last executing test programs: 2.87118786s ago: executing program 3 (id=1361): iopl(0x3) syz_clone(0x10100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.775222326s ago: executing program 3 (id=1366): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x2000, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) 2.69527211s ago: executing program 3 (id=1368): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb7035d3008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xa2, &(0x7f00000004c0)={@local, @local, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x0, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b80c00000000000000f049f0"}}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x10, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x2000c800) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4044004) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r10, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001801c00038006000300a1aa0000060001000100000008000200020000000800010000000400050002"], 0x64}}, 0x0) r11 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, 0x0) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r12) sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="3f9d00000000fddbdf80000000eb05000300", @ANYRES32, @ANYBLOB="2c00308014000400403a050c5baee2004ef2b6d713459a7a050002000a0000000c0001800400010002000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r11, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048880}, 0x804) sendmmsg(r7, &(0x7f0000003600)=[{{&(0x7f0000000840)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x4, 0x1, 0x2, {0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000008c0)="4dda309d6101cb731a512f7fb095b11f1c8f08d6da17ff6266934961a9ead6def82c6f4ca9e38646fa99b7bf0ff21f2f7e3b4815ad3b6e50f10973b4fdbb5d0d", 0x40}, {&(0x7f0000000a40)="3ac479d2fbe92998ea3764130d3b06377610aa5799ef27bf3ece4c0b345909c755a1f22d7d123ae182736042858f21dd2291982bd2a7f071eba0227a6e7d0f17d6a8a4fc5f648f1d54e29dfe616890b84ecce00cc9a73be0c2029dd1b2842b81cc661188f2630f23da2538d72d556c8ab2373485ba6ea7b63296867edc57991dfa461a8e090b13da0600b9764e25561dc630f2ab280173f6a458f68c55137d35dc3f9dc2e27a44f80ba486ffc35625de69483a1a7d8b3bd4ee5168be2ace98f6c4114607d234e5d0bcb989", 0xcb}, {&(0x7f0000000900)="ccec6a1f0016526d0def0839a7761e4aecd4c62c810cea924a21b0b913038c90a1a7477e504457de83119eac6b320aee9f577177f43888c72ffd363eeea1f2fe67a31c6249fa96287e83a4e56cf19ef0977ba20d452401c1ca5c6a72eae55d8b1d", 0x61}, {&(0x7f0000000b40)="5f29fd5150737861fa0ce13b0553e6ed3e183bb525f026d57ca37e384b92b957fc56449a7e5472497e85822e2317e23277cb26ec440215ad4cf435302da0b7c76de37ed1ab2204b6918d7ade3e0b43220d4aaf043d8fead6f9baaafc6fc76c793fadd963ab0d4da1c2330b91a12cce9e60391072272b1d6a0e140b5835dfc11b1f2df4b4db313023fcb5bb135d8a728b09db13232c95e82d9050faae2655afc48ea0e8a34ea0f402c1b3c3", 0xab}, {&(0x7f0000000980)="5587f9c092e881dfc5a13f975e296c39", 0x10}, {&(0x7f00000036c0)="c5e1cd6c4ae1f6da9754a285578e039aa9be867f7092ac3e6a22c185ce741c64296d23025199268f2eefcc2e04041e2dbc14e758fe34390ca88b940b2c065549c8de89fa69493531a523970910836b80298a1c841b00225c8e094429d9eee1338ab583e3c3f6f2e74c596bf722d1048657330400406e33688cd75d", 0x7b}, {&(0x7f0000000c80)="659a288c8a10ba4dab83d161b9814d3ff78342aaf4ebf5b8b22d9665f9171d9cbb619ddc4de0f1a076282f0d516738b913466f11759f11688100efea9f239b9b4af0f8afab2ae14c52e92dba3bc09837d90246d3a3129004d8b55768fb2a0b289e0fc1a710c449bad95e2b6fab6da894cc209cc95298acfc7d54a0ad7810d91a4d9541483221c206df", 0x89}], 0x7, &(0x7f0000000dc0)=[{0x70, 0x6, 0x2, "4026c678ee67f59ded7981efa0c81d1734fa5a6dc2fb6a6939bab74adfbb23375e53f4bf0a22716590bcb9992405357f2a22d76037dbb0b6d5fa02bf9ad7c7f73ad5b6bce51958d5587f3141e899798984a7a9a8bdee9e8a182a73"}, {0x28, 0x113, 0x4, "dc8325891c2621e8a12dc020bff1d74ef8c8fb7c580408a7"}, {0x58, 0x107, 0x4, "160c6bde492fa1d3f23c462c2b8e9171da5223efa24edbf4889516919cfeacb0cfa0844ccd9e6c68ba3990bdf44a6e702252beb22c23707ad116254f68977aaf71f1c6d791c9b3"}, {0x88, 0x11, 0x7, "084934e131cff1c0c98649c43525295669175b3999db762cfc580acbf563e183a17a471b34a1814393e931fc9145d03aede0bb216498a8b1101b57f69beb1cb1b14a04f37aa9a3303b618f429a534b65185f10660e6e5b0cdbacf4e8c1ccd635955fcd0f201dc5c768ac019c0276730edf4234e1b9"}, {0x50, 0x18a, 0x7, "54fb59c04b9df8e811f81ec9085989db85a70b73f2b8212b3f165d42a878bd2511e684d62975c65ac3b4163d20deb1b06b3f8425a006d5277f6047"}, {0x10, 0x113, 0x4}, {0x100, 0x103, 0x5, "7f7e31366653a40aa300c864a8286df949cba7fa31abb758dbb9ad81351fc2a920c950fbfdb1e84a193bbe9eabd9966abe4264001312c3aad1bd7fafe36040af79d1868d620f7d5ecb4b0f7b88957d59f9b695877c1feb6b3fcbdfcc628fe6d35fb7cc066871c6e302f408ab39b5e8d1af5e961527d94f5ac59b8b6eecea15c0bbb146c0f3f9e480ac2f61060809590095963adcaf4fe2f50e57533e87cd47d23958310b1eeb3e8cad5c766eddcf8b200ffea85d9f26f9cd7787629a76326a71da37be64927b03e7d8a335307c1dfc1894fef70c9b30ac514530749588647fd9f401c19c5ad12c3560328aab5113d69a"}], 0x2d8}}, {{&(0x7f00000010c0)=@ethernet={0x6}, 0x80, &(0x7f0000001140), 0x0, &(0x7f0000001180)=[{0xf8, 0x0, 0x80000000, "2090c0360f1e095c0256bf8379c5f3442e8985671a44474293a37689b0bf00496a3954bacad8a0dc10670868903279bb0fb0dbf205c2f94fb33f53360165f9acb10745faf1dcad2582562ee65b4afc38b3c9b4195272a36726b7d93bd2178eb045b1e388de4e6ada663ef72f4958acb5aa298e76ddc53d98540c1d710d308c958d4b377334d9f5e0db9c290b551e1a88a68d02601324f6f877be7e2a96fe29b0d896d271ff44637e286bf9ffa75ff14605277ef92782bbfa1b590ee92aec48212b92d5d8c2ad0c2e82247cf28c69f646ff420b2811e5da61d42da1fbfdbb7263f63cfe34"}, {0x20, 0x1, 0x3, "ef72cf3371f9336e4c557b708d"}, {0xc8, 0x113, 0x2, "6e420ff7f5e5701f53decb03e9981ac0eba3b167764977a4a5050aa27131fd2540562ec66accec4f0b83b45fa85a326b7b43df6135070f3db7b1da03063a2149b4590809b0362a75f12aa417afd503eb715bde5be8a9d3f1ff4bc49c5bf221129c3d4b6157639094add03c317bd1a531ff18bbd663f0e07963946b53560325e09b07a299681ee11bdeed0b4470ab7722adaa7c6e3daca769216929032f2380b90dda8c7ff4de6995d6c9097c3b25b8445ffc308591ddc0"}], 0x1e0}}, {{&(0x7f0000001380)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22, 0x4}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001400)="7d5e53ee761d61723999574d074c6429a77b153d847c84f00b13c5a27e0946069f740d7793bcbb29b36a65e1ac02fc19436cf4b21a968789f319f0da7a64654191a601748971e857f7f714fb8006953255ea9bbd03a6f5c8ead57aa02ad6b1d71a4118cb203bf921af3d0e60b1bb31cc014506f53edad957fb78aac4cfa56d105d538ea2dcd6a1f747d64a34d8e6e521f4ce5e351b6b2399", 0x98}], 0x1, &(0x7f0000001500)=[{0x10, 0x1, 0xbd2}, {0x1010, 0x84, 0x6, "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"}, {0x88, 0x103, 0x1, "32f5702e0571641283c021800bcf16c1e7c80cfbad40ce12f89b9e69247a60e41374741f6e925b296a4ba6dd35231483d14b08364445b2a59a93ea421b554a1cd3f3405cdc741a30975273780da5cf0de40dd7e808e0333ea4e417ae30d7d9627fc8f322f0dd4ca7456c10c6cf6100e1e254"}], 0x10a8}}], 0x3, 0x0) 2.667052062s ago: executing program 3 (id=1370): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007, 0x12, r1, 0x0) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) lseek(r0, 0x1000000, 0x0) 2.5303029s ago: executing program 3 (id=1376): perf_event_open(&(0x7f0000000040)={0x2, 0xa5, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2154, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1018658, &(0x7f0000000640)={[{@nodioread_nolock}, {@noblock_validity}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@debug}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") 2.471579994s ago: executing program 3 (id=1379): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x8}, 0x100, 0xff, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet6(r0, &(0x7f0000001e80)=[{{&(0x7f00000003c0)={0xa, 0xe21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='l', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000180)={'filter\x00', 0x7f, "fa4f989944f6ffe1c63689b5908ee63b487a12e60ae0e38fa55a23be07d23bc48df3292f5c2faa830ad9d0f5142f53aaa81c90341a4f2c3e174842940f401fe44f10ec7ce144b334b4d702298ad3054559bdeb7b6969193b593494afe2209fbde2aef2ce0faef8d2c35f2d93063bdbf3dd546c2ab082f81348808e657e71bb"}, &(0x7f0000000000)=0xa3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r2 = accept(r0, 0xfffffffffffffffd, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)='%pB \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r4, 0x0, &(0x7f00000003c0)=""/69}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={0x0, @empty}, &(0x7f0000000640)=0xc) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000680)={0x81, r2, 'id0\x00'}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x4008, r2}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x0, 0xfffffffa, 0x6214, 0xe, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, r0, 0x0, 0x5, 0x400}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r11, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r11, 0x0, r12, 0x0, 0x39000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x1c, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0xba}, @map_fd={0x18, 0xf, 0x1, 0x0, r4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @alu={0x4, 0x1, 0x4, 0xb, 0xf, 0xffffffffffffffe0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x54d, 0xe4, &(0x7f0000000500)=""/228, 0x41000, 0x22, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000700)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x1, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r8, 0x1, r9, r10, r12], 0x0, 0x10, 0x16d4}, 0x94) 1.079058456s ago: executing program 4 (id=1440): socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'syzkaller0\x00', @remote}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000106caee50001042ebd7000dddbdf2500", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400240012800b0001006970766c616e00001400028006000100000000000600020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x20040844) 936.704284ms ago: executing program 0 (id=1446): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) rt_sigqueueinfo(r0, 0x23, &(0x7f0000000080)={0x3c, 0x9, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000006b030000000000001d400500000000004704000001ed000072030200000000001d44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 935.720564ms ago: executing program 4 (id=1447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x30}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, 0x0, &(0x7f0000000400)=""/198}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x8, 0x8, 0x1ff, 0x9, {{0x9, 0x4, 0x1, 0x1, 0x24, 0x67, 0x0, 0xe, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@cipso={0x86, 0xe, 0x1, [{0x2, 0x8, "0e3b25ff08b0"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) r8 = syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a74000000060a0b0400e8ac3a0000000000000002000000400004803c0001800a0001006d617463680000004b000280080002400000000009000100646363700000000014000300ebae551302005afa4d23edfcbe6d55b50900010073797a2ff40000000900020073797a320000000005004006000000140000001100200000000000000000000000000ab43ab19e1e81aca07a36f1668cb273d5556158ac860d6c320dc9e5d9167b3c6a4319d75b89"], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x6) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, r14, &(0x7f0000000100)={0xfffffffffffff015, 0x100000000006, 0xffffffff837acc22, 0xfffffffffffffffd, 0x9, 0x7fffffffbfffffff, 0x8, 0x8001, 0x9d8a}) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000f00)=@allocspi={0x3c4, 0x16, 0x400, 0x70bd27, 0x25dfdbfc, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4e24, 0x0, 0x4e21, 0xfffb, 0x2, 0x20, 0x0, 0x3c, r5, r14}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x33}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x8, 0xa, 0x1, 0x0, 0x8000000000000000, 0x5, 0x6, 0x9}, {0x10, 0x81a8, 0xfffffffffffffff7}, {0x2, 0x7, 0x5}, 0x70bd2b, 0x0, 0xa, 0x4, 0xde}, 0x7, 0xe}, [@algo_aead={0x126, 0x12, {{'morus1280-avx2\x00'}, 0x6d0, 0x200, "b1e29d8bb33c0d626e7da67c55054f7c51255577ca2215bead362929542d4b2a649fe2a85dd08a4aae80d1ce47c6385f7a06a419cb88576439688e1bbe740b97f56d529737de0e1eaa733fed119b9ef3831aca3c78d6d4b7c88aae80f1b8b87bb9e208621a96057a174941fb0220fe780ad0b9a3412155378c4746307667f81fd0b85f1dce43b0b7edfe30650da6f975c3748f0d1a6d1be2572748af13a42d53b46729e0885e1958fb48ae4a9e6dcfdcf1695dff459f3296fdb6c33a57b2137ca8dcfa8e668a7658b6a02ad64bb9085f2d7f38e1bac0e0ac8d27"}}, @tmpl={0x184, 0x5, [{{@in=@broadcast, 0x4d4, 0x3c}, 0xa, @in6=@empty, 0x34ff, 0x2, 0x1, 0x9, 0x5, 0x3, 0x80000001}, {{@in=@private=0xa010100, 0x4d2, 0xff}, 0xa, @in6=@private0, 0x3506, 0x1, 0x2, 0x5, 0x19f01840, 0xfff, 0x3}, {{@in6=@local, 0x4d5, 0x2b}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x4, 0x0, 0x8, 0x6ce, 0x3, 0x8}, {{@in=@empty, 0x4d2, 0xff}, 0x2, @in=@rand_addr=0x64010100, 0x3500, 0x3, 0x3, 0x8, 0x2, 0xf9, 0x8}, {{@in6=@local, 0x4d2, 0x2b}, 0x2, @in=@empty, 0x3507, 0x0, 0x1, 0xa, 0x400, 0x7, 0x16f9}, {{@in=@remote, 0x4d3, 0x6c}, 0xa, @in=@rand_addr=0x64010100, 0x3504, 0x4, 0x2, 0x81, 0x1, 0x8001, 0x2}]}, @offload={0xc, 0x1c, {r7, 0x3}}, @coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0x14}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4040095}, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x8000000, 0x4, 0x3a8, 0xffffffff, 0x0, 0x1d0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'nicvf0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x11}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff000000, 0x0, 0xff], [0xff000000, 0xffffffff, 0xff000000], 'veth0_to_bond\x00', 'geneve1\x00', {}, {}, 0x21, 0x9, 0x6, 0x10}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xffffffff, 0xff, 0x100fffe00, 0xff000000], 0x4e20, 0x4e20, 0x4e21, 0x4e24, 0xdb, 0x8, 0x8, 0x0, 0x99}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r15 = openat(r8, &(0x7f0000000000)='./file2\x00', 0x101002, 0xb30df328e47fe373) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x182df000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) write$cgroup_subtree(r15, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x10) 935.199734ms ago: executing program 0 (id=1449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000004000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461"], 0xc4}}, 0x0) 929.203555ms ago: executing program 4 (id=1450): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000022) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') 883.527507ms ago: executing program 0 (id=1451): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 882.592187ms ago: executing program 4 (id=1454): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) pselect6(0x40, &(0x7f0000000000)={0x3ff, 0x8001, 0x5d, 0x100, 0x56, 0xa2ad, 0x10001, 0x1}, &(0x7f0000000080)={0x10000, 0x7ff, 0x9, 0x6a, 0xe5, 0x1, 0x2, 0x1}, &(0x7f00000000c0)={0x6, 0x77d66c8e, 0x1, 0x5, 0xd7a, 0x8, 0x8001, 0x4}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfffffffffffffffe]}, 0x8}) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f00006fb000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/150) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) (async) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) pselect6(0x40, &(0x7f0000000000)={0x3ff, 0x8001, 0x5d, 0x100, 0x56, 0xa2ad, 0x10001, 0x1}, &(0x7f0000000080)={0x10000, 0x7ff, 0x9, 0x6a, 0xe5, 0x1, 0x2, 0x1}, &(0x7f00000000c0)={0x6, 0x77d66c8e, 0x1, 0x5, 0xd7a, 0x8, 0x8001, 0x4}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfffffffffffffffe]}, 0x8}) (async) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) (async) mincore(&(0x7f00006fb000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/150) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) (async) 811.984942ms ago: executing program 0 (id=1455): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0xff1f0000, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 705.948388ms ago: executing program 1 (id=1461): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x4000) 656.109131ms ago: executing program 1 (id=1462): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0xd00, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 593.815654ms ago: executing program 1 (id=1464): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000022) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') 