last executing test programs: 6.37161595s ago: executing program 2 (id=1842): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 6.224496555s ago: executing program 2 (id=1843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x20, 0x0, 0x2, 0x401, 0x8000000, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 6.170018757s ago: executing program 2 (id=1844): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500000003000000010000840200000001000000020000000200000000616f5f0000c92c83dacb19a0c74de6395096c93059ab21f048984d9c6eee9dc83e74f08cde0c3a395ac2ae77c2f090daf15dd1a0cd18d00542cb50f45c8bac698f7e41515a4a9533409ffe45bd1b9e280c14e654539f98a0c7d46d6e5343da37c2c13a87aa6c17793288de2de92c9c6689e9cc97eedf2c5650cc62c6dc2560082567e999bcfcb3283cebc99ecf5578164fa594acf27324a59b6de1a3166357fb57f8"], &(0x7f0000002cc0)=""/4085, 0x35, 0xff5, 0x9, 0x0, 0x10000, @value=r0}, 0x28) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x2, 0x0, 0x6, 0x51010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0xffffff00], [], 'erspan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vcan0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xf9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20040881}, 0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x8000}, 0x10e068, 0x3, 0x7, 0x3, 0x6, 0x8002, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)="0fecd123f92f9ccd1ac1bbd9", 0xc}, {&(0x7f0000000140)}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$TUNSETIFF(r5, 0x8004b708, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0xb0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) connect$pppoe(r3, &(0x7f0000000240)={0x18, 0x0, {0x0, @local, 'erspan0\x00'}}, 0x1e) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r7, 0x9) sendto$inet(r7, &(0x7f00000000c0)="ab", 0x1, 0x400c805, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) 5.966463593s ago: executing program 4 (id=1847): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500000003000000010000840200000001000000020000000200000000616f5f0000c92c83dacb19a0c74de6395096c93059ab21f048984d9c6eee9dc83e74f08cde0c3a395ac2ae77c2f090daf15dd1a0cd18d00542cb50f45c8bac698f7e41515a4a9533409ffe45bd1b9e280c14e654539f98a0c7d46d6e5343da37c2c13a87aa6c17793288de2de92c9c6689e9cc97eedf2c5650cc62c6dc2560082567e999bcfcb3283cebc99ecf5578164fa594acf27324a59b6de1a3166357fb57f8"], &(0x7f0000002cc0)=""/4085, 0x35, 0xff5, 0x9, 0x0, 0x10000, @value=r0}, 0x28) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x2, 0x0, 0x6, 0x51010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0xffffff00], [], 'erspan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vcan0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xf9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20040881}, 0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x8000}, 0x10e068, 0x3, 0x7, 0x3, 0x6, 0x8002, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)="0fecd123f92f9ccd1ac1bbd9", 0xc}, {&(0x7f0000000140)}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$TUNSETIFF(r5, 0x8004b708, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0xb0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) connect$pppoe(r3, &(0x7f0000000240)={0x18, 0x0, {0x0, @local, 'erspan0\x00'}}, 0x1e) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r8, 0x9) sendto$inet(r8, &(0x7f00000000c0)="ab", 0x1, 0x400c805, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) fcntl$setlease(r7, 0x400, 0x2) socket$packet(0x11, 0x2, 0x300) 5.303222134s ago: executing program 2 (id=1854): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x4000000000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x2000010) r1 = syz_mount_image$ext4(&(0x7f0000000540)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x2824080, &(0x7f00000006c0)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_eq}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'cgroup\x00'}}, {@dont_appraise}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}, 0x1, 0x513, &(0x7f00000017c0)="$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") ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x810) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f00000000c0), &(0x7f0000000180)=""/19, 0x2}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x4) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x880) bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x80800) fcntl$setstatus(r4, 0x4, 0x12000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x6, &(0x7f0000000100)=[{0xd, 0x0, 0x3, 0x9}, {0x402, 0x79, 0x1, 0x4}, {0x80, 0x1, 0x0, 0xc}, {0x4, 0xb0, 0x0, 0xfffeffff}, {0x14f, 0x80, 0x6, 0x5e7}, {0x8001, 0x7, 0xc8, 0x3bf5}]}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x80010, 0xffffffffffffffff, 0xec776000) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) socket(0x33, 0x3, 0x10000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xb, 0x1, 0x4, 0x0, 0xc9}, 0x14) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00'}) 5.143001619s ago: executing program 2 (id=1857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x1, 0xf}, 0x10c0e8, 0x2, 0x7, 0x4, 0x9, 0x8001, 0x7fff}, r1, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x35, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 5.11025424s ago: executing program 4 (id=1858): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x500) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x12, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000008c0)={[{@test_dummy_encryption_v1}, {@nojournal_checksum}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x598, &(0x7f0000001900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5aec}, {0x20, 0xf, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x1}]}, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 5.09576588s ago: executing program 2 (id=1859): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f640d967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c8348100"/4195, @ANYBLOB="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", @ANYRES64], 0x8, 0x307, &(0x7f0000000b00)="$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") syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="cbfc241f8a5f560995e103c32b26983f64000000", @ANYRES32, @ANYBLOB="01002bbd7000fcdbdf25350000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300020000000e0001006e658664657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x64}}, 0x24008011) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6f3ffffb702000008000000b70300000000000885000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc, &(0x7f00000007c0)=""/12, 0x40f00, 0xc}, 0x94) 4.242822867s ago: executing program 4 (id=1867): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x6020400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0xc, 0x0, 0xb, 0x4, 0x35]}, &(0x7f0000000040)=0x54) 3.635556537s ago: executing program 0 (id=1869): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x39, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x1}}, 0x40) 3.621323227s ago: executing program 0 (id=1870): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000001f7e4f038212550b9dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x0, 0x5, 0x5, 0x8}, 0x10) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x364, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x7, 0x200}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d82000000000000002240f7ffffff00"}) r9 = syz_open_pts(r0, 0x0) r10 = dup3(r9, r0, 0x0) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f00000000c0)={0x5, 0x2ce3, 0x52, 0x4, 0xd, "837aa6c49afbf36174247e18cd3fc1e8bd89fe", 0x8, 0x2}) sendmsg$NFT_BATCH(r10, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}]}, @NFT_MSG_DELCHAIN={0x16c, 0x5, 0xa, 0x300, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0xed, 0xc, "dc13174373180b7c4c4e9ef4ebfcc5e5261054d7b8610c50418ce4c92de48efb97ef2a11cbae0dce5eb056874cb38b4165ebd1068d4825494404b7d4855f1c0e8d82c0cfe1f327fad187a666755c101b29e88823cb425cda250538bc1161ee331db5e8e964bfc0e4a4d87bfcb8c912fcb19f698c3b125d7f36dd861327347efe07388e1c97a49fb23b97f4235c390db20b7625063f842bd03b3bb128962f9965d5762a293c42995585908c22872e167fd21bc8e7972fb916ac8f8f7a87a4afe95c2b70216cffc9c58113bbd1be519c2a22ec11c88b5398357ff21401ad504a970176d2faa265753fe0"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x5a0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_EXPRESSIONS={0x584, 0x12, 0x0, 0x1, [{0x580, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x56c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x558, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "88d799e63ccb51b66befb0bf6929b3625776be399bd94a53a7ef2f4f3083f25e651cf66e61ea537f00a8154222b43b5405e8ca2f0073b0b7b8fc8baa03673262218f16d32f502877b051d73ccf7d1f632b56381b98f9869b5b5cea035322c0b0e9e434691e942d095875522605184ee0afcd702a3d31a5e5f5764ca1803e16fcdd0363837bc731030104dc0aa755082ab80d30a801b038f518a75ba7c52fcc2243"}, @NFTA_DATA_VALUE={0xcb, 0x1, "820bc02d200e9be1a7159952763ceda7d92dcff3e5e2a5ab8e862bdbf3cf18ec873fba4789d1af2f0566878ece05a9e834b49b3abe30420d5a9d3d3c16b7db18eb866f14089139a259bac6ddec7eff3e204da7e9a5343909eb2af167fd2964ff0d80c3e2a427814283b1ddae5147481c92424fb8dda4f7254b51828789e7a8a7a803fe777c03bbc55749372283b686349784b77c9ba23ec2c9d6c5b8ac22276d823f5f63010613835c4aaab3e2168b2b4d7ce80de99dbeb03d19143f9dda59de2a74d658a2cc66"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xb9c6f97c37dcd634}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "b1377ed0cd7b97f36746674d6c7954bcf4d91b46307b388130347be9c994352123252da4553b44bafdfc601339ff35bf71b0a6007a6f61a9bf0366b685f1db0489983b84bb96cd12245e75260dd90f46a7cd02f1405c3c75e2438e883a7be4580032057243a0768ccb4521c2ac46c66273663169c3fe23da1c6a1ae4a0595ee1069eb1569ced61d6112fe3589370f88a1f5e63b40c33e490efae6742963c2da877"}, @NFTA_DATA_VALUE={0xdb, 