last executing test programs: 7.602084878s ago: executing program 2 (id=211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa33074b866c1d0000007ea60864160af3653c000cc0080008000000000000001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037aef751022297e786a6d20010000420000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004084) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x195) write$cgroup_int(r2, &(0x7f0000000080)=0x1, 0x12) read(r2, &(0x7f0000000340)=""/10, 0xa) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000100)=0x80000000, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x2000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_128={{0x304}, "00020600", "3d966b820b67cdbf176dc75c8832af4b", '\x00\x00\x00@', "000000000100"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = socket(0x18, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160018000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x20, 0x1, 0x9fff, r4, 0x0, 0xffffff40, 0x1}]) 7.421199865s ago: executing program 2 (id=212): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x12, 0xfffffffffffffffe}}]}}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) unshare(0x22020600) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') setns(r2, 0x20000000) writev(r1, &(0x7f0000000080)=[{&(0x7f0000001740)='9', 0x1a}], 0x20) 7.172472673s ago: executing program 2 (id=216): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd06, 0x4}, 0x6057, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x700}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000c00)={[{@utf8}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@block={'block', 0x3d, 0x400}}, {@hide}, {@map_off}, {@map_off}, {@sbsector={'sbsector', 0x3d, 0x2}}, {@unhide}, {@check_relaxed}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@overriderock}]}, 0x4, 0xa0e, &(0x7f00000001c0)="$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") (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40542, 0x0) lseek(r2, 0x20000000000000, 0x1) (async) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x200, 0x0, 0x8000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf722, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x4, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0xcf6, 0x206, 0x1ff, 0xb, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x40000004, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc6, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e3, 0x7fff, 0x7, 0x7fe, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x20009, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0xffffffff, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x1, 0xfffffffa, 0x3, 0x7, 0x9, 0x2, 0x65fd, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xc0, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000000000002f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x4000) 3.751822651s ago: executing program 3 (id=238): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x8) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) unshare(0x20000400) (async) unshare(0x20000400) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x2}, 0x6e) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffe, 0x56, 0xb4, @scatter={0x0, 0x100000, 0x0}, &(0x7f0000000180)="a6254d8f661cdbe620f7ffffff4e480d0000003f794bd138fe7da0982c6916fe357d441c300c24c961f4afd24ced7477d3ba1f433e7141fbdf719004670d4cc64f4f001f0f8108120220bb6fb109356d406b416ed62b", 0x0, 0x2, 0x23, 0xfffffffd, 0x0}) 3.727034462s ago: executing program 3 (id=240): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (fail_nth: 2) 3.034015546s ago: executing program 4 (id=245): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x30]}}, 0x0, 0x28, 0x0, 0x1, 0x7ff}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000600)) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @random="533bde87ff9f"}]}, 0x40}}, 0x8000) listen(r2, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$inet(r4, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000040)="39b73c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)='ru>', 0x3}], 0x1}}], 0x2, 0x48045) 2.965488358s ago: executing program 4 (id=246): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x20, 0x1, 0x9fff, r0, 0x0, 0xffffff40, 0x1}]) 2.91304781s ago: executing program 3 (id=247): socket(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000080)=[{&(0x7f0000000700)="89000000120081ae08060c40928505007f03e3f70000000500e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaee0c7a6ec08123d000200080001070400c46b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000010) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3a00}, [@IFLA_LINK_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) cachestat(r2, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffffb, &(0x7f0000000340)={0x0}}, 0x11) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x20040001}, 0x20000000) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0x52000775) lseek(r8, 0x100, 0x0) getdents(r8, 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x800003a, 0x0, 0x7}, 0x1c) 2.845537143s ago: executing program 4 (id=248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000c00000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x4000054) 2.785585404s ago: executing program 4 (id=249): stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) timerfd_create(0x8, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) ioctl$KIOCSOUND(r1, 0x4b2f, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r2, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x4, 0x5) r3 = syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)={[], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@obj_type={'obj_type', 0x3d, '\x00\xd1\x9c\x9e\xb4'}}, {@obj_type={'obj_type', 0x3d, '#9\xbe\x86\xdc\x04\xe59_c\x9a\x85\x8e%#\x13\x90\x11\xe2\xec\x1dr\xde\xf0:\x94\xbda\xaa\xf4\xe9=\x88\xf4\xb2|\x96\xcc/(\x16\xba\xddwt\x93\x10'}}, {@euid_gt={'euid>', r0}}]}, 0xfe, 0x545, &(0x7f0000000c80)="$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") quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, r0, &(0x7f0000000040)={0x80000001, 0x5, 0x0, 0x6}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) setresuid(r0, r0, r4) 2.61427227s ago: executing program 4 (id=252): syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="280000000000000029000000390000000002024000000000fc020000000000000000000000000001dcecda1b6da0d35a639310ca19572c324937ae5a19b30f3e57a7c1d4234f4595efea348dc9dc971854f33775c2b10ed306b338cf1ef42728b2ebd0fc87395ba10ea3452e4b73b5a763e8e430fd6f024b1417dd4e5f59e0289b61cf71b12712e92e4575b96b3a41772f66a80bd2f88af9f02253c22d64141596aa9a6352e5b28c8e1bd46ab9b95f87dc08c49400a0"], 0x28}, 0x24000840) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00001000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000020000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0xe}, {r2, 0xb01}, {r0, 0x1487}], 0x3, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)={[0x7fffffff]}, 0x8) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2800, 0x8, 0x0, 0x0, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095", @ANYRES32=r3, @ANYRES8=r5], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xb2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r9, r8, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) syz_emit_ethernet(0x1460, &(0x7f0000000580)=ANY=[], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.168114706s ago: executing program 1 (id=254): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x20, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000580)={0x0, 0x2710}, 0x10) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="efdaa6043f", 0x5}], 0x1}, 0x80) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @mcast1, 0x1}, 0x1c) 2.075633289s ago: executing program 3 (id=256): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x7af3, 0x0, 0x9}) 2.03888123s ago: executing program 3 (id=257): close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa42b, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='1\x00', 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0xc) setresuid(0x0, 0xee00, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000b05c47f010b0000000000000000000200000a"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4044014) 1.844766447s ago: executing program 2 (id=216): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd06, 0x4}, 0x6057, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x700}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000c00)={[{@utf8}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@block={'block', 0x3d, 0x400}}, {@hide}, {@map_off}, {@map_off}, {@sbsector={'sbsector', 0x3d, 0x2}}, {@unhide}, {@check_relaxed}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@overriderock}]}, 0x4, 0xa0e, &(0x7f00000001c0)="$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") (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40542, 0x0) lseek(r2, 0x20000000000000, 0x1) (async) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x200, 0x0, 0x8000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf722, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x4, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0xcf6, 0x206, 0x1ff, 0xb, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x40000004, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc6, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e3, 0x7fff, 0x7, 0x7fe, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x20009, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0xffffffff, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x1, 0xfffffffa, 0x3, 0x7, 0x9, 0x2, 0x65fd, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xc0, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000000000002f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x4000) 1.284769256s ago: executing program 1 (id=260): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000480006804400040067636d2861657329", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 837.170172ms ago: executing program 2 (id=261): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}], 0x20}}], 0x1, 0x0) 820.374122ms ago: executing program 1 (id=263): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 818.759832ms ago: executing program 2 (id=264): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10022, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001"], 0x184}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000f30000000000000a28fb0000000a01010300b58ed735a1f844c21300005e3affd50200000009000100f3797a300000000008000240009e8f546460247c0b0000032c00008afa94b676c67afefdee1565f9515c00030a0c000000e64d0ff845143d516a000900010073797a30000000000900030073797a320000000014000000110001d67afeab9cdf3507"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b65740000080002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) r7 = accept4$unix(r6, 0x0, 0x0, 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvfrom$unix(r7, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x34, 0x68, 0x309, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @SEG6_LOCAL_SRH={0xc, 0x2, {0x1, 0x0, 0x4, 0x0, 0xc, 0x80, 0x9}}}]}, 0x34}}, 0x4040) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x3, 0x7}, 0x102802, 0x0, 0x0, 0x3, 0x1001, 0x3, 0x7ffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1, 0x80) ioctl$USBDEVFS_CLEAR_HALT(r8, 0x80045515, &(0x7f00000001c0)={0xf}) 537.907992ms ago: executing program 0 (id=265): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900), 0x0, 0x800) 535.723992ms ago: executing program 0 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00(', @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008000d0001000000"], 0x30}}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x8402, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8001, 0xf7f}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x2a) write$sndseq(r3, &(0x7f0000000280)=[{0x3, 0x63, 0x1, 0x7, @tick=0x9, {0x8, 0x9}, {0xd, 0x6}, @result={0x7, 0x9}}, {0xa, 0x4, 0x0, 0x85, @tick, {0x9}, {0x9, 0xf7}, @quote={{0x0, 0x7}, 0xffff, &(0x7f0000000100)={0x4, 0xa, 0x3, 0x10, @tick=0xffff, {0x80}, {0x9, 0x8}, @result={0x86a6, 0x1}}}}], 0x38) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000020000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRESDEC=r4, @ANYBLOB="00000000000000000c00000000000000000001000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000002000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000600000000004400050000000000000000000000ffff0a010101000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x5147}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r8, 0x1ff}, 0x8) r9 = openat(r6, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000020001"], 0x0) syz_extract_tcp_res(0x0, 0x56, 0xa) 366.630498ms ago: executing program 0 (id=267): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x7af3, 0x0, 0x9}) 349.261168ms ago: executing program 1 (id=268): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x420100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 293.41765ms ago: executing program 0 (id=269): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0xce22, 0xe, @empty, 0x1}, {0xa, 0x4e23, 0x7, @loopback={0x200000000000000}, 0x3}, r1, 0x7}}, 0x48) 292.7427ms ago: executing program 4 (id=270): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f0000000f40)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@errors_remount}, {@jqfmt_vfsv0, 0x0}, {@usrjquota}, {@noload}, {@jqfmt_vfsv1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@norecovery}, {@minixdf}, {@data_err_ignore}], [{@obj_type={'obj_type', 0x3d, 'noload'}}, {@uid_eq}, {@appraise_type}, {@euid_lt}], 0x2c}, 0x42, 0x518, &(0x7f00000004c0)="$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") setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000540)="bd", 0x1}], 0x2}}], 0x1, 0x4400c800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'tunl0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x42c41, 0x0) socket(0x28, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r4, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x10, &(0x7f0000000200)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xe}, 0x94) socket$inet_sctp(0x2, 0x9, 0x84) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) 236.320852ms ago: executing program 1 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003904000000000040000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000281c0012800b00010062001502000000000a001400018dc200000000003583b3d5a56e18dbbc3b60ea4e0eb1a3475e3de024d13397a7f999294870bf04a9674cd252556c42fe7f344a0ccb4f3f90b59237437311650138687cf7852af8f04cb2543f056a92f1d75959aabbf5b259e2ca878f38275794c576f8ba1cb5b04ce988026f9b3da633541c3539846ff63eb5841dd4e23486a2e29968e06fe99f86e216ba969cf289cc254a25b38c724b151a81f71607551d219899b2865a06d054818913bc5a43018c9f096de17c5621dda68cc4"], 0x48}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0xc002a0, 0x2) 234.982172ms ago: executing program 0 (id=272): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000800)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x64, 0x38, 0x35, 0x38, 0x61, 0x66, 0x3d], 0x2d, [0x30, 0x66, 0x64, 0x32], 0x2d, [0x32, 0x62, 0x32, 0x66], 0x2d, [0x35, 0x65, 0x66, 0x66], 0x2d, [0x62, 0x38, 0x65, 0x62, 0x61, 0x65, 0x32, 0x64]}}}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) 115.521497ms ago: executing program 0 (id=273): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x2000, 0x1000, 0x5, 