denied { open } for pid=5654 comm="syz.5.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 118.930385][ T30] audit: type=1400 audit(1768709326.386:4362): avc: denied { execmem } for pid=5654 comm="syz.5.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 Stopping sshd: stopped /usr/sbin/sshd (pid 3136) OK Stopping crond: stopped /usr/sbin/crond (pid 3112) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3049) Stopping network: [ 119.508617][ T5717] vxcan1: entered promiscuous mode [ 119.514781][ T5717] team0: Device vxcan1 is of different type OK Stopping iptables: FAIL Stopping system message bus: done Stopping klogd: OK Stopping acpid: [ 120.309401][ T5821] netlink: 32 bytes leftover after parsing attributes in process `syz.2.797'. [ 120.319225][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 120.382271][ T5821] bridge1: entered promiscuous mode [ 120.387648][ T5821] bridge1: entered allmulticast mode OK Stopping syslogd: stopped /sbin/syslogd (pid 2992) OK[ 121.060271][ T5860] BUG: unable to handle page fault for address: ffff8882aeb79000 [ 121.068073][ T5860] #PF: supervisor read access in kernel mode [ 121.074112][ T5860] #PF: error_code(0x0000) - not-present page [ 121.080187][ T5860] PGD 9401067 P4D 9401067 PUD 0 [ 121.085341][ T5860] Oops: Oops: 0000 [#1] SMP PTI [ 121.090325][ T5860] CPU: 0 UID: 0 PID: 5860 Comm: syz.4.810 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.100018][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.110202][ T5860] RIP: 0010:ip_route_output_key_hash_rcu+0xd69/0x1380 [ 121.117227][ T5860] Code: 00 00 0f 85 0d 06 00 00 e8 c4 b0 ab fc 65 48 8b 1d 54 2b 5d 04 48 8d 7d 38 e8 73 67 c7 fc 48 03 5d 38 48 89 df e8 d7 7a c7 fc <4c> 8b 3b 4d 85 ff 74 2c 49 8d 7f 3a e8 56 74 c7 fc 41 0f b7 5f 3a [ 121.137149][ T5860] RSP: 0018:ffffc90010e339e0 EFLAGS: 00010246 [ 121.143272][ T5860] RAX: ffff88812796ab90 RBX: ffff8882aeb79000 RCX: ffffffff84ac84dd [ 121.151390][ T5860] RDX: 000000000000089d RSI: 0000000000000000 RDI: ffff8882aeb79000 [ 121.159577][ T5860] RBP: ffff888127138f20 R08: 0001888127138f5f R09: 0000000000000000 [ 121.167692][ T5860] R10: 0000000000000005 R11: 0000000000000002 R12: ffff88810b711000 [ 121.175699][ T5860] R13: ffff88810a2a8000 R14: 0000000000000001 R15: ffffc90010e33b08 [ 121.183710][ T5860] FS: 00007f67876176c0(0000) GS:ffff8882aeb79000(0000) knlGS:0000000000000000 [ 121.192767][ T5860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.199384][ T5860] CR2: ffff8882aeb79000 CR3: 000000011b0ba000 CR4: 00000000003506f0 [ 121.207411][ T5860] Call Trace: [ 121.210757][ T5860] [ 121.213718][ T5860] ip_route_output_flow+0x65/0x110 [ 121.218956][ T5860] sctp_v4_get_dst+0x251/0x7a0 [ 121.223858][ T5860] sctp_transport_route+0xae/0x1c0 [ 121.229065][ T5860] sctp_assoc_add_peer+0x3fb/0xac0 [ 121.234222][ T5860] sctp_connect_new_asoc+0x1eb/0x3a0 [ 121.239662][ T5860] __sctp_connect+0x424/0x7a0 [ 121.244477][ T5860] ? selinux_sctp_bind_connect+0x20d/0x250 [ 121.250381][ T5860] sctp_getsockopt_connectx3+0x269/0x340 [ 121.256256][ T5860] sctp_getsockopt+0x910/0xaa0 [ 121.261179][ T5860] sock_common_getsockopt+0x60/0x70 [ 121.266616][ T5860] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 121.272613][ T5860] do_sock_getsockopt+0x1c4/0x210 [ 121.277846][ T5860] __x64_sys_getsockopt+0x11d/0x1a0 [ 121.283143][ T5860] x64_sys_call+0x2dc7/0x3000 [ 121.287932][ T5860] do_syscall_64+0xc0/0x2a0 [ 121.292491][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.298592][ T5860] RIP: 0033:0x7f6788bbacb9 [ 121.303153][ T5860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.323152][ T5860] RSP: 002b:00007f6787617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 121.331661][ T5860] RAX: ffffffffffffffda RBX: 00007f6788e35fa0 RCX: 00007f6788bbacb9 [ 121.339886][ T5860] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 121.347902][ T5860] RBP: 00007f6788c28bf7 R08: 0000200000000100 R09: 0000000000000000 [ 121.356011][ T5860] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 121.364057][ T5860] R13: 00007f6788e36038 R14: 00007f6788e35fa0 R15: 00007ffd87588628 [ 121.372074][ T5860] [ 121.375116][ T5860] Modules linked in: [ 121.379047][ T5860] CR2: ffff8882aeb79000 [ 121.383288][ T5860] ---[ end trace 0000000000000000 ]--- [ 121.388863][ T5860] RIP: 0010:ip_route_output_key_hash_rcu+0xd69/0x1380 [ 121.395815][ T5860] Code: 00 00 0f 85 0d 06 00 00 e8 c4 b0 ab fc 65 48 8b 1d 54 2b 5d 04 48 8d 7d 38 e8 73 67 c7 fc 48 03 5d 38 48 89 df e8 d7 7a c7 fc <4c> 8b 3b 4d 85 ff 74 2c 49 8d 7f 3a e8 56 74 c7 fc 41 0f b7 5f 3a [ 121.416005][ T5860] RSP: 0018:ffffc90010e339e0 EFLAGS: 00010246 [ 121.422123][ T5860] RAX: ffff88812796ab90 RBX: ffff8882aeb79000 RCX: ffffffff84ac84dd [ 121.430235][ T5860] RDX: 000000000000089d RSI: 0000000000000000 RDI: ffff8882aeb79000 [ 121.438495][ T5860] RBP: ffff888127138f20 R08: 0001888127138f5f R09: 0000000000000000 [ 121.446613][ T5860] R10: 0000000000000005 R11: 0000000000000002 R12: ffff88810b711000 [ 121.454787][ T5860] R13: ffff88810a2a8000 R14: 0000000000000001 R15: ffffc90010e33b08 [ 121.463097][ T5860] FS: 00007f67876176c0(0000) GS:ffff8882aeb79000(0000) knlGS:0000000000000000 [ 121.472575][ T5860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.479194][ T5860] CR2: ffff8882aeb79000 CR3: 000000011b0ba000 CR4: 00000000003506f0 [ 121.487393][ T5860] Kernel panic - not syncing: Fatal exception [ 121.494167][ T5860] Kernel Offset: disabled [ 121.498602][ T5860] Rebooting in 86400 seconds..