0x1, "4ddb7625ac851aa4268826bec4848e45c1d25bcffc150bfc22ab2e96d81c3ee36de97b80949ddd08959d100df013b18ad73af3301e48be15effdef59a4e634d9fecf667136611a70a81d05958c988371753ebe60734aea64c03fcd139e350b43b0f7f11beba99f388a21f04d7baed1de1b6f2e786b4e71555e634ae146fe3eace183e16c700170efdde753f150e78dcd476ad8c4e31ef92d55cd0c924d1514c2d7e5adab3fe455e4c0e72f44ca0be672c1e23c4bfc66c820981756fc0757c7ea0b7a8c2cc23cd5b6a3884240600f81dc8d43a75e0c491c"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "b08491202944eb160ebbb0c978588f6780cc8897c4eaf15fafe2f78f8f11e902d3fc400a9cb0936a3bbd646dedc61f7e9b31ccff8dbba096befb7477d928459bab38731274832407dcebf4e2f1bad3c3592a73de1bc3e46ab672f54c7fd4d6fb689339e165b0e16fefb1dc812216c7e6a9029ec898a404bfe7e17519cc1ee72bf5a63ad2b2c301908df3adf77ad4ca38f5b934e21b8b91d1209bce814deb60d42ccdf696f766ff1245a3dad9084a89b876bb841471339d2d8390481b3ff575f55671f6dac8b6e7969b533bda89"}, @NFTA_DATA_VALUE={0xdf, 0x1, "cc7f9aad83fa85339b14bed22e2c0d4ccc9d51c563334ea079bd759c3cc9e89cfb6ab492e043a25fc57a66bf04756a3ef53d52e07b3de91606a75747cb1476e705875aadaf153196cd34923d30c0dfae8e3675408e4c10b909be73697c73cc86606800659f9d204e541b5408b5bbc9d94311dfdca84a95494feefed5cab64f5efc393348a99522adc63dc1b6e8cf554c1f0db29b01a899e0dec7006973d97129d7f173a0f4207a88167553350fa5bff19bb8f149ebf3c0e0447f3e544945654e57d848509a13ff69ebb5db4714225a7a74af2f29c6dd644cc67369"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x2f, 0x7, 0x1, 0x0, "0f83b509720204ea80b45267bbe9a72eaeda51a629fcda2c0dc7387eb3f0fd1a7759ad056390e76f45dbb2"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8e4}, 0x1, 0x0, 0x0, 0xc0000c4}, 0x60000821) 3.614990577s ago: executing program 1 (id=1871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x1, 0xf}, 0x10c0e8, 0x2, 0x7, 0x4, 0x9, 0x8001, 0x7fff}, r1, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) getpgrp(r1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='nr0\x00', 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1c, &(0x7f0000000080)=0x3, 0x4) 3.551319159s ago: executing program 1 (id=1872): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="c3532c"], 0x7) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000180)) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x21, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000280)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x18, 0xc, 0x6b}, {@loopback, 0x4e26, 0x1, 0x1, 0x1}}, 0x44) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x2d, &(0x7f0000000e40)=""/136, &(0x7f0000000f00)=0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") socket$nl_generic(0x10, 0x3, 0x10) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000340)={{0x0, 0x2710}, {0x0, 0x2710}}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x11d3c2, 0x8) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, 0x48100) 3.459346951s ago: executing program 3 (id=1873): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x2, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x40, 0xfffffffffffffffe, 0x4, 0x9}}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa8}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r1, &(0x7f0000000300)='1\x00', 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000005840)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast2, 0x200}, 0x1c, 0x0}}], 0x2, 0xff00) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x11, r3, 0xb9564000) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x8e47f364c12607c6, 0x2, 0x1, 0x9, 0x2, 0xffffffffffffffe0}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0x1, 0x80000000, 0x9}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000008c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000900)=[{0x3, 0x3, 0x4, 0x6}, {0x2, 0x2, 0x9, 0xa}, {0x1, 0x1, 0xe, 0x6}, {0x1, 0x5, 0x1, 0xb}, {0x0, 0x5, 0x6, 0x3}, {0x5, 0x3, 0x10, 0xa}, {0x1, 0x5, 0x2, 0x3}, {0x20, 0x3, 0xe, 0x5}, {0x3, 0x2, 0xc, 0x6}, {0x1, 0x5, 0x9, 0x2}], 0x10, 0xffffffff}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x280, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg(r4, &(0x7f0000000300)={&(0x7f00000001c0)=@xdp={0x2c, 0x1, 0x0, 0xd}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="ec33e06097f58f81119838e1a9325a627cc1ecf82a9c8cb500673eb1913fb0e2f0f491a2b1c805813bccf9b53b0e3061f70ad0177ab8957b1c28d1e3c832dab3b1d98c9595ebd969c0ac5a962e67922b73a313b216f29b63d31c62ddcb5c51a180bad76bf1b533870ef3baa9e1c57c89f62f2a59", 0x74}], 0x1}, 0x24040085) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001100010000000000ffdbdf25180000001300000056ccabd869c2033840919fdc5a8d2500dca1cf5d8b1f28dee5bda772ebf00205b85aa3e49140"], 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 3.417334443s ago: executing program 4 (id=1874): r0 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb}) io_uring_enter(r0, 0x100000, 0x2, 0xf, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket(0x10, 0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfa958000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x6) r5 = dup(r1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1=0xac14142e}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 3.401284264s ago: executing program 1 (id=1875): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x2c180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x800, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x4090, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x42044045}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0xa04, 0x0, 0x43a1bd76, 0x6, 0x9, 0x2000006, 0x2, 0x0, 0x8000, 0x0, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/fib_trie\x00') read(r4, &(0x7f0000000200)=""/113, 0x71) preadv(r4, &(0x7f0000002280)=[{&(0x7f0000002840)=""/231, 0xe7}], 0x1, 0x4f, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x50) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) copy_file_range(r6, &(0x7f0000000080)=0x6923, r6, &(0x7f00000000c0)=0x2, 0x11, 0x0) 3.111915903s ago: executing program 3 (id=1876): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x2, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x40, 0xfffffffffffffffe, 0x4, 0x9}}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa8}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r1, &(0x7f0000000300)='1\x00', 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000005840)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast2, 0x200}, 0x1c, 0x0}}], 0x2, 0xff00) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x11, r3, 0xb9564000) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x8e47f364c12607c6, 0x2, 0x1, 0x9, 0x2, 0xffffffffffffffe0}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0x1, 0x80000000, 0x9}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000008c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000900)=[{0x3, 0x3, 0x4, 0x6}, {0x2, 0x2, 0x9, 0xa}, {0x1, 0x1, 0xe, 0x6}, {0x1, 0x5, 0x1, 0xb}, {0x0, 0x5, 0x6, 0x3}, {0x5, 0x3, 0x10, 0xa}, {0x1, 0x5, 0x2, 0x3}, {0x20, 0x3, 0xe, 0x5}, {0x3, 0x2, 0xc, 0x6}, {0x1, 0x5, 0x9, 0x2}], 0x10, 0xffffffff}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x280, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg(r4, &(0x7f0000000300)={&(0x7f00000001c0)=@xdp={0x2c, 0x1, 0x0, 0xd}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="ec33e06097f58f81119838e1a9325a627cc1ecf82a9c8cb500673eb1913fb0e2f0f491a2b1c805813bccf9b53b0e3061f70ad0177ab8957b1c28d1e3c832dab3b1d98c9595ebd969c0ac5a962e67922b73a313b216f29b63d31c62ddcb5c51a180bad76bf1b533870ef3baa9e1c57c89f62f", 0x72}], 0x1}, 0x24040085) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001100010000000000ffdbdf25180000001300000056ccabd869c2033840919fdc5a8d2500dca1cf5d8b1f28dee5bda772ebf00205b85aa3e49140"], 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 2.670963867s ago: executing program 0 (id=1877): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x500) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x12, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000008c0)={[{@test_dummy_encryption_v1}, {@nojournal_checksum}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x598, &(0x7f0000001900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5aec}, {0x20, 0xf, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x1}]}, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 2.588609839s ago: executing program 3 (id=1878): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) 2.512951852s ago: executing program 3 (id=1879): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) set_mempolicy(0x6, &(0x7f0000000040)=0x1, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x40, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 1.847879362s ago: executing program 0 (id=1880): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023658, 0x100040, 0xe, 0x20000002, 0x2, 0x2, 0x0, 0x0, 0x5, 0x21}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xf500, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a48", 0x8}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x8, [@restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @fwd={0x5}, @union={0xa, 0x1, 0x0, 0x5, 0x1, 0x876, [{0x3, 0x3, 0x1}]}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x6d, 0x0, 0x9}, @float={0xe, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x2e, 0x2e, 0x61, 0x0, 0x61, 0x2e]}}, &(0x7f0000000640)=""/4096, 0x6c, 0x1000, 0x7, 0x2}, 