0x6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000280)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xfffffffffffffff4, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000009c0), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x79c, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x26}, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = openat$random(0xffffffffffffff9c, 0x0, 0x508402, 0x0) ioctl$RNDCLEARPOOL(r6, 0x5206, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) 115.409796ms ago: executing program 1 (id=274): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000480006804400040067636d2861657329", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 0s ago: executing program 3 (id=275): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x100000002e}}, {@nobarrier}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000002140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$loop(0x0, 0x75d, 0x2480) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x200000, 0x2, 0x0, 0xb, 0x508}, 0x20) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="696f636861bd858c09faffffffffffff606e69616e2c636865636b3d3078303002802fa18bb133303031362c63727547742c3af20a0087686964652c00dfd7a501a6fa243a45cec91270d516b596f2974dead8f20e3de4aca9a3c9257ab8"], 0x1, 0x534, &(0x7f0000000580)="$eJzs3VFv01gWwPHj0qolK6HV7gqhqoVLWaQilayTQFHEk9e5SS84dmQ7qH1CFU3ZipRFdFfa9o0Xdkaa+RC8zocYzRcazdto3jKynZSUpkmnLUlB/18E98Y+9j12Ix+5jW0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiuRXbLljiGb+5rk7mVsKgPmR+b333jjRDxhWxkn8yNyc3skk3/vZx9vXkvyVZyN4tyFzSzMnBn67/+fFfp6d6yw9JaCz29g9ebbbbrbdnWrp94fmMW037JgpM3alpZaJAla+KyFo1UlXj6WgjinVduaF24iBUy+49VSiXS0rnN4KmX6s4nu5NfHS/aNur6km+oZ0wCvx/PMlH7prxPOPX0phkdhLzKPkgPjWxirVTV2p7p90qjUoyCSqcJqg4KqhoF4uFQrFYWH1YfvjItqePTbA/IcciJv+hxWRd8BEcOLupbv0XT4z40pR1UQNfrlQklEDqJ8zv6tX/u7PDx+2v/70qf+Pj7HlJ6//N7N3Nk+r/CbmM77Un+3Igr2RT2tKWlrydeEbjfdVEiy9GIgnESF2cdIrqTlFSllVZFVuey5pUJRIlVTHiiZZINiSSWHT6iXIlFC2OxBJIKEqWxZV7oqQgndmylESJlrxsSCBN8aUmFXHStWzLTrrfS0NyPAwqnCaoOCSI+o/zu/BjOHBWnV79BwAAAAAAXy0r/e17cv4/I4siM5ZUjaftSacFAAAAAAAuUPqX/4WkmUl6i2Jx/g8AAAAAwNfGSq+xs0QkJ7eyXu9KqIG/BJgbf4oAAAAAAOCc0r//30yaXNK7Jdbw838AAAAAAPDl+eake+z/1Ol0OsmUqDFr/fiLhOGM9a6x/ndr10mmOrtXsuWufLrGuDpvXeuuJG1Wp7vvXL1gde9+eXgTzJ+7zfaoe/1bF5CAfCe3s5jbW1m71ZuTjZKrGk/n3cB7XBDHuTYV6/X4v693/ifp5n/r169Zsr3TbuVf/Lu9lebyLlnLu93uDRSP3UdxSC7/kcUsZnHwFs+kF2J0x81l49qH2/+vu70hpv7AmO9lKYtZymVt7uj2zyVjFvKPe9vxydZnWcyKyLm2/L3cyWLuLN/JmgFZFPMn/Qy6+6LYv/+nzrIvTpFFaVQWpXNmAQCTsj2iClnHC/8ZjnLjqe7vZTmLWZ5PD6zT8wOO6PaoI7p9zrr+w7FnIA2usYV03O8Pxy2k435IFvhw4riRV7Rk7s2vnc7uG7m+t39wf2d382XrZet1sVhatR/Y9sOizGzvTLfspGm3bGoPAGCA0c/YGRlhPRhxVv2Xw68U5OWFyG+dzpaspFcbpN84GLjWXN/XEFZGnLXm+p7wsjLirC7X96CX08eWxvCTAABgfJZG1OHT1P+VEefdR2v58LPj/loOAAA+Dx1elVz8fysMTeN5oVwuOPGaVmHgPlWhqdS0Mn6sQ3fN8WtaNcIgDtzASzrPTEVHKmo2GkEYq2oQqkYQmfX0ye+q++j3SNcdPzZu1PC0E2nlBn7suLGqmMhVjeY/PROt6TBdOGpo11SN68Qm8FUUNENX55WKtO4LNBXtx6Zqkq6vGqGpO+GGehZ4zbpWFR25oWnEQbbC3ljGrwZhPV1tftI7GwCAS2Jv/+DVZrvdevsZO5PeRgAAcBRVGgAAAAAAAAAAAAAAAAAAAACAy28c1/99eZ3Zy5HGpDtTlyONvk7vptOXJZ+vuDPhAxOAz+73AAAA//9WZlcd") r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c110000", @ANYRES16=r6, @ANYBLOB="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"], 0x18c}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x7f) setsockopt$inet_int(r7, 0x0, 0x16, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002000)={0x1, 0x58, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[@ANYRES8=r8, @ANYRESDEC=r0, @ANYRES8=r5], 0x3c}, 0x1, 0x0, 0x0, 0x80080}, 0x40000) r10 = socket(0x2, 0x80805, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r10, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) sendmsg$inet(r7, &(0x7f0000002080)={0xffffffffffffffff, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000300)="83ce7bc2c271ef04", 0x8}, {&(0x7f00000003c0)="8aa0239ce8c2c772cea201520c1f0e5fcd48dcd0133f98faf62a11a9fdf69cdefed67c06268b8fac252d418294c8f8299e9515a4e620c043a8a456a74833a490f5c41a979fc685da3e7397db940f429f88338099edd26c2250c847621d7046b2bd254a60034b5992b34f7c75ff3a182a67ebd3ba9b", 0x75}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="67c1037faa9d5a7f02f7662c4270ecd69cfda99360b67a474e59bb51329f43c6d836bebbe3fd27482e6dd734c7d78ca375be7e50b7df0b7a5bb35f2619dba38b5e386f8e2816b11353231637d63730ec34ddc88219098317863e228e44ee93ab814c12d130b3ce7b2e83e40f198187991e22fc9c8431c748e1f54fe8ef5904963ddd219c4a8ebeb7a872957905f00d94528d43a27626c688b980d42eb924fd5da637df5e0e8a2c2e776c501d67e782da8a1ee7d8889280ba2fec605968158830d1ade98a2481275274e44f01f7e258fb5cba188cc1e4aefd980adc913c8a478d74b7199570", 0xe5}, {&(0x7f00000021c0)="08a736086ab393d966ad5e3f7273c9c9512736d1a9e94543c67ff53e8a03522583cafd26fcae1f74836d3ab5526402e37dce37ffb4c59a1572e4a2615853bc824eb55b93874b87ebbde5e65a44ded7b7d82c2e1349e470136525ad4df1cb719c4d8bbbc1ebc1ecda222408247e35bc8ee2beb3324c9a13ed669b079a73387b7d306419e61cf4eaa66213f2e60d9a7efbb5ea989b773ad379c9b4f4d1ae87f620ebd569b1766002091b382c477671a39bf79544dbe31185918a90ff71", 0xbc}, {&(0x7f0000001c80)="83e6570942d993f1bdeb6aff1f3007ad98b8aa956e712c2f9f6d364f00a18f4d3f35a7b90e7f54d399cbe6f4a7f855b7ca5abd2e85144c4c2bea6968aada3e8fada29832a1076dd1cca455262c836864cd67", 0x52}, {&(0x7f0000001d00)="f06afd7c7e7814e8f691aa41f98f164117ac9b3244521b7b13a34b2090b897c3ae9c8ba36a5b15f9a57439fdbbd494739bd3084683ffc3d48b5144e72b1e13bcea27beb4f19601ad8282728e43e8f13bcd3210618b532acaebdcd5364f7afd9b49bf7784c089e60ca429d3160de5b5195f8f0b00c40398b02ed4eff5c57fbdd4384f932e6c3a4ab0a2f098a543e45770cf3e115f1d3f7273216566029b4688c8d8903ca6957a719bd59f8854ae4ab95b12ba49b57ebe6dc7f41330d59b6d962bd01d8184686db611f061ba7b14e72e797e8baeb6398b594b9c26c11488179d09f6", 0xe1}, {&(0x7f0000001e00)="3008c4154342e47681022fc4fe193d5ac03cf6ab4c506556365c1907d0c191cf2a4a8d068a91f290fbde0882fe585280560997fcc17e242afb287b769b80c1236316ff050637257273059ce7c5a57ee49fc7162e856658e8fa53de7105d85d50d3f8b7dc6afbabd4a234c54ac455da518d584460edf5f53c589510270c761c55a452d31f0876df285bd244fac1466d96f8433f3870a60d51e545e46adef9a47de46764f104ea573dab20124520bf3a501353948e8f7aa870d272f7a15440517785ca8c633e9301b48d5608738ac46b5ecb9e9fefd1912d6b", 0xd8}], 0x8, &(0x7f0000002040)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @empty}}}], 0x38}, 0x20000010) kernel console output (not intermixed with test programs): =process permissive=1 [ 18.682655][ T28] audit: type=1400 audit(1775136720.768:61): avc: denied { siginh } for pid=3187 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.174261][ T28] audit: type=1400 audit(1775136722.268:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.196327][ T28] audit: type=1400 audit(1775136722.268:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.219278][ T28] audit: type=1400 audit(1775136722.268:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.242307][ T28] audit: type=1400 audit(1775136722.268:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.265497][ T28] audit: type=1400 audit(1775136722.278:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. [ 26.531596][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 26.531613][ T28] audit: type=1400 audit(1775136728.628:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.561321][ T28] audit: type=1400 audit(1775136728.658:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.562063][ T3299] cgroup: Unknown subsys name 'net' [ 26.589038][ T28] audit: type=1400 audit(1775136728.688:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.745603][ T3299] cgroup: Unknown subsys name 'cpuset' [ 26.753060][ T3299] cgroup: Unknown subsys name 'rlimit' [ 26.881953][ T28] audit: type=1400 audit(1775136728.978:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.905329][ T28] audit: type=1400 audit(1775136728.978:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.932987][ T28] audit: type=1400 audit(1775136728.978:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.953637][ T28] audit: type=1400 audit(1775136728.978:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.974066][ T28] audit: type=1400 audit(1775136729.008:77): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.004904][ T28] audit: type=1400 audit(1775136729.008:78): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.016091][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.028268][ T28] audit: type=1400 audit(1775136729.028:79): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.064607][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.210721][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.233574][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 28.314762][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 28.333694][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 28.342859][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.349972][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.357142][ T3317] bridge_slave_0: entered allmulticast mode [ 28.363477][ T3317] bridge_slave_0: entered promiscuous mode [ 28.374780][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.381993][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.389280][ T3311] bridge_slave_0: entered allmulticast mode [ 28.395908][ T3311] bridge_slave_0: entered promiscuous mode [ 28.410000][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.417120][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.424233][ T3317] bridge_slave_1: entered allmulticast mode [ 28.430639][ T3317] bridge_slave_1: entered promiscuous mode [ 28.445495][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.452578][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.459781][ T3311] bridge_slave_1: entered allmulticast mode [ 28.466275][ T3311] bridge_slave_1: entered promiscuous mode [ 28.488523][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.506464][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.516230][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.543330][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.571118][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.580885][ T3317] team0: Port device team_slave_0 added [ 28.607621][ T3317] team0: Port device team_slave_1 added [ 28.620214][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.627321][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.634550][ T3310] bridge_slave_0: entered allmulticast mode [ 28.641113][ T3310] bridge_slave_0: entered promiscuous mode [ 28.647556][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.654612][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.662084][ T3318] bridge_slave_0: entered allmulticast mode [ 28.668614][ T3318] bridge_slave_0: entered promiscuous mode [ 28.679973][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.687069][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.694225][ T3318] bridge_slave_1: entered allmulticast mode [ 28.700805][ T3318] bridge_slave_1: entered promiscuous mode [ 28.707816][ T3311] team0: Port device team_slave_0 added [ 28.722454][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.729701][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.736899][ T3310] bridge_slave_1: entered allmulticast mode [ 28.743310][ T3310] bridge_slave_1: entered promiscuous mode [ 28.759264][ T3311] team0: Port device team_slave_1 added [ 28.775276][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.784621][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.791687][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.817651][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.837578][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.856702][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.863672][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.890024][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.902061][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.912421][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.926175][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.933423][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.940767][ T3315] bridge_slave_0: entered allmulticast mode [ 28.947168][ T3315] bridge_slave_0: entered promiscuous mode [ 28.964601][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.971634][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.997673][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.009112][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.016171][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.042280][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.053046][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.060248][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.067478][ T3315] bridge_slave_1: entered allmulticast mode [ 29.074147][ T3315] bridge_slave_1: entered promiscuous mode [ 29.081068][ T3318] team0: Port device team_slave_0 added [ 29.087858][ T3318] team0: Port device team_slave_1 added [ 29.120160][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.130127][ T3310] team0: Port device team_slave_0 added [ 29.137196][ T3310] team0: Port device team_slave_1 added [ 29.147491][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.154467][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.180865][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.196899][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.219617][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.226603][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.252549][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.283840][ T3311] hsr_slave_0: entered promiscuous mode [ 29.289840][ T3311] hsr_slave_1: entered promiscuous mode [ 29.300687][ T3317] hsr_slave_0: entered promiscuous mode [ 29.306732][ T3317] hsr_slave_1: entered promiscuous mode [ 29.312844][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 29.318601][ T3317] Cannot create hsr debugfs directory [ 29.325197][ T3315] team0: Port device team_slave_0 added [ 29.331587][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.338655][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.364694][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.382758][ T3315] team0: Port device team_slave_1 added [ 29.398667][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.405787][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.432154][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.470462][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.477441][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.503639][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.516523][ T3318] hsr_slave_0: entered promiscuous mode [ 29.522470][ T3318] hsr_slave_1: entered promiscuous mode [ 29.528482][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 29.534287][ T3318] Cannot create hsr debugfs directory [ 29.548288][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.555303][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.581457][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.620633][ T3310] hsr_slave_0: entered promiscuous mode [ 29.626953][ T3310] hsr_slave_1: entered promiscuous mode [ 29.632809][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 29.638618][ T3310] Cannot create hsr debugfs directory [ 29.706527][ T3315] hsr_slave_0: entered promiscuous mode [ 29.712593][ T3315] hsr_slave_1: entered promiscuous mode [ 29.718566][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 29.724328][ T3315] Cannot create hsr debugfs directory [ 