556.602267ms ago: executing program 1 (id=1467): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{}, {0x95, 0x0, 0x0, 0x10000000}}, [@jmp={0x5, 0x1, 0xa, 0xa, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x100f, &(0x7f0000001cc0)=""/4111, 0x41100, 0x2}, 0x94) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/201, 0xffffff47) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000000001, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) unshare(0x600) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) 267.547524ms ago: executing program 1 (id=1472): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) 171.69953ms ago: executing program 1 (id=1473): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30040c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") socketpair$unix(0x1, 0x1f68e7b6df63fbf4, 0x0, &(0x7f0000000580)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x82, 0x99}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) rt_sigpending(0x0, 0x3b) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8000}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x24}}, 0x20000000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x25, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000100), &(0x7f0000000100)=""/13, 0x2}, 0x20) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 116.900352ms ago: executing program 4 (id=1474): r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 99.386694ms ago: executing program 2 (id=1475): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x109801) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x49) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000002c0)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x3, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x60}}, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000333}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r5, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e21, 0x2, @local, 0x4000000c}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000200)="8000e859667fbc13", 0x8}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="38000000000000002900000039000000330402"], 0x38}, 0x8040) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xa, 0x0, 0x0) 59.927366ms ago: executing program 4 (id=1476): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0xff, 0xa, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x7, 0x80000011, 0x4, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xc, 0xffffffffffffffff, 0x2) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000340)=""/169) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) setfsuid(0xee00) r1 = syz_clone(0x908091, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff03, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00000009060108fffffc0000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd0500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 59.681566ms ago: executing program 2 (id=1477): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000022) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') 59.362696ms ago: executing program 2 (id=1478): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x17, &(0x7f0000000100)=r0, 0x4) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000080fe00002900000036"], 0x18}, 0x1) 1.14594ms ago: executing program 0 (id=1479): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='\"', 0x1, 0x4fed2) r1 = open(&(0x7f00000003c0)='./file1\x00', 0x44142, 0x191) sendfile(r1, r1, 0x0, 0x800000009) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000446, &(0x7f00000000c0)={[{@delalloc}, {@quota}, {@dioread_lock}, {@init_itable}, {@usrjquota}, {@data_err_abort, 0x2e}, {@barrier}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f0000000c00)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f0000000240)={0x0, 0xfb, 0xca, 0x3, 0x9, "e438a9380248264cccd0d8cc780f1029", "46476376ae80305d07270f8b58e5762828e9053de5cd16db566a921d425268fa47de944652b0f2371adb99ee02c8860b6dcc2a92247dc4d10769eb6401a068232b4bc4ea9c718a03bf17dd1c91cfebc79e206b4d59f2a3d717ccf25ae280f4129cd1e6bee611daefba37b8b2836582f1f8888684c43596e441e985e91230a7c411d1fe6513a0e424405544788ebf53684681d558cba943e78c3b0253d6ab3efedc4c021f8a07586a7eb2652cd6b271ef88c5f432e8"}, 0xca, 0x2) 605.43µs ago: executing program 2 (id=1480): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x80}}], 0x1, 0x8004) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x2208, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0xfff2) 281.85µs ago: executing program 2 (id=1481): capget(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000180)={0xcc8, 0x4, 0xffff, 0x6, 0x6, 0x5913}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0) capset(&(0x7f0000000280)={0x20071026, r1}, &(0x7f00000002c0)={0x6, 0x4, 0x660, 0x9, 0x8, 0x91de}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206050000003f0000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x3fa, 0x100, 0x70bd27, 0x25dfdbfe, {0x1, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 149.97µs ago: executing program 2 (id=1482): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4800) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) fgetxattr(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797374656d2e91a09a4b0100000067222eb92959668ab11c0a7744b4e815e7df0b1c99c3fc6c94fa0a46c20a5fe712dbdf3d75ff40f37d0a26fe41ec90c06750a376b6013955ae6fedd97a02949a4f735dbe5d8b648832fc96617b55f3912b7c0f078e6ef7377e2254edd161930f0248b370d09d583b9790fe3922ac379e355e53ce7cb9ea22792d590a539c632890a5fe55151ff3a83f44831c28f57548281f098194809b87e9a89c26d9cbc0f41af0fb065e8628b668ac7b54d7313abd09f2765826d8b986523c71b5b2e66af3b47b11c2a81f1fc6abf94746bc6b5adfbf3b50015fd2677addfd33818c47"], 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) kcmp(r1, r1, 0x0, r0, r2) 0s ago: executing program 0 (id=1483): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000200000/0x2000)=nil, 0x2000, 0x8) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x80000000000005a, 0x3) (fail_nth: 26) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): r pid=3768 comm="syz.2.89" laddr=fe80::14 lport=32791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.087089][ T3775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 45.140499][ T3773] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.211479][ T29] audit: type=1400 audit(1769524354.271:198): avc: denied { create } for pid=3781 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.266615][ T29] audit: type=1400 audit(1769524354.324:199): avc: denied { connect } for pid=3781 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.276155][ T3753] netlink: 48 bytes leftover after parsing attributes in process `syz.1.84'. [ 45.491881][ T3803] 9p: Bad value for 'rfdno' [ 45.532677][ T3808] loop4: detected capacity change from 0 to 1024 [ 45.547293][ T3808] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 45.579143][ T3808] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 45.704377][ T3808] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 45.721863][ T3808] System zones: 0-1, 4-36, 102-102 [ 45.733321][ T3808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.751169][ T3816] loop0: detected capacity change from 0 to 8192 [ 45.806440][ T3816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 45.833604][ T3816] netlink: 'syz.0.103': attribute type 3 has an invalid length. [ 45.855971][ T3818] loop3: detected capacity change from 0 to 128 [ 45.866315][ T3816] netlink: 'syz.0.103': attribute type 3 has an invalid length. [ 45.940081][ T3825] process 'syz.1.107' launched '/dev/fd/6' with NULL argv: empty string added [ 46.029094][ T3376] kernel write not supported for file /register (pid: 3376 comm: kworker/0:2) [ 46.209452][ T3450] bio_check_eod: 55 callbacks suppressed [ 46.209468][ T3450] kworker/u8:7: attempt to access beyond end of device [ 46.209468][ T3450] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 46.317478][ T3845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=3845 comm=syz.2.114 [ 46.478675][ T3854] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 46.515660][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.605466][ T3856] loop1: detected capacity change from 0 to 128 [ 46.730131][ T3868] loop4: detected capacity change from 0 to 128 [ 46.737888][ T3868] EXT4-fs: Ignoring removed nobh option [ 46.790555][ T3868] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.855246][ T3868] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.916893][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.936668][ T3846] __nla_validate_parse: 7 callbacks suppressed [ 46.936683][ T3846] netlink: 48 bytes leftover after parsing attributes in process `syz.0.112'. [ 46.991638][ T3883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=3883 comm=syz.4.126 [ 47.020536][ T3881] can: request_module (can-proto-0) failed. [ 47.037808][ T3886] loop3: detected capacity change from 0 to 512 [ 47.045980][ T3886] netlink: 'syz.3.128': attribute type 7 has an invalid length. [ 47.164755][ T3890] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 47.229219][ T3881] wireguard0: entered promiscuous mode [ 47.235485][ T3881] wireguard0: entered allmulticast mode [ 47.238256][ T3890] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 47.278914][ T3890] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 47.350180][ T3890] System zones: 0-1, 4-36, 102-102 [ 47.360117][ T3890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.443444][ T3899] capability: warning: `syz.0.132' uses deprecated v2 capabilities in a way that may be insecure [ 47.454745][ T3900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.129'. [ 47.501681][ T3901] EXT4-fs: Ignoring removed nobh option [ 47.507454][ T3901] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.514156][ T3901] EXT4-fs: Ignoring removed i_version option [ 47.546410][ T3901] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.611770][ T3320] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 47.629878][ T3906] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.731270][ T3919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 47.747217][ T3919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 47.760387][ T3921] vfat: Unknown parameter 'check)§ÿict' [ 47.773171][ T3306] Alternate GPT is invalid, using primary GPT. [ 47.779623][ T3306] loop0: p1 p2 p3 [ 47.783446][ T3306] loop0: partition table partially beyond EOD, truncated [ 47.796962][ T3917] Alternate GPT is invalid, using primary GPT. [ 47.803471][ T3917] loop0: p1 p2 p3 [ 47.807208][ T3917] loop0: partition table partially beyond EOD, truncated [ 47.817656][ T3917] FAULT_INJECTION: forcing a failure. [ 47.817656][ T3917] name failslab, interval 1, probability 0, space 0, times 0 [ 47.830463][ T3917] CPU: 1 UID: 0 PID: 3917 Comm: syz.0.138 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.830496][ T3917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.830519][ T3917] Call Trace: [ 47.830527][ T3917] [ 47.830535][ T3917] __dump_stack+0x1d/0x30 [ 47.830565][ T3917] dump_stack_lvl+0x95/0xd0 [ 47.830594][ T3917] dump_stack+0x15/0x1b [ 47.830621][ T3917] should_fail_ex+0x263/0x280 [ 47.830671][ T3917] should_failslab+0x8c/0xb0 [ 47.830703][ T3917] __kmalloc_noprof+0xb8/0x580 [ 47.830735][ T3917] ? iter_file_splice_write+0xf9/0xa80 [ 47.830815][ T3917] iter_file_splice_write+0xf9/0xa80 [ 47.830842][ T3917] ? copy_splice_read+0x675/0x6c0 [ 47.830940][ T3917] ? copy_splice_read+0x675/0x6c0 [ 47.830981][ T3917] ? __pfx_iter_file_splice_write+0x10/0x10 [ 47.831001][ T3917] direct_splice_actor+0x156/0x2a0 [ 47.831060][ T3917] ? splice_folio_into_pipe+0x381/0x3a0 [ 47.831098][ T3917] splice_direct_to_actor+0x311/0x670 [ 47.831125][ T3917] ? __pfx_direct_splice_actor+0x10/0x10 [ 47.831235][ T3917] do_splice_direct+0x119/0x1a0 [ 47.831260][ T3917] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 47.831285][ T3917] do_sendfile+0x382/0x650 [ 47.831424][ T3917] __x64_sys_sendfile64+0x105/0x150 [ 47.831464][ T3917] x64_sys_call+0x2db1/0x3000 [ 47.831490][ T3917] do_syscall_64+0xc0/0x2a0 [ 47.831522][ T3917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.831552][ T3917] RIP: 0033:0x7fa833e0aeb9 [ 47.831626][ T3917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.831646][ T3917] RSP: 002b:00007fa832867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 47.831724][ T3917] RAX: ffffffffffffffda RBX: 00007fa834085fa0 RCX: 00007fa833e0aeb9 [ 47.831744][ T3917] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 47.831761][ T3917] RBP: 00007fa832867090 R08: 0000000000000000 R09: 0000000000000000 [ 47.831778][ T3917] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 47.831795][ T3917] R13: 00007fa834086038 R14: 00007fa834085fa0 R15: 00007ffc8218ddc8 [ 47.831820][ T3917] [ 48.117935][ T3926] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.142'. [ 48.147939][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 48.161533][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 48.177611][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 48.199481][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.344183][ T3945] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.147: Failed to acquire dquot type 0 [ 48.390417][ T3945] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 48.454041][ T3945] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.147: corrupted inode contents [ 48.503038][ T3945] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #13: comm syz.0.147: mark_inode_dirty error [ 48.527483][ T3945] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.147: corrupted inode contents [ 48.545765][ T3945] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.147: mark_inode_dirty error [ 48.587983][ T3953] ip6t_rpfilter: unknown options [ 48.605365][ T3945] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.147: corrupted inode contents [ 48.628651][ T3945] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 48.637479][ T3945] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.147: corrupted inode contents [ 48.679849][ T3958] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.692475][ T3945] EXT4-fs error (device loop0): ext4_truncate:4635: inode #13: comm syz.0.147: mark_inode_dirty error [ 48.702628][ T3959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 48.722301][ T3959] batadv0: entered promiscuous mode [ 48.733465][ T3945] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 48.748473][ T3959] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 48.757532][ T3945] EXT4-fs (loop0): 1 truncate cleaned up [ 48.764020][ T3945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.789340][ T3959] batadv0: left promiscuous mode [ 48.803892][ T3963] set_capacity_and_notify: 8 callbacks suppressed [ 48.803912][ T3963] loop3: detected capacity change from 0 to 1024 [ 48.818416][ T3963] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 48.828256][ T3963] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 48.839120][ T3963] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 48.847287][ T3963] System zones: 0-1, 4-36, 102-102 [ 48.853798][ T3963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.887347][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 48.887365][ T29] audit: type=1400 audit(1769526662.128:227): avc: denied { module_request } for pid=3962 comm="syz.3.155" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.915752][ T29] audit: type=1400 audit(1769526662.139:228): avc: denied { read write } for pid=3965 comm="syz.1.156" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.939357][ T29] audit: type=1400 audit(1769526662.139:229): avc: denied { open } for pid=3965 comm="syz.1.156" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.943328][ T3968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 48.972714][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.016041][ T3972] netlink: 'syz.4.159': attribute type 30 has an invalid length. [ 49.033013][ T29] audit: type=1400 audit(1769526662.286:230): avc: denied { bpf } for pid=3969 comm="syz.0.157" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.053486][ T29] audit: type=1400 audit(1769526662.286:231): avc: denied { perfmon } for pid=3969 comm="syz.0.157" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.153199][ T3981] loop4: detected capacity change from 0 to 256 [ 49.181274][ T3981] vfat: Unknown parameter 'check)§ÿict' [ 49.242139][ T3985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 49.251771][ T3985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 49.371615][ T3992] FAULT_INJECTION: forcing a failure. [ 49.371615][ T3992] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.385240][ T3992] CPU: 1 UID: 0 PID: 3992 Comm: syz.1.167 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.385282][ T3992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.385301][ T3992] Call Trace: [ 49.385310][ T3992] [ 49.385366][ T3992] __dump_stack+0x1d/0x30 [ 49.385399][ T3992] dump_stack_lvl+0x95/0xd0 [ 49.385429][ T3992] dump_stack+0x15/0x1b [ 49.385457][ T3992] should_fail_ex+0x263/0x280 [ 49.385573][ T3992] should_fail+0xb/0x20 [ 49.385612][ T3992] should_fail_usercopy+0x1a/0x20 [ 49.385657][ T3992] _copy_to_user+0x20/0xa0 [ 49.385766][ T3992] simple_read_from_buffer+0xb5/0x130 [ 49.385816][ T3992] proc_fail_nth_read+0x10e/0x150 [ 49.385876][ T3992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.385904][ T3992] vfs_read+0x1ab/0x7f0 [ 49.385925][ T3992] ? __schedule+0x82d/0xc90 [ 49.385949][ T3992] ? __rcu_read_unlock+0x4e/0x70 [ 49.386008][ T3992] ? __fget_files+0x184/0x1c0 [ 49.386039][ T3992] ? mutex_lock+0x57/0x90 [ 49.386071][ T3992] ksys_read+0xdc/0x1a0 [ 49.386109][ T3992] __x64_sys_read+0x40/0x50 [ 49.386134][ T3992] x64_sys_call+0x2889/0x3000 [ 49.386188][ T3992] do_syscall_64+0xc0/0x2a0 [ 49.386239][ T3992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.386277][ T3992] RIP: 0033:0x7f2c5df6b78e [ 49.386298][ T3992] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.386349][ T3992] RSP: 002b:00007f2c5ca06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.386369][ T3992] RAX: ffffffffffffffda RBX: 00007f2c5ca076c0 RCX: 00007f2c5df6b78e [ 49.386402][ T3992] RDX: 000000000000000f RSI: 00007f2c5ca070a0 RDI: 0000000000000010 [ 49.386420][ T3992] RBP: 00007f2c5ca07090 R08: 0000000000000000 R09: 0000000000000000 [ 49.386438][ T3992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.386455][ T3992] R13: 00007f2c5e226038 R14: 00007f2c5e225fa0 R15: 00007fffb80e8768 [ 49.386480][ T3992] [ 49.624322][ T3995] loop0: detected capacity change from 0 to 256 [ 49.642807][ T3995] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.708157][ T29] audit: type=1400 audit(1769526662.989:232): avc: denied { wake_alarm } for pid=3999 comm="syz.1.171" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.800961][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.882907][ T4005] FAULT_INJECTION: forcing a failure. [ 49.882907][ T4005] name failslab, interval 1, probability 0, space 0, times 0 [ 49.895664][ T4005] CPU: 0 UID: 0 PID: 4005 Comm: syz.3.172 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.895693][ T4005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.895706][ T4005] Call Trace: [ 49.895713][ T4005] [ 49.895722][ T4005] __dump_stack+0x1d/0x30 [ 49.895808][ T4005] dump_stack_lvl+0x95/0xd0 [ 49.895830][ T4005] dump_stack+0x15/0x1b [ 49.895853][ T4005] should_fail_ex+0x263/0x280 [ 49.895886][ T4005] should_failslab+0x8c/0xb0 [ 49.895928][ T4005] __kvmalloc_node_noprof+0x148/0x680 [ 49.895960][ T4005] ? snd_seq_pool_init+0x55/0x210 [ 49.895993][ T4005] ? _raw_spin_unlock+0x9/0x30 [ 49.896093][ T4005] snd_seq_pool_init+0x55/0x210 [ 49.896177][ T4005] ? _raw_spin_unlock_irq+0x9/0x30 [ 49.896222][ T4005] snd_seq_ioctl_set_client_pool+0x17f/0x310 [ 49.896269][ T4005] snd_seq_ioctl+0x177/0x2f0 [ 49.896308][ T4005] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 49.896405][ T4005] __se_sys_ioctl+0xce/0x140 [ 49.896471][ T4005] __x64_sys_ioctl+0x43/0x50 [ 49.896512][ T4005] x64_sys_call+0x14b0/0x3000 [ 49.896539][ T4005] do_syscall_64+0xc0/0x2a0 [ 49.896592][ T4005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.896623][ T4005] RIP: 0033:0x7fe3ffaaaeb9 [ 49.896645][ T4005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.896669][ T4005] RSP: 002b:00007fe3fe4e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.896694][ T4005] RAX: ffffffffffffffda RBX: 00007fe3ffd26090 RCX: 00007fe3ffaaaeb9 [ 49.896769][ T4005] RDX: 0000200000001140 RSI: 000000004058534c RDI: 0000000000000005 [ 49.896787][ T4005] RBP: 00007fe3fe4e6090 R08: 0000000000000000 R09: 0000000000000000 [ 49.896805][ T4005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.896852][ T4005] R13: 00007fe3ffd26128 R14: 00007fe3ffd26090 R15: 00007ffd55faa738 [ 49.896880][ T4005] [ 50.428915][ T4030] IPv6: NLM_F_CREATE should be specified when creating new route [ 50.471865][ T4030] loop0: detected capacity change from 0 to 1024 [ 50.481076][ T4030] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.562592][ T4030] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 50.573820][ T4030] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 50.617965][ T4030] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 50.644367][ T4030] EXT4-fs (loop0): invalid journal inode [ 50.653104][ T4035] loop2: detected capacity change from 0 to 1024 [ 50.655959][ T4030] EXT4-fs (loop0): can't get journal size [ 50.667469][ T4035] EXT4-fs: Ignoring removed bh option [ 50.700408][ T4030] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.180: blocks 2-2 from inode overlap system zone [ 50.724087][ T4030] EXT4-fs (loop0): failed to initialize system zone (-117) [ 50.748067][ T4035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.780290][ T4030] EXT4-fs (loop0): mount failed [ 50.806546][ T29] audit: type=1400 audit(1769526664.144:233): avc: denied { create } for pid=4034 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 50.837739][ T29] audit: type=1400 audit(1769526664.176:234): avc: denied { setopt } for pid=4034 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 50.837772][ T29] audit: type=1400 audit(1769526664.176:235): avc: denied { connect } for pid=4034 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 50.897787][ T4041] loop3: detected capacity change from 0 to 1024 [ 50.911268][ T4041] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 50.911318][ T4041] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 50.922850][ T4041] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 50.922989][ T4041] System zones: 0-1, 4-36, 102-102 [ 50.923658][ T4041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.958797][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.998338][ T4048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 51.063458][ T4053] loop2: detected capacity change from 0 to 256 [ 51.081189][ T4053] vfat: Unknown parameter 'check)§ÿict' [ 51.150574][ T4060] loop0: detected capacity change from 0 to 256 [ 51.152153][ T4060] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.330361][ T29] audit: type=1326 audit(1769526664.690:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.0.191" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa833e0aeb9 code=0x0 [ 51.573873][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.708500][ T4081] team0 (unregistering): Port device team_slave_0 removed [ 51.718334][ T4081] team0 (unregistering): Port device team_slave_1 removed [ 52.259937][ T4094] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 52.359552][ T4100] loop4: detected capacity change from 0 to 256 [ 52.384189][ T4100] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.608601][ T4119] loop4: detected capacity change from 0 to 256 [ 52.635508][ T4119] vfat: Unknown parameter 'check)§ÿict' [ 52.751432][ T4124] usb usb7: usbfs: process 4124 (syz.0.209) did not claim interface 0 before use [ 52.761831][ T4124] usb usb7: usbfs: process 4124 (syz.0.209) did not claim interface 0 before use [ 52.808508][ T4126] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.210: invalid indirect mapped block 256 (level 2) [ 52.826404][ T4126] EXT4-fs (loop0): 2 truncates cleaned up [ 52.838016][ T4126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.917765][ T4136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=4136 comm=syz.3.214 [ 52.930894][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.019012][ T4142] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.035836][ T4141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.395253][ T4156] Cannot find add_set index 0 as target [ 53.520345][ T4160] netlink: 'syz.3.221': attribute type 4 has an invalid length. [ 53.784968][ T4183] FAULT_INJECTION: forcing a failure. [ 53.784968][ T4183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.798119][ T4183] CPU: 1 UID: 0 PID: 4183 Comm: syz.2.227 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.798156][ T4183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.798173][ T4183] Call Trace: [ 53.798181][ T4183] [ 53.798270][ T4183] __dump_stack+0x1d/0x30 [ 53.798332][ T4183] dump_stack_lvl+0x95/0xd0 [ 53.798361][ T4183] dump_stack+0x15/0x1b [ 53.798388][ T4183] should_fail_ex+0x263/0x280 [ 53.798429][ T4183] should_fail+0xb/0x20 [ 53.798525][ T4183] should_fail_usercopy+0x1a/0x20 [ 53.798625][ T4183] _copy_from_user+0x1c/0xb0 [ 53.798654][ T4183] __copy_msghdr+0x244/0x300 [ 53.798714][ T4183] ___sys_sendmsg+0x10c/0x1e0 [ 53.798747][ T4183] __x64_sys_sendmsg+0xd4/0x160 [ 53.798777][ T4183] x64_sys_call+0x17ba/0x3000 [ 53.798877][ T4183] do_syscall_64+0xc0/0x2a0 [ 53.798912][ T4183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.798938][ T4183] RIP: 0033:0x7f891fd8aeb9 [ 53.798959][ T4183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.798983][ T4183] RSP: 002b:00007f891e7e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.799012][ T4183] RAX: ffffffffffffffda RBX: 00007f8920005fa0 RCX: 00007f891fd8aeb9 [ 53.799079][ T4183] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 53.799149][ T4183] RBP: 00007f891e7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.799168][ T4183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.799185][ T4183] R13: 00007f8920006038 R14: 00007f8920005fa0 R15: 00007fff5c1942e8 [ 53.799213][ T4183] [ 53.963717][ T4182] set_capacity_and_notify: 3 callbacks suppressed [ 53.963737][ T4182] loop4: detected capacity change from 0 to 1024 [ 53.997200][ T4187] loop2: detected capacity change from 0 to 256 [ 54.004128][ T4187] vfat: Unknown parameter 'check)§ÿict' [ 54.022696][ T4185] loop1: detected capacity change from 0 to 1024 [ 54.033276][ T4185] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 54.054201][ T4182] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 54.061494][ T4185] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 54.072428][ T4182] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 54.085976][ T4182] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 54.094322][ T4182] System zones: 0-1, 4-36, 102-102 [ 54.100473][ T4182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.114460][ T4185] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 54.122526][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.132091][ T4185] System zones: 0-1, 4-36, 102-102 [ 54.138425][ T4185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.154794][ T4185] __nla_validate_parse: 3 callbacks suppressed [ 54.154810][ T4185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 54.204472][ T4182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 54.431991][ T4210] syzkaller0: entered promiscuous mode [ 54.437654][ T4210] syzkaller0: entered allmulticast mode [ 54.459718][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 54.459737][ T29] audit: type=1400 audit(1769527435.977:243): avc: denied { relabelfrom } for pid=4209 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 54.485649][ T29] audit: type=1400 audit(1769527435.977:244): avc: denied { relabelto } for pid=4209 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 54.711260][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.745531][ T4223] loop4: detected capacity change from 0 to 512 [ 54.767700][ T4223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.905179][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.936487][ T29] audit: type=1326 audit(1769527436.481:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891fd8aeb9 code=0x7ffc0000 [ 54.959882][ T29] audit: type=1326 audit(1769527436.481:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891fd8aeb9 code=0x7ffc0000 [ 54.984039][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.009067][ T29] audit: type=1326 audit(1769527436.544:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f891fd8aeb9 code=0x7ffc0000 [ 55.032454][ T29] audit: type=1326 audit(1769527436.544:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891fd8aeb9 code=0x7ffc0000 [ 55.055863][ T29] audit: type=1326 audit(1769527436.544:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891fd8aeb9 code=0x7ffc0000 [ 55.079348][ T29] audit: type=1326 audit(1769527436.554:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f891fd8aeb9 code=0x7ffc0000 [ 55.102530][ T29] audit: type=1326 audit(1769527436.554:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891fd8aeb9 code=0x7ffc0000 [ 55.126246][ T29] audit: type=1326 audit(1769527436.554:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891fd8aeb9 code=0x7ffc0000 [ 55.532217][ T4263] loop0: detected capacity change from 0 to 1024 [ 55.542738][ T4263] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.600308][ T4263] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e019, mo2=0000] [ 55.611133][ T4263] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.251: lblock 2 mapped to illegal pblock 2 (length 1) [ 55.634413][ T4263] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.251: lblock 0 mapped to illegal pblock 48 (length 1) [ 55.676809][ T4263] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.251: Failed to acquire dquot type 0 [ 55.701216][ T4263] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 55.721276][ T4263] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.251: mark_inode_dirty error [ 55.770413][ T4263] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 55.796016][ T4263] EXT4-fs (loop0): 1 orphan inode deleted [ 55.821165][ T3939] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 55.826545][ T4263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.971032][ T3939] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 55.998433][ T4271] netlink: 96 bytes leftover after parsing attributes in process `syz.2.253'. [ 56.005783][ T4263] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.018340][ T4263] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.251: Invalid inode table block 1 in block_group 0 [ 56.023780][ T4273] loop4: detected capacity change from 0 to 512 [ 56.038992][ T4275] netlink: 96 bytes leftover after parsing attributes in process `syz.2.253'. [ 56.049116][ T4263] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 56.068968][ T4263] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.251: mark_inode_dirty error [ 56.164133][ T4273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 56.207963][ T4281] pim6reg1: entered allmulticast mode [ 56.225753][ T4273] ext4 filesystem being mounted at /51/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.306470][ T4283] loop3: detected capacity change from 0 to 512 [ 56.316353][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 56.350688][ T4283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 56.398224][ T4287] netlink: 'syz.0.258': attribute type 11 has an invalid length. [ 56.406166][ T4287] netlink: 140 bytes leftover after parsing attributes in process `syz.0.258'. [ 56.428372][ T4283] ext4 filesystem being mounted at /53/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.446463][ T4287] loop0: detected capacity