0x28) accept$inet6(r1, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x10, 0x0, 0x4, 0x9, {{0x19, 0x4, 0x0, 0x3, 0x64, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0xd5, [@broadcast]}, @rr={0x7, 0xb, 0x8f, [@multicast1, @empty]}, @ssrr={0x89, 0x7, 0xd, [@dev={0xac, 0x14, 0x14, 0x17}]}, @cipso={0x86, 0x13, 0x3, [{0x7, 0xd, "b5e39df84dc9a6c03561e0"}]}, @timestamp_addr={0x44, 0x24, 0x3f, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa7f2}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x9}]}]}}}}}) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@flushsa={0x20, 0x1c, 0x20, 0x70bd27, 0x25dfdbfd, {0x2b}, [@offload={0xc, 0x1c, {r4, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x8040) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000580)={{0x80, 0x3}, 'port0\x00', 0x7f, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x4}) 1.327403759s ago: executing program 0 (id=1881): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500000003000000010000840200000001000000020000000200000000616f5f0000c92c83dacb19a0c74de6395096c93059ab21f048984d9c6eee9dc83e74f08cde0c3a395ac2ae77c2f090daf15dd1a0cd18d00542cb50f45c8bac698f7e41515a4a9533409ffe45bd1b9e280c14e654539f98a0c7d46d6e5343da37c2c13a87aa6c17793288de2de92c9c6689e9cc97eedf2c5650cc62c6dc2560082567e999bcfcb3283cebc99ecf5578164fa594acf27324a59b6de1a3166357fb57f8"], &(0x7f0000002cc0)=""/4085, 0x35, 0xff5, 0x9, 0x0, 0x10000, @value=r0}, 0x28) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x2, 0x0, 0x6, 0x51010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0xffffff00], [], 'erspan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vcan0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xf9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20040881}, 0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x8000}, 0x10e068, 0x3, 0x7, 0x3, 0x6, 0x8002, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)="0fecd123f92f9ccd1ac1bbd9", 0xc}, {&(0x7f0000000140)}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$TUNSETIFF(r5, 0x8004b708, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0xb0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) connect$pppoe(r3, &(0x7f0000000240)={0x18, 0x0, {0x0, @local, 'erspan0\x00'}}, 0x1e) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r7, 0x9) sendto$inet(r7, &(0x7f00000000c0)="ab", 0x1, 0x400c805, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) 1.008360229s ago: executing program 1 (id=1882): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x10000, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0xffffff04, 0x61e5cc96}, 0x22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="04010000100007000000000000000000ff02000000000000000000000000000164010100000000000000000000000000ffff0000000000000000002002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000002b000000fc0000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000200000000000000000000000000000000000a1b00000000000000000000000000000000000020000000000007000000000000000000006200000000000000040000000000e80a000000000000000000000a00024070e8ff000000000014000e00fc0100000000000000000000000000018bb274e6875bff380f592a6959dfce2b10579bde"], 0x104}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r2, &(0x7f0000000080)}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129a42, 0x5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000000)=@chain) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3, 0x5}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r4, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x20}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000280)={{r6, &(0x7f0000000000)='\x00', 0x24002, &(0x7f0000000040)={@align=0x9, {0xf315, 0x6, 0x4, 0xa}}, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x2}, {[0x0, 0xb43, 0x7fff, 0x8001]}, 0xffffff47, 0xe, &(0x7f0000000240)=""/14}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r8, 0x0, 0xa, 0x8ffff) mknodat$loop(r7, &(0x7f0000000140)='./file0\x00', 0x200, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 711.893378ms ago: executing program 4 (id=1883): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0xb6a}, 0x16, 0x1) 587.487892ms ago: executing program 4 (id=1884): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xcfd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305828, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x400000000000004}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4cb4e0ca6302aed56dbd7000fbdbdf258fe2ab7178bf8564594ef6984dffffff000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000240012800c0001006d6163766c616e00140002800800030003000000080001000800000008000500", @ANYRES32=r1, @ANYBLOB], 0x4c}, 0x1, 0x200000000000000, 0x0, 0x1}, 0x8000002) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x104) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid}], [], 0x6b}}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffe}, {0x0, 0x10000000000000, 0x0, 0x1000000000000}, 0x40}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x300, @in6=@dev, 0x0, 0x4}]}]}, 0x13c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00'}) 424.343067ms ago: executing program 3 (id=1885): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="c3532c"], 0x7) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000180)) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x21, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000280)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x18, 0xc, 0x6b}, {@loopback, 0x4e26, 0x1, 0x1, 0x1}}, 0x44) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x2d, &(0x7f0000000e40)=""/136, &(0x7f0000000f00)=0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") socket$nl_generic(0x10, 0x3, 0x10) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000340)={{0x0, 0x2710}, {0x0, 0x2710}}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x11d3c2, 0x8) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, 0x48100) 377.523239ms ago: executing program 0 (id=1886): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x2, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x40, 0xfffffffffffffffe, 0x4, 0x9}}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa8}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r1, &(0x7f0000000300)='1\x00', 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000005840)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x4, @mcast2, 0x200}, 0x1c, 0x0}}], 0x2, 0xff00) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x11, r3, 0xb9564000) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x8e47f364c12607c6, 0x2, 0x1, 0x9, 0x2, 0xffffffffffffffe0}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0x1, 0x80000000, 0x9}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000008c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000900)=[{0x3, 0x3, 0x4, 0x6}, {0x2, 0x2, 0x9, 0xa}, {0x1, 0x1, 0xe, 0x6}, {0x1, 0x5, 0x1, 0xb}, {0x0, 0x5, 0x6, 0x3}, {0x5, 0x3, 0x10, 0xa}, {0x1, 0x5, 0x2, 0x3}, {0x20, 0x3, 0xe, 0x5}, {0x3, 0x2, 0xc, 0x6}, {0x1, 0x5, 0x9, 0x2}], 0x10, 0xffffffff}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x280, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg(r4, &(0x7f0000000300)={&(0x7f00000001c0)=@xdp={0x2c, 0x1, 0x0, 0xd}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="ec33e06097f58f81119838e1a9325a627cc1ecf82a9c8cb500673eb1913fb0e2f0f491a2b1c805813bccf9b53b0e3061f70ad0177ab8957b1c28d1e3c832dab3b1d98c9595ebd969c0ac5a962e67922b73a313b216f29b63d31c62ddcb5c51a180bad76bf1b533870ef3baa9e1c57c89f62f2a59", 0x74}], 0x1}, 0x24040085) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001100010000000000ffdbdf25180000001300000056ccabd869c2033840919fdc5a8d2500dca1cf5d8b1f28dee5bda772ebf00205b85aa3e49140"], 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 209.309673ms ago: executing program 3 (id=1887): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000001f7e4f038212550b9dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x0, 0x5, 0x5, 0x8}, 0x10) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x364, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x7, 0x200}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d82000000000000002240f7ffffff00"}) r9 = syz_open_pts(r0, 0x0) r10 = dup3(r9, r0, 0x0) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f00000000c0)={0x5, 0x2ce3, 0x52, 0x4, 0xd, "837aa6c49afbf36174247e18cd3fc1e8bd89fe", 0x8, 0x2}) sendmsg$NFT_BATCH(r10, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}]}, @NFT_MSG_DELCHAIN={0x16c, 0x5, 0xa, 0x300, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0xed, 0xc, "dc13174373180b7c4c4e9ef4ebfcc5e5261054d7b8610c50418ce4c92de48efb97ef2a11cbae0dce5eb056874cb38b4165ebd1068d4825494404b7d4855f1c0e8d82c0cfe1f327fad187a666755c101b29e88823cb425cda250538bc1161ee331db5e8e964bfc0e4a4d87bfcb8c912fcb19f698c3b125d7f36dd861327347efe07388e1c97a49fb23b97f4235c390db20b7625063f842bd03b3bb128962f9965d5762a293c42995585908c22872e167fd21bc8e7972fb916ac8f8f7a87a4afe95c2b70216cffc9c58113bbd1be519c2a22ec11c88b5398357ff21401ad504a970176d2faa265753fe0"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x5a0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_EXPRESSIONS={0x584, 0x12, 0x0, 0x1, [{0x580, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x56c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x558, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "88d799e63ccb51b66befb0bf6929b3625776be399bd94a53a7ef2f4f3083f25e651cf66e61ea537f00a8154222b43b5405e8ca2f0073b0b7b8fc8baa03673262218f16d32f502877b051d73ccf7d1f632b56381b98f9869b5b5cea035322c0b0e9e434691e942d095875522605184ee0afcd702a3d31a5e5f5764ca1803e16fcdd0363837bc731030104dc0aa755082ab80d30a801b038f518a75ba7c52fcc2243"}, @NFTA_DATA_VALUE={0xcb, 