29.820858][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.843425][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.854291][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.874826][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.892097][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.900791][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.914001][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.923085][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.957279][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.967285][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.976130][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.984830][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.016952][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.035810][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.056311][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.065341][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.086201][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.099209][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.109402][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.119628][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.129020][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.148970][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.167426][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.174574][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.187320][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.211526][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.223064][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.230206][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.261363][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.269443][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.282331][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.305494][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.312680][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.321980][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.329183][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.338852][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.345998][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.357582][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.369449][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.376629][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.408813][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.421830][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.447087][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.454193][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.474078][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.485871][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.493040][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.502648][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.512058][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.519221][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.532616][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.539721][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.582985][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.609960][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.621160][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.688958][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.746520][ T3311] veth0_vlan: entered promiscuous mode [ 30.759363][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.783066][ T3311] veth1_vlan: entered promiscuous mode [ 30.799846][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.851850][ T3311] veth0_macvtap: entered promiscuous mode [ 30.883264][ T3310] veth0_vlan: entered promiscuous mode [ 30.903955][ T3310] veth1_vlan: entered promiscuous mode [ 30.910796][ T3311] veth1_macvtap: entered promiscuous mode [ 30.928221][ T3317] veth0_vlan: entered promiscuous mode [ 30.943594][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.954053][ T3317] veth1_vlan: entered promiscuous mode [ 30.971305][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.994281][ T3317] veth0_macvtap: entered promiscuous mode [ 31.008076][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.021759][ T3317] veth1_macvtap: entered promiscuous mode [ 31.031845][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.044597][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.054169][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.071624][ T3310] veth0_macvtap: entered promiscuous mode [ 31.080528][ T3315] veth0_vlan: entered promiscuous mode [ 31.088029][ T3310] veth1_macvtap: entered promiscuous mode [ 31.103006][ T3315] veth1_vlan: entered promiscuous mode [ 31.116464][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.125958][ T3318] veth0_vlan: entered promiscuous mode [ 31.136517][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.149732][ T3315] veth0_macvtap: entered promiscuous mode [ 31.159747][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.161930][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.184055][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.194100][ T3318] veth1_vlan: entered promiscuous mode [ 31.205117][ T310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.214271][ T3315] veth1_macvtap: entered promiscuous mode [ 31.239766][ T3479] loop1: detected capacity change from 0 to 128 [ 31.247890][ T310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.267772][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.276687][ T3318] veth0_macvtap: entered promiscuous mode [ 31.297749][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.312755][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.327767][ T3318] veth1_macvtap: entered promiscuous mode [ 31.345117][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.386314][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.395115][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.403926][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.420560][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.452484][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.462798][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.540605][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 31.540635][ T28] audit: type=1400 audit(1775136733.628:106): avc: denied { prog_load } for pid=3478 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.641779][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.650761][ T3487] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 31.718323][ T3484] veth0_virt_wifi: entered allmulticast mode [ 31.738305][ T28] audit: type=1400 audit(1775136733.628:107): avc: denied { bpf } for pid=3478 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.970987][ T3484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.442711][ T3484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.463039][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.728251][ T28] audit: type=1400 audit(1775136733.668:108): avc: denied { read } for pid=3483 comm="syz.0.1" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.751218][ T28] audit: type=1400 audit(1775136733.668:109): avc: denied { open } for pid=3483 comm="syz.0.1" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.767211][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.822364][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.100186][ T3484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.166281][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.239971][ T3499] Zero length message leads to an empty skb [ 33.254775][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.295706][ T3501] veth0_virt_wifi: entered allmulticast mode [ 33.312261][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.358048][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.493347][ T3399] IPVS: starting estimator thread 0... [ 33.537441][ T3501] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.551873][ T28] audit: type=1400 audit(1775136733.758:110): avc: denied { create } for pid=3478 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.623689][ T3505] IPVS: using max 2544 ests per chain, 127200 per kthread [ 33.726831][ T28] audit: type=1400 audit(1775136733.758:111): avc: denied { ioctl } for pid=3478 comm="syz.1.2" path="socket:[3907]" dev="sockfs" ino=3907 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.839025][ T3484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.904160][ T28] audit: type=1400 audit(1775136733.788:112): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.130449][ T3513] loop1: detected capacity change from 0 to 512 [ 34.137666][ T3513] ======================================================= [ 34.137666][ T3513] WARNING: The mand mount option has been deprecated and [ 34.137666][ T3513] and is ignored by this kernel. Remove the mand [ 34.137666][ T3513] option from the mount to silence this warning. [ 34.137666][ T3513] ======================================================= [ 34.173599][ T3513] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.186718][ T3513] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.215322][ T3513] EXT4-fs (loop1): 1 truncate cleaned up [ 34.237463][ T3513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.323712][ T28] audit: type=1400 audit(1775136733.788:113): avc: denied { create } for pid=3488 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.404270][ T28] audit: type=1400 audit(1775136733.788:114): avc: denied { setopt } for pid=3488 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.436215][ T28] audit: type=1400 audit(1775136733.798:115): avc: denied { tracepoint } for pid=3488 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.520189][ T3501] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.564082][ T3519] loop2: detected capacity change from 0 to 8192 [ 34.785910][ T3513] syz.1.7 (3513) used greatest stack depth: 9912 bytes left [ 34.817325][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.833480][ T3525] loop2: detected capacity change from 0 to 512 [ 34.841411][ T3525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.877974][ T3525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.891486][ T3525] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.959314][ T3536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.969426][ T3536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.979049][ T3536] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.11: Failed to acquire dquot type 1 [ 35.409337][ T3534] SELinux: policydb version -303992589 does not match my version range 15-35 [ 35.451891][ T3534] SELinux: failed to load policy [ 38.217852][ T3484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.249149][ T3525] syz.2.11 (3525) used greatest stack depth: 9336 bytes left [ 38.271724][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.538367][ T3501] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.615535][ T3557] loop3: detected capacity change from 0 to 512 [ 38.625212][ T3557] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.639652][ T3557] EXT4-fs (loop3): 1 truncate cleaned up [ 38.646332][ T3557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.789475][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 38.789493][ T28] audit: type=1400 audit(1775136740.888:154): avc: denied { execute } for pid=3560 comm="syz.1.16" dev="hugetlbfs" ino=3973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 38.817844][ T3561] process 'syz.1.16' launched '/dev/fd/3' with NULL argv: empty string added [ 38.855470][ T28] audit: type=1400 audit(1775136740.948:155): avc: denied { write } for pid=3562 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.884386][ T28] audit: type=1400 audit(1775136740.978:156): avc: denied { nlmsg_write } for pid=3562 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 38.905211][ T28] audit: type=1400 audit(1775136740.978:157): avc: denied { audit_write } for pid=3562 comm="syz.2.15" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.926336][ T28] audit: type=1107 audit(1775136740.978:158): pid=3562 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 38.939674][ T28] audit: type=1400 audit(1775136740.978:159): avc: denied { execute_no_trans } for pid=3560 comm="syz.1.16" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=3973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 38.978351][ T28] audit: type=1400 audit(1775136740.978:160): avc: denied { name_bind } for pid=3560 comm="syz.1.16" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 39.021561][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.050373][ T3567] loop3: detected capacity change from 0 to 128 [ 39.056123][ T3568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 39.056768][ T28] audit: type=1400 audit(1775136741.148:161): avc: denied { create } for pid=3565 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.085180][ T28] audit: type=1400 audit(1775136741.158:162): avc: denied { ioctl } for pid=3565 comm="syz.2.18" path="socket:[3994]" dev="sockfs" ino=3994 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.111827][ T28] audit: type=1400 audit(1775136741.158:163): avc: denied { setopt } for pid=3565 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.139442][ T3484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.198632][ T3501] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.250296][ T408] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.260903][ T408] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.272514][ T408] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.285856][ T408] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.339521][ T55] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.352845][ T3570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 39.405109][ T55] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.464253][ T55] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.549314][ T55] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.633084][ T3574] loop2: detected capacity change from 0 to 128 [ 39.680623][ T3390] IPVS: starting estimator thread 0... [ 39.918447][ T3578] IPVS: using max 2592 ests per chain, 129600 per kthread [ 39.946833][ T3582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 40.119831][ T3587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 40.207034][ T3582] xt_hashlimit: size too large, truncated to 1048576 [ 40.749002][ T3610] loop1: detected capacity change from 0 to 164 [ 40.777905][ T3610] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 40.809664][ T3610] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 40.834466][ T3610] Symlink component flag not implemented [ 40.848613][ T3610] Symlink component flag not implemented [ 40.859492][ T3606] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3606 comm=syz.2.29 [ 40.875275][ T3610] Symlink component flag not implemented (7) [ 40.899383][ T3610] Symlink component flag not implemented (116) [ 40.900414][ T3616] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 40.945026][ T3616] rock: directory entry would overflow storage [ 40.947187][ T3593] loop4: detected capacity change from 0 to 8192 [ 40.951420][ T3616] rock: sig=0x4f50, size=4, remaining=3 [ 40.951437][ T3616] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 40.961410][ T3618] loop0: detected capacity change from 0 to 4096 [ 41.012799][ T3618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.063897][ T3623] loop2: detected capacity change from 0 to 128 [ 41.317708][ T3631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 41.436846][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.835963][ T3636] loop0: detected capacity change from 0 to 128 [ 42.172210][ T3640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 