change from 0 to 256 [ 56.470331][ T4287] capability: warning: `syz.0.258' uses 32-bit capabilities (legacy support in use) [ 56.497631][ T4289] loop4: detected capacity change from 0 to 1024 [ 56.526301][ T4289] EXT4-fs: Ignoring removed orlov option [ 56.541549][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 56.568905][ T4289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.761297][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.803284][ T4299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 56.827774][ T4299] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 56.984415][ T4297] FAULT_INJECTION: forcing a failure. [ 56.984415][ T4297] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 56.997836][ T4297] CPU: 0 UID: 0 PID: 4297 Comm: syz.0.261 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.997868][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.997885][ T4297] Call Trace: [ 56.997894][ T4297] [ 56.997905][ T4297] __dump_stack+0x1d/0x30 [ 56.997932][ T4297] dump_stack_lvl+0x95/0xd0 [ 56.998005][ T4297] dump_stack+0x15/0x1b [ 56.998030][ T4297] should_fail_ex+0x263/0x280 [ 56.998141][ T4297] should_fail_alloc_page+0xf2/0x100 [ 56.998220][ T4297] __alloc_frozen_pages_noprof+0x108/0x350 [ 56.998262][ T4297] alloc_pages_mpol+0xb3/0x260 [ 56.998362][ T4297] alloc_migration_target_by_mpol+0x11b/0x280 [ 56.998395][ T4297] migrate_pages_batch+0x399/0x2400 [ 56.998434][ T4297] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 56.998544][ T4297] migrate_pages+0x1079/0x18c0 [ 56.998656][ T4297] ? _raw_write_unlock+0xd/0x30 [ 56.998708][ T4297] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 56.998738][ T4297] __se_sys_mbind+0xc9c/0xde0 [ 56.998786][ T4297] __x64_sys_mbind+0x78/0x90 [ 56.998898][ T4297] x64_sys_call+0x2a2b/0x3000 [ 56.998930][ T4297] do_syscall_64+0xc0/0x2a0 [ 56.998961][ T4297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.998984][ T4297] RIP: 0033:0x7fa833e0aeb9 [ 56.999010][ T4297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.999031][ T4297] RSP: 002b:00007fa832867028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 56.999057][ T4297] RAX: ffffffffffffffda RBX: 00007fa834085fa0 RCX: 00007fa833e0aeb9 [ 56.999076][ T4297] RDX: 0000000000000001 RSI: 0000000000400000 RDI: 0000200000000000 [ 56.999094][ T4297] RBP: 00007fa832867090 R08: 080000000000005a R09: 0000000000000003 [ 56.999139][ T4297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.999152][ T4297] R13: 00007fa834086038 R14: 00007fa834085fa0 R15: 00007ffc8218ddc8 [ 56.999171][ T4297] [ 57.260025][ T4305] loop4: detected capacity change from 0 to 512 [ 57.297897][ T4305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.382169][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.474787][ T4315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 57.579945][ T4323] netlink: 'syz.2.272': attribute type 1 has an invalid length. [ 57.606306][ T4323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.625744][ T4323] bond1: (slave veth3): Enslaving as an active interface with a down link [ 57.646512][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 57.655752][ T4323] bond1: (slave batadv1): making interface the new active one [ 57.664787][ T4323] batadv1: entered promiscuous mode [ 57.670206][ T4323] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 57.857015][ T4337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.276'. [ 58.114144][ T4348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.346783][ T4357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=4357 comm=syz.1.284 [ 58.364736][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.546472][ T4371] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 58.631223][ T4371] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 58.638085][ T4371] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 58.693366][ T4379] FAT-fs (loop1): bogus number of FAT sectors [ 58.699666][ T4379] FAT-fs (loop1): Can't find a valid FAT filesystem [ 58.791168][ T4386] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 58.833592][ T4391] Illegal XDP return value 3864312638 on prog (id 46) dev N/A, expect packet loss! [ 59.107744][ T4418] set_capacity_and_notify: 2 callbacks suppressed [ 59.107763][ T4418] loop0: detected capacity change from 0 to 512 [ 59.108082][ T4418] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 59.361187][ T4436] loop1: detected capacity change from 0 to 512 [ 59.370570][ T4436] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 59.370586][ T4436] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 59.384837][ T4436] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.306: bg 0: block 104: invalid block bitmap [ 59.420084][ T4436] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 59.462567][ T4436] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.306: invalid indirect mapped block 1 (level 1) [ 59.472682][ T4436] EXT4-fs (loop1): 1 truncate cleaned up [ 59.513252][ T4436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.615138][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.621421][ T4441] loop3: detected capacity change from 0 to 1024 [ 59.644701][ T4441] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 59.654555][ T4441] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 59.666381][ T4441] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 59.674905][ T4441] System zones: 0-1, 4-36, 102-102 [ 59.681742][ T4441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.695701][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 59.695719][ T29] audit: type=1400 audit(1769527441.478:277): avc: denied { bind } for pid=4442 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.721488][ T29] audit: type=1400 audit(1769527441.478:278): avc: denied { name_bind } for pid=4442 comm="syz.4.310" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 59.743325][ T29] audit: type=1400 audit(1769527441.478:279): avc: denied { node_bind } for pid=4442 comm="syz.4.310" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 59.785807][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 59.809738][ T4452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.311'. [ 59.818820][ T4452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.311'. [ 59.855423][ T4455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.312'. [ 59.944694][ T29] audit: type=1326 audit(1769527441.730:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.1.314" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c5dfaaeb9 code=0x0 [ 59.967899][ T4461] can: request_module (can-proto-0) failed. [ 60.037014][ T29] audit: type=1400 audit(1769527441.835:281): avc: denied { create } for pid=4466 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.161769][ T4461] wireguard0: entered promiscuous mode [ 60.168475][ T4461] wireguard0: entered allmulticast mode [ 60.214569][ T4472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=4472 comm=syz.0.317 [ 60.337042][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.363068][ T4478] SELinux: failed to load policy [ 60.372081][ T29] audit: type=1400 audit(1769527442.182:282): avc: denied { load_policy } for pid=4477 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 60.400419][ T4480] hsr0: entered promiscuous mode [ 60.406049][ T4480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 60.448126][ T4480] hsr_slave_0: left promiscuous mode [ 60.454308][ T4480] hsr_slave_1: left promiscuous mode [ 60.463407][ T4480] hsr0 (unregistering): left promiscuous mode [ 60.496185][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 60.518652][ T4489] loop2: detected capacity change from 0 to 512 [ 60.553699][ T4492] ip6t_rpfilter: unknown options [ 60.563044][ T4489] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 60.582352][ T4489] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.590568][ T4496] netlink: 44 bytes leftover after parsing attributes in process `syz.0.327'. [ 60.599731][ T4496] netlink: 31 bytes leftover after parsing attributes in process `syz.0.327'. [ 60.608659][ T4496] netlink: 'syz.0.327': attribute type 4 has an invalid length. [ 60.617626][ T4489] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 60.634740][ T4489] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 60.649988][ T4489] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 60.659801][ T4489] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.325: corrupted inode contents [ 60.677344][ T4489] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #16: comm syz.2.325: mark_inode_dirty error [ 60.707982][ T4489] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.325: corrupted inode contents [ 60.735928][ T4489] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.325: mark_inode_dirty error [ 60.760946][ T4506] netlink: 120 bytes leftover after parsing attributes in process `syz.4.330'. [ 60.777260][ T4489] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.325: corrupted inode contents [ 60.803070][ T4506] netlink: 'syz.4.330': attribute type 1 has an invalid length. [ 60.837181][ T4489] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 60.869174][ T4489] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.325: corrupted inode contents [ 60.887359][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 60.915080][ T4514] 9p: Bad value for 'rfdno' [ 60.919971][ T29] audit: type=1400 audit(1769527442.749:283): avc: denied { read } for pid=4505 comm="syz.4.330" dev="sockfs" ino=9557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.925313][ T4489] EXT4-fs error (device loop2): ext4_truncate:4635: inode #16: comm syz.2.325: mark_inode_dirty error [ 60.985921][ T4489] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 61.003160][ T4489] EXT4-fs (loop2): 1 truncate cleaned up [ 61.020513][ T4489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.153615][ T4531] loop1: detected capacity change from 0 to 512 [ 61.160684][ T4531] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 61.239111][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.282536][ T4537] loop2: detected capacity change from 0 to 1024 [ 61.304725][ T4537] EXT4-fs: Ignoring removed nobh option [ 61.310511][ T4537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.348670][ T4537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.448691][ T29] audit: type=1326 audit(1769527443.316:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4550 comm="syz.0.344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa833e0aeb9 code=0x0 [ 61.543360][ T29] audit: type=1400 audit(1769527443.400:285): avc: denied { ioctl } for pid=4536 comm="syz.2.340" path="/68/file1/file1" dev="loop2" ino=15 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.801125][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.946388][ T4575] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 62.442206][ T4597] netlink: 'syz.2.359': attribute type 10 has an invalid length. [ 62.495439][ T4597] team0: Device vxcan1 is of different type [ 62.813831][ T4611] netlink: 'syz.1.364': attribute type 1 has an invalid length. [ 62.920221][ T4615] erspan1: entered allmulticast mode [ 62.944066][ T4620] loop0: detected capacity change from 0 to 1024 [ 62.963087][ T4620] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 63.001059][ T4620] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 63.056724][ T4620] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 63.081567][ T4620] System zones: 0-1, 4-36, 102-102 [ 63.101597][ T4620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.154217][ T4611] bond1: entered promiscuous mode [ 63.159349][ T4611] bond1: entered allmulticast mode [ 63.214584][ T4611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.424785][ T4631] loop1: detected capacity change from 0 to 2048 [ 63.479029][ T3301] loop1: p1 < > p4 [ 63.483824][ T3301] loop1: p4 size 722688 extends beyond EOD, truncated [ 63.518347][ T4634] loop4: detected capacity change from 0 to 512 [ 63.535011][ T4631] loop1: p1 < > p4 [ 63.541859][ T4634] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.371: invalid indirect mapped block 256 (level 2) [ 63.563174][ T4631] loop1: p4 size 722688 extends beyond EOD, truncated [ 63.650624][ T4634] EXT4-fs (loop4): 2 truncates cleaned up [ 63.656838][ T4634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.764194][ T4634] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 63.817147][ T4637] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #12: block 7: comm syz.4.371: bad entry in directory: directory entry overrun - offset=0, inode=4278190093, rec_len=196860, size=56 fake=0 [ 63.837350][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.935788][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.014163][ T4646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=4646 comm=syz.0.374 [ 64.080212][ T4654] loop0: detected capacity change from 0 to 256 [ 64.096712][ T4654] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.109053][ T4654] FAULT_INJECTION: forcing a failure. [ 64.109053][ T4654] name failslab, interval 1, probability 0, space 0, times 0 [ 64.121907][ T4654] CPU: 1 UID: 0 PID: 4654 Comm: syz.0.377 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.121941][ T4654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.121954][ T4654] Call Trace: [ 64.121961][ T4654] [ 64.121969][ T4654] __dump_stack+0x1d/0x30 [ 64.121997][ T4654] dump_stack_lvl+0x95/0xd0 [ 64.122021][ T4654] dump_stack+0x15/0x1b [ 64.122169][ T4654] should_fail_ex+0x263/0x280 [ 64.122212][ T4654] should_failslab+0x8c/0xb0 [ 64.122282][ T4654] __kmalloc_noprof+0xb8/0x580 [ 64.122350][ T4654] ? iter_file_splice_write+0xf9/0xa80 [ 64.122375][ T4654] ? terminate_walk+0x1e6/0x210 [ 64.122409][ T4654] ? path_openat+0x1d94/0x23c0 [ 64.122452][ T4654] iter_file_splice_write+0xf9/0xa80 [ 64.122540][ T4654] ? _parse_integer_limit+0x170/0x190 [ 64.122583][ T4654] ? avc_policy_seqno+0x15/0x30 [ 64.122624][ T4654] ? selinux_file_permission+0x1f2/0x690 [ 64.122692][ T4654] ? kstrtoull+0x111/0x140 [ 64.122727][ T4654] ? __pfx_iter_file_splice_write+0x10/0x10 [ 64.122751][ T4654] do_splice+0x970/0x10b0 [ 64.122772][ T4654] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 64.122878][ T4654] ? kmem_cache_free+0xdf/0x380 [ 64.122916][ T4654] __se_sys_splice+0x26c/0x3a0 [ 64.122947][ T4654] __x64_sys_splice+0x78/0x90 [ 64.122968][ T4654] x64_sys_call+0x2e82/0x3000 [ 64.123076][ T4654] do_syscall_64+0xc0/0x2a0 [ 64.123115][ T4654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.123193][ T4654] RIP: 0033:0x7fa833e0aeb9 [ 64.123230][ T4654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.123255][ T4654] RSP: 002b:00007fa832867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 64.123281][ T4654] RAX: ffffffffffffffda RBX: 00007fa834085fa0 RCX: 00007fa833e0aeb9 [ 64.123366][ T4654] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 64.123379][ T4654] RBP: 00007fa832867090 R08: 00000000088000cc R09: 1000000000000000 [ 64.123451][ T4654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.123468][ T4654] R13: 00007fa834086038 R14: 00007fa834085fa0 R15: 00007ffc8218ddc8 [ 64.123495][ T4654] [ 64.152554][ T4658] loop3: detected capacity change from 0 to 256 [ 64.210151][ T4660] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 64.311368][ T4658] vfat: Unknown parameter 'check)§ÿict' [ 64.366119][ T4665] mmap: syz.2.379 (4665): VmData 29077504 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 64.459455][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 64.459471][ T29] audit: type=1400 audit(1769527446.487:293): avc: denied { create } for pid=4671 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.499427][ T4675] loop4: detected capacity change from 0 to 512 [ 64.530394][ T29] audit: type=1400 audit(1769527446.497:294): avc: denied { write } for pid=4671 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.564314][ T4675] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.583649][ T4675] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 64.591614][ T4675] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 64.599956][ T4675] System zones: 0-1, 15-15, 18-18, 34-34 [ 64.606001][ T4675] EXT4-fs (loop4): orphan cleanup on readonly fs [ 64.620699][ T4675] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 64.630216][ T4675] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 64.644960][ T4675] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 64.658333][ T4675] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.380: bg 0: block 40: padding at end of block bitmap is not set [ 64.696414][ T4675] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 64.725563][ T4675] EXT4-fs (loop4): 1 truncate cleaned up [ 64.807003][ T4675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.824102][ T4690] loop0: detected capacity change from 0 to 128 [ 64.870075][ T4675] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 64.878114][ T4675] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 64.886265][ T29] audit: type=1400 audit(1769527446.907:295): avc: denied { remount } for pid=4666 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.968998][ T4697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=4697 comm=syz.1.388 [ 64.988941][ T29] audit: type=1326 audit(1769527447.033:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.3.390" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3ffaaaeb9 code=0x0 [ 65.018101][ T4675] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.380: iget: bad i_size value: 360287970189639690 [ 65.175280][ T4705] FAULT_INJECTION: forcing a failure. [ 65.175280][ T4705] name failslab, interval 1, probability 0, space 0, times 0 [ 65.188069][ T4705] CPU: 0 UID: 0 PID: 4705 Comm: syz.1.391 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.188155][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.188168][ T4705] Call Trace: [ 65.188176][ T4705] [ 65.188186][ T4705] __dump_stack+0x1d/0x30 [ 65.188219][ T4705] dump_stack_lvl+0x95/0xd0 [ 65.188252][ T4705] dump_stack+0x15/0x1b [ 65.188273][ T4705] should_fail_ex+0x263/0x280 [ 65.188317][ T4705] ? __pfx_proc_self_get_link+0x10/0x10 [ 65.188354][ T4705] should_failslab+0x8c/0xb0 [ 65.188424][ T4705] __kmalloc_cache_noprof+0x64/0x4a0 [ 65.188459][ T4705] ? proc_self_get_link+0x96/0x110 [ 65.188495][ T4705] ? __pfx_proc_self_get_link+0x10/0x10 [ 65.188534][ T4705] proc_self_get_link+0x96/0x110 [ 65.188570][ T4705] pick_link+0x514/0x8e0 [ 65.188654][ T4705] step_into_slowpath+0x36a/0x4c0 [ 65.188745][ T4705] link_path_walk+0x974/0xe30 [ 65.188783][ T4705] path_openat+0x1bf/0x23c0 [ 65.188889][ T4705] ? _parse_integer_limit+0x170/0x190 [ 65.189030][ T4705] ? kstrtouint+0x76/0xc0 [ 65.189068][ T4705] do_filp_open+0x15d/0x280 [ 65.189169][ T4705] do_sys_openat2+0xa6/0x150 [ 65.189204][ T4705] __x64_sys_openat+0xf2/0x120 [ 65.189252][ T4705] x64_sys_call+0x2b07/0x3000 [ 65.189356][ T4705] do_syscall_64+0xc0/0x2a0 [ 65.189394][ T4705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.189426][ T4705] RIP: 0033:0x7f2c5df6b78e [ 65.189445][ T4705] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.189463][ T4705] RSP: 002b:00007f2c5ca06ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 65.189556][ T4705] RAX: ffffffffffffffda RBX: 00007f2c5ca076c0 RCX: 00007f2c5df6b78e [ 65.189573][ T4705] RDX: 0000000000000002 RSI: 00007f2c5ca06f90 RDI: ffffffffffffff9c [ 65.189586][ T4705] RBP: 00007f2c5ca07090 R08: 0000000000000000 R09: 0000000000000000 [ 65.189600][ T4705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.189612][ T4705] R13: 00007f2c5e226038 R14: 00007f2c5e225fa0 R15: 00007fffb80e8768 [ 65.189782][ T4705] [ 65.540013][ T4710] netlink: 'syz.1.393': attribute type 2 has an invalid length. [ 65.548047][ T4710] __nla_validate_parse: 6 callbacks suppressed [ 65.548067][ T4710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 65.601754][ T4713] netlink: 'syz.1.393': attribute type 2 has an invalid length. [ 65.609446][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 65.643797][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.653616][ T29] audit: type=1404 audit(1769527447.725:297): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 65.669173][ T29] audit: type=1400 audit(1769527447.725:298): avc: denied { create } for pid=4711 comm="syz.2.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 65.705732][ T4717] SET target dimension over the limit! [ 65.736248][ T29] audit: type=1400 audit(1769527447.767:299): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.760732][ T29] audit: type=1400 audit(1769527447.778:300): avc: denied { bpf } for pid=4709 comm="syz.1.393" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 65.769224][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 65.781870][ T29] audit: type=1400 audit(1769527447.778:301): avc: denied { create } for pid=4709 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 65.977544][ T4726] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 66.244089][ T4768] mmap: syz.3.417 (4768) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.310747][ T4777] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 66.345389][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 66.354486][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 66.367692][ T4782] wireguard0: entered promiscuous mode [ 66.373444][ T4782] wireguard0: entered allmulticast mode [ 66.504124][ T4809] FAULT_INJECTION: forcing a failure. [ 66.504124][ T4809] name failslab, interval 1, probability 0, space 0, times 0 [ 66.517007][ T4809] CPU: 1 UID: 0 PID: 4809 Comm: syz.3.432 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.517044][ T4809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.517061][ T4809] Call Trace: [ 66.517070][ T4809] [ 66.517080][ T4809] __dump_stack+0x1d/0x30 [ 66.517113][ T4809] dump_stack_lvl+0x95/0xd0 [ 66.517185][ T4809] dump_stack+0x15/0x1b [ 66.517213][ T4809] should_fail_ex+0x263/0x280 [ 66.517254][ T4809] should_failslab+0x8c/0xb0 [ 66.517280][ T4809] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 66.517362][ T4809] ? __d_alloc+0x37/0x340 [ 66.517390][ T4809] ? vsnprintf+0x7ee/0x860 [ 66.517415][ T4809] __d_alloc+0x37/0x340 [ 66.517487][ T4809] ? __pfx_proc_self_get_link+0x10/0x10 [ 66.517526][ T4809] d_alloc_parallel+0x54/0xce0 [ 66.517569][ T4809] ? lockref_get_not_dead+0x120/0x1c0 [ 66.517626][ T4809] ? selinux_inode_permission+0x6d1/0x7d0 [ 66.517730][ T4809] ? __rcu_read_unlock+0x4e/0x70 [ 66.517775][ T4809] ? try_to_unlazy+0x3c0/0x5b0 [ 66.517800][ T4809] __lookup_slow+0x96/0x260 [ 66.517828][ T4809] lookup_slow+0x3c/0x60 [ 66.517934][ T4809] link_path_walk+0x946/0xe30 [ 66.517961][ T4809] path_openat+0x1bf/0x23c0 [ 66.517991][ T4809] ? _parse_integer_limit+0x170/0x190 [ 66.518111][ T4809] ? kstrtouint+0x76/0xc0 [ 66.518146][ T4809] do_filp_open+0x15d/0x280 [ 66.518180][ T4809] ? __pfx_kfree_link+0x10/0x10 [ 66.518203][ T4809] do_sys_openat2+0xa6/0x150 [ 66.518301][ T4809] __x64_sys_openat+0xf2/0x120 [ 66.518329][ T4809] x64_sys_call+0x2b07/0x3000 [ 66.518352][ T4809] do_syscall_64+0xc0/0x2a0 [ 66.518384][ T4809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.518404][ T4809] RIP: 0033:0x7fe3ffa6b78e [ 66.518420][ T4809] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 66.518455][ T4809] RSP: 002b:00007fe3fe506ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 66.518474][ T4809] RAX: ffffffffffffffda RBX: 00007fe3fe5076c0 RCX: 00007fe3ffa6b78e [ 66.518486][ T4809] RDX: 0000000000000002 RSI: 00007fe3fe506f90 RDI: ffffffffffffff9c [ 66.518499][ T4809] RBP: 00007fe3fe507090 R08: 0000000000000000 R09: 0000000000000000 [ 66.518591][ T4809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.518602][ T4809] R13: 00007fe3ffd26038 R14: 00007fe3ffd25fa0 R15: 00007ffd55faa738 [ 66.518619][ T4809] [ 66.828629][ T4820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 66.837637][ T4820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 67.051102][ T4839] netlink: 'syz.1.444': attribute type 13 has an invalid length. [ 67.069580][ T4841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.152284][ T4839] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.159871][ T4839] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.186131][ T4855] netlink: 'syz.3.450': attribute type 2 has an invalid length. [ 67.194170][ T4855] netlink: 'syz.3.450': attribute type 4 has an invalid length. [ 67.202007][ T4855] netlink: 132 bytes leftover after parsing attributes in process `syz.3.450'. [ 67.233687][ T4839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.246724][ T4839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.305417][ T4839] team0: left allmulticast mode [ 67.310628][ T4839] team_slave_0: left allmulticast mode [ 67.316406][ T4839] team_slave_1: left allmulticast mode [ 67.322010][ T4839] team0: left promiscuous mode [ 67.327206][ T4839] team_slave_0: left promiscuous mode [ 67.332802][ T4839] team_slave_1: left promiscuous mode [ 67.355021][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.365579][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.378371][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.388211][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.477059][ T4874] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 67.914523][ T4923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=4923 comm=syz.1.475 [ 67.991589][ T4925] IPv6: sit1: Disabled Multicast RS [ 68.079180][ T4930] netlink: 'syz.1.479': attribute type 21 has an invalid length. [ 68.103895][ T4934] ip6t_rpfilter: unknown options [ 68.168710][ T4945] bond1: option ad_select: invalid value (4) [ 68.176337][ T4945] bond1 (unregistering): Released all slaves [ 68.190269][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 68.315781][ T4967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.494'. [ 68.617466][ T5002] FAULT_INJECTION: forcing a failure. [ 68.617466][ T5002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.631331][ T5002] CPU: 0 UID: 0 PID: 5002 Comm: syz.3.508 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.631367][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.631383][ T5002] Call Trace: [ 68.631393][ T5002] [ 68.631407][ T5002] __dump_stack+0x1d/0x30 [ 68.631437][ T5002] dump_stack_lvl+0x95/0xd0 [ 68.631467][ T5002] dump_stack+0x15/0x1b [ 68.631494][ T5002] should_fail_ex+0x263/0x280 [ 68.631535][ T5002] should_fail+0xb/0x20 [ 68.631630][ T5002] should_fail_usercopy+0x1a/0x20 [ 68.631680][ T5002] _copy_to_user+0x20/0xa0 [ 68.631708][ T5002] simple_read_from_buffer+0xb5/0x130 [ 68.631802][ T5002] proc_fail_nth_read+0x10e/0x150 [ 68.631914][ T5002] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.631972][ T5002] vfs_read+0x1ab/0x7f0 [ 68.631991][ T5002] ? __rcu_read_unlock+0x4e/0x70 [ 68.632021][ T5002] ? __fget_files+0x184/0x1c0 [ 68.632089][ T5002] ? mutex_lock+0x57/0x90 [ 68.632117][ T5002] ksys_read+0xdc/0x1a0 [ 68.632137][ T5002] __x64_sys_read+0x40/0x50 [ 68.632237][ T5002] x64_sys_call+0x2889/0x3000 [ 68.632272][ T5002] do_syscall_64+0xc0/0x2a0 [ 68.632408][ T5002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.632439][ T5002] RIP: 0033:0x7fe3ffa6b78e [ 68.632460][ T5002] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.632483][ T5002] RSP: 002b:00007fe3fe4e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.632506][ T5002] RAX: ffffffffffffffda RBX: 00007fe3fe4e66c0 RCX: 00007fe3ffa6b78e [ 68.632521][ T5002] RDX: 000000000000000f RSI: 00007fe3fe4e60a0 RDI: 0000000000000004 [ 68.632599][ T5002] RBP: 00007fe3fe4e6090 R08: 0000000000000000 R09: 0000000000000000 [ 68.632617][ T5002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.632634][ T5002] R13: 00007fe3ffd26128 R14: 00007fe3ffd26090 R15: 00007ffd55faa738 [ 68.632667][ T5002] [ 68.839691][ T3940] batadv1: left promiscuous mode [ 68.950361][ T5011] netlink: 'syz.2.513': attribute type 13 has an invalid length. [ 69.078328][ T5011] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.086029][ T5011] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.179414][ T5011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.194169][ T5011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.235824][ T29] kauditd_printk_skb: 754 callbacks suppressed [ 69.235843][ T29] audit: type=1400 audit(1769527451.495:1056): avc: denied { kexec_image_load } for pid=5030 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=0 [ 69.276596][ T29] audit: type=1400 audit(1769527451.495:1057): avc: denied { create } for pid=5030 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 69.296124][ T29] audit: type=1400 audit(1769527451.495:1058): avc: denied { create } for pid=5030 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 69.316526][ T29] audit: type=1400 audit(1769527451.495:1059): avc: denied { create } for pid=5030 comm="syz.3.521" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 69.338038][ T29] audit: type=1400 audit(1769527451.505:1060): avc: denied { prog_load } for pid=5027 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 69.357684][ T29] audit: type=1400 audit(1769527451.505:1061): avc: denied { create } for pid=5027 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=0 [ 69.384730][ T29] audit: type=1400 audit(1769527451.642:1062): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.424400][ T29] audit: type=1400 audit(1769527451.694:1063): avc: denied { map_create } for pid=5033 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 69.444161][ T29] audit: type=1400 audit(1769527451.694:1064): avc: denied { prog_load } for pid=5033 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 69.447241][ T1661] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.474176][ T5034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=5034 comm=syz.3.522 [ 69.477621][ T29] audit: type=1400 audit(1769527451.747:1065): avc: denied { open } for pid=5033 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 69.551096][ T1661] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.571391][ T1661] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.587189][ T5039] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 69.598253][ T1661] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.691521][ T5050] vlan2: entered promiscuous mode [ 69.714183][ T5050] dummy0: entered promiscuous mode [ 69.788869][ T5063] netlink: 'syz.0.536': attribute type 4 has an invalid length. [ 69.791220][ T5062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=5062 comm=syz.3.535 [ 69.992789][ T5092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=5092 comm=syz.3.551 [ 70.170177][ T5121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=5121 comm=syz.3.562 [ 70.199980][ T5120] syzkaller0: entered promiscuous mode [ 70.205673][ T5120] syzkaller0: entered allmulticast mode [ 70.231326][ T5126] Cannot find del_set index 2 as target [ 70.551676][ T5142] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=104 sclass=netlink_audit_socket pid=5142 comm=syz.2.571 [ 70.606100][ T5152] netlink: 'syz.0.576': attribute type 10 has an invalid length. [ 70.616993][ T5152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.625749][ T5152] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 70.646502][ T5152] netlink: 'syz.0.576': attribute type 10 has an invalid length. [ 70.655167][ T5152] __nla_validate_parse: 1 callbacks suppressed [ 70.655186][ T5152] netlink: 40 bytes leftover after parsing attributes in process `syz.0.576'. [ 70.670982][ T5152] batadv0: entered promiscuous mode [ 70.676263][ T5152] batadv0: entered allmulticast mode [ 70.683066][ T5152] bond0: (slave batadv0): Releasing backup interface [ 70.692496][ T5152] bridge0: port 3(batadv0) entered blocking state [ 70.699320][ T5152] bridge0: port 3(batadv0) entered disabled state [ 70.737953][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'. [ 70.758648][ T5161] tap0: tun_chr_ioctl cmd 1074025676 [ 70.764486][ T5161] tap0: owner set to 0 [ 70.768995][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'. [ 70.801736][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 