0x1, "820bc02d200e9be1a7159952763ceda7d92dcff3e5e2a5ab8e862bdbf3cf18ec873fba4789d1af2f0566878ece05a9e834b49b3abe30420d5a9d3d3c16b7db18eb866f14089139a259bac6ddec7eff3e204da7e9a5343909eb2af167fd2964ff0d80c3e2a427814283b1ddae5147481c92424fb8dda4f7254b51828789e7a8a7a803fe777c03bbc55749372283b686349784b77c9ba23ec2c9d6c5b8ac22276d823f5f63010613835c4aaab3e2168b2b4d7ce80de99dbeb03d19143f9dda59de2a74d658a2cc66"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xb9c6f97c37dcd634}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "b1377ed0cd7b97f36746674d6c7954bcf4d91b46307b388130347be9c994352123252da4553b44bafdfc601339ff35bf71b0a6007a6f61a9bf0366b685f1db0489983b84bb96cd12245e75260dd90f46a7cd02f1405c3c75e2438e883a7be4580032057243a0768ccb4521c2ac46c66273663169c3fe23da1c6a1ae4a0595ee1069eb1569ced61d6112fe3589370f88a1f5e63b40c33e490efae6742963c2da877"}, @NFTA_DATA_VALUE={0xdb, 0x1, "4ddb7625ac851aa4268826bec4848e45c1d25bcffc150bfc22ab2e96d81c3ee36de97b80949ddd08959d100df013b18ad73af3301e48be15effdef59a4e634d9fecf667136611a70a81d05958c988371753ebe60734aea64c03fcd139e350b43b0f7f11beba99f388a21f04d7baed1de1b6f2e786b4e71555e634ae146fe3eace183e16c700170efdde753f150e78dcd476ad8c4e31ef92d55cd0c924d1514c2d7e5adab3fe455e4c0e72f44ca0be672c1e23c4bfc66c820981756fc0757c7ea0b7a8c2cc23cd5b6a3884240600f81dc8d43a75e0c491c"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "b08491202944eb160ebbb0c978588f6780cc8897c4eaf15fafe2f78f8f11e902d3fc400a9cb0936a3bbd646dedc61f7e9b31ccff8dbba096befb7477d928459bab38731274832407dcebf4e2f1bad3c3592a73de1bc3e46ab672f54c7fd4d6fb689339e165b0e16fefb1dc812216c7e6a9029ec898a404bfe7e17519cc1ee72bf5a63ad2b2c301908df3adf77ad4ca38f5b934e21b8b91d1209bce814deb60d42ccdf696f766ff1245a3dad9084a89b876bb841471339d2d8390481b3ff575f55671f6dac8b6e7969b533bda89"}, @NFTA_DATA_VALUE={0xdf, 0x1, "cc7f9aad83fa85339b14bed22e2c0d4ccc9d51c563334ea079bd759c3cc9e89cfb6ab492e043a25fc57a66bf04756a3ef53d52e07b3de91606a75747cb1476e705875aadaf153196cd34923d30c0dfae8e3675408e4c10b909be73697c73cc86606800659f9d204e541b5408b5bbc9d94311dfdca84a95494feefed5cab64f5efc393348a99522adc63dc1b6e8cf554c1f0db29b01a899e0dec7006973d97129d7f173a0f4207a88167553350fa5bff19bb8f149ebf3c0e0447f3e544945654e57d848509a13ff69ebb5db4714225a7a74af2f29c6dd644cc67369"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x2f, 0x7, 0x1, 0x0, "0f83b509720204ea80b45267bbe9a72eaeda51a629fcda2c0dc7387eb3f0fd1a7759ad056390e76f45dbb2"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8e4}, 0x1, 0x0, 0x0, 0xc0000c4}, 0x60000821) 43.547519ms ago: executing program 1 (id=1888): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000400)=ANY=[], 0x1, 0x34f, &(0x7f00000000c0)="$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") r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=0x64010100, 0x1d, 0x1}}) 0s ago: executing program 1 (id=1889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x1, 0xf}, 0x10c0e8, 0x2, 0x7, 0x4, 0x9, 0x8001, 0x7fff}, r1, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x35, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) kernel console output (not intermixed with test programs): 0x1b01/0x2050 [ 89.340857][ T5879] __sys_sendmmsg+0x185/0x320 [ 89.340930][ T5879] __x64_sys_sendmmsg+0x57/0x70 [ 89.340960][ T5879] x64_sys_call+0x27aa/0x3020 [ 89.340989][ T5879] do_syscall_64+0x12c/0x3b0 [ 89.341020][ T5879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.341076][ T5879] RIP: 0033:0x7f3f5dbece59 [ 89.341168][ T5879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.341190][ T5879] RSP: 002b:00007f3f5c647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 89.341215][ T5879] RAX: ffffffffffffffda RBX: 00007f3f5de65fa0 RCX: 00007f3f5dbece59 [ 89.341232][ T5879] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 89.341308][ T5879] RBP: 00007f3f5c647090 R08: 0000000000000000 R09: 0000000000000000 [ 89.341321][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.341333][ T5879] R13: 00007f3f5de66038 R14: 00007f3f5de65fa0 R15: 00007ffd1ccaed48 [ 89.341352][ T5879] [ 90.529205][ T3388] usb 1-1: enqueue for inactive port 0 [ 90.539389][ T3388] usb 1-1: enqueue for inactive port 0 [ 90.615854][ T3388] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 91.060460][ T5929] batman_adv: batadv0: Adding interface: vlan2 [ 91.067310][ T5929] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.093854][ T5929] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 91.342564][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 91.352098][ T5942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5942 comm=syz.3.1004 [ 91.840673][ T28] kauditd_printk_skb: 906 callbacks suppressed [ 91.840690][ T28] audit: type=1400 audit(1779257478.009:7713): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.875256][ T5964] FAULT_INJECTION: forcing a failure. [ 91.875256][ T5964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.885498][ T28] audit: type=1400 audit(1779257478.009:7714): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 91.903380][ T5964] CPU: 0 UID: 0 PID: 5964 Comm: syz.2.1014 Tainted: G W syzkaller #0 PREEMPT(full) [ 91.903416][ T5964] Tainted: [W]=WARN [ 91.903428][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.903505][ T5964] Call Trace: [ 91.903512][ T5964] [ 91.903521][ T5964] __dump_stack+0x1d/0x30 [ 91.903593][ T5964] dump_stack_lvl+0x95/0xd0 [ 91.903616][ T5964] dump_stack+0x15/0x1b [ 91.903666][ T5964] should_fail_ex+0x263/0x280 [ 91.903696][ T5964] should_fail+0xb/0x20 [ 91.903748][ T5964] should_fail_usercopy+0x1a/0x20 [ 91.903849][ T5964] _copy_from_user+0x1c/0xb0 [ 91.903882][ T5964] kstrtouint_from_user+0x69/0xf0 [ 91.903908][ T5964] ? 0xffffffff81000000 [ 91.903976][ T5964] ? selinux_file_permission+0x1e1/0x320 [ 91.904004][ T5964] proc_fail_nth_write+0x50/0x160 [ 91.904035][ T5964] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 91.904163][ T5964] vfs_write+0x269/0x9f0 [ 91.904193][ T5964] ? __rcu_read_unlock+0x4e/0x70 [ 91.904216][ T5964] ? __fget_files+0x184/0x1c0 [ 91.904299][ T5964] ? mutex_lock+0x57/0x90 [ 91.904324][ T5964] ksys_write+0xdc/0x1a0 [ 91.904354][ T5964] __x64_sys_write+0x40/0x50 [ 91.904384][ T5964] x64_sys_call+0x27e1/0x3020 [ 91.904422][ T5964] do_syscall_64+0x12c/0x3b0 [ 91.904454][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.904553][ T5964] RIP: 0033:0x7fb6a3edd68e [ 91.904570][ T5964] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 91.904590][ T5964] RSP: 002b:00007fb6a2976fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.904613][ T5964] RAX: ffffffffffffffda RBX: 00007fb6a29776c0 RCX: 00007fb6a3edd68e [ 91.904637][ T5964] RDX: 0000000000000001 RSI: 00007fb6a29770a0 RDI: 0000000000000003 [ 91.904651][ T5964] RBP: 00007fb6a2977090 R08: 0000000000000000 R09: 0000000000000000 [ 91.904664][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.904678][ T5964] R13: 00007fb6a4196038 R14: 00007fb6a4195fa0 R15: 00007ffeacbd2fa8 [ 91.904697][ T5964] [ 92.120178][ T28] audit: type=1400 audit(1779257478.039:7715): avc: denied { create } for pid=5963 comm="syz.2.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 92.139798][ T28] audit: type=1400 audit(1779257478.059:7716): avc: denied { append } for pid=5962 comm="syz.1.1013" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 92.162726][ T28] audit: type=1400 audit(1779257478.059:7717): avc: denied { create } for pid=5962 comm="syz.1.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 92.183389][ T28] audit: type=1400 audit(1779257478.059:7718): avc: denied { create } for pid=5962 comm="syz.1.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 92.203369][ T28] audit: type=1400 audit(1779257478.099:7719): avc: denied { read write } for pid=5962 comm="syz.1.1013" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.227692][ T28] audit: type=1400 audit(1779257478.129:7720): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.251959][ T28] audit: type=1400 audit(1779257478.169:7721): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.276291][ T28] audit: type=1400 audit(1779257478.169:7722): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.995337][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 93.219482][ T6021] bond1: entered promiscuous mode [ 93.423672][ T6044] FAULT_INJECTION: forcing a failure. [ 93.423672][ T6044] name failslab, interval 1, probability 0, space 0, times 0 [ 93.436997][ T6044] CPU: 0 UID: 0 PID: 6044 Comm: syz.3.1047 Tainted: G W syzkaller #0 PREEMPT(full) [ 93.437032][ T6044] Tainted: [W]=WARN [ 93.437111][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 93.437124][ T6044] Call Trace: [ 93.437131][ T6044] [ 93.437140][ T6044] __dump_stack+0x1d/0x30 [ 93.437168][ T6044] dump_stack_lvl+0x95/0xd0 [ 93.437245][ T6044] dump_stack+0x15/0x1b [ 93.437267][ T6044] should_fail_ex+0x263/0x280 [ 93.437299][ T6044] should_failslab+0x8c/0xb0 [ 93.437337][ T6044] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 93.437378][ T6044] ? sidtab_sid2str_get+0xa0/0x130 [ 93.437408][ T6044] kmemdup_noprof+0x2b/0x70 [ 93.437505][ T6044] sidtab_sid2str_get+0xa0/0x130 [ 93.437533][ T6044] security_sid_to_context_core+0x1eb/0x2e0 [ 93.437562][ T6044] security_sid_to_context+0x27/0x40 [ 93.437589][ T6044] selinux_lsmprop_to_secctx+0x67/0xf0 [ 93.437665][ T6044] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 93.437704][ T6044] audit_log_subj_ctx+0xa4/0x3e0 [ 93.437739][ T6044] ? skb_put+0xa9/0xf0 [ 93.437809][ T6044] audit_log_task_context+0x48/0x70 [ 93.437867][ T6044] audit_log_task+0xf3/0x250 [ 93.437949][ T6044] audit_seccomp+0x60/0x100 [ 93.437971][ T6044] ? __seccomp_filter+0x8db/0x1350 [ 93.438005][ T6044] __seccomp_filter+0x8ec/0x1350 [ 93.438039][ T6044] ? __rcu_read_unlock+0x4e/0x70 [ 93.438134][ T6044] ? __se_sys_io_uring_enter+0xe5b/0xfc0 [ 93.438194][ T6044] ? mutex_unlock+0x4e/0x90 [ 93.438222][ T6044] __secure_computing+0x81/0x150 [ 93.438323][ T6044] do_syscall_64+0xce/0x3b0 [ 93.438356][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.438380][ T6044] RIP: 0033:0x7f3f5dbad68e [ 93.438398][ T6044] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.438453][ T6044] RSP: 002b:00007f3f5c646fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.438478][ T6044] RAX: ffffffffffffffda RBX: 00007f3f5c6476c0 RCX: 00007f3f5dbad68e [ 93.438495][ T6044] RDX: 000000000000000f RSI: 00007f3f5c6470a0 RDI: 0000000000000003 [ 93.438524][ T6044] RBP: 00007f3f5c647090 R08: 0000000000000000 R09: 0000000000000000 [ 93.438539][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.438554][ T6044] R13: 00007f3f5de66038 R14: 00007f3f5de65fa0 R15: 00007ffd1ccaed48 [ 93.438574][ T6044] [ 93.860234][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1053'. [ 94.589174][ T6089] netlink: 'syz.3.1065': attribute type 9 has an invalid length. [ 94.742747][ T6098] syzkaller0: entered promiscuous mode [ 94.751627][ T6098] syzkaller0: entered allmulticast mode [ 96.830883][ T6190] sctp: [Deprecated]: syz.3.1107 (pid 6190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.830883][ T6190] Use struct sctp_sack_info instead [ 96.850189][ T28] kauditd_printk_skb: 568 callbacks suppressed [ 96.850206][ T28] audit: type=1400 audit(2000000004.430:8290): avc: denied { execmem } for pid=6189 comm="syz.3.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 96.851236][ T6190] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1107'. [ 96.861819][ T28] audit: type=1400 audit(2000000004.430:8291): avc: denied { create } for pid=6189 comm="syz.3.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 96.906702][ T28] audit: type=1400 audit(2000000004.460:8292): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.931226][ T28] audit: type=1400 audit(2000000004.460:8293): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.955759][ T28] audit: type=1400 audit(2000000004.460:8294): avc: denied { open } for pid=6192 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 96.975393][ T28] audit: type=1400 audit(2000000004.460:8295): avc: denied { prog_load } for pid=6192 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.995130][ T28] audit: type=1400 audit(2000000004.460:8296): avc: denied { create } for pid=6192 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 97.015317][ T28] audit: type=1400 audit(2000000004.460:8297): avc: denied { create } for pid=6192 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 97.035203][ T28] audit: type=1400 audit(2000000004.460:8298): avc: denied { map_create } for pid=6192 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 97.054739][ T28] audit: type=1400 audit(2000000004.460:8299): avc: denied { prog_load } for pid=6192 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 97.180719][ T6220] sctp: [Deprecated]: syz.0.1119 (pid 6220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.180719][ T6220] Use struct sctp_sack_info instead [ 97.199046][ T6220] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1119'. [ 97.611600][ T6240] vlan2: entered promiscuous mode [ 97.616899][ T6240] bridge0: entered promiscuous mode [ 97.646151][ C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 97.695039][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'. [ 97.771783][ T6247] sctp: [Deprecated]: syz.3.1131 (pid 6247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.771783][ T6247] Use struct sctp_sack_info instead [ 97.790024][ T6247] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1131'. [ 97.818194][ T6250] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.285289][ T6264] FAULT_INJECTION: forcing a failure. [ 98.285289][ T6264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.300506][ T6264] CPU: 0 UID: 0 PID: 6264 Comm: syz.2.1136 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.300584][ T6264] Tainted: [W]=WARN [ 98.300666][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.300680][ T6264] Call Trace: [ 98.300686][ T6264] [ 98.300696][ T6264] __dump_stack+0x1d/0x30 [ 98.300731][ T6264] dump_stack_lvl+0x95/0xd0 [ 98.300756][ T6264] dump_stack+0x15/0x1b [ 98.300820][ T6264] should_fail_ex+0x263/0x280 [ 98.300853][ T6264] should_fail+0xb/0x20 [ 98.300884][ T6264] should_fail_usercopy+0x1a/0x20 [ 98.300919][ T6264] _copy_to_iter+0xd2/0xea0 [ 98.301027][ T6264] ? chacha_block_generic+0x2dc/0x310 [ 98.301137][ T6264] get_random_bytes_user+0x138/0x2b0 [ 98.301179][ T6264] ? vfs_write+0x86e/0x9f0 [ 98.301213][ T6264] ? import_ubuf+0xe8/0x120 [ 98.301246][ T6264] __x64_sys_getrandom+0xcf/0x1a0 [ 98.301311][ T6264] x64_sys_call+0x2a28/0x3020 [ 98.301336][ T6264] do_syscall_64+0x12c/0x3b0 [ 98.301412][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.301437][ T6264] RIP: 0033:0x7fb6a3f1ce59 [ 98.301458][ T6264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.301532][ T6264] RSP: 002b:00007fb6a2956028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 98.301559][ T6264] RAX: ffffffffffffffda RBX: 00007fb6a4196090 RCX: 00007fb6a3f1ce59 [ 98.301576][ T6264] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 98.301590][ T6264] RBP: 00007fb6a2956090 R08: 0000000000000000 R09: 0000000000000000 [ 98.301613][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.301626][ T6264] R13: 00007fb6a4196128 R14: 00007fb6a4196090 R15: 00007ffeacbd2fa8 [ 98.301648][ T6264] [ 98.880812][ T6289] FAULT_INJECTION: forcing a failure. [ 98.880812][ T6289] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 98.894303][ T6289] CPU: 0 UID: 0 PID: 6289 Comm: syz.0.1145 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.894341][ T6289] Tainted: [W]=WARN [ 98.894349][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.894364][ T6289] Call Trace: [ 98.894373][ T6289] [ 98.894420][ T6289] __dump_stack+0x1d/0x30 [ 98.894500][ T6289] dump_stack_lvl+0x95/0xd0 [ 98.894525][ T6289] dump_stack+0x15/0x1b [ 98.894595][ T6289] should_fail_ex+0x263/0x280 [ 98.894628][ T6289] should_fail_alloc_page+0xf2/0x100 [ 98.894660][ T6289] __alloc_frozen_pages_noprof+0x108/0x350 [ 98.894754][ T6289] alloc_pages_mpol+0xb3/0x260 [ 98.894782][ T6289] alloc_pages_noprof+0x8f/0x140 [ 98.894887][ T6289] get_free_pages_noprof+0xc/0x40 [ 98.894955][ T6289] __se_sys_mincore+0xdc/0x480 [ 98.895015][ T6289] __x64_sys_mincore+0x43/0x50 [ 98.895049][ T6289] x64_sys_call+0x29f1/0x3020 [ 98.895076][ T6289] do_syscall_64+0x12c/0x3b0 [ 98.895118][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.895163][ T6289] RIP: 0033:0x7f657492ce59 [ 98.895190][ T6289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.895245][ T6289] RSP: 002b:00007f657337f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 98.895266][ T6289] RAX: ffffffffffffffda RBX: 00007f6574ba5fa0 RCX: 00007f657492ce59 [ 98.895283][ T6289] RDX: 0000200000000440 RSI: 0000000000800000 RDI: 0000200000000000 [ 98.895299][ T6289] RBP: 00007f657337f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.895349][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.895364][ T6289] R13: 00007f6574ba6038 R14: 00007f6574ba5fa0 R15: 00007ffd114b4d78 [ 98.895382][ T6289] [ 99.200997][ T6300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1149'. [ 99.218806][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'. [ 99.411587][ T6312] FAULT_INJECTION: forcing a failure. [ 99.411587][ T6312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 99.424893][ T6312] CPU: 1 UID: 0 PID: 6312 Comm: syz.2.1155 Tainted: G W syzkaller #0 PREEMPT(full) [ 99.424930][ T6312] Tainted: [W]=WARN [ 99.424937][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 99.424951][ T6312] Call Trace: [ 99.424958][ T6312] [ 99.424966][ T6312] __dump_stack+0x1d/0x30 [ 99.425018][ T6312] dump_stack_lvl+0x95/0xd0 [ 99.425041][ T6312] dump_stack+0x15/0x1b [ 99.425062][ T6312] should_fail_ex+0x263/0x280 [ 99.425094][ T6312] should_fail_alloc_page+0xf2/0x100 [ 99.425144][ T6312] __alloc_frozen_pages_noprof+0x108/0x350 [ 99.425177][ T6312] alloc_pages_mpol+0xb3/0x260 [ 99.425202][ T6312] ? css_rstat_updated+0xbb/0x280 [ 99.425228][ T6312] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 99.425257][ T6312] handle_mm_fault+0x1040/0x2e70 [ 99.425321][ T6312] ? vma_start_read+0x1c7/0x2c0 [ 99.425361][ T6312] do_user_addr_fault+0x62f/0x1050 [ 99.425394][ T6312] ? ksys_mmap_pgoff+0xc1/0x310 [ 99.425465][ T6312] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 99.425493][ T6312] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 99.425520][ T6312] ? trace_page_fault_user+0x1f/0xa0 [ 99.425583][ T6312] exc_page_fault+0x62/0xa0 [ 99.425610][ T6312] asm_exc_page_fault+0x26/0x30 [ 99.425633][ T6312] RIP: 0033:0x7fb6a3dd4123 [ 99.425661][ T6312] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 99.425682][ T6312] RSP: 002b:00007fb6a2976470 EFLAGS: 00010206 [ 99.425745][ T6312] RAX: 0000000000002000 RBX: 00007fb6a2976530 RCX: 00007fb69a557000 [ 99.425760][ T6312] RDX: 00007fb6a29766d0 RSI: 0000000000000001 RDI: 00007fb6a29765d0 [ 99.425780][ T6312] RBP: 0000000000000045 R08: 0000000000000007 R09: 0000000000000046 [ 99.425795][ T6312] R10: 0000000000000050 R11: 00007fb6a2976530 R12: 0000000000000001 [ 99.425810][ T6312] R13: 00007fb6a3fd2900 R14: 00000000000000ff R15: 00007fb6a29765d0 [ 99.425841][ T6312] [ 99.673015][ T6312] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 101.045355][ T6376] No such timeout policy "syz1" [ 101.399505][ T6393] batadv0: entered promiscuous mode [ 101.414719][ T6393] macvlan2: entered allmulticast mode [ 101.429362][ T6393] batadv0: entered allmulticast mode [ 101.444136][ T6393] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.464342][ T6393] batadv0: left allmulticast mode [ 101.476237][ T6393] batadv0: left promiscuous mode [ 101.869904][ T28] kauditd_printk_skb: 1000 callbacks suppressed [ 101.869923][ T28] audit: type=1400 audit(2000000009.450:9300): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.933025][ T28] audit: type=1400 audit(2000000009.480:9301): avc: denied { create } for pid=6412 comm="syz.2.