42.669815][ T3575] syz.4.21 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 42.696874][ T3575] CPU: 1 UID: 0 PID: 3575 Comm: syz.4.21 Not tainted syzkaller #0 PREEMPT(full) [ 42.696975][ T3575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 42.696988][ T3575] Call Trace: [ 42.696996][ T3575] [ 42.697006][ T3575] __dump_stack+0x1d/0x30 [ 42.697036][ T3575] dump_stack_lvl+0x95/0xd0 [ 42.697080][ T3575] dump_stack+0x15/0x1b [ 42.697104][ T3575] dump_header+0x80/0x240 [ 42.697129][ T3575] oom_kill_process+0x295/0x350 [ 42.697155][ T3575] out_of_memory+0x97d/0xb80 [ 42.697189][ T3575] try_charge_memcg+0x62e/0xa10 [ 42.697231][ T3575] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 42.697282][ T3575] __swap_cache_prepare_and_add+0x67/0x460 [ 42.697317][ T3575] ? alloc_pages_mpol+0x217/0x260 [ 42.697388][ T3575] swap_cache_alloc_folio+0xa2/0x120 [ 42.697423][ T3575] swap_cluster_readahead+0x26e/0x3d0 [ 42.697463][ T3575] swapin_readahead+0xde/0x840 [ 42.697538][ T3575] ? _raw_spin_unlock+0x9/0x30 [ 42.697599][ T3575] ? swap_put_entries_cluster+0x385/0x3a0 [ 42.697652][ T3575] ? swap_put_entries_cluster+0x101/0x3a0 [ 42.697688][ T3575] ? __rcu_read_unlock+0x4e/0x70 [ 42.697782][ T3575] ? swap_cache_get_folio+0x26f/0x280 [ 42.697865][ T3575] do_swap_page+0x2fe/0x21e0 [ 42.697961][ T3575] ? css_rstat_updated+0xbb/0x280 [ 42.698057][ T3575] ? __rcu_read_lock+0x36/0x50 [ 42.698080][ T3575] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 42.698113][ T3575] handle_mm_fault+0xb46/0x3020 [ 42.698197][ T3575] ? vma_start_read+0x1c7/0x2c0 [ 42.698230][ T3575] do_user_addr_fault+0x62f/0x1050 [ 42.698268][ T3575] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 42.698296][ T3575] ? trace_page_fault_user+0x1f/0xe0 [ 42.698409][ T3575] exc_page_fault+0x62/0xa0 [ 42.698433][ T3575] asm_exc_page_fault+0x26/0x30 [ 42.698457][ T3575] RIP: 0033:0x7fb1a3be0e97 [ 42.698477][ T3575] Code: 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c3 c1 eb 04 31 c3 69 db 2d eb d4 27 89 d8 c1 e8 0f 31 c3 81 e3 ff 0f 00 00 48 31 d3 <80> 3d aa 11 3a 00 00 0f 84 1c 01 00 00 4c 89 f6 48 8b 0d 8a 11 3a [ 42.698495][ T3575] RSP: 002b:00007ffd54884290 EFLAGS: 00010286 [ 42.698516][ T3575] RAX: 000000000001f676 RBX: ffffffff819bedaf RCX: 0000001b33f0f0d8 [ 42.698613][ T3575] RDX: ffffffff819becf2 RSI: 0000000000000008 RDI: 00007fb1a376f008 [ 42.698627][ T3575] RBP: 0000000000000001 R08: 00007fb1a3f70000 R09: 00007fb1a3f72000 [ 42.698639][ T3575] R10: 0000000084721273 R11: 000000000000000b R12: 00007fb1a3f86038 [ 42.698657][ T3575] R13: 0000000000000001 R14: ffffffff819becf2 R15: 00007fb1a4ab5720 [ 42.698671][ T3575] ? fdget+0x12/0x110 [ 42.698697][ T3575] ? fdget+0xcf/0x110 [ 42.698722][ T3575] ? fdget+0x12/0x110 [ 42.698802][ T3575] [ 42.700353][ T3575] memory: usage 307200kB, limit 307200kB, failcnt 780 [ 42.965740][ T3575] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0 [ 42.973660][ T3575] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 42.981023][ T3575] Memory cgroup stats for /syz4: [ 42.981268][ T3575] cache 0 [ 42.989194][ T3575] rss 4096 [ 42.992220][ T3575] shmem 0 [ 42.995201][ T3575] mapped_file 0 [ 42.998700][ T3575] dirty 0 [ 43.001639][ T3575] writeback 4096 [ 43.005681][ T3575] workingset_refault_anon 110 [ 43.010381][ T3575] workingset_refault_file 775 [ 43.015074][ T3575] swap 712704 [ 43.018369][ T3575] swapcached 1175552 [ 43.022343][ T3575] pgpgin 4511 [ 43.025678][ T3575] pgpgout 4508 [ 43.029047][ T3575] pgfault 1587 [ 43.032424][ T3575] pgmajfault 80 [ 43.035995][ T3575] inactive_anon 4096 [ 43.039948][ T3575] active_anon 8192 [ 43.043675][ T3575] inactive_file 0 [ 43.050350][ T3575] active_file 0 [ 43.053845][ T3575] unevictable 0 [ 43.057506][ T3575] hierarchical_memory_limit 314572800 [ 43.062979][ T3575] hierarchical_memsw_limit 9223372036854771712 [ 43.069686][ T3575] total_cache 0 [ 43.073312][ T3575] total_rss 4096 [ 43.083257][ T3575] total_shmem 0 [ 43.090113][ T3575] total_mapped_file 0 [ 43.094114][ T3575] total_dirty 0 [ 43.101957][ T3575] total_writeback 4096 [ 43.107159][ T3575] total_workingset_refault_anon 110 [ 43.113701][ T3575] total_workingset_refault_file 775 [ 43.119485][ T3575] total_swap 712704 [ 43.123378][ T3575] total_swapcached 1175552 [ 43.134987][ T3575] total_pgpgin 4511 [ 43.138834][ T3575] total_pgpgout 4508 [ 43.142732][ T3575] total_pgfault 1587 [ 43.148241][ T3575] total_pgmajfault 80 [ 43.155038][ T3575] total_inactive_anon 4096 [ 43.159521][ T3575] total_active_anon 8192 [ 43.163776][ T3575] total_inactive_file 0 [ 43.180608][ T3575] total_active_file 0 [ 43.188419][ T3575] total_unevictable 0 [ 43.192432][ T3575] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.21,pid=3575,uid=0 [ 43.210831][ T3649] loop2: detected capacity change from 0 to 128 [ 43.226547][ T3575] Memory cgroup out of memory: Killed process 3575 (syz.4.21) total-vm:100508kB, anon-rss:1228kB, file-rss:26496kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 43.275789][ T3647] loop0: detected capacity change from 0 to 8192 [ 43.397358][ T3582] syz.4.21 (3582) used greatest stack depth: 8776 bytes left [ 43.428374][ T3576] syz.4.21 (3576) used greatest stack depth: 6560 bytes left [ 43.598465][ T3656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 44.112845][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 44.112862][ T28] audit: type=1400 audit(1775136746.208:194): avc: denied { name_bind } for pid=3665 comm="syz.4.49" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.135340][ T3666] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.151187][ T28] audit: type=1400 audit(1775136746.208:195): avc: denied { node_bind } for pid=3665 comm="syz.4.49" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 44.191998][ T28] audit: type=1400 audit(1775136746.278:196): avc: denied { bind } for pid=3665 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.224969][ T28] audit: type=1400 audit(1775136746.278:197): avc: denied { name_bind } for pid=3665 comm="syz.4.49" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 44.247082][ T3671] loop3: detected capacity change from 0 to 128 [ 44.262612][ T28] audit: type=1400 audit(1775136746.278:198): avc: denied { node_bind } for pid=3665 comm="syz.4.49" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 44.397479][ T3674] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.51'. [ 44.420918][ T3674] netlink: zone id is out of range [ 44.432702][ T28] audit: type=1400 audit(1775136746.318:199): avc: denied { perfmon } for pid=3667 comm="syz.0.48" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.453964][ T28] audit: type=1400 audit(1775136746.388:200): avc: denied { bpf } for pid=3667 comm="syz.0.48" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.474695][ T28] audit: type=1400 audit(1775136746.438:201): avc: denied { ioctl } for pid=3667 comm="syz.0.48" path="socket:[5508]" dev="sockfs" ino=5508 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.499740][ T28] audit: type=1400 audit(1775136746.598:202): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.559098][ T28] audit: type=1400 audit(1775136746.628:203): avc: denied { module_request } for pid=3677 comm="syz.2.53" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.592077][ T3681] __vm_enough_memory: pid: 3681, comm: syz.2.53, bytes: 4503599627366400 not enough memory for the allocation [ 44.610814][ T3682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 44.651252][ T3678] loop4: detected capacity change from 0 to 1024 [ 44.749351][ T3678] EXT4-fs: Ignoring removed bh option [ 44.850360][ T3678] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 44.965216][ T3678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.982068][ T3686] 9p: Bad value for 'rfdno' [ 45.082119][ T3686] ieee802154 phy0 wpan0: encryption failed: -22 [ 45.093735][ T3678] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.52: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 45.134040][ T3678] EXT4-fs (loop4): Remounting filesystem read-only [ 45.261217][ T3695] netlink: 32 bytes leftover after parsing attributes in process `syz.1.57'. [ 45.338768][ T3699] loop3: detected capacity change from 0 to 8192 [ 46.484163][ T3709] loop3: detected capacity change from 0 to 512 [ 46.551627][ T3709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.613231][ T3710] loop0: detected capacity change from 0 to 1764 [ 46.631895][ T3709] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.720763][ T3710] iso9660: Unknown parameter 'utF8' [ 47.158136][ T3716] loop2: detected capacity change from 0 to 128 [ 47.547337][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.597390][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.751401][ T3725] FAULT_INJECTION: forcing a failure. [ 47.751401][ T3725] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.792883][ T3723] loop3: detected capacity change from 0 to 128 [ 47.806828][ C1] hrtimer: interrupt took 56129 ns [ 47.807880][ T3723] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.812513][ T3725] CPU: 1 UID: 0 PID: 3725 Comm: syz.4.66 Not tainted syzkaller #0 PREEMPT(full) [ 47.812540][ T3725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.812553][ T3725] Call Trace: [ 47.812559][ T3725] [ 47.812604][ T3725] __dump_stack+0x1d/0x30 [ 47.812632][ T3725] dump_stack_lvl+0x95/0xd0 [ 47.812706][ T3725] dump_stack+0x15/0x1b [ 47.812777][ T3725] should_fail_ex+0x263/0x280 [ 47.812805][ T3725] should_fail+0xb/0x20 [ 47.812894][ T3725] should_fail_usercopy+0x1a/0x20 [ 47.812922][ T3725] _copy_from_user+0x1c/0xb0 [ 47.813030][ T3725] copy_from_sockptr+0x5e/0x90 [ 47.813062][ T3725] packet_setsockopt+0x7c1/0xfd0 [ 47.813091][ T3725] ? __pfx_packet_setsockopt+0x10/0x10 [ 47.813195][ T3725] __sys_setsockopt+0x184/0x200 [ 47.813228][ T3725] __x64_sys_setsockopt+0x64/0x80 [ 47.813355][ T3725] x64_sys_call+0x2327/0x3020 [ 47.813381][ T3725] do_syscall_64+0x12c/0x370 [ 47.813408][ T3725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.813499][ T3725] RIP: 0033:0x7fb1a3d0c819 [ 47.813516][ T3725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.813535][ T3725] RSP: 002b:00007fb1a2767028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 47.813557][ T3725] RAX: ffffffffffffffda RBX: 00007fb1a3f85fa0 RCX: 00007fb1a3d0c819 [ 47.813572][ T3725] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 47.813604][ T3725] RBP: 00007fb1a2767090 R08: 000000000000001c R09: 0000000000000000 [ 47.813674][ T3725] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 47.813688][ T3725] R13: 00007fb1a3f86038 R14: 00007fb1a3f85fa0 R15: 00007ffd548841f8 [ 47.813707][ T3725] [ 47.936523][ T3739] loop1: detected capacity change from 0 to 128 [ 47.978869][ T3723] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.035373][ T3739] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.058337][ T3742] capability: warning: `syz.2.71' uses 32-bit capabilities (legacy support in use) [ 48.086755][ T3743] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 48.093332][ T3743] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 48.106185][ T3739] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.116541][ T3743] vhci_hcd vhci_hcd.0: Device attached [ 48.143850][ T3743] team_slave_0: entered promiscuous mode [ 48.149604][ T3743] team_slave_1: entered promiscuous mode [ 48.164980][ T3743] macvtap1: entered promiscuous mode [ 48.171421][ T70] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.180555][ T3743] team0: entered promiscuous mode [ 48.181967][ T3743] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 48.227718][ T3743] team0: Device macvtap1 is already an upper device of the team interface [ 48.247800][ T3748] ieee802154 phy0 wpan0: encryption failed: -22 [ 48.254172][ T3743] team0: left promiscuous mode [ 48.268131][ T3748] syz.1.73 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.285208][ T3743] team_slave_0: left promiscuous mode [ 48.290655][ T3743] team_slave_1: left promiscuous mode [ 48.390890][ T10] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 48.572639][ T3744] vhci_hcd: connection reset by peer [ 48.589888][ T408] vhci_hcd vhci_hcd.4: stop threads [ 48.603149][ T408] vhci_hcd vhci_hcd.4: release socket [ 48.621378][ T408] vhci_hcd vhci_hcd.4: disconnect device [ 50.463397][ T3769] IPVS: sh: FWM 3 0x00000003 - no destination available [ 50.939572][ T3406] IPVS: starting estimator thread 0... [ 51.031878][ T3772] loop2: detected capacity change from 0 to 128 [ 51.055126][ T3770] IPVS: using max 2496 ests per chain, 124800 per kthread [ 51.078933][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 51.078952][ T28] audit: type=1400 audit(1775136753.178:217): avc: denied { create } for pid=3773 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 51.347048][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.385228][ T3518] IPVS: stop unused estimator thread 0... [ 51.473935][ T3781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 51.521034][ T3419] IPVS: starting estimator thread 0... [ 51.765232][ T3782] IPVS: using max 2544 ests per chain, 127200 per kthread [ 52.031913][ T3788] loop1: detected capacity change from 0 to 4096 [ 52.085601][ T3788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.125804][ T28] audit: type=1400 audit(1775136754.228:218): avc: denied { getopt } for pid=3791 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.229597][ T3518] IPVS: stop unused estimator thread 0... [ 52.244311][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.304162][ T3797] bridge0: entered promiscuous mode [ 52.310742][ T28] audit: type=1400 audit(1775136754.388:219): avc: denied { relabelfrom } for pid=3795 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 52.339664][ T3797] macvlan2: entered promiscuous mode [ 52.372040][ T28] audit: type=1400 audit(1775136754.388:220): avc: denied { relabelto } for pid=3795 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 52.473461][ T28] audit: type=1400 audit(1775136754.398:221): avc: denied { getopt } for pid=3777 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 52.806008][ T3804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.87'. [ 52.979827][ T28] audit: type=1326 audit(1775136755.078:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a3d0c819 code=0x7ffc0000 [ 53.074922][ T28] audit: type=1326 audit(1775136755.108:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a3d0c819 code=0x7ffc0000 [ 53.205105][ T28] audit: type=1326 audit(1775136755.108:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a3d0c819 code=0x7ffc0000 [ 53.249203][ T3406] IPVS: starting estimator thread 0... [ 53.304928][ T28] audit: type=1326 audit(1775136755.118:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb1a3d0c819 code=0x7ffc0000 [ 53.355654][ T3815] IPVS: using max 2016 ests per chain, 100800 per kthread [ 53.363376][ T3817] FAULT_INJECTION: forcing a failure. [ 53.363376][ T3817] name failslab, interval 1, probability 0, space 0, times 1 [ 53.413680][ T3817] CPU: 0 UID: 0 PID: 3817 Comm: syz.2.90 Not tainted syzkaller #0 PREEMPT(full) [ 53.413713][ T3817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.413726][ T3817] Call Trace: [ 53.413732][ T3817] [ 53.413739][ T3817] __dump_stack+0x1d/0x30 [ 53.413765][ T3817] dump_stack_lvl+0x95/0xd0 [ 53.413852][ T3817] dump_stack+0x15/0x1b [ 53.413873][ T3817] should_fail_ex+0x263/0x280 [ 53.413903][ T3817] should_failslab+0x8c/0xb0 [ 53.413929][ T3817] __kmalloc_noprof+0xb8/0x4e0 [ 53.413980][ T3817] ? io_cache_alloc_new+0x2a/0xb0 [ 53.414018][ T3817] io_cache_alloc_new+0x2a/0xb0 [ 53.414095][ T3817] __io_prep_rw+0x116/0x710 [ 53.414113][ T3817] ? fget+0x35/0x40 [ 53.414137][ T3817] ? io_file_get_normal+0x51/0x190 [ 53.414159][ T3817] io_prep_rwv+0x33/0x260 [ 53.414179][ T3817] ? io_rw_fail+0xa2/0xb0 [ 53.414202][ T3817] ? __pfx_io_rw_fail+0x10/0x10 [ 53.414295][ T3817] io_prep_readv+0x1f/0x30 [ 53.414316][ T3817] io_submit_sqes+0x756/0x1230 [ 53.414348][ T3817] __se_sys_io_uring_enter+0x1c9/0xf50 [ 53.414428][ T3817] ? __fget_files+0x184/0x1c0 [ 53.414501][ T3817] ? mutex_unlock+0x4e/0x90 [ 53.414524][ T3817] ? fput+0x8f/0xc0 [ 53.414564][ T3817] __x64_sys_io_uring_enter+0x78/0x90 [ 53.414590][ T3817] x64_sys_call+0x1e16/0x3020 [ 53.414615][ T3817] do_syscall_64+0x12c/0x370 [ 53.414681][ T3817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.414749][ T3817] RIP: 0033:0x7f074b46c819 [ 53.414764][ T3817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.414781][ T3817] RSP: 002b:00007f0749ec7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 53.414802][ T3817] RAX: ffffffffffffffda RBX: 00007f074b6e5fa0 RCX: 00007f074b46c819 [ 53.414819][ T3817] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 53.414834][ T3817] RBP: 00007f0749ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.414882][ T3817] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 53.414954][ T3817] R13: 00007f074b6e6038 R14: 00007f074b6e5fa0 R15: 00007fff21489a38 [ 53.414974][ T3817] [ 53.643791][ T28] audit: type=1326 audit(1775136755.118:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a3d0c819 code=0x7ffc0000 [ 53.770860][ T3825] xt_CT: You must specify a L4 protocol and not use inversions on it [ 53.785278][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 53.791670][ T3829] loop2: detected capacity change from 0 to 4096 [ 53.868467][ T3829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.973173][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.990176][ T3833] loop3: detected capacity change from 0 to 512 [ 54.160511][ T3841] loop1: detected capacity change from 0 to 1024 [ 54.168698][ T3841] EXT4-fs: Ignoring removed orlov option [ 54.187622][ T3841] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 54.270723][ T3841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.296229][ T3851] IPVS: sh: FWM 3 0x00000003 - no destination available [ 54.303367][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 54.394589][ T3841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 54.462823][ T3853] geneve2: entered promiscuous mode [ 54.478776][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.540500][ T3856] netlink: 'syz.3.104': attribute type 1 has an invalid length. [ 54.680246][ T3864] loop0: detected capacity change from 0 to 512 [ 54.695611][ T3864] EXT4-fs: Ignoring removed nobh option [ 54.712161][ T3864] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.731237][ T3864] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.105: EA inode hash validation failed [ 54.747413][ T3864] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.748654][ T3863] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.760809][ T3864] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.105: corrupted inode contents [ 54.784088][ T3864] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.784327][ T3864] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #15: comm syz.0.105: mark_inode_dirty error [ 54.793678][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 54.793698][ C0] EXT4-fs (loop0): initial error at time 1775136756: ext4_do_update_inode:5602: inode 15 [ 54.793735][ C0] EXT4-fs (loop0): last error at time 1775136756: ext4_do_update_inode:5602: inode 15 [ 54.831539][ T3864] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.834949][ T3864] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.105: corrupted inode contents [ 54.856108][ T3864] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.856370][ T3864] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.105: mark_inode_dirty error [ 54.878145][ T3864] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.878315][ T3864] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.105: mark inode dirty (error -117) [ 54.900034][ T3864] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.902012][ T3864] EXT4-fs warning (device loop0): ext4_evict_inode:285: xattr delete (err -117) [ 54.922829][ T3864] EXT4-fs (loop0): 1 orphan inode deleted [ 54.929252][ T3864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 55.105054][ T3873] loop2: detected capacity change from 0 to 4096 [ 55.165217][ T3873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.279675][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.293699][ T3891] IPVS: sh: FWM 3 0x00000003 - no destination available [ 55.301092][ T10] IPVS: starting estimator thread 0... [ 55.320328][ T3894] loop3: detected capacity change from 0 to 128 [ 55.333759][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.370487][ T3901] loop2: detected capacity change from 0 to 128 [ 55.405005][ T3892] IPVS: using max 2496 ests per chain, 124800 per kthread [ 55.479735][ T3903] loop1: detected capacity change from 0 to 128 [ 55.690154][ T70] IPVS: stop unused estimator thread 0... [ 55.707840][ T3917] FAULT_INJECTION: forcing a failure. [ 55.707840][ T3917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.740307][ T3917] CPU: 1 UID: 0 PID: 3917 Comm: syz.3.116 Not tainted syzkaller #0 PREEMPT(full) [ 55.740342][ T3917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.740356][ T3917] Call Trace: [ 55.740363][ T3917] [ 55.740372][ T3917] __dump_stack+0x1d/0x30 [ 55.740427][ T3917] dump_stack_lvl+0x95/0xd0 [ 55.740454][ T3917] dump_stack+0x15/0x1b [ 55.740477][ T3917] should_fail_ex+0x263/0x280 [ 55.740505][ T3917] should_fail+0xb/0x20 [ 55.740567][ T3917] should_fail_usercopy+0x1a/0x20 [ 55.740600][ T3917] _copy_from_user+0x1c/0xb0 [ 55.740704][ T3917] kstrtouint_from_user+0x69/0xf0 [ 55.740764][ T3917] proc_fail_nth_write+0x50/0x160 [ 55.740799][ T3917] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 55.740833][ T3917] vfs_write+0x269/0x9f0 [ 55.740856][ T3917] ? __rcu_read_unlock+0x4e/0x70 [ 55.740989][ T3917] ? __fget_files+0x184/0x1c0 [ 55.741017][ T3917] ? mutex_lock+0x57/0x90 [ 55.741041][ T3917] ksys_write+0xdc/0x1a0 [ 55.741065][ T3917] __x64_sys_write+0x40/0x50 [ 55.741083][ T3917] x64_sys_call+0x27e1/0x3020 [ 55.741136][ T3917] do_syscall_64+0x12c/0x370 [ 55.741165][ T3917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.741191][ T3917] RIP: 0033:0x7ffbe658d04e [ 55.741210][ T3917] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 55.741255][ T3917] RSP: 002b:00007ffbe4fdcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.741276][ T3917] RAX: ffffffffffffffda RBX: 00007ffbe4fdd6c0 RCX: 00007ffbe658d04e [ 55.741289][ T3917] RDX: 0000000000000001 RSI: 00007ffbe4fdd0a0 RDI: 000000000000000a [ 55.741301][ T3917] RBP: 00007ffbe4fdd090 R08: 0000000000000000 R09: 0000000000000000 [ 55.741316][ T3917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.741331][ T3917] R13: 00007ffbe6846218 R14: 00007ffbe6846180 R15: 00007ffc3b5b7cc8 [ 55.741414][ T3917] [ 55.956024][ T3925] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.970249][ T3925] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.123: bad orphan inode 131083 [ 55.998141][ T3925] loop0: lost filesystem error report for type 5 error -117 [ 55.998682][ T3925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.049327][ T3929] set_capacity_and_notify: 1 callbacks suppressed [ 56.049345][ T3929] loop3: detected capacity change from 0 to 512 [ 56.125934][ T3929] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.176224][ T3929] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.124: bad orphan inode 131083 [ 56.199698][ T3929] loop3: lost filesystem error report for type 5 error -117 [ 56.200376][ T3929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.237743][ T28] kauditd_printk_skb: 202 callbacks suppressed [ 56.237770][ T28] audit: type=1400 audit(1775136758.338:429): avc: denied { remount } for pid=3924 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.392156][ T28] audit: type=1400 audit(1775136758.368:430): avc: denied { ioctl } for pid=3924 comm="syz.0.123" path="/16/bus/bus" dev="loop0" ino=18 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.415866][ T28] audit: type=1400 audit(1775136758.378:431): avc: denied { create } for pid=3924 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.446417][ T3934] FAULT_INJECTION: forcing a failure. [ 56.446417][ T3934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.459641][ T3934] CPU: 0 UID: 0 PID: 3934 Comm: syz.3.124 Not tainted syzkaller #0 PREEMPT(full) [ 56.459670][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 56.459682][ T3934] Call Trace: [ 56.459688][ T3934] [ 56.459696][ T3934] __dump_stack+0x1d/0x30 [ 56.459784][ T3934] dump_stack_lvl+0x95/0xd0 [ 56.459868][ T3934] dump_stack+0x15/0x1b [ 56.459888][ T3934] should_fail_ex+0x263/0x280 [ 56.459916][ T3934] should_fail+0xb/0x20 [ 56.459974][ T3934] should_fail_usercopy+0x1a/0x20 [ 56.460004][ T3934] _copy_to_user+0x20/0xa0 [ 56.460108][ T3934] simple_read_from_buffer+0xb5/0x130 [ 56.460140][ T3934] proc_fail_nth_read+0x10e/0x150 [ 56.460176][ T3934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.460238][ T3934] vfs_read+0x1ab/0x7f0 [ 56.460257][ T3934] ? __rcu_read_unlock+0x4e/0x70 [ 56.460299][ T3934] ? __fget_files+0x184/0x1c0 [ 56.460327][ T3934] ? mutex_lock+0x57/0x90 [ 56.460348][ T3934] ksys_read+0xdc/0x1a0 [ 56.460369][ T3934] __x64_sys_read+0x40/0x50 [ 56.460390][ T3934] x64_sys_call+0x2886/0x3020 [ 56.460444][ T3934] do_syscall_64+0x12c/0x370 [ 56.460473][ T3934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.460575][ T3934] RIP: 0033:0x7ffbe658d04e [ 56.460593][ T3934] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.460613][ T3934] RSP: 002b:00007ffbe4ffdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.460637][ T3934] RAX: ffffffffffffffda RBX: 00007ffbe4ffe6c0 RCX: 00007ffbe658d04e [ 56.460705][ T3934] RDX: 000000000000000f RSI: 00007ffbe4ffe0a0 RDI: 0000000000000009 [ 56.460719][ T3934] RBP: 00007ffbe4ffe090 R08: 0000000000000000 R09: 0000000000000000 [ 56.460734][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.460748][ T3934] R13: 00007ffbe6846128 R14: 00007ffbe6846090 R15: 00007ffc3b5b7cc8 [ 56.460777][ T3934] [ 56.686278][ T3937] loop2: detected capacity change from 0 to 4096 [ 56.697275][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.744568][ T3937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.752288][ T3942] loop4: detected capacity change from 0 to 512 [ 56.783139][ T3942] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.128: bg 0: block 393: padding at end of block bitmap is not set [ 56.816315][ T3944] IPVS: sh: FWM 3 0x00000003 - no destination available [ 56.823369][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 56.842997][ T3942] loop4: lost filesystem error report for type 5 error -117 [ 56.843189][ T3942] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 56.850567][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 56.850588][ C0] EXT4-fs (loop4): initial error at time 1775136758: ext4_validate_block_bitmap:441 [ 56.850627][ C0] EXT4-fs (loop4): last error at time 1775136758: ext4_validate_block_bitmap:441 [ 56.884623][ T3942] loop4: lost filesystem error report for type 5 error -117 [ 56.886017][ T3942] EXT4-fs (loop4): 2 truncates cleaned up [ 56.886595][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.893788][ T3942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.932683][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.949480][ T3947] loop1: detected capacity change from 0 to 512 [ 56.988543][ T3947] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.040164][ T3947] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.129: bad orphan inode 131083 [ 57.067558][ T28] audit: type=1400 audit(1775136759.168:432): avc: denied { read append } for pid=3950 comm="syz.0.130" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.087932][ T3947] loop1: lost filesystem error report for type 5 error -117 [ 57.094909][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 57.105439][ T3947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.108797][ C1] EXT4-fs (loop1): initial error at time 1775136759: ext4_orphan_get:1423 [ 57.129585][ C1] EXT4-fs (loop1): last error at time 1775136759: ext4_orphan_get:1423 [ 57.195476][ T3956] capability: warning: `syz.4.128' uses deprecated v2 capabilities in a way that may be insecure [ 57.350095][ T28] audit: type=1400 audit(1775136759.168:433): avc: denied { open } for pid=3950 comm="syz.0.130" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.045152][ T3954] loop3: detected capacity change from 0 to 2048 [ 58.079697][ T3968] loop0: detected capacity change from 0 to 128 [ 58.089444][ T3954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.711569][ T28] audit: type=1400 audit(1775136759.188:434): avc: denied { ioctl } for pid=3950 comm="syz.0.130" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.736980][ T28] audit: type=1400 audit(1775136759.198:435): avc: denied { write } for pid=3950 comm="syz.0.130" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.100733][ T3954] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.112529][ T28] audit: type=1400 audit(1775136759.278:436): avc: denied { connect } for pid=3940 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.140350][ T28] audit: type=1400 audit(1775136759.288:437): avc: denied { bind } for pid=3940 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.796818][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.190056][ T3972] loop3: detected capacity change from 0 to 2048 [ 60.741077][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.778250][ T3972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.254978][ T3978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 61.562811][ T3972] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.601015][ T3972] FAULT_INJECTION: forcing a failure. [ 61.601015][ T3972] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 61.761031][ T3972] CPU: 0 UID: 0 PID: 3972 Comm: syz.3.135 Not tainted syzkaller #0 PREEMPT(full) [ 61.761064][ T3972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.761079][ T3972] Call Trace: [ 61.761087][ T3972] [ 61.761141][ T3972] __dump_stack+0x1d/0x30 [ 61.761171][ T3972] dump_stack_lvl+0x95/0xd0 [ 61.761197][ T3972] dump_stack+0x15/0x1b [ 61.761247][ T3972] should_fail_ex+0x263/0x280 [ 61.761279][ T3972] should_fail_alloc_page+0xf2/0x100 [ 61.761306][ T3972] __alloc_frozen_pages_noprof+0x108/0x360 [ 61.761388][ T3972] alloc_pages_mpol+0xb3/0x260 [ 61.761420][ T3972] folio_alloc_noprof+0x96/0x150 [ 61.761450][ T3972] filemap_alloc_folio_noprof+0x92/0x220 [ 61.761475][ T3972] __filemap_get_folio_mpol+0x295/0x680 [ 61.761525][ T3972] ext4_da_write_begin+0x39a/0x6c0 [ 61.761557][ T3972] generic_perform_write+0x183/0x490 [ 61.761585][ T3972] ? __mark_inode_dirty+0x49d/0x7d0 [ 61.761625][ T3972] ext4_buffered_write_iter+0x1ee/0x3c0 [ 61.761701][ T3972] ? ext4_file_write_iter+0x100/0xfa0 [ 61.761734][ T3972] ext4_file_write_iter+0x380/0xfa0 [ 61.761755][ T3972] ? kstrtouint_from_user+0xa8/0xf0 [ 61.761833][ T3972] ? selinux_file_permission+0x1f2/0x690 [ 61.761942][ T3972] ? proc_fail_nth_write+0x13b/0x160 [ 61.761978][ T3972] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 61.762044][ T3972] vfs_write+0x5a6/0x9f0 [ 61.762070][ T3972] __x64_sys_pwrite64+0xfd/0x150 [ 61.762093][ T3972] x64_sys_call+0xa2a/0x3020 [ 61.762123][ T3972] do_syscall_64+0x12c/0x370 [ 61.762155][ T3972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.762247][ T3972] RIP: 0033:0x7ffbe65cc819 [ 61.762288][ T3972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.762307][ T3972] RSP: 002b:00007ffbe501f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 61.762331][ T3972] RAX: ffffffffffffffda RBX: 00007ffbe6845fa0 RCX: 00007ffbe65cc819 [ 61.762368][ T3972] RDX: 00000000ffffff07 RSI: 0000200000000140 RDI: 0000000000000004 [ 61.762385][ T3972] RBP: 00007ffbe501f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.762399][ T3972] R10: 0000000008000c61 R11: 0000000000000246 R12: 0000000000000001 [ 61.762414][ T3972] R13: 00007ffbe6846038 R14: 00007ffbe6845fa0 R15: 00007ffc3b5b7cc8 [ 61.762435][ T3972] [ 62.022771][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.052310][ T3985] loop1: detected capacity change from 0 to 128 [ 62.078485][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.249034][ T3989] loop4: detected capacity change from 0 to 2048 [ 62.290793][ T3995] loop3: detected capacity change from 0 to 128 [ 62.320477][ T3989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.339798][ T3998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 62.578539][ T3989] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.154101][ T4007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 63.312003][ T4004] loop0: detected capacity change from 0 to 4096 [ 63.525454][ T28] audit: type=1400 audit(1775136765.408:438): avc: denied { map } for pid=3988 comm="syz.4.139" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.603230][ T28] audit: type=1400 audit(1775136765.418:439): avc: denied { read write } for pid=3988 comm="syz.4.139" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.649260][ T4004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.715268][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.786273][ T4012] loop1: detected capacity change from 0 to 128 [ 63.885424][ T4016] FAULT_INJECTION: forcing a failure. [ 63.885424][ T4016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.955215][ T4016] CPU: 1 UID: 0 PID: 4016 Comm: syz.3.145 Not tainted syzkaller #0 PREEMPT(full) [ 63.955244][ T4016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 63.955311][ T4016] Call Trace: [ 63.955319][ T4016] [ 63.955328][ T4016] __dump_stack+0x1d/0x30 [ 63.955360][ T4016] dump_stack_lvl+0x95/0xd0 [ 63.955387][ T4016] dump_stack+0x15/0x1b [ 63.955407][ T4016] should_fail_ex+0x263/0x280 [ 63.955476][ T4016] should_fail+0xb/0x20 [ 63.955505][ T4016] should_fail_usercopy+0x1a/0x20 [ 63.955549][ T4016] _copy_from_user+0x1c/0xb0 [ 63.955584][ T4016] sctp_getsockopt_paddr_thresholds+0x78/0x4a0 [ 63.955631][ T4016] sctp_getsockopt+0x8d8/0xaa0 [ 63.955705][ T4016] sock_common_getsockopt+0x60/0x70 [ 63.955783][ T4016] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 63.955814][ T4016] do_sock_getsockopt+0x1c4/0x210 [ 63.955923][ T4016] __x64_sys_getsockopt+0x11d/0x1a0 [ 63.955957][ T4016] x64_sys_call+0x2dcf/0x3020 [ 63.955981][ T4016] do_syscall_64+0x12c/0x370 [ 63.956009][ T4016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.956103][ T4016] RIP: 0033:0x7ffbe65cc819 [ 63.956122][ T4016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.956143][ T4016] RSP: 002b:00007ffbe501f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 63.956169][ T4016] RAX: ffffffffffffffda RBX: 00007ffbe6845fa0 RCX: 00007ffbe65cc819 [ 63.956183][ T4016] RDX: 0000000000000025 RSI: 0000000000000084 RDI: 0000000000000003 [ 63.956267][ T4016] RBP: 00007ffbe501f090 R08: 0000200000001040 R09: 0000000000000000 [ 63.956279][ T4016] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.956291][ T4016] R13: 00007ffbe6846038 R14: 00007ffbe6845fa0 R15: 00007ffc3b5b7cc8 [ 63.956310][ T4016] [ 64.205036][ T4020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 64.290448][ T3927] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 64.960070][ T28] audit: type=1400 audit(1775136767.038:440): avc: denied { bind } for pid=4018 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.168594][ T28] audit: type=1400 audit(1775136767.048:441): avc: denied { listen } for pid=4018 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.233413][ T28] audit: type=1400 audit(1775136767.048:442): avc: denied { connect } for pid=4018 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.283595][ T28] audit: type=1400 audit(1775136767.048:443): avc: denied { read } for pid=4018 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.351870][ T28] audit: type=1326 audit(1775136767.368:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe65cc819 code=0x7ffc0000 [ 65.375440][ T28] audit: type=1326 audit(1775136767.368:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe65cc819 code=0x7ffc0000 [ 65.398670][ T28] audit: type=1326 audit(1775136767.368:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe65cc819 code=0x7ffc0000 [ 65.421986][ T28] audit: type=1326 audit(1775136767.368:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4028 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe65cc819 code=0x7ffc0000 [ 65.494913][ T3927] EXT4-fs (loop4): Remounting filesystem read-only [ 65.571086][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.633469][ T4036] SELinux: Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped). [ 66.720856][ T4039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 67.059897][ T4041] loop0: detected capacity change from 0 to 4096 [ 67.291565][ T4041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.339124][ T4045] loop4: detected capacity change from 0 to 128 [ 67.346404][ T4047] loop1: detected capacity change from 0 to 128 [ 67.637225][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.653902][ T4047] syzkaller0: entered promiscuous mode [ 68.076856][ T4051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 68.213733][ T4047] syzkaller0: entered allmulticast mode [ 68.584530][ T4067] loop3: detected capacity change from 0 to 164 [ 68.970917][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 68.970995][ T28] audit: type=1400 audit(1775136771.068:482): avc: denied { read } for pid=4068 comm="syz.4.159" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.150992][ T28] audit: type=1400 audit(1775136771.068:483): avc: denied { open } for pid=4068 comm="syz.4.159" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.211070][ T4073] loop3: detected capacity change from 0 to 512 [ 69.255925][ T4073] EXT4-fs: test_dummy_encryption option not supported [ 69.413838][ T28] audit: type=1400 audit(1775136771.128:484): avc: denied { create } for pid=4068 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.506796][ T28] audit: type=1400 audit(1775136771.128:485): avc: denied { shutdown } for pid=4068 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.557487][ T4082] FAULT_INJECTION: forcing a failure. [ 69.557487][ T4082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.590833][ T4082] CPU: 1 UID: 0 PID: 4082 Comm: syz.4.162 Not tainted syzkaller #0 PREEMPT(full) [ 69.590863][ T4082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.590877][ T4082] Call Trace: [ 69.590885][ T4082] [ 69.590893][ T4082] __dump_stack+0x1d/0x30 [ 69.590920][ T4082] dump_stack_lvl+0x95/0xd0 [ 69.591070][ T4082] dump_stack+0x15/0x1b [ 69.591093][ T4082] should_fail_ex+0x263/0x280 [ 69.591141][ T4082] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 69.591173][ T4082] should_fail+0xb/0x20 [ 69.591196][ T4082] should_fail_usercopy+0x1a/0x20 [ 69.591222][ T4082] _copy_from_user+0x1c/0xb0 [ 69.591342][ T4082] ucma_resolve_addr+0x52/0x280 [ 69.591378][ T4082] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 69.591506][ T4082] ucma_write+0x1c9/0x260 [ 69.591537][ T4082] ? __pfx_ucma_write+0x10/0x10 [ 69.591565][ T4082] vfs_write+0x269/0x9f0 [ 69.591587][ T4082] ? __rcu_read_unlock+0x4e/0x70 [ 69.591660][ T4082] ? __fget_files+0x184/0x1c0 [ 69.591686][ T4082] ksys_write+0xdc/0x1a0 [ 69.591711][ T4082] __x64_sys_write+0x40/0x50 [ 69.591734][ T4082] x64_sys_call+0x27e1/0x3020 [ 69.591813][ T4082] do_syscall_64+0x12c/0x370 [ 69.591901][ T4082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.591923][ T4082] RIP: 0033:0x7fb1a3d0c819 [ 69.591942][ T4082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.592009][ T4082] RSP: 002b:00007fb1a2746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.592030][ T4082] RAX: ffffffffffffffda RBX: 00007fb1a3f86090 RCX: 00007fb1a3d0c819 [ 69.592072][ T4082] RDX: 0000000000000178 RSI: 0000200000000280 RDI: 0000000000000004 [ 69.592138][ T4082] RBP: 00007fb1a2746090 R08: 0000000000000000 R09: 0000000000000000 [ 69.592150][ T4082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.592200][ T4082] R13: 00007fb1a3f86128 R14: 00007fb1a3f86090 R15: 00007ffd548841f8 [ 69.592223][ T4082] [ 69.938431][ T4085] FAULT_INJECTION: forcing a failure. [ 69.938431][ T4085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.967982][ T4085] CPU: 1 UID: 0 PID: 4085 Comm: syz.0.163 Not tainted syzkaller #0 PREEMPT(full) [ 69.968013][ T4085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.968025][ T4085] Call Trace: [ 69.968032][ T4085] [ 69.968104][ T4085] __dump_stack+0x1d/0x30 [ 69.968205][ T4085] dump_stack_lvl+0x95/0xd0 [ 69.968227][ T4085] dump_stack+0x15/0x1b [ 69.968247][ T4085] should_fail_ex+0x263/0x280 [ 69.968334][ T4085] should_fail+0xb/0x20 [ 69.968360][ T4085] should_fail_usercopy+0x1a/0x20 [ 69.968394][ T4085] _copy_from_user+0x1c/0xb0 [ 69.968486][ T4085] bpf_obj_get_info_by_fd+0x318/0x2370 [ 69.968517][ T4085] ? _parse_integer+0x27/0x40 [ 69.968544][ T4085] ? kstrtoull+0x111/0x140 [ 69.968574][ T4085] __sys_bpf+0x557/0x7e0 [ 69.968638][ T4085] __x64_sys_bpf+0x41/0x50 [ 69.968656][ T4085] x64_sys_call+0x10cb/0x3020 [ 69.968716][ T4085] do_syscall_64+0x12c/0x370 [ 69.968799][ T4085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.968861][ T4085] RIP: 0033:0x7f6d7a51c819 [ 69.968879][ T4085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.968934][ T4085] RSP: 002b:00007f6d78f6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.968954][ T4085] RAX: ffffffffffffffda RBX: 00007f6d7a795fa0 RCX: 00007f6d7a51c819 [ 69.968970][ T4085] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 000000000000000f [ 69.968986][ T4085] RBP: 00007f6d78f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.968999][ T4085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.969010][ T4085] R13: 00007f6d7a796038 R14: 00007f6d7a795fa0 R15: 00007ffd3a9fabd8 [ 69.969057][ T4085] [ 70.222791][ T4091] loop4: detected capacity change from 0 to 128 [ 70.966940][ T4101] loop0: detected capacity change from 0 to 128 [ 70.973862][ T4101] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.990073][ T4101] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.146006][ T4105] loop1: detected capacity change from 0 to 128 [ 71.168403][ T4103] loop3: detected capacity change from 0 to 256 [ 71.364914][ T30] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.419890][ T4112] loop0: detected capacity change from 0 to 128 [ 71.438304][ T4113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 72.352532][ T4103] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 72.446076][ T4103] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 72.506137][ T4103] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 72.543602][ T4103] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 72.554061][ T4103] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 72.587747][ T4103] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 72.611365][ T4127] loop0: detected capacity change from 0 to 764 [ 72.759502][ T4134] loop0: detected capacity change from 0 to 4096 [ 72.791816][ T4134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.817151][ T4140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 72.883292][ T4147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 72.937596][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.096534][ T28] audit: type=1400 audit(1775136775.198:486): avc: denied { write } for pid=4148 comm="syz.4.187" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.169748][ T4151] hub 8-0:1.0: USB hub found [ 73.174532][ T4151] hub 8-0:1.0: 8 ports detected [ 73.187562][ T4151] netlink: 'syz.4.187': attribute type 36 has an invalid length. [ 73.204164][ T4151] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 73.214125][ T4151] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 73.227476][ T4151] netlink: 'syz.4.187': attribute type 10 has an invalid length. [ 73.236592][ T4151] macvlan1: entered allmulticast mode [ 73.245359][ T4151] veth1_vlan: entered allmulticast mode [ 73.256003][ T4151] team0: Port device macvlan1 added [ 73.497471][ T4153] FAULT_INJECTION: forcing a failure. [ 73.497471][ T4153] name failslab, interval 1, probability 0, space 0, times 0 [ 73.597128][ T4153] CPU: 1 UID: 0 PID: 4153 Comm: syz.2.188 Not tainted syzkaller #0 PREEMPT(full) [ 73.597163][ T4153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 73.597177][ T4153] Call Trace: [ 73.597185][ T4153] [ 73.597195][ T4153] __dump_stack+0x1d/0x30 [ 73.597240][ T4153] dump_stack_lvl+0x95/0xd0 [ 73.597261][ T4153] dump_stack+0x15/0x1b [ 73.597282][ T4153] should_fail_ex+0x263/0x280 [ 73.597359][ T4153] should_failslab+0x8c/0xb0 [ 73.597392][ T4153] __kmalloc_noprof+0xb8/0x4e0 [ 73.597420][ T4153] ? security_prepare_creds+0x52/0x120 [ 73.597451][ T4153] security_prepare_creds+0x52/0x120 [ 73.597505][ T4153] prepare_creds+0x381/0x540 [ 73.597534][ T4153] __sys_setuid+0x66/0x310 [ 73.597586][ T4153] __x64_sys_setuid+0x1e/0x30 [ 73.597620][ T4153] x64_sys_call+0x1715/0x3020 [ 73.597725][ T4153] do_syscall_64+0x12c/0x370 [ 73.597758][ T4153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.597779][ T4153] RIP: 0033:0x7f074b46c819 [ 73.597876][ T4153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.597897][ T4153] RSP: 002b:00007f0749ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 73.597999][ T4153] RAX: ffffffffffffffda RBX: 00007f074b6e5fa0 RCX: 00007f074b46c819 [ 73.598015][ T4153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 73.598029][ T4153] RBP: 00007f0749ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.598042][ T4153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.598116][ T4153] R13: 00007f074b6e6038 R14: 00007f074b6e5fa0 R15: 00007fff21489a38 [ 73.598137][ T4153] [ 73.817921][ T4163] FAULT_INJECTION: forcing a failure. [ 73.817921][ T4163] name failslab, interval 1, probability 0, space 0, times 0 [ 73.831522][ T4162] FAULT_INJECTION: forcing a failure. [ 73.831522][ T4162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.844996][ T28] audit: type=1400 audit(1775136775.918:487): avc: denied { write } for pid=4161 comm="syz.3.192" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 73.845195][ T4163] CPU: 1 UID: 0 PID: 4163 Comm: syz.3.192 Not tainted syzkaller #0 PREEMPT(full) [ 73.845223][ T4163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 73.845304][ T4163] Call Trace: [ 73.845311][ T4163] [ 73.845319][ T4163] __dump_stack+0x1d/0x30 [ 73.845359][ T4163] dump_stack_lvl+0x95/0xd0 [ 73.845383][ T4163] dump_stack+0x15/0x1b [ 73.845465][ T4163] should_fail_ex+0x263/0x280 [ 73.845494][ T4163] should_failslab+0x8c/0xb0 [ 73.845517][ T4163] __kmalloc_noprof+0xb8/0x4e0 [ 73.845573][ T4163] ? alloc_pipe_info+0x1c8/0x340 [ 73.845596][ T4163] alloc_pipe_info+0x1c8/0x340 [ 73.845616][ T4163] splice_direct_to_actor+0x591/0x670 [ 73.845640][ T4163] ? kstrtouint_from_user+0xa8/0xf0 [ 73.845746][ T4163] ? __pfx_direct_splice_actor+0x10/0x10 [ 73.845768][ T4163] ? avc_policy_seqno+0x15/0x30 [ 