70.811350][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 70.823137][ T5168] netlink: 'syz.0.580': attribute type 21 has an invalid length. [ 70.831417][ T5168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 71.098344][ T5185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 71.210543][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.217975][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.244949][ T5187] bridge0: port 3(batadv0) entered disabled state [ 71.261549][ T5210] netlink: 'syz.2.599': attribute type 1 has an invalid length. [ 71.308670][ T5187] bridge_slave_0: left allmulticast mode [ 71.314462][ T5187] bridge_slave_0: left promiscuous mode [ 71.320363][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.350611][ T5187] bridge_slave_1: left allmulticast mode [ 71.356412][ T5187] bridge_slave_1: left promiscuous mode [ 71.362235][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.374635][ T5187] bond0: (slave bond_slave_0): Releasing backup interface [ 71.387325][ T5187] bond0: (slave bond_slave_1): Releasing backup interface [ 71.398981][ T5187] team0: Port device team_slave_0 removed [ 71.409360][ T5187] team0: Port device team_slave_1 removed [ 71.419475][ T5187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.431707][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.442195][ T5187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.459203][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.516690][ T5210] bond2: entered promiscuous mode [ 71.521799][ T5210] bond2: entered allmulticast mode [ 71.527511][ T5210] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.547737][ T5218] erspan1: entered allmulticast mode [ 71.556460][ T5218] bond2: (slave erspan1): making interface the new active one [ 71.564298][ T5218] erspan1: entered promiscuous mode [ 71.571208][ T5218] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 71.580354][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.590423][ T5229] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5229 comm=syz.3.606 [ 71.594105][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.612389][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.621454][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.646640][ T5230] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5230 comm=syz.3.606 [ 71.690373][ T5229] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5229 comm=syz.3.606 [ 71.794094][ T5241] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 71.824267][ T5243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 71.833378][ T5243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 71.846065][ T5243] wireguard0: entered promiscuous mode [ 71.851862][ T5243] wireguard0: entered allmulticast mode [ 72.117573][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 72.126592][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 72.330843][ T5287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.355749][ T5287] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.392905][ T5287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.523929][ T5262] FAULT_INJECTION: forcing a failure. [ 72.523929][ T5262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 72.537536][ T5262] CPU: 0 UID: 0 PID: 5262 Comm: syz.0.618 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.537584][ T5262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.537602][ T5262] Call Trace: [ 72.537664][ T5262] [ 72.537675][ T5262] __dump_stack+0x1d/0x30 [ 72.537710][ T5262] dump_stack_lvl+0x95/0xd0 [ 72.537744][ T5262] dump_stack+0x15/0x1b [ 72.537826][ T5262] should_fail_ex+0x263/0x280 [ 72.537874][ T5262] should_fail_alloc_page+0xf2/0x100 [ 72.537912][ T5262] __alloc_frozen_pages_noprof+0x108/0x350 [ 72.537996][ T5262] alloc_pages_mpol+0xb3/0x260 [ 72.538044][ T5262] alloc_migration_target_by_mpol+0x11b/0x280 [ 72.538110][ T5262] migrate_pages_batch+0x399/0x2400 [ 72.538191][ T5262] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 72.538220][ T5262] ? trace_reschedule_exit+0xd/0xb0 [ 72.538258][ T5262] ? migrate_pages+0x17b/0x18c0 [ 72.538368][ T5262] migrate_pages+0x1079/0x18c0 [ 72.538467][ T5262] ? _raw_write_unlock+0xd/0x30 [ 72.538497][ T5262] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 72.538548][ T5262] __se_sys_mbind+0xc9c/0xde0 [ 72.538601][ T5262] __x64_sys_mbind+0x78/0x90 [ 72.538635][ T5262] x64_sys_call+0x2a2b/0x3000 [ 72.538666][ T5262] do_syscall_64+0xc0/0x2a0 [ 72.538755][ T5262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.538782][ T5262] RIP: 0033:0x7fa833e0aeb9 [ 72.538800][ T5262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.538822][ T5262] RSP: 002b:00007fa832867028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 72.538846][ T5262] RAX: ffffffffffffffda RBX: 00007fa834085fa0 RCX: 00007fa833e0aeb9 [ 72.538863][ T5262] RDX: 0000000000000001 RSI: 0000000000400000 RDI: 0000200000000000 [ 72.538929][ T5262] RBP: 00007fa832867090 R08: 080000000000005a R09: 0000000000000003 [ 72.538945][ T5262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.538960][ T5262] R13: 00007fa834086038 R14: 00007fa834085fa0 R15: 00007ffc8218ddc8 [ 72.538983][ T5262] [ 73.195047][ T5336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.651'. [ 73.654520][ T3424] Process accounting resumed [ 74.013589][ T29] kauditd_printk_skb: 940 callbacks suppressed [ 74.013608][ T29] audit: type=1400 audit(1769527456.513:2006): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.058166][ T29] audit: type=1400 audit(1769527456.545:2007): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.081849][ T3522] Process accounting resumed [ 74.097891][ T29] audit: type=1400 audit(1769527456.587:2008): avc: denied { mounton } for pid=5399 comm="syz.3.675" path="/proc/388/task" dev="proc" ino=13342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=0 [ 74.125105][ T29] audit: type=1400 audit(1769527456.618:2009): avc: denied { read write } for pid=5402 comm="syz.2.674" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.149515][ T29] audit: type=1400 audit(1769527456.618:2010): avc: denied { create } for pid=5402 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 74.170371][ T29] audit: type=1400 audit(1769527456.618:2011): avc: denied { create } for pid=5402 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 74.190189][ T29] audit: type=1400 audit(1769527456.618:2012): avc: denied { create } for pid=5402 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 74.210237][ T29] audit: type=1400 audit(1769527456.702:2013): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.263723][ T29] audit: type=1400 audit(1769527456.776:2014): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.305603][ T29] audit: type=1400 audit(1769527456.797:2015): avc: denied { prog_load } for pid=5409 comm="syz.0.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 74.702842][ T5432] macvlan2: entered promiscuous mode [ 74.708552][ T5432] bond0: entered promiscuous mode [ 74.714644][ T5432] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 74.820828][ T5445] macsec1: entered promiscuous mode [ 74.826362][ T5445] gretap0: entered promiscuous mode [ 74.831991][ T5445] macsec1: entered allmulticast mode [ 74.837301][ T5445] gretap0: entered allmulticast mode [ 74.861913][ T5447] netlink: 'syz.0.691': attribute type 30 has an invalid length. [ 74.903174][ T5449] wireguard0: entered promiscuous mode [ 74.908827][ T5449] wireguard0: entered allmulticast mode [ 75.121112][ T5474] netlink: 'syz.0.702': attribute type 10 has an invalid length. [ 75.132854][ T5474] team0: Port device vxcan1 added [ 75.150507][ T5476] netlink: 'syz.3.703': attribute type 1 has an invalid length. [ 75.189444][ T5476] bond2: entered promiscuous mode [ 75.194584][ T5476] bond2: entered allmulticast mode [ 75.200074][ T5476] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.215077][ T5476] erspan1: entered allmulticast mode [ 75.223783][ T5476] bond2: (slave erspan1): making interface the new active one [ 75.231496][ T5476] erspan1: entered promiscuous mode [ 75.237837][ T5476] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 75.387186][ T5499] ip6gre0: Caught tx_queue_len zero misconfig [ 75.393467][ T5499] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 75.461499][ T5509] netlink: 'syz.3.718': attribute type 4 has an invalid length. [ 75.505028][ T5516] Cannot find add_set index 0 as target [ 75.767368][ T5546] veth2: entered allmulticast mode [ 76.117557][ T5586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=5586 comm=syz.4.748 [ 76.268839][ T5596] FAULT_INJECTION: forcing a failure. [ 76.268839][ T5596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.282159][ T5596] CPU: 0 UID: 0 PID: 5596 Comm: syz.3.752 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.282241][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.282255][ T5596] Call Trace: [ 76.282290][ T5596] [ 76.282298][ T5596] __dump_stack+0x1d/0x30 [ 76.282326][ T5596] dump_stack_lvl+0x95/0xd0 [ 76.282350][ T5596] dump_stack+0x15/0x1b [ 76.282371][ T5596] should_fail_ex+0x263/0x280 [ 76.282405][ T5596] should_fail+0xb/0x20 [ 76.282553][ T5596] should_fail_usercopy+0x1a/0x20 [ 76.282589][ T5596] _copy_from_user+0x1c/0xb0 [ 76.282611][ T5596] kstrtouint_from_user+0x69/0xf0 [ 76.282650][ T5596] proc_fail_nth_write+0x50/0x160 [ 76.282681][ T5596] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 76.282711][ T5596] vfs_write+0x269/0x9f0 [ 76.282772][ T5596] ? __rcu_read_unlock+0x4e/0x70 [ 76.282805][ T5596] ? __fget_files+0x184/0x1c0 [ 76.282836][ T5596] ? mutex_lock+0x57/0x90 [ 76.282861][ T5596] ksys_write+0xdc/0x1a0 [ 76.282882][ T5596] __x64_sys_write+0x40/0x50 [ 76.282967][ T5596] x64_sys_call+0x2847/0x3000 [ 76.283032][ T5596] do_syscall_64+0xc0/0x2a0 [ 76.283065][ T5596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.283088][ T5596] RIP: 0033:0x7fe3ffa6b78e [ 76.283106][ T5596] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.283125][ T5596] RSP: 002b:00007fe3fe506fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.283206][ T5596] RAX: ffffffffffffffda RBX: 00007fe3fe5076c0 RCX: 00007fe3ffa6b78e [ 76.283221][ T5596] RDX: 0000000000000001 RSI: 00007fe3fe5070a0 RDI: 0000000000000004 [ 76.283252][ T5596] RBP: 00007fe3fe507090 R08: 0000000000000000 R09: 0000000000000000 [ 76.283266][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.283318][ T5596] R13: 00007fe3ffd26038 R14: 00007fe3ffd25fa0 R15: 00007ffd55faa738 [ 76.283339][ T5596] [ 76.586349][ T5613] __nla_validate_parse: 8 callbacks suppressed [ 76.586365][ T5613] netlink: 356 bytes leftover after parsing attributes in process `syz.4.761'. [ 76.601748][ T5613] netlink: 356 bytes leftover after parsing attributes in process `syz.4.761'. [ 76.616719][ T5615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=5615 comm=syz.3.760 [ 76.828295][ T5647] FAULT_INJECTION: forcing a failure. [ 76.828295][ T5647] name failslab, interval 1, probability 0, space 0, times 0 [ 76.841132][ T5647] CPU: 0 UID: 0 PID: 5647 Comm: syz.4.774 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.841168][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.841255][ T5647] Call Trace: [ 76.841264][ T5647] [ 76.841274][ T5647] __dump_stack+0x1d/0x30 [ 76.841308][ T5647] dump_stack_lvl+0x95/0xd0 [ 76.841346][ T5647] dump_stack+0x15/0x1b [ 76.841373][ T5647] should_fail_ex+0x263/0x280 [ 76.841456][ T5647] should_failslab+0x8c/0xb0 [ 76.841495][ T5647] __kmalloc_cache_noprof+0x64/0x4a0 [ 76.841579][ T5647] ? alloc_fdtable+0x8c/0x1d0 [ 76.841655][ T5647] alloc_fdtable+0x8c/0x1d0 [ 76.841682][ T5647] dup_fd+0x492/0x510 [ 76.841710][ T5647] copy_files+0x97/0xe0 [ 76.841889][ T5647] copy_process+0xc18/0x1f10 [ 76.841973][ T5647] kernel_clone+0x16b/0x5b0 [ 76.841998][ T5647] ? vfs_write+0x86e/0x9f0 [ 76.842079][ T5647] __x64_sys_clone+0x143/0x180 [ 76.842123][ T5647] x64_sys_call+0x12d0/0x3000 [ 76.842166][ T5647] do_syscall_64+0xc0/0x2a0 [ 76.842214][ T5647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.842243][ T5647] RIP: 0033:0x7fafd910aeb9 [ 76.842346][ T5647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.842370][ T5647] RSP: 002b:00007fafd7b66fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 76.842396][ T5647] RAX: ffffffffffffffda RBX: 00007fafd9385fa0 RCX: 00007fafd910aeb9 [ 76.842415][ T5647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.842462][ T5647] RBP: 00007fafd7b67090 R08: 0000000000000000 R09: 0000000000000000 [ 76.842507][ T5647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.842524][ T5647] R13: 00007fafd9386038 R14: 00007fafd9385fa0 R15: 00007fff4ed74b68 [ 76.842550][ T5647] [ 76.863899][ T5648] FAULT_INJECTION: forcing a failure. [ 76.863899][ T5648] name failslab, interval 1, probability 0, space 0, times 0 [ 77.044282][ T5648] CPU: 1 UID: 0 PID: 5648 Comm: syz.0.772 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.044309][ T5648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.044323][ T5648] Call Trace: [ 77.044331][ T5648] [ 77.044341][ T5648] __dump_stack+0x1d/0x30 [ 77.044444][ T5648] dump_stack_lvl+0x95/0xd0 [ 77.044503][ T5648] dump_stack+0x15/0x1b [ 77.044529][ T5648] should_fail_ex+0x263/0x280 [ 77.044564][ T5648] should_failslab+0x8c/0xb0 [ 77.044646][ T5648] kmem_cache_alloc_noprof+0x68/0x490 [ 77.044678][ T5648] ? getname_flags+0x7f/0x3b0 [ 77.044710][ T5648] getname_flags+0x7f/0x3b0 [ 77.044783][ T5648] do_sys_openat2+0x60/0x150 [ 77.044823][ T5648] __x64_sys_openat+0xf2/0x120 [ 77.044863][ T5648] x64_sys_call+0x2b07/0x3000 [ 77.044897][ T5648] do_syscall_64+0xc0/0x2a0 [ 77.045102][ T5648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.045125][ T5648] RIP: 0033:0x7fa833dcb78e [ 77.045177][ T5648] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.045202][ T5648] RSP: 002b:00007fa832866ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 77.045229][ T5648] RAX: ffffffffffffffda RBX: 00007fa8328676c0 RCX: 00007fa833dcb78e [ 77.045248][ T5648] RDX: 0000000000000000 RSI: 00007fa832866f90 RDI: ffffffffffffff9c [ 77.045266][ T5648] RBP: 00007fa832867090 R08: 0000000000000000 R09: 0000000000000000 [ 77.045339][ T5648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.045356][ T5648] R13: 00007fa834086038 R14: 00007fa834085fa0 R15: 00007ffc8218ddc8 [ 77.045381][ T5648] [ 77.218505][ T5653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=5653 comm=syz.3.776 [ 77.285500][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 77.488325][ T5684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=5684 comm=syz.0.789 [ 77.715898][ T5720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=5720 comm=syz.3.804 [ 77.751146][ T5725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 77.760134][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 77.892677][ T5743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.198629][ T5777] veth2: entered allmulticast mode [ 78.402771][ T5803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=5803 comm=syz.2.840 [ 78.416104][ T3424] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 78.596631][ T5825] ip6t_rpfilter: unknown options [ 78.640902][ T5829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=5829 comm=syz.4.852 [ 78.668742][ T5831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.853'. [ 78.708208][ T5839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 78.721222][ T5839] team0: entered promiscuous mode [ 78.726631][ T5839] team_slave_0: entered promiscuous mode [ 78.732586][ T5839] team_slave_1: entered promiscuous mode [ 78.750754][ T5839] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 78.759953][ T5839] team0: left promiscuous mode [ 78.764835][ T5839] team_slave_0: left promiscuous mode [ 78.770324][ T5839] team_slave_1: left promiscuous mode [ 78.785682][ T29] kauditd_printk_skb: 929 callbacks suppressed [ 78.785702][ T29] audit: type=1400 audit(1769527461.521:2945): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.816891][ T3424] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 78.826736][ T29] audit: type=1400 audit(1769527461.532:2946): avc: denied { create } for pid=5842 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 78.846499][ T29] audit: type=1400 audit(1769527461.532:2947): avc: denied { read } for pid=5842 comm="syz.3.858" dev="nsfs" ino=4026532767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 78.867742][ T29] audit: type=1400 audit(1769527461.532:2948): avc: denied { open } for pid=5842 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 78.886933][ T29] audit: type=1400 audit(1769527461.532:2949): avc: denied { prog_load } for pid=5842 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 78.902558][ T5848] netlink: 36 bytes leftover after parsing attributes in process `syz.0.860'. [ 78.905975][ T29] audit: type=1400 audit(1769527461.532:2950): avc: denied { allowed } for pid=5842 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 78.934774][ T29] audit: type=1400 audit(1769527461.532:2951): avc: denied { create } for pid=5842 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 78.955366][ T29] audit: type=1400 audit(1769527461.532:2952): avc: denied { create } for pid=5842 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 78.976093][ T29] audit: type=1400 audit(1769527461.532:2953): avc: denied { create } for pid=5842 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 78.996732][ T29] audit: type=1400 audit(1769527461.542:2954): avc: denied { create } for pid=5842 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 79.077785][ T5860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=5860 comm=syz.3.865 [ 79.287033][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'. [ 79.295910][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'. [ 79.332359][ T5886] gretap0: entered promiscuous mode [ 79.338459][ T5886] macsec1: entered promiscuous mode [ 79.343828][ T5886] macsec1: entered allmulticast mode [ 79.349207][ T5886] gretap0: entered allmulticast mode [ 79.356144][ T5890] netlink: 'syz.3.877': attribute type 30 has an invalid length. [ 79.479698][ T5907] wireguard1: entered promiscuous mode [ 79.485229][ T5907] wireguard1: entered allmulticast mode [ 79.979259][ T5922] netlink: 'syz.1.889': attribute type 10 has an invalid length. [ 79.981570][ T5922] team0: Device vxcan1 is of different type [ 80.254241][ T5937] Cannot find add_set index 0 as target [ 80.288636][ T5939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5939 comm=syz.4.897 [ 80.558447][ T5959] x_tables: unsorted underflow at hook 3 [ 80.602978][ T5962] netlink: 'syz.1.906': attribute type 32 has an invalid length. [ 80.624820][ T5962] bond2: option coupled_control: invalid value (32) [ 80.633978][ T5962] bond2 (unregistering): Released all slaves [ 80.884627][ T5977] bridge_slave_0: left allmulticast mode [ 80.884656][ T5977] bridge_slave_0: left promiscuous mode [ 80.884857][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.892903][ T5977] bridge_slave_1: left allmulticast mode [ 80.892929][ T5977] bridge_slave_1: left promiscuous mode [ 80.893040][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.894391][ T5977] bond0: (slave bond_slave_0): Releasing backup interface [ 80.895171][ T5977] bond0: (slave bond_slave_1): Releasing backup interface [ 80.896716][ T5977] team0: Port device team_slave_0 removed [ 80.903553][ T5977] team0: Port device team_slave_1 removed [ 80.903861][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.904263][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.904640][ T5977] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 81.174498][ T5965] syzkaller0: entered promiscuous mode [ 81.174529][ T5965] syzkaller0: entered allmulticast mode [ 81.581218][ T6022] __nla_validate_parse: 3 callbacks suppressed [ 81.581284][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 81.761638][ T6032] FAULT_INJECTION: forcing a failure. [ 81.761638][ T6032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.761772][ T6032] CPU: 0 UID: 0 PID: 6032 Comm: syz.4.935 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.761856][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.761872][ T6032] Call Trace: [ 81.761880][ T6032] [ 81.761892][ T6032] __dump_stack+0x1d/0x30 [ 81.762055][ T6032] dump_stack_lvl+0x95/0xd0 [ 81.762218][ T6032] dump_stack+0x15/0x1b [ 81.762299][ T6032] should_fail_ex+0x263/0x280 [ 81.762529][ T6032] should_fail+0xb/0x20 [ 81.762636][ T6032] should_fail_usercopy+0x1a/0x20 [ 81.762749][ T6032] strncpy_from_user+0x27/0x250 [ 81.762893][ T6032] getname_flags+0xad/0x3b0 [ 81.763064][ T6032] do_sys_openat2+0x60/0x150 [ 81.763227][ T6032] __x64_sys_openat+0xf2/0x120 [ 81.763341][ T6032] x64_sys_call+0x2b07/0x3000 [ 81.763467][ T6032] do_syscall_64+0xc0/0x2a0 [ 81.763601][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.763755][ T6032] RIP: 0033:0x7fafd90cb78e [ 81.763822][ T6032] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.763914][ T6032] RSP: 002b:00007fafd7b66ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 81.763994][ T6032] RAX: ffffffffffffffda RBX: 00007fafd7b676c0 RCX: 00007fafd90cb78e [ 81.764097][ T6032] RDX: 0000000000000000 RSI: 00007fafd7b66f90 RDI: ffffffffffffff9c [ 81.764154][ T6032] RBP: 00007fafd7b67090 R08: 0000000000000000 R09: 0000000000000000 [ 81.764201][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.764248][ T6032] R13: 00007fafd9386038 R14: 00007fafd9385fa0 R15: 00007fff4ed74b68 [ 81.764318][ T6032] [ 81.874588][ T6041] netlink: 72 bytes leftover after parsing attributes in process `syz.4.938'. [ 82.363921][ T6052] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 82.372231][ T6052] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 83.224120][ T1661] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 83.233896][ T1661] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 83.234046][ T1661] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 83.305927][ T1661] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 83.384702][ T6119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=6119 comm=syz.4.967 [ 83.585328][ T29] kauditd_printk_skb: 678 callbacks suppressed [ 83.585343][ T29] audit: type=1400 audit(1769527466.561:3633): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.606521][ T29] audit: type=1400 audit(1769527466.582:3634): avc: denied { create } for pid=6128 comm="syz.4.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 83.682586][ T6131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.972'. [ 83.707583][ T29] audit: type=1400 audit(1769527466.635:3635): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.707624][ T29] audit: type=1400 audit(1769527466.645:3636): avc: denied { create } for pid=6128 comm="syz.4.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 83.707746][ T29] audit: type=1400 audit(1769527466.666:3637): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.708981][ T29] audit: type=1400 audit(1769527466.687:3638): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.722745][ T29] audit: type=1400 audit(1769527466.698:3639): avc: denied { open } for pid=6133 comm="syz.2.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 83.722787][ T29] audit: type=1400 audit(1769527466.698:3640): avc: denied { prog_load } for pid=6133 comm="syz.2.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 83.723097][ T6135] ip6t_rpfilter: unknown options [ 83.743469][ T29] audit: type=1400 audit(1769527466.719:3641): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.903372][ T29] audit: type=1400 audit(1769527466.761:3642): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.949123][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.978'. [ 84.082072][ T6152] FAULT_INJECTION: forcing a failure. [ 84.082072][ T6152] name failslab, interval 1, probability 0, space 0, times 0 [ 84.082191][ T6152] CPU: 0 UID: 0 PID: 6152 Comm: syz.2.981 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.082271][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.082348][ T6152] Call Trace: [ 84.082386][ T6152] [ 84.082409][ T6152] __dump_stack+0x1d/0x30 [ 84.082501][ T6152] dump_stack_lvl+0x95/0xd0 [ 84.082568][ T6152] dump_stack+0x15/0x1b [ 84.082689][ T6152] should_fail_ex+0x263/0x280 [ 84.082800][ T6152] should_failslab+0x8c/0xb0 [ 84.082876][ T6152] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 84.083013][ T6152] ? __d_alloc+0x37/0x340 [ 84.083101][ T6152] __d_alloc+0x37/0x340 [ 84.083180][ T6152] ? security_inode_permission+0x4a/0xa0 [ 84.083276][ T6152] d_alloc_parallel+0x54/0xce0 [ 84.083371][ T6152] ? __rcu_read_unlock+0x4e/0x70 [ 84.083581][ T6152] ? __d_lookup+0x316/0x340 [ 84.083699][ T6152] path_openat+0x8d2/0x23c0 [ 84.083886][ T6152] ? _parse_integer_limit+0x170/0x190 [ 84.084018][ T6152] do_filp_open+0x15d/0x280 [ 84.084130][ T6152] ? __pfx_kfree_link+0x10/0x10 [ 84.084214][ T6152] do_sys_openat2+0xa6/0x150 [ 84.084314][ T6152] __x64_sys_openat+0xf2/0x120 [ 84.084438][ T6152] x64_sys_call+0x2b07/0x3000 [ 84.084614][ T6152] do_syscall_64+0xc0/0x2a0 [ 84.084778][ T6152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.084893][ T6152] RIP: 0033:0x7f891fd4b78e [ 84.084949][ T6152] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.085095][ T6152] RSP: 002b:00007f891e7e6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 84.085115][ T6152] RAX: ffffffffffffffda RBX: 00007f891e7e76c0 RCX: 00007f891fd4b78e [ 84.085194][ T6152] RDX: 0000000000000002 RSI: 00007f891e7e6f90 RDI: ffffffffffffff9c [ 84.085237][ T6152] RBP: 00007f891e7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.085282][ T6152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.085418][ T6152] R13: 00007f8920006038 R14: 00007f8920005fa0 R15: 00007fff5c1942e8 [ 84.085481][ T6152] [ 84.170870][ T6158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6158 comm=syz.4.985 [ 84.170981][ T6158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6158 comm=syz.4.985 [ 84.171460][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 84.224747][ T6163] xt_hashlimit: max too large, truncated to 1048576 [ 84.224839][ T6163] No such timeout policy "syz1" [ 84.659216][ T6179] FAULT_INJECTION: forcing a failure. [ 84.659216][ T6179] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.672854][ T6179] CPU: 1 UID: 0 PID: 6179 Comm: syz.3.992 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.672884][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.672901][ T6179] Call Trace: [ 84.672927][ T6179] [ 84.672935][ T6179] __dump_stack+0x1d/0x30 [ 84.672961][ T6179] dump_stack_lvl+0x95/0xd0 [ 84.673058][ T6179] dump_stack+0x15/0x1b [ 84.673078][ T6179] should_fail_ex+0x263/0x280 [ 84.673109][ T6179] should_fail_alloc_page+0xf2/0x100 [ 84.673136][ T6179] __alloc_frozen_pages_noprof+0x108/0x350 [ 84.673238][ T6179] alloc_pages_mpol+0xb3/0x260 [ 84.673290][ T6179] alloc_migration_target_by_mpol+0x11b/0x280 [ 84.673315][ T6179] migrate_pages_batch+0x399/0x2400 [ 84.673368][ T6179] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 84.673404][ T6179] migrate_pages+0x1079/0x18c0 [ 84.673432][ T6179] ? _raw_write_unlock+0xd/0x30 [ 84.673501][ T6179] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 84.673539][ T6179] __se_sys_mbind+0xc9c/0xde0 [ 84.673575][ T6179] __x64_sys_mbind+0x78/0x90 [ 84.673604][ T6179] x64_sys_call+0x2a2b/0x3000 [ 84.673647][ T6179] do_syscall_64+0xc0/0x2a0 [ 84.673681][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.673703][ T6179] RIP: 0033:0x7fe3ffaaaeb9 [ 84.673719][ T6179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.673781][ T6179] RSP: 002b:00007fe3fe507028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 84.673805][ T6179] RAX: ffffffffffffffda RBX: 00007fe3ffd25fa0 RCX: 00007fe3ffaaaeb9 [ 84.673820][ T6179] RDX: 0000000000000001 RSI: 0000000000400000 RDI: 0000200000000000 [ 84.673833][ T6179] RBP: 00007fe3fe507090 R08: 080000000000005a R09: 0000000000000003 [ 84.673847][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.673893][ T6179] R13: 00007fe3ffd26038 R14: 00007fe3ffd25fa0 R15: 00007ffd55faa738 [ 84.673918][ T6179] [ 84.826631][ T6204] netlink: 'syz.0.1001': attribute type 10 has an invalid length. [ 84.929190][ T6207] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1003'. [ 84.929967][ T6207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.929981][ T6207] IPv6: NLM_F_CREATE should be set when creating new route [ 84.931039][ T6207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=6207 comm=syz.3.1003 [ 85.022992][ T6221] Cannot find add_set index 0 as target [ 85.087005][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 85.174949][ T6229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6229 comm=syz.2.1012 [ 85.190534][ T6238] netlink: 'syz.3.1015': attribute type 5 has an invalid length. [ 85.888297][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 85.991260][ T6305] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1043'. [ 86.236108][ T6310] sctp: [Deprecated]: syz.1.1045 (pid 6310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.236108][ T6310] Use struct sctp_sack_info instead [ 86.395432][ T6315] FAULT_INJECTION: forcing a failure. [ 86.395432][ T6315] name failslab, interval 1, probability 0, space 0, times 0 [ 86.408307][ T6315] CPU: 1 UID: 0 PID: 6315 Comm: syz.0.1047 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.408343][ T6315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.408413][ T6315] Call Trace: [ 86.408421][ T6315] [ 86.408429][ T6315] __dump_stack+0x1d/0x30 [ 86.408461][ T6315] dump_stack_lvl+0x95/0xd0 [ 86.408541][ T6315] dump_stack+0x15/0x1b [ 86.408568][ T6315] should_fail_ex+0x263/0x280 [ 86.408610][ T6315] should_failslab+0x8c/0xb0 [ 86.408634][ T6315] __kvmalloc_node_noprof+0x148/0x680 [ 86.408685][ T6315] ? alloc_fdtable+0x115/0x1d0 [ 86.408708][ T6315] alloc_fdtable+0x115/0x1d0 [ 86.408729][ T6315] dup_fd+0x492/0x510 [ 86.408770][ T6315] copy_files+0x97/0xe0 [ 86.408823][ T6315] copy_process+0xc18/0x1f10 [ 86.408881][ T6315] kernel_clone+0x16b/0x5b0 [ 86.408906][ T6315] ? vfs_write+0x86e/0x9f0 [ 86.408934][ T6315] __x64_sys_clone+0x143/0x180 [ 86.409018][ T6315] x64_sys_call+0x12d0/0x3000 [ 86.409099][ T6315] do_syscall_64+0xc0/0x2a0 [ 86.409131][ T6315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.409158][ T6315] RIP: 0033:0x7fa833e0aeb9 [ 86.409179][ T6315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.409200][ T6315] RSP: 002b:00007fa832866fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 86.409220][ T6315] RAX: ffffffffffffffda RBX: 00007fa834085fa0 RCX: 00007fa833e0aeb9 [ 86.409255][ T6315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.409267][ T6315] RBP: 00007fa832867090 R08: 0000000000000000 R09: 0000000000000000 [ 86.409291][ T6315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.409307][ T6315] R13: 00007fa834086038 R14: 00007fa834085fa0 R15: 00007ffc8218ddc8 [ 86.409353][ T6315] [ 87.192191][ T6352] No such timeout policy "syz1" [ 87.260724][ T6365] ip6gre0: Caught tx_queue_len zero misconfig [ 87.266919][ T6365] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 87.337623][ T6373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1071'. [ 87.521425][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 87.717087][ T6395] ip6t_rpfilter: unknown options [ 88.358708][ T29] kauditd_printk_skb: 539 callbacks suppressed [ 88.358727][ T29] audit: type=1400 audit(1769527471.569:4182): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 88.391830][ T29] audit: type=1400 audit(1769527471.580:4183): avc: denied { map_create } for pid=6421 comm="syz.2.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 88.422354][ T29] audit: type=1400 audit(1769527471.643:4184): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 88.430147][ T29] audit: type=1400 audit(1769527471.643:4185): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 88.430225][ T29] audit: type=1400 audit(1769527471.643:4186): avc: denied { open } for pid=6423 comm="syz.0.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 88.430249][ T29] audit: type=1400 audit(1769527471.643:4187): avc: denied { create } for pid=6423 comm="syz.0.