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 101.984364][ T28] audit: type=1400 audit(2000000009.480:9302): avc: denied { create } for pid=6412 comm="syz.2.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 102.030813][ T28] audit: type=1400 audit(2000000009.530:9303): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 102.088234][ T28] audit: type=1400 audit(2000000009.530:9304): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 102.155878][ T28] audit: type=1400 audit(2000000009.540:9305): avc: denied { map_create } for pid=6414 comm="syz.3.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.192085][ T28] audit: type=1400 audit(2000000009.540:9306): avc: denied { prog_load } for pid=6414 comm="syz.3.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.229386][ T28] audit: type=1400 audit(2000000009.590:9307): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 102.277212][ T28] audit: type=1400 audit(2000000009.590:9308): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 102.329316][ T28] audit: type=1400 audit(2000000009.600:9309): avc: denied { read write } for pid=6421 comm="syz.3.1202" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 102.569100][ T6444] sctp: [Deprecated]: syz.2.1212 (pid 6444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.569100][ T6444] Use struct sctp_sack_info instead [ 102.606226][ T6444] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1212'. [ 102.771477][ T6450] netlink: 'syz.2.1215': attribute type 1 has an invalid length. [ 102.809755][ T6450] bond2: (slave dummy0): making interface the new active one [ 102.825307][ T6450] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 102.849113][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 103.665121][ T6499] FAULT_INJECTION: forcing a failure. [ 103.665121][ T6499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.697598][ T6499] CPU: 1 UID: 0 PID: 6499 Comm: syz.2.1234 Tainted: G W syzkaller #0 PREEMPT(full) [ 103.697638][ T6499] Tainted: [W]=WARN [ 103.697646][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.697659][ T6499] Call Trace: [ 103.697719][ T6499] [ 103.697728][ T6499] __dump_stack+0x1d/0x30 [ 103.697757][ T6499] dump_stack_lvl+0x95/0xd0 [ 103.697783][ T6499] dump_stack+0x15/0x1b [ 103.697804][ T6499] should_fail_ex+0x263/0x280 [ 103.698028][ T6499] should_fail+0xb/0x20 [ 103.698056][ T6499] should_fail_usercopy+0x1a/0x20 [ 103.698150][ T6499] _copy_to_user+0x20/0xa0 [ 103.698180][ T6499] simple_read_from_buffer+0xb5/0x130 [ 103.698255][ T6499] proc_fail_nth_read+0x10e/0x150 [ 103.698283][ T6499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.698321][ T6499] vfs_read+0x1ab/0x7f0 [ 103.698352][ T6499] ? __rcu_read_unlock+0x4e/0x70 [ 103.698377][ T6499] ? __fget_files+0x184/0x1c0 [ 103.698452][ T6499] ? mutex_lock+0x57/0x90 [ 103.698475][ T6499] ksys_read+0xdc/0x1a0 [ 103.698509][ T6499] __x64_sys_read+0x40/0x50 [ 103.698541][ T6499] x64_sys_call+0x2886/0x3020 [ 103.698632][ T6499] do_syscall_64+0x12c/0x3b0 [ 103.698743][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.698767][ T6499] RIP: 0033:0x7fb6a3edd68e [ 103.698784][ T6499] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.698802][ T6499] RSP: 002b:00007fb6a2976fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.698855][ T6499] RAX: ffffffffffffffda RBX: 00007fb6a29776c0 RCX: 00007fb6a3edd68e [ 103.698869][ T6499] RDX: 000000000000000f RSI: 00007fb6a29770a0 RDI: 0000000000000004 [ 103.698882][ T6499] RBP: 00007fb6a2977090 R08: 0000000000000000 R09: 0000000000000000 [ 103.698896][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.698971][ T6499] R13: 00007fb6a4196038 R14: 00007fb6a4195fa0 R15: 00007ffeacbd2fa8 [ 103.698989][ T6499] [ 104.045657][ T6505] netlink: 'syz.1.1237': attribute type 5 has an invalid length. [ 104.157232][ T6508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1238'. [ 104.211029][ T6510] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 104.577372][ T6533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1250'. [ 104.628255][ T6541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1253'. [ 104.862982][ T6568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1265'. [ 104.937954][ T6574] FAULT_INJECTION: forcing a failure. [ 104.937954][ T6574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.980070][ T6574] CPU: 1 UID: 0 PID: 6574 Comm: syz.1.1268 Tainted: G W syzkaller #0 PREEMPT(full) [ 104.980107][ T6574] Tainted: [W]=WARN [ 104.980187][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.980201][ T6574] Call Trace: [ 104.980209][ T6574] [ 104.980218][ T6574] __dump_stack+0x1d/0x30 [ 104.980245][ T6574] dump_stack_lvl+0x95/0xd0 [ 104.980268][ T6574] dump_stack+0x15/0x1b [ 104.980350][ T6574] should_fail_ex+0x263/0x280 [ 104.980379][ T6574] should_fail+0xb/0x20 [ 104.980520][ T6574] should_fail_usercopy+0x1a/0x20 [ 104.980554][ T6574] _copy_from_iter+0xcf/0xea0 [ 104.980587][ T6574] ? __alloc_skb+0x4f6/0x690 [ 104.980611][ T6574] ? __alloc_skb+0x200/0x690 [ 104.980643][ T6574] netlink_sendmsg+0x4ae/0x6f0 [ 104.980678][ T6574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.980711][ T6574] ____sys_sendmsg+0x563/0x5b0 [ 104.980793][ T6574] ___sys_sendmsg+0x195/0x1e0 [ 104.980870][ T6574] __x64_sys_sendmsg+0xd4/0x160 [ 104.980965][ T6574] x64_sys_call+0x194c/0x3020 [ 104.981061][ T6574] do_syscall_64+0x12c/0x3b0 [ 104.981096][ T6574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.981123][ T6574] RIP: 0033:0x7ff65fb8ce59 [ 104.981142][ T6574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.981160][ T6574] RSP: 002b:00007ff65e5e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.981243][ T6574] RAX: ffffffffffffffda RBX: 00007ff65fe05fa0 RCX: 00007ff65fb8ce59 [ 104.981260][ T6574] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000006 [ 104.981273][ T6574] RBP: 00007ff65e5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.981366][ T6574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.981378][ T6574] R13: 00007ff65fe06038 R14: 00007ff65fe05fa0 R15: 00007fff72b5b3f8 [ 104.981396][ T6574] [ 105.411814][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1278'. [ 106.203385][ T6592] syz.0.1276 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 106.218903][ T6592] CPU: 1 UID: 0 PID: 6592 Comm: syz.0.1276 Tainted: G W syzkaller #0 PREEMPT(full) [ 106.218939][ T6592] Tainted: [W]=WARN [ 106.218955][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.218967][ T6592] Call Trace: [ 106.218974][ T6592] [ 106.218982][ T6592] __dump_stack+0x1d/0x30 [ 106.219010][ T6592] dump_stack_lvl+0x95/0xd0 [ 106.219036][ T6592] dump_stack+0x15/0x1b [ 106.219059][ T6592] dump_header+0x80/0x240 [ 106.219149][ T6592] oom_kill_process+0x295/0x350 [ 106.219185][ T6592] out_of_memory+0x97d/0xb80 [ 106.219249][ T6592] try_charge_memcg+0x62f/0xa10 [ 106.219278][ T6592] ? radix_tree_lookup+0xfa/0x140 [ 106.219308][ T6592] charge_memcg+0x6d/0x120 [ 106.219342][ T6592] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 106.219387][ T6592] __swap_cache_prepare_and_add+0x69/0x4a0 [ 106.219416][ T6592] ? alloc_pages_mpol+0x217/0x260 [ 106.219445][ T6592] swap_cache_alloc_folio+0xa2/0x120 [ 106.219471][ T6592] swap_cluster_readahead+0x35c/0x3c0 [ 106.219558][ T6592] swapin_readahead+0xde/0x840 [ 106.219586][ T6592] ? _raw_spin_unlock+0x9/0x30 [ 106.219682][ T6592] ? swap_put_entries_cluster+0x46c/0x490 [ 106.219709][ T6592] ? __entry_text_end+0x1d808/0x102179 [ 106.219739][ T6592] ? __rcu_read_unlock+0x4e/0x70 [ 106.219826][ T6592] ? swap_cache_get_folio+0x1e0/0x1f0 [ 106.219849][ T6592] do_swap_page+0x31e/0x2180 [ 106.219891][ T6592] ? css_rstat_updated+0xbb/0x280 [ 106.219916][ T6592] ? __rcu_read_lock+0x36/0x50 [ 106.219936][ T6592] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 106.220107][ T6592] handle_mm_fault+0xb30/0x2e70 [ 106.220138][ T6592] ? vma_start_read+0x1c7/0x2c0 [ 106.220179][ T6592] do_user_addr_fault+0x62f/0x1050 [ 106.220221][ T6592] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 106.220244][ T6592] ? trace_page_fault_user+0x1f/0xa0 [ 106.220344][ T6592] exc_page_fault+0x62/0xa0 [ 106.220371][ T6592] asm_exc_page_fault+0x26/0x30 [ 106.220392][ T6592] RIP: 0033:0x7f6574801456 [ 106.220410][ T6592] Code: ec 28 80 7f 60 00 8b 6f 50 88 4c 24 0f 0f 85 b3 03 00 00 85 ed 0f 85 a6 03 00 00 4c 8b 6a 38 49 89 d4 4c 03 6a 18 c6 47 60 01 <8b> 52 04 4c 89 2c 24 49 89 ff 48 89 d0 49 8d 54 d5 00 49 39 54 24 [ 106.220476][ T6592] RSP: 002b:00007ffd114b4e10 EFLAGS: 00010202 [ 106.220496][ T6592] RAX: 00007f6574ba5fa0 RBX: 0000000000000026 RCX: 0000000000000000 [ 106.220572][ T6592] RDX: 00007f6574ba6038 RSI: 0000000000000000 RDI: 00007f65756d5720 [ 106.220587][ T6592] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f6574ba6038 [ 106.220602][ T6592] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f6574ba6038 [ 106.220617][ T6592] R13: 00007f6574387008 R14: 0000000000019c76 R15: 0000000000000001 [ 106.220635][ T6592] [ 106.220654][ T6592] memory: usage 307200kB, limit 307200kB, failcnt 272 [ 106.490307][ T6592] memory+swap: usage 307596kB, limit 9007199254740988kB, failcnt 0 [ 106.498274][ T6592] kmem: usage 299008kB, limit 9007199254740988kB, failcnt 0 [ 106.507253][ T6592] Memory cgroup stats for /syz0: [ 106.507628][ T6592] cache 0 [ 106.516515][ T6592] rss 8388608 [ 106.528812][ T6592] shmem 0 [ 106.531845][ T6592] mapped_file 0 [ 106.538037][ T6592] dirty 0 [ 106.541051][ T6592] writeback 0 [ 106.559337][ T6592] workingset_refault_anon 1401 [ 106.564146][ T6592] workingset_refault_file 384 [ 106.570437][ T6592] swap 405504 [ 106.574615][ T6592] swapcached 6148096 [ 106.578691][ T6592] pgpgin 89052 [ 106.582203][ T6592] pgpgout 87004 [ 106.585812][ T6592] pgfault 127899 [ 106.590517][ T6592] pgmajfault 627 [ 106.594192][ T6592] inactive_anon 0 [ 106.597972][ T6592] active_anon 0 [ 106.601579][ T6592] inactive_file 0 [ 106.605519][ T6592] active_file 0 [ 106.609601][ T6592] unevictable 8388608 [ 106.613736][ T6592] hierarchical_memory_limit 314572800 [ 106.620766][ T6592] hierarchical_memsw_limit 9223372036854771712 [ 106.627797][ T6592] total_cache 0 [ 106.631489][ T6592] total_rss 8388608 [ 106.635529][ T6592] total_shmem 0 [ 106.639150][ T6592] total_mapped_file 0 [ 106.643305][ T6592] total_dirty 0 [ 106.646900][ T6592] total_writeback 0 [ 106.650879][ T6592] total_workingset_refault_anon 1401 [ 106.656273][ T6592] total_workingset_refault_file 384 [ 106.661516][ T6592] total_swap 405504 [ 106.665429][ T6592] total_swapcached 6148096 [ 106.669954][ T6592] total_pgpgin 89052 [ 106.673952][ T6592] total_pgpgout 87004 [ 106.678051][ T6592] total_pgfault 127899 [ 106.682297][ T6592] total_pgmajfault 627 [ 106.687432][ T6592] total_inactive_anon 0 [ 106.691638][ T6592] total_active_anon 0 [ 106.695651][ T6592] total_inactive_file 0 [ 106.724608][ T6592] total_active_file 0 [ 106.733005][ T6592] total_unevictable 8388608 [ 106.741962][ T6592] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1276,pid=6592,uid=0 [ 106.757981][ T6592] Memory cgroup out of memory: Killed process 6592 (syz.0.1276) total-vm:94300kB, anon-rss:9424kB, file-rss:22428kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 106.848158][ T6638] FAULT_INJECTION: forcing a failure. [ 106.848158][ T6638] name failslab, interval 1, probability 0, space 0, times 0 [ 106.886984][ T6638] CPU: 0 UID: 0 PID: 6638 Comm: syz.1.1294 Tainted: G W syzkaller #0 PREEMPT(full) [ 106.887038][ T6638] Tainted: [W]=WARN [ 106.887047][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.887060][ T6638] Call Trace: [ 106.887067][ T6638] [ 106.887076][ T6638] __dump_stack+0x1d/0x30 [ 106.887105][ T6638] dump_stack_lvl+0x95/0xd0 [ 106.887182][ T6638] dump_stack+0x15/0x1b [ 106.887206][ T6638] should_fail_ex+0x263/0x280 [ 106.887241][ T6638] should_failslab+0x8c/0xb0 [ 106.887303][ T6638] kmem_cache_alloc_noprof+0x66/0x3f0 [ 106.887380][ T6638] ? skb_clone+0x151/0x1f0 [ 106.887405][ T6638] skb_clone+0x151/0x1f0 [ 106.887496][ T6638] __netlink_deliver_tap+0x2c9/0x500 [ 106.887534][ T6638] netlink_unicast+0x653/0x680 [ 106.887561][ T6638] netlink_sendmsg+0x5c8/0x6f0 [ 106.887632][ T6638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.887733][ T6638] ____sys_sendmsg+0x563/0x5b0 [ 106.887764][ T6638] ___sys_sendmsg+0x195/0x1e0 [ 106.887838][ T6638] ? path_openat+0x1b01/0x2050 [ 106.887878][ T6638] __sys_sendmmsg+0x185/0x320 [ 106.887908][ T6638] __x64_sys_sendmmsg+0x57/0x70 [ 106.887932][ T6638] x64_sys_call+0x27aa/0x3020 [ 106.888034][ T6638] do_syscall_64+0x12c/0x3b0 [ 106.888066][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.888181][ T6638] RIP: 0033:0x7ff65fb8ce59 [ 106.888201][ T6638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.888222][ T6638] RSP: 002b:00007ff65e5e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 106.888258][ T6638] RAX: ffffffffffffffda RBX: 00007ff65fe05fa0 RCX: 00007ff65fb8ce59 [ 106.888276][ T6638] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 106.888296][ T6638] RBP: 00007ff65e5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 106.888312][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.888327][ T6638] R13: 00007ff65fe06038 R14: 00007ff65fe05fa0 R15: 00007fff72b5b3f8 [ 106.888422][ T6638] [ 106.890206][ T28] kauditd_printk_skb: 612 callbacks suppressed [ 106.890220][ T28] audit: type=1400 audit(2000000014.470:9922): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.892287][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 106.918360][ T28] audit: type=1400 audit(2000000014.500:9923): avc: denied { create } for pid=6639 comm="syz.0.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 106.949451][ T6638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1294'. [ 106.981419][ T28] audit: type=1400 audit(2000000014.500:9924): avc: denied { prog_load } for pid=6635 comm="syz.2.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 107.335404][ T28] audit: type=1400 audit(2000000014.510:9925): avc: denied { read } for pid=6635 comm="syz.2.1293" dev="nsfs" ino=4026532461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 107.381553][ T28] audit: type=1400 audit(2000000014.510:9926): avc: denied { read write } for pid=6635 comm="syz.2.1293" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=0 [ 107.424155][ T28] audit: type=1400 audit(2000000014.510:9927): avc: denied { read } for pid=6635 comm="syz.2.1293" dev="nsfs" ino=4026532461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 107.440162][ T6660] sctp: [Deprecated]: syz.4.1301 (pid 6660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.440162][ T6660] Use struct sctp_sack_info instead [ 107.448596][ T28] audit: type=1400 audit(2000000014.540:9928): avc: denied { read } for pid=6639 comm="syz.0.1295" dev="nsfs" ino=4026532457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 107.487394][ T28] audit: type=1400 audit(2000000014.540:9929): avc: denied { map_create } for pid=6639 comm="syz.0.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 107.506890][ T28] audit: type=1400 audit(2000000014.540:9930): avc: denied { map_create } for pid=6639 comm="syz.0.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 107.526393][ T28] audit: type=1400 audit(2000000014.540:9931): avc: denied { prog_load } for pid=6639 comm="syz.0.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 107.663364][ T6669] FAULT_INJECTION: forcing a failure. [ 107.663364][ T6669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.705724][ T6669] CPU: 0 UID: 0 PID: 6669 Comm: syz.4.1307 Tainted: G W syzkaller #0 PREEMPT(full) [ 107.705802][ T6669] Tainted: [W]=WARN [ 107.705811][ T6669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.705825][ T6669] Call Trace: [ 107.705833][ T6669] [ 107.705892][ T6669] __dump_stack+0x1d/0x30 [ 107.705921][ T6669] dump_stack_lvl+0x95/0xd0 [ 107.705945][ T6669] dump_stack+0x15/0x1b [ 107.705970][ T6669] should_fail_ex+0x263/0x280 [ 107.706003][ T6669] should_fail+0xb/0x20 [ 107.706144][ T6669] should_fail_usercopy+0x1a/0x20 [ 107.706218][ T6669] _copy_from_user+0x1c/0xb0 [ 107.706247][ T6669] ___sys_sendmsg+0xc1/0x1e0 [ 107.706338][ T6669] __x64_sys_sendmsg+0xd4/0x160 [ 107.706364][ T6669] x64_sys_call+0x194c/0x3020 [ 107.706387][ T6669] do_syscall_64+0x12c/0x3b0 [ 107.706416][ T6669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.706493][ T6669] RIP: 0033:0x7fe13654ce59 [ 107.706510][ T6669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.706567][ T6669] RSP: 002b:00007fe134fa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.706588][ T6669] RAX: ffffffffffffffda RBX: 00007fe1367c5fa0 RCX: 00007fe13654ce59 [ 107.706602][ T6669] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000003 [ 107.706636][ T6669] RBP: 00007fe134fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.706666][ T6669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.706678][ T6669] R13: 00007fe1367c6038 R14: 00007fe1367c5fa0 R15: 00007ffefeffd0c8 [ 107.706777][ T6669] [ 108.000425][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1314'. [ 108.068782][ T6692] sctp: [Deprecated]: syz.2.1315 (pid 6692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.068782][ T6692] Use struct sctp_sack_info instead [ 108.280340][ T6700] syzkaller0: entered promiscuous mode [ 108.293525][ T6700] syzkaller0: entered allmulticast mode [ 108.808975][ T6719] sctp: [Deprecated]: syz.2.1327 (pid 6719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.808975][ T6719] Use struct sctp_sack_info instead [ 108.816359][ T6720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1326'. [ 108.873433][ T6720] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 108.907928][ T6720] bond1 (unregistering): Released all slaves [ 109.516867][ T6752] sctp: [Deprecated]: syz.2.1340 (pid 6752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.516867][ T6752] Use struct sctp_sack_info instead [ 109.937577][ T6761] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 110.423116][ T6775] FAULT_INJECTION: forcing a failure. [ 110.423116][ T6775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.456306][ T6775] CPU: 1 UID: 0 PID: 6775 Comm: syz.1.1349 Tainted: G W syzkaller #0 PREEMPT(full) [ 110.456391][ T6775] Tainted: [W]=WARN [ 110.456400][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 110.456414][ T6775] Call Trace: [ 110.456428][ T6775] [ 110.456436][ T6775] __dump_stack+0x1d/0x30 [ 110.456463][ T6775] dump_stack_lvl+0x95/0xd0 [ 110.456483][ T6775] dump_stack+0x15/0x1b [ 110.456502][ T6775] should_fail_ex+0x263/0x280 [ 110.456530][ T6775] should_fail+0xb/0x20 [ 110.456625][ T6775] should_fail_usercopy+0x1a/0x20 [ 110.456741][ T6775] _copy_to_user+0x20/0xa0 [ 110.456778][ T6775] simple_read_from_buffer+0xb5/0x130 [ 110.456835][ T6775] proc_fail_nth_read+0x10e/0x150 [ 110.456929][ T6775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.456957][ T6775] vfs_read+0x1ab/0x7f0 [ 110.456983][ T6775] ? __rcu_read_unlock+0x4e/0x70 [ 110.457023][ T6775] ? __fget_files+0x184/0x1c0 [ 110.457117][ T6775] ? mutex_lock+0x57/0x90 [ 110.457145][ T6775] ksys_read+0xdc/0x1a0 [ 110.457190][ T6775] __x64_sys_read+0x40/0x50 [ 110.457292][ T6775] x64_sys_call+0x2886/0x3020 [ 110.457322][ T6775] do_syscall_64+0x12c/0x3b0 [ 110.457387][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.457409][ T6775] RIP: 0033:0x7ff65fb4d68e [ 110.457425][ T6775] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.457443][ T6775] RSP: 002b:00007ff65e5e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.457467][ T6775] RAX: ffffffffffffffda RBX: 00007ff65e5e76c0 RCX: 00007ff65fb4d68e [ 110.457520][ T6775] RDX: 000000000000000f RSI: 00007ff65e5e70a0 RDI: 0000000000000009 [ 110.457537][ T6775] RBP: 00007ff65e5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.457558][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.457629][ T6775] R13: 00007ff65fe06038 R14: 00007ff65fe05fa0 R15: 00007fff72b5b3f8 [ 110.457651][ T6775] [ 111.610522][ T6797] FAULT_INJECTION: forcing a failure. [ 111.610522][ T6797] name failslab, interval 1, probability 0, space 0, times 0 [ 111.624821][ T6797] CPU: 0 UID: 0 PID: 6797 Comm: syz.1.1358 Tainted: G W syzkaller #0 PREEMPT(full) [ 111.624935][ T6797] Tainted: [W]=WARN [ 111.624943][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.624958][ T6797] Call Trace: [ 111.624965][ T6797] [ 111.624974][ T6797] __dump_stack+0x1d/0x30 [ 111.625003][ T6797] dump_stack_lvl+0x95/0xd0 [ 111.625083][ T6797] dump_stack+0x15/0x1b [ 111.625155][ T6797] should_fail_ex+0x263/0x280 [ 111.625183][ T6797] should_failslab+0x8c/0xb0 [ 111.625214][ T6797] kmem_cache_alloc_noprof+0x66/0x3f0 [ 111.625259][ T6797] ? do_getname+0x2e/0x1c0 [ 111.625282][ T6797] do_getname+0x2e/0x1c0 [ 111.625304][ T6797] getname_uflags+0x23/0x30 [ 111.625372][ T6797] __x64_sys_execveat+0x5d/0xa0 [ 111.625399][ T6797] x64_sys_call+0x2a33/0x3020 [ 111.625539][ T6797] do_syscall_64+0x12c/0x3b0 [ 111.625678][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.625700][ T6797] RIP: 0033:0x7ff65fb8ce59 [ 111.625796][ T6797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.625819][ T6797] RSP: 002b:00007ff65e5e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 111.625845][ T6797] RAX: ffffffffffffffda RBX: 00007ff65fe05fa0 RCX: 00007ff65fb8ce59 [ 111.625861][ T6797] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 111.625874][ T6797] RBP: 00007ff65e5e7090 R08: 0000000000001000 R09: 0000000000000000 [ 111.625887][ T6797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.625899][ T6797] R13: 00007ff65fe06038 R14: 00007ff65fe05fa0 R15: 00007fff72b5b3f8 [ 111.625955][ T6797] [ 111.903149][ T28] kauditd_printk_skb: 419 callbacks suppressed [ 111.903168][ T28] audit: type=1400 audit(2000000019.480:10351): avc: denied { read write } for pid=6798 comm="syz.0.1359" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.953733][ T28] audit: type=1400 audit(2000000019.520:10352): avc: denied { prog_load } for pid=6802 comm="syz.3.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 111.992574][ T28] audit: type=1400 audit(2000000019.520:10353): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 112.018355][ T28] audit: type=1400 audit(2000000019.530:10354): avc: denied { read } for pid=6802 comm="syz.3.1362" dev="nsfs" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 112.042368][ T28] audit: type=1400 audit(2000000019.530:10355): avc: denied { read write } for pid=6802 comm="syz.3.1362" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=0 [ 112.068061][ T6812] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1364'. [ 112.068744][ T28] audit: type=1400 audit(2000000019.530:10356): avc: denied { read } for pid=6802 comm="syz.3.1362" dev="nsfs" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 112.116058][ T28] audit: type=1400 audit(2000000019.540:10357): avc: denied { bpf } for pid=6807 comm="syz.1.1363" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 112.138038][ T28] audit: type=1400 audit(2000000019.540:10358): avc: denied { execmem } for pid=6807 comm="syz.1.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 112.159756][ T28] audit: type=1400 audit(2000000019.560:10359): avc: denied { create } for pid=6798 comm="syz.0.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 112.229810][ T28] audit: type=1400 audit(2000000019.560:10360): avc: denied { create } for pid=6798 comm="syz.0.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 112.875540][ T6850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1380'. [ 112.948471][ T6859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1384'. [ 113.223040][ T6890] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 113.589235][ T6913] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.341485][ T6949] 8021q: VLANs not supported on gre0 [ 114.448354][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 115.164005][ T7013] capability: warning: `syz.4.1447' uses 32-bit capabilities (legacy support in use) [ 115.215248][ T7021] capability: warning: `syz.2.1450' uses deprecated v2 capabilities in a way that may be insecure [ 115.461090][ T7039] dummy0: entered promiscuous mode [ 115.478435][ T7039] dummy0: left promiscuous mode [ 115.591394][ T7045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38680 sclass=netlink_route_socket pid=7045 comm=syz.3.1460 [ 115.769332][ T7055] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 116.995278][ T28] kauditd_printk_skb: 1045 callbacks suppressed [ 116.995295][ T28] audit: type=1400 audit(2000000024.570:11406): avc: denied { read write } for pid=7094 comm="syz.0.1480" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.061981][ T28] audit: type=1400 audit(2000000024.620:11407): avc: denied { create } for pid=7094 comm="syz.0.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 117.083070][ T28] audit: type=1400 audit(2000000024.620:11408): avc: denied { create } for pid=7094 comm="syz.0.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 117.104089][ T28] audit: type=1400 audit(2000000024.630:11409): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.130412][ T28] audit: type=1400 audit(2000000024.710:11410): avc: denied { execmem } for pid=7097 comm="syz.0.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 117.203628][ T28] audit: type=1400 audit(2000000024.780:11411): avc: denied { open } for pid=7097 comm="syz.0.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 117.394763][ T28] audit: type=1400 audit(2000000024.970:11412): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.472731][ T28] audit: type=1400 audit(2000000025.010:11413): avc: denied { open } for pid=7100 comm="syz.1.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 117.497390][ T7105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1484'. [ 117.513197][ T28] audit: type=1400 audit(2000000025.010:11414): avc: denied { prog_load } for pid=7100 comm="syz.1.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 117.553116][ T28] audit: type=1400 audit(2000000025.010:11415): avc: denied { prog_load } for pid=7100 comm="syz.1.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 117.560706][ T7105] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 117.595943][ T7105] bond1 (unregistering): Released all slaves [ 117.730515][ T7110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1486'. [ 117.755864][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 117.795847][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 117.827574][ T7112] bridge1: entered allmulticast mode [ 117.968571][ T7118] FAULT_INJECTION: forcing a failure. [ 117.968571][ T7118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.002808][ T7118] CPU: 1 UID: 0 PID: 7118 Comm: syz.3.1490 Tainted: G W syzkaller #0 PREEMPT(full) [ 118.002878][ T7118] Tainted: [W]=WARN [ 118.002886][ T7118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.002901][ T7118] Call Trace: [ 118.002909][ T7118] [ 118.002917][ T7118] __dump_stack+0x1d/0x30 [ 118.002967][ T7118] dump_stack_lvl+0x95/0xd0 [ 118.002987][ T7118] dump_stack+0x15/0x1b [ 118.003006][ T7118] should_fail_ex+0x263/0x280 [ 118.003039][ T7118] should_fail+0xb/0x20 [ 118.003084][ T7118] should_fail_usercopy+0x1a/0x20 [ 118.003112][ T7118] _copy_from_user+0x1c/0xb0 [ 118.003148][ T7118] ___sys_sendmsg+0xc1/0x1e0 [ 118.003237][ T7118] __x64_sys_sendmsg+0xd4/0x160 [ 118.003268][ T7118] x64_sys_call+0x194c/0x3020 [ 118.003421][ T7118] do_syscall_64+0x12c/0x3b0 [ 118.003456][ T7118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.003551][ T7118] RIP: 0033:0x7f3f5dbece59 [ 118.003567][ T7118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.003585][ T7118] RSP: 002b:00007f3f5c647028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.003607][ T7118] RAX: ffffffffffffffda RBX: 00007f3f5de65fa0 RCX: 00007f3f5dbece59 [ 118.003629][ T7118] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000003 [ 118.003675][ T7118] RBP: 00007f3f5c647090