73.845809][ T4163] ? selinux_file_permission+0x1f2/0x690 [ 73.845838][ T4163] do_splice_direct+0x119/0x1a0 [ 73.845919][ T4163] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 73.845946][ T4163] do_sendfile+0x382/0x650 [ 73.845975][ T4163] __x64_sys_sendfile64+0x105/0x150 [ 73.846057][ T4163] x64_sys_call+0x2dc4/0x3020 [ 73.846083][ T4163] do_syscall_64+0x12c/0x370 [ 73.846111][ T4163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.846141][ T4163] RIP: 0033:0x7ffbe65cc819 [ 73.846158][ T4163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.846228][ T4163] RSP: 002b:00007ffbe501f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 73.846251][ T4163] RAX: ffffffffffffffda RBX: 00007ffbe6845fa0 RCX: 00007ffbe65cc819 [ 73.846266][ T4163] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 73.846278][ T4163] RBP: 00007ffbe501f090 R08: 0000000000000000 R09: 0000000000000000 [ 73.846291][ T4163] R10: 000000000000fff2 R11: 0000000000000246 R12: 0000000000000001 [ 73.846304][ T4163] R13: 00007ffbe6846038 R14: 00007ffbe6845fa0 R15: 00007ffc3b5b7cc8 [ 73.846323][ T4163] [ 73.859929][ T4162] CPU: 1 UID: 0 PID: 4162 Comm: syz.1.190 Not tainted syzkaller #0 PREEMPT(full) [ 73.859958][ T4162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 73.859989][ T4162] Call Trace: [ 73.859997][ T4162] [ 73.860006][ T4162] __dump_stack+0x1d/0x30 [ 73.860034][ T4162] dump_stack_lvl+0x95/0xd0 [ 73.860169][ T4162] dump_stack+0x15/0x1b [ 73.860252][ T4162] should_fail_ex+0x263/0x280 [ 73.860280][ T4162] should_fail+0xb/0x20 [ 73.860379][ T4162] should_fail_usercopy+0x1a/0x20 [ 73.860484][ T4162] _copy_from_user+0x1c/0xb0 [ 73.860515][ T4162] sctp_getsockopt_connectx3+0xd9/0x340 [ 73.860562][ T4162] sctp_getsockopt+0x910/0xaa0 [ 73.860587][ T4162] sock_common_getsockopt+0x60/0x70 [ 73.860716][ T4162] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 73.860742][ T4162] do_sock_getsockopt+0x1c4/0x210 [ 73.860846][ T4162] __x64_sys_getsockopt+0x11d/0x1a0 [ 73.860880][ T4162] x64_sys_call+0x2dcf/0x3020 [ 73.860907][ T4162] do_syscall_64+0x12c/0x370 [ 73.860947][ T4162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.860970][ T4162] RIP: 0033:0x7fad4510c819 [ 73.860988][ T4162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.861005][ T4162] RSP: 002b:00007fad43b5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 73.861086][ T4162] RAX: ffffffffffffffda RBX: 00007fad45385fa0 RCX: 00007fad4510c819 [ 73.861100][ T4162] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 73.861114][ T4162] RBP: 00007fad43b5f090 R08: 0000200000000300 R09: 0000000000000000 [ 73.861127][ T4162] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 73.861140][ T4162] R13: 00007fad45386038 R14: 00007fad45385fa0 R15: 00007ffcfcca2f38 [ 73.861184][ T4162] [ 74.019728][ T4157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.147326][ T4169] netlink: 48 bytes leftover after parsing attributes in process `syz.1.193'. [ 74.165000][ T4157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.325112][ T28] audit: type=1400 audit(1775136776.418:488): avc: denied { create } for pid=4165 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.381652][ T4172] loop2: detected capacity change from 0 to 4096 [ 74.399584][ T4157] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.443689][ T4179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 74.477526][ T4157] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.507287][ T4172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.666446][ T4157] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.704213][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.706777][ T28] audit: type=1400 audit(1775136776.798:489): avc: denied { mounton } for pid=4185 comm="syz.4.200" path="/38/file0" dev="tmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.770965][ T28] audit: type=1400 audit(1775136776.868:490): avc: denied { append } for pid=4187 comm="syz.2.201" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.795099][ T4188] program syz.2.201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.827681][ T4157] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.835042][ T4188] FAULT_INJECTION: forcing a failure. [ 74.835042][ T4188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.867280][ T4188] CPU: 0 UID: 0 PID: 4188 Comm: syz.2.201 Not tainted syzkaller #0 PREEMPT(full) [ 74.867314][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 74.867328][ T4188] Call Trace: [ 74.867345][ T4188] [ 74.867353][ T4188] __dump_stack+0x1d/0x30 [ 74.867386][ T4188] dump_stack_lvl+0x95/0xd0 [ 74.867414][ T4188] dump_stack+0x15/0x1b [ 74.867438][ T4188] should_fail_ex+0x263/0x280 [ 74.867471][ T4188] should_fail+0xb/0x20 [ 74.867559][ T4188] should_fail_usercopy+0x1a/0x20 [ 74.867591][ T4188] _copy_from_user+0x1c/0xb0 [ 74.867670][ T4188] scsi_ioctl+0x139b/0x1750 [ 74.867697][ T4188] ? __rcu_read_unlock+0x4e/0x70 [ 74.867727][ T4188] ? avc_has_perm_noaudit+0xab/0x130 [ 74.867762][ T4188] ? avc_has_perm+0x101/0x190 [ 74.867793][ T4188] ? do_vfs_ioctl+0x84f/0xe70 [ 74.867877][ T4188] sg_ioctl+0xebf/0x1350 [ 74.867900][ T4188] ? __pfx_sg_ioctl+0x10/0x10 [ 74.867921][ T4188] __se_sys_ioctl+0xce/0x140 [ 74.867943][ T4188] __x64_sys_ioctl+0x43/0x50 [ 74.868015][ T4188] x64_sys_call+0x1563/0x3020 [ 74.868048][ T4188] do_syscall_64+0x12c/0x370 [ 74.868079][ T4188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.868147][ T4188] RIP: 0033:0x7f074b46c819 [ 74.868167][ T4188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.868186][ T4188] RSP: 002b:00007f0749ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.868291][ T4188] RAX: ffffffffffffffda RBX: 00007f074b6e5fa0 RCX: 00007f074b46c819 [ 74.868312][ T4188] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 74.868325][ T4188] RBP: 00007f0749ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.868435][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.868450][ T4188] R13: 00007f074b6e6038 R14: 00007f074b6e5fa0 R15: 00007fff21489a38 [ 74.868540][ T4188] [ 75.096393][ T408] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.104758][ T408] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.117720][ T408] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.147000][ T4190] loop3: detected capacity change from 0 to 1764 [ 75.154962][ T408] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.158213][ T4190] iso9660: Unknown parameter 'utF8' [ 75.294792][ T4192] program syz.2.202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.646760][ T28] audit: type=1400 audit(1775136777.748:491): avc: denied { bind } for pid=4203 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.710913][ T28] audit: type=1400 audit(1775136777.778:492): avc: denied { write } for pid=4203 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.725226][ T4206] loop0: detected capacity change from 0 to 512 [ 75.781027][ T4206] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 75.794876][ T4206] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 75.821244][ T4206] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.208: Failed to acquire dquot type 0 [ 75.832562][ T4206] loop0: lost filesystem error report for type 5 error -5 [ 75.844916][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 75.858514][ C1] EXT4-fs (loop0): initial error at time 1775136777: ext4_acquire_dquot:7026 [ 75.867319][ C1] EXT4-fs (loop0): last error at time 1775136777: ext4_acquire_dquot:7026 [ 75.877216][ T4206] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #16: comm syz.0.208: corrupted inode contents [ 75.889078][ T4206] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 75.896700][ T4206] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #16: comm syz.0.208: mark_inode_dirty error [ 75.917250][ T4206] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 75.918328][ T4206] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #16: comm syz.0.208: corrupted inode contents [ 75.939448][ T4206] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 75.947829][ T4206] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.208: mark_inode_dirty error [ 75.974908][ T4206] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 75.975207][ T4206] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #16: comm syz.0.208: corrupted inode contents [ 76.004891][ T4206] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 76.005228][ T4206] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 76.023192][ T4206] loop0: lost filesystem error report for type 5 error -117 [ 76.023445][ T4206] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #16: comm syz.0.208: corrupted inode contents [ 76.044734][ T4206] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 76.045093][ T4206] EXT4-fs error (device loop0): ext4_truncate:4602: inode #16: comm syz.0.208: mark_inode_dirty error [ 76.066216][ T4206] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 76.066377][ T4206] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 76.087439][ T4206] loop0: lost filesystem error report for type 5 error -117 [ 76.088053][ T4206] EXT4-fs (loop0): 1 truncate cleaned up [ 76.102322][ T4206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.115338][ T4206] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.145849][ T3419] IPVS: starting estimator thread 0... [ 76.197114][ T4213] IPVS: sh: FWM 3 0x00000003 - no destination available [ 76.214167][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 76.254888][ T4215] IPVS: using max 2592 ests per chain, 129600 per kthread [ 76.288532][ T4218] netlink: 'syz.2.211': attribute type 8 has an invalid length. [ 76.312583][ T4218] netlink: 48 bytes leftover after parsing attributes in process `syz.2.211'. [ 76.342071][ T28] audit: type=1400 audit(1775136778.438:493): avc: denied { create } for pid=4217 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.389772][ T3310] cgroup: fork rejected by pids controller in /syz2 [ 76.390491][ T28] audit: type=1400 audit(1775136778.468:494): avc: denied { write } for pid=4217 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.473665][ T28] audit: type=1400 audit(1775136778.568:495): avc: denied { read } for pid=4220 comm="syz.4.213" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.637230][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.734643][ T310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.761394][ T4230] loop0: detected capacity change from 0 to 4096 [ 76.818002][ T4230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.833439][ T310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.869702][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.895393][ T310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.971372][ T310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.082853][ T4247] tmpfs: Bad value for 'nr_inodes' [ 77.119206][ T4250] veth0_virt_wifi: entered allmulticast mode [ 77.133418][ T310] bridge_slave_1: left allmulticast mode [ 77.149351][ T310] bridge_slave_1: left promiscuous mode [ 77.156947][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.165809][ T310] bridge_slave_0: left allmulticast mode [ 77.178033][ T310] bridge_slave_0: left promiscuous mode [ 77.188123][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.333851][ T4250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.343782][ T4250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.699278][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.713181][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.797543][ T310] bond0 (unregistering): Released all slaves [ 77.899829][ T310] hsr_slave_0: left promiscuous mode [ 77.946120][ T310] hsr_slave_1: left promiscuous mode [ 77.972277][ T4276] netlink: 'syz.4.224': attribute type 10 has an invalid length. [ 77.984530][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.013390][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.088228][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.108772][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.130245][ T310] veth1_macvtap: left promiscuous mode [ 78.138038][ T310] veth0_macvtap: left promiscuous mode [ 78.150260][ T310] veth1_vlan: left promiscuous mode [ 78.161095][ T310] veth0_vlan: left promiscuous mode [ 78.299866][ T310] team0 (unregistering): Port device team_slave_1 removed [ 78.323734][ T310] team0 (unregistering): Port device team_slave_0 removed [ 78.393255][ T4231] chnl_net:caif_netlink_parms(): no params data found [ 78.475213][ T4231] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.490187][ T4231] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.505106][ T4231] bridge_slave_0: entered allmulticast mode [ 78.518336][ T4231] bridge_slave_0: entered promiscuous mode [ 78.533069][ T4231] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.547967][ T4231] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.563424][ T4231] bridge_slave_1: entered allmulticast mode [ 78.584174][ T4231] bridge_slave_1: entered promiscuous mode [ 78.623122][ T4231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.646655][ T4231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.689514][ T4231] team0: Port device team_slave_0 added [ 78.703084][ T4231] team0: Port device team_slave_1 added [ 78.745669][ T4231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.764785][ T4231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.843669][ T4285] loop3: detected capacity change from 0 to 2048 [ 78.850917][ T4231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.862676][ T4231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.869934][ T4231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.897772][ T3303] Alternate GPT is invalid, using primary GPT. [ 78.904102][ T3303] loop3: p1 p2 p3 [ 78.909264][ T3303] loop3: partition table partially beyond EOD, truncated [ 78.920518][ T4231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.949416][ T4231] hsr_slave_0: entered promiscuous mode [ 78.955640][ T4231] hsr_slave_1: entered promiscuous mode [ 78.961956][ T4231] debugfs: 'hsr0' already exists in 'hsr' [ 78.968107][ T4231] Cannot create hsr debugfs directory [ 79.055387][ T4250] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.068785][ T4285] Alternate GPT is invalid, using primary GPT. [ 79.075241][ T4285] loop3: p1 p2 p3 [ 79.079117][ T4285] loop3: partition table partially beyond EOD, truncated [ 79.095102][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.101438][ T4290] FAULT_INJECTION: forcing a failure. [ 79.101438][ T4290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.112844][ T4276] bond0: (slave team0): Enslaving as an active interface with an up link [ 79.115752][ T4290] CPU: 1 UID: 0 PID: 4290 Comm: syz.0.229 Not tainted syzkaller #0 PREEMPT(full) [ 79.115780][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.115870][ T4290] Call Trace: [ 79.115876][ T4290] [ 79.115885][ T4290] __dump_stack+0x1d/0x30 [ 79.115912][ T4290] dump_stack_lvl+0x95/0xd0 [ 79.115936][ T4290] dump_stack+0x15/0x1b [ 79.116018][ T4290] should_fail_ex+0x263/0x280 [ 79.116046][ T4290] should_fail+0xb/0x20 [ 79.116070][ T4290] should_fail_usercopy+0x1a/0x20 [ 79.116140][ T4290] _copy_from_user+0x1c/0xb0 [ 79.116171][ T4290] __se_sys_mount+0x10d/0x2e0 [ 79.116225][ T4290] ? fput+0x8f/0xc0 [ 79.116272][ T4290] ? ksys_write+0x194/0x1a0 [ 79.116293][ T4290] __x64_sys_mount+0x67/0x80 [ 79.116376][ T4290] x64_sys_call+0x2d61/0x3020 [ 79.116403][ T4290] do_syscall_64+0x12c/0x370 [ 79.116430][ T4290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.116452][ T4290] RIP: 0033:0x7f6d7a51c819 [ 79.116469][ T4290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.116504][ T4290] RSP: 002b:00007f6d78f6f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.116526][ T4290] RAX: ffffffffffffffda RBX: 00007f6d7a795fa0 RCX: 00007f6d7a51c819 [ 79.116540][ T4290] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000 [ 79.116554][ T4290] RBP: 00007f6d78f6f090 R08: 00002000000001c0 R09: 0000000000000000 [ 79.116639][ T4290] R10: 0000000000084022 R11: 0000000000000246 R12: 0000000000000001 [ 79.116652][ T4290] R13: 00007f6d7a796038 R14: 00007f6d7a795fa0 R15: 00007ffd3a9fabd8 [ 79.116678][ T4290] [ 79.117012][ T4290] tmpfs: Bad value for 'nr_inodes' [ 79.205692][ T4294] 9p: Bad value for 'rfdno' [ 79.300627][ T4285] xt_CT: No such helper "netbios-ns" [ 79.316212][ T4297] netlink: 40 bytes leftover after parsing attributes in process `syz.0.231'. [ 79.330123][ T4250] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.346577][ T4285] 8021q: VLANs not supported on wg2 [ 79.398997][ T4301] loop3: detected capacity change from 0 to 512 [ 79.417471][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 79.417490][ T28] audit: type=1400 audit(1775136781.518:506): avc: denied { name_connect } for pid=4304 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 79.446703][ T4250] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.464337][ T4301] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.510730][ T4250] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.536004][ T4301] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 79.582106][ T28] audit: type=1400 audit(1775136781.678:507): avc: denied { create } for pid=4307 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.609542][ T28] audit: type=1400 audit(1775136781.678:508): avc: denied { write } for pid=4307 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.637749][ T28] audit: type=1400 audit(1775136781.678:509): avc: denied { append } for pid=4307 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.681556][ T310] IPVS: stop unused estimator thread 0... [ 79.687643][ T3518] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.715353][ T3518] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.744664][ T3518] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.770978][ T3518] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.811467][ T4327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 79.820384][ T4231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.841277][ T4327] team1: entered promiscuous mode [ 79.846767][ T4327] team1: entered allmulticast mode [ 79.855227][ T4327] 8021q: adding VLAN 0 to HW filter on device team1 [ 79.865491][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 79.891651][ T4231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.917814][ T4330] team2: entered promiscuous mode [ 79.922971][ T4330] team2: entered allmulticast mode [ 79.935422][ T4330] 8021q: adding VLAN 0 to HW filter on device team2 [ 79.994191][ T4231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.008612][ T4231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.065192][ T28] audit: type=1400 audit(1775136782.158:510): avc: denied { create } for pid=4346 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.114075][ T4231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.161725][ T4356] FAULT_INJECTION: forcing a failure. [ 80.161725][ T4356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.166635][ T4231] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.197732][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.204984][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.236120][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.243229][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.416210][ T4356] CPU: 1 UID: 0 PID: 4356 Comm: syz.3.240 Not tainted syzkaller #0 PREEMPT(full) [ 80.416242][ T4356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.416317][ T4356] Call Trace: [ 80.416325][ T4356] [ 80.416334][ T4356] __dump_stack+0x1d/0x30 [ 80.416367][ T4356] dump_stack_lvl+0x95/0xd0 [ 80.416394][ T4356] dump_stack+0x15/0x1b [ 80.416425][ T4356] should_fail_ex+0x263/0x280 [ 80.416532][ T4356] should_fail+0xb/0x20 [ 80.416561][ T4356] should_fail_usercopy+0x1a/0x20 [ 80.416596][ T4356] _copy_to_user+0x20/0xa0 [ 80.416686][ T4356] bpf_prog_test_run_syscall+0x2b8/0x360 [ 80.416709][ T4356] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 80.416729][ T4356] bpf_prog_test_run+0x204/0x340 [ 80.416756][ T4356] __sys_bpf+0x52e/0x7e0 [ 80.416798][ T4356] __x64_sys_bpf+0x41/0x50 [ 80.416816][ T4356] x64_sys_call+0x10cb/0x3020 [ 80.416893][ T4356] do_syscall_64+0x12c/0x370 [ 80.416925][ T4356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.416953][ T4356] RIP: 0033:0x7ffbe65cc819 [ 80.416973][ T4356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.416990][ T4356] RSP: 002b:00007ffbe501f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.417052][ T4356] RAX: ffffffffffffffda RBX: 00007ffbe6845fa0 RCX: 00007ffbe65cc819 [ 80.417070][ T4356] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 80.417086][ T4356] RBP: 00007ffbe501f090 R08: 0000000000000000 R09: 0000000000000000 [ 80.417099][ T4356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.417172][ T4356] R13: 00007ffbe6846038 R14: 00007ffbe6845fa0 R15: 00007ffc3b5b7cc8 [ 80.417196][ T4356] [ 80.627218][ T28] audit: type=1400 audit(1775136782.728:511): avc: denied { create } for pid=4367 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 80.635773][ T4231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.662687][ T4379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 80.711897][ T4386] loop1: detected capacity change from 0 to 2048 [ 80.791426][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.798686][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.813940][ T4386] loop1: p3 p4 < > [ 80.822055][ T4386] loop1: p3 start 11362048 is beyond EOD, truncated [ 80.854922][ T28] audit: type=1400 audit(1775136782.938:512): avc: denied { listen } for pid=4393 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.081377][ T28] audit: type=1400 audit(1775136783.178:513): avc: denied { wake_alarm } for pid=4417 comm="syz.4.249" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.089743][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.135963][ T4418] loop4: detected capacity change from 0 to 512 [ 81.158744][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.222968][ T4429] FAULT_INJECTION: forcing a failure. [ 81.222968][ T4429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.290507][ T4429] CPU: 1 UID: 0 PID: 4429 Comm: syz.1.251 Not tainted syzkaller #0 PREEMPT(full) [ 81.290540][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.290555][ T4429] Call Trace: [ 81.290562][ T4429] [ 81.290570][ T4429] __dump_stack+0x1d/0x30 [ 81.290628][ T4429] dump_stack_lvl+0x95/0xd0 [ 81.290655][ T4429] dump_stack+0x15/0x1b [ 81.290753][ T4429] should_fail_ex+0x263/0x280 [ 81.290785][ T4429] should_fail+0xb/0x20 [ 81.290812][ T4429] should_fail_usercopy+0x1a/0x20 [ 81.290859][ T4429] _copy_from_iter+0xcf/0xea0 [ 81.290893][ T4429] ? kmem_cache_alloc_node_noprof+0x20a/0x460 [ 81.290990][ T4429] ? __alloc_skb+0x362/0x690 [ 81.291050][ T4429] ? __alloc_skb+0x4f6/0x690 [ 81.291084][ T4429] pfkey_sendmsg+0x126/0x9b0 [ 81.291111][ T4429] ? avc_has_perm+0x101/0x190 [ 81.291227][ T4429] ? selinux_socket_sendmsg+0x192/0x1c0 [ 81.291294][ T4429] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 81.291319][ T4429] ____sys_sendmsg+0x563/0x5b0 [ 81.291356][ T4429] ___sys_sendmsg+0x195/0x1e0 [ 81.291456][ T4429] __x64_sys_sendmsg+0xd4/0x160 [ 81.291483][ T4429] x64_sys_call+0x194c/0x3020 [ 81.291667][ T4429] do_syscall_64+0x12c/0x370 [ 81.291699][ T4429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.291724][ T4429] RIP: 0033:0x7fad4510c819 [ 81.291796][ T4429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.291817][ T4429] RSP: 002b:00007fad43b5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.291841][ T4429] RAX: ffffffffffffffda RBX: 00007fad45385fa0 RCX: 00007fad4510c819 [ 81.291858][ T4429] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 81.291873][ T4429] RBP: 00007fad43b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 81.291932][ T4429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.291946][ T4429] R13: 00007fad45386038 R14: 00007fad45385fa0 R15: 00007ffcfcca2f38 [ 81.292002][ T4429] [ 81.497681][ T30] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.523637][ T4435] netlink: 14 bytes leftover after parsing attributes in process `syz.1.253'. [ 81.534962][ T28] audit: type=1400 audit(1775136783.618:514): avc: denied { mount } for pid=4434 comm="syz.1.253" name="/" dev="hugetlbfs" ino=8763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 81.575907][ T30] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.575945][ T4435] netlink: 14 bytes leftover after parsing attributes in process `syz.1.253'. [ 81.620834][ T30] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.642800][ T30] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.683184][ T28] audit: type=1400 audit(1775136783.778:515): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 81.708720][ T4231] veth0_vlan: entered promiscuous mode [ 81.733542][ T4231] veth1_vlan: entered promiscuous mode [ 81.772837][ T4231] veth0_macvtap: entered promiscuous mode [ 81.809825][ T4231] veth1_macvtap: entered promiscuous mode [ 81.838151][ T4231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.854089][ T4231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.870415][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.886368][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.923846][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.940178][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.990076][ T4455] loop0: detected capacity change from 0 to 764 [ 82.006766][ T4455] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 82.253442][ T4463] erspan0: entered promiscuous mode [ 82.290404][ T4463] erspan0: entered allmulticast mode [ 83.065200][ T4475] FAULT_INJECTION: forcing a failure. [ 83.065200][ T4475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.090652][ T4475] CPU: 1 UID: 0 PID: 4475 Comm: syz.0.262 Not tainted syzkaller #0 PREEMPT(full) [ 83.090684][ T4475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.090790][ T4475] Call Trace: [ 83.090798][ T4475] [ 83.090805][ T4475] __dump_stack+0x1d/0x30 [ 83.090835][ T4475] dump_stack_lvl+0x95/0xd0 [ 83.090863][ T4475] dump_stack+0x15/0x1b [ 83.090884][ T4475] should_fail_ex+0x263/0x280 [ 83.090933][ T4475] should_fail+0xb/0x20 [ 83.091041][ T4475] should_fail_usercopy+0x1a/0x20 [ 83.091068][ T4475] _copy_from_user+0x1c/0xb0 [ 83.091101][ T4475] __copy_msghdr+0x244/0x300 [ 83.091155][ T4475] ___sys_sendmsg+0x10c/0x1e0 [ 83.091176][ T4475] ? path_openat+0x1b01/0x2050 [ 83.091209][ T4475] __sys_sendmmsg+0x185/0x320 [ 83.091241][ T4475] __x64_sys_sendmmsg+0x57/0x70 [ 83.091276][ T4475] x64_sys_call+0x27aa/0x3020 [ 83.091301][ T4475] do_syscall_64+0x12c/0x370 [ 83.091326][ T4475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.091352][ T4475] RIP: 0033:0x7f6d7a51c819 [ 83.091382][ T4475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.091399][ T4475] RSP: 002b:00007f6d78f6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 83.091423][ T4475] RAX: ffffffffffffffda RBX: 00007f6d7a795fa0 RCX: 00007f6d7a51c819 [ 83.091440][ T4475] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 83.091479][ T4475] RBP: 00007f6d78f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 83.091495][ T4475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.091510][ T4475] R13: 00007f6d7a796038 R14: 00007f6d7a795fa0 R15: 00007ffd3a9fabd8 [ 83.091533][ T4475] [ 83.314904][ T4484] netlink: 68 bytes leftover after parsing attributes in process `syz.0.266'. [ 83.517539][ T4491] 9p: Bad value for 'rfdno' [ 83.596451][ T4497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.271'. [ 83.608342][ T4495] loop4: detected capacity change from 0 to 512 [ 83.628199][ T4499] tmpfs: Unknown parameter 'fsuuid' [ 83.645331][ T4495] EXT4-fs (loop4): unsupported descriptor size 0 [ 83.885914][ T4511] loop3: detected capacity change from 0 to 512 [ 83.894748][ T4512] ================================================================== [ 83.902869][ T4512] BUG: KCSAN: data-race in css_set_move_task / memcpy_and_pad [ 83.910416][ T4512] [ 83.912734][ T4512] write to 0xffff8881042fbbc8 of 8 bytes by task 17 on cpu 1: [ 83.920199][ T4512] css_set_move_task+0x212/0x430 [ 83.925186][ T4512] cgroup_task_dead+0x74/0x340 [ 83.929990][ T4512] finish_task_switch+0x1b5/0x280 [ 83.935051][ T4512] __schedule+0x93c/0xd40 [ 83.937838][ T4511] ext4: Bad value for 'debug_want_extra_isize' [ 83.939465][ T4512] schedule+0x5e/0xd0 [ 83.949618][ T4512] schedule_timeout+0xca/0x180 [ 83.954411][ T4512] rcu_exp_sel_wait_wake+0x590/0xbe0 [ 83.959723][ T4512] wait_rcu_exp_gp+0x1e/0x30 [ 83.964334][ T4512] kthread_worker_fn+0x262/0x540 [ 83.969274][ T4512] kthread+0x22a/0x280 [ 83.973352][ T4512] ret_from_fork+0x150/0x360 [ 83.977959][ T4512] ret_from_fork_asm+0x1a/0x30 [ 83.982820][ T4512] [ 83.985140][ T4512] read to 0xffff8881042fb240 of 3328 bytes by task 4512 on cpu 0: [ 83.992943][ T4512] memcpy_and_pad+0x48/0x80 [ 83.997451][ T4512] arch_dup_task_struct+0x2c/0x40 [ 84.002490][ T4512] dup_task_struct+0x6e/0x950 [ 84.007179][ T4512] copy_process+0x37e/0x20b0 [ 84.011772][ T4512] kernel_clone+0x16b/0x5d0 [ 84.016278][ T4512] __x64_sys_clone+0x143/0x180 [ 84.021058][ T4512] x64_sys_call+0x1222/0x3020 [ 84.025752][ T4512] do_syscall_64+0x12c/0x370 [ 84.030355][ T4512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.036250][ T4512] [ 84.038576][ T4512] Reported by Kernel Concurrency Sanitizer on: [ 84.044724][ T4512] CPU: 0 UID: 0 PID: 4512 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 84.054530][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.064597][ T4512] ================================================================== [ 84.460454][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 84.460554][ T28] audit: type=1326 audit(1775136786.548:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe65cc819 code=0x7ffc0000 [ 84.826857][ T28] audit: type=1326 audit(1775136786.548:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffbe65cc582 code=0x7ffc0000 [ 84.878919][ T28] audit: type=1326 audit(1775136786.548:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ffbe65cc617 code=0x7ffc0000 [ 84.955567][ T28] audit: type=1326 audit(1775136786.548:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ffbe6589511 code=0x7ffc0000 [ 85.015182][ T28] audit: type=1326 audit(1775136786.548:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ffbe65cd609 code=0x7ffc0000 [ 85.077057][ T28] audit: type=1326 audit(1775136786.548:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ffbe658957b code=0x7ffc0000 [ 85.139016][ T28] audit: type=1326 audit(1775136786.558:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe65cc819 code=0x7ffc0000 [ 85.162528][ T28] audit: type=1326 audit(1775136786.558:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7ffbe6588c6c code=0x7ffc0000 [ 85.187347][ T28] audit: type=1326 audit(1775136786.558:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ffbe6588cce code=0x7ffc0000 [ 85.210957][ T28] audit: type=1326 audit(1775136786.588:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbe65cc4ab code=0x7ffc0000 [ 85.236812][ T4511] loop3: detected capacity change from 0 to 164 [ 85.271577][ T4511] iso9660: Unknown parameter 'iocha˝…Ś ú˙˙˙˙˙˙`nian'