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 88.431084][ T29] audit: type=1326 audit(1769527471.643:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.0.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa833e0aeb9 code=0x7ffc0000 [ 88.544498][ T29] audit: type=1326 audit(1769527471.727:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.0.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa833e0aeb9 code=0x7ffc0000 [ 88.544692][ T29] audit: type=1326 audit(1769527471.727:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.0.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa833e0aeb9 code=0x7ffc0000 [ 88.592107][ T29] audit: type=1326 audit(1769527471.727:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6423 comm="syz.0.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa833e0aeb9 code=0x7ffc0000 [ 88.950840][ T6443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=6443 comm=syz.4.1100 [ 89.402420][ T6470] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 89.402420][ T6470] The task syz.4.1101 (6470) triggered the difference, watch for misbehavior. [ 89.642705][ T6474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=6474 comm=syz.1.1111 [ 90.169706][ T6501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=6501 comm=syz.1.1122 [ 90.193789][ T6503] netlink: 'syz.2.1123': attribute type 4 has an invalid length. [ 90.322348][ T6521] netlink: 'syz.4.1130': attribute type 32 has an invalid length. [ 90.330298][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1130'. [ 90.366360][ T6521] bond1: option coupled_control: invalid value (32) [ 90.374213][ T6521] bond1 (unregistering): Released all slaves [ 90.514861][ T6530] netlink: 'syz.4.1132': attribute type 1 has an invalid length. [ 90.573702][ T6530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.605037][ T6534] vlan2: entered allmulticast mode [ 90.605158][ T6534] bond1: entered allmulticast mode [ 90.648252][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 90.747121][ T6546] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 2, id = 0 [ 90.825766][ T6557] netlink: 'syz.3.1143': attribute type 3 has an invalid length. [ 91.098345][ T6575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1150'. [ 91.320862][ T6584] batadv1: entered promiscuous mode [ 91.454724][ T6588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1157'. [ 91.478135][ T6588] dummy0: Caught tx_queue_len zero misconfig [ 91.503799][ T6591] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1157'. [ 91.679815][ T6603] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 91.710161][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'. [ 91.748900][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1164'. [ 91.748949][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1164'. [ 91.769952][ T6611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=6611 comm=syz.2.1166 [ 92.084743][ T6637] bridge0: entered allmulticast mode [ 92.088563][ T6634] ip6t_rpfilter: unknown options [ 92.136155][ T6641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=6641 comm=syz.2.1179 [ 93.174140][ T29] kauditd_printk_skb: 707 callbacks suppressed [ 93.174171][ T29] audit: type=1400 audit(1769527476.619:4899): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 93.262611][ T29] audit: type=1400 audit(1769527476.714:4900): avc: denied { create } for pid=6698 comm="syz.3.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 93.283501][ T29] audit: type=1400 audit(1769527476.714:4901): avc: denied { open } for pid=6695 comm="syz.2.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 93.302908][ T29] audit: type=1400 audit(1769527476.714:4902): avc: denied { map_create } for pid=6695 comm="syz.2.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.322433][ T29] audit: type=1400 audit(1769527476.714:4903): avc: denied { prog_load } for pid=6695 comm="syz.2.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.341711][ T29] audit: type=1400 audit(1769527476.714:4904): avc: denied { open } for pid=6695 comm="syz.2.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 93.361470][ T29] audit: type=1400 audit(1769527476.714:4905): avc: denied { prog_load } for pid=6695 comm="syz.2.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.380604][ T29] audit: type=1400 audit(1769527476.714:4906): avc: denied { bpf } for pid=6695 comm="syz.2.1201" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 93.401539][ T29] audit: type=1400 audit(1769527476.714:4907): avc: denied { map_create } for pid=6695 comm="syz.2.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.420832][ T29] audit: type=1400 audit(1769527476.714:4908): avc: denied { map_create } for pid=6695 comm="syz.2.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.551274][ T6707] netlink: 'syz.2.1204': attribute type 30 has an invalid length. [ 93.912333][ T6748] wireguard0: entered promiscuous mode [ 93.917983][ T6748] wireguard0: entered allmulticast mode [ 94.295250][ T6786] __nla_validate_parse: 2 callbacks suppressed [ 94.295269][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1234'. [ 94.390304][ T6795] netlink: 'syz.4.1236': attribute type 1 has an invalid length. [ 94.432257][ T6795] bond2: entered promiscuous mode [ 94.437446][ T6795] bond2: entered allmulticast mode [ 94.480191][ T6795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.517897][ T6797] erspan1: entered allmulticast mode [ 94.548997][ T6797] bond2: (slave erspan1): making interface the new active one [ 94.556627][ T6797] erspan1: entered promiscuous mode [ 94.608671][ T6797] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 95.055653][ T6845] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 95.093100][ T6839] syzkaller0: entered promiscuous mode [ 95.099419][ T6839] syzkaller0: entered allmulticast mode [ 95.325862][ T6867] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 95.492469][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 95.492492][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'. [ 95.496016][ T6887] team_slave_0: entered promiscuous mode [ 95.496083][ T6887] team_slave_1: entered promiscuous mode [ 95.496158][ T6887] macsec1: entered promiscuous mode [ 95.496172][ T6887] team0: entered promiscuous mode [ 95.496459][ T6887] macsec1: entered allmulticast mode [ 95.496475][ T6887] team0: entered allmulticast mode [ 95.496497][ T6887] team_slave_0: entered allmulticast mode [ 95.496515][ T6887] team_slave_1: entered allmulticast mode [ 95.597275][ T6895] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 96.238872][ T6928] netlink: 'syz.3.1286': attribute type 1 has an invalid length. [ 96.258654][ T6928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.282284][ T6928] bond3: (slave geneve2): making interface the new active one [ 96.301846][ T6928] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 96.355348][ T6941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=6941 comm=syz.4.1292 [ 96.821599][ T6970] batadv1: entered promiscuous mode [ 96.972420][ T6977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=6977 comm=syz.4.1306 [ 97.084608][ T6981] netlink: 'syz.4.1308': attribute type 30 has an invalid length. [ 97.420632][ T7003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=7003 comm=syz.4.1317 [ 97.603877][ T7035] netlink: 'syz.4.1330': attribute type 1 has an invalid length. [ 97.617281][ T7035] bond3: entered promiscuous mode [ 97.622432][ T7035] bond3: entered allmulticast mode [ 97.627833][ T7035] 8021q: adding VLAN 0 to HW filter on device bond3 [ 97.656451][ T7038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=7038 comm=syz.4.1331 [ 97.727778][ T7046] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1335'. [ 97.824575][ T7063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=7063 comm=syz.0.1343 [ 97.860920][ T7065] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 97.864473][ T7066] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1342'. [ 97.900969][ T7066] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 97.909970][ T7066] ..0ªî{X¹¦: entered allmulticast mode [ 97.916668][ T7066] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 97.952117][ T29] kauditd_printk_skb: 666 callbacks suppressed [ 97.952138][ T29] audit: type=1400 audit(1769527481.638:5576): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 97.983277][ T29] audit: type=1400 audit(1769527481.638:5575): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 98.008705][ T29] audit: type=1400 audit(1769527481.638:5577): avc: denied { open } for pid=7072 comm="syz.0.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 98.028262][ T29] audit: type=1400 audit(1769527481.648:5578): avc: denied { prog_load } for pid=7072 comm="syz.0.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 98.047697][ T29] audit: type=1400 audit(1769527481.648:5579): avc: denied { create } for pid=7072 comm="syz.0.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 98.068967][ T29] audit: type=1400 audit(1769527481.680:5580): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 98.093684][ T29] audit: type=1400 audit(1769527481.690:5581): avc: denied { create } for pid=7074 comm="syz.0.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 98.113437][ T29] audit: type=1400 audit(1769527481.690:5582): avc: denied { create } for pid=7074 comm="syz.0.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 98.133975][ T29] audit: type=1400 audit(1769527481.690:5583): avc: denied { name_bind } for pid=7074 comm="syz.0.1348" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=0 [ 98.155226][ T29] audit: type=1400 audit(1769527481.701:5584): avc: denied { open } for pid=7074 comm="syz.0.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 98.258027][ T7091] netlink: 'syz.1.1354': attribute type 4 has an invalid length. [ 98.338590][ T7101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1358'. [ 98.363687][ T7108] netlink: 'syz.2.1362': attribute type 32 has an invalid length. [ 98.372409][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 98.379417][ T7110] lo: Caught tx_queue_len zero misconfig [ 98.387646][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1363'. [ 98.425257][ T7108] bond3: option coupled_control: invalid value (32) [ 98.433041][ T7108] bond3 (unregistering): Released all slaves [ 98.501518][ T7124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=7124 comm=syz.3.1368 [ 98.743755][ T7154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=7154 comm=syz.2.1380 [ 98.930074][ T7175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1390'. [ 99.191121][ T7190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=7190 comm=syz.1.1395 [ 99.305113][ T7212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1404'. [ 99.393382][ T7222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=7222 comm=syz.1.1408 [ 99.494314][ T7229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.509721][ T7229] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.520500][ T7229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.602484][ T7240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=7240 comm=syz.1.1414 [ 99.661928][ T7220] syzkaller0: entered promiscuous mode [ 99.667480][ T7220] syzkaller0: entered allmulticast mode [ 99.830533][ T7265] netlink: 'syz.4.1426': attribute type 30 has an invalid length. [ 100.129059][ T7256] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1422'. [ 100.329708][ T7331] netlink: 'syz.2.1453': attribute type 1 has an invalid length. [ 100.351997][ T7331] bond3: entered promiscuous mode [ 100.357255][ T7331] bond3: entered allmulticast mode [ 100.362832][ T7331] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.370877][ T7336] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1456'. [ 100.410544][ T7343] netlink: 'syz.1.1458': attribute type 10 has an invalid length. [ 100.426041][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 100.430340][ T7343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.450017][ T7343] team0: Port device bond0 added [ 100.566996][ T7356] netlink: 'syz.2.1463': attribute type 10 has an invalid length. [ 100.575939][ T7356] team0: Device vxcan1 is of different type [ 100.973262][ T7379] IPv6: sit1: Disabled Multicast RS [ 101.045666][ T7381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.053313][ T7381] IPv6: NLM_F_CREATE should be set when creating new route [ 101.060618][ T7381] IPv6: NLM_F_CREATE should be set when creating new route [ 101.195396][ T7401] ================================================================== [ 101.203562][ T7401] BUG: KCSAN: data-race in __percpu_counter_init_many / copy_mm [ 101.211264][ T7401] [ 101.213630][ T7401] write to 0xffff8881047777c8 of 8 bytes by task 3320 on cpu 1: [ 101.221383][ T7401] __percpu_counter_init_many+0x292/0x310 [ 101.227158][ T7401] mm_init+0x505/0x680 [ 101.231283][ T7401] copy_mm+0x100/0x370 [ 101.235382][ T7401] copy_process+0xcbd/0x1f10 [ 101.240037][ T7401] kernel_clone+0x16b/0x5b0 [ 101.244591][ T7401] __x64_sys_clone+0x143/0x180 [ 101.249488][ T7401] x64_sys_call+0x12d0/0x3000 [ 101.254215][ T7401] do_syscall_64+0xc0/0x2a0 [ 101.258762][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.264793][ T7401] [ 101.267152][ T7401] read to 0xffff8881047772c0 of 1664 bytes by task 7401 on cpu 0: [ 101.275086][ T7401] copy_mm+0xe1/0x370 [ 101.279205][ T7401] copy_process+0xcbd/0x1f10 [ 101.283950][ T7401] kernel_clone+0x16b/0x5b0 [ 101.288494][ T7401] __x64_sys_clone+0x143/0x180 [ 101.293306][ T7401] x64_sys_call+0x12d0/0x3000 [ 101.298123][ T7401] do_syscall_64+0xc0/0x2a0 [ 101.302682][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.308620][ T7401] [ 101.310965][ T7401] Reported by Kernel Concurrency Sanitizer on: [ 101.317233][ T7401] CPU: 0 UID: 0 PID: 7401 Comm: syz.2.1482 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.327518][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.337616][ T7401] ================================================================== [ 101.402383][ T7403] FAULT_INJECTION: forcing a failure. [ 101.402383][ T7403] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 101.415734][ T7403] CPU: 1 UID: 0 PID: 7403 Comm: syz.0.1483 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.415759][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.415770][ T7403] Call Trace: [ 101.415843][ T7403] [ 101.415851][ T7403] __dump_stack+0x1d/0x30 [ 101.415874][ T7403] dump_stack_lvl+0x95/0xd0 [ 101.415894][ T7403] dump_stack+0x15/0x1b [ 101.415912][ T7403] should_fail_ex+0x263/0x280 [ 101.415998][ T7403] should_fail_alloc_page+0xf2/0x100 [ 101.416047][ T7403] __alloc_frozen_pages_noprof+0x108/0x350 [ 101.416078][ T7403] alloc_pages_mpol+0xb3/0x260 [ 101.416114][ T7403] alloc_migration_target_by_mpol+0x11b/0x280 [ 101.416209][ T7403] migrate_pages_batch+0x399/0x2400 [ 101.416237][ T7403] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 101.416263][ T7403] migrate_pages+0x1079/0x18c0 [ 101.416325][ T7403] ? _raw_write_unlock+0xd/0x30 [ 101.416344][ T7403] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 101.416370][ T7403] __se_sys_mbind+0xc9c/0xde0 [ 101.416402][ T7403] __x64_sys_mbind+0x78/0x90 [ 101.416486][ T7403] x64_sys_call+0x2a2b/0x3000 [ 101.416509][ T7403] do_syscall_64+0xc0/0x2a0 [ 101.416554][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.416574][ T7403] RIP: 0033:0x7fa833e0aeb9 [ 101.416589][ T7403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.416644][ T7403] RSP: 002b:00007fa832867028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 101.416662][ T7403] RAX: ffffffffffffffda RBX: 00007fa834085fa0 RCX: 00007fa833e0aeb9 [ 101.416742][ T7403] RDX: 0000000000000001 RSI: 0000000000400000 RDI: 0000200000000000 [ 101.416760][ T7403] RBP: 00007fa832867090 R08: 080000000000005a R09: 0000000000000003 [ 101.416778][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.416797][ T7403] R13: 00007fa834086038 R14: 00007fa834085fa0 R15: 00007ffc8218ddc8 [ 101.416815][ T7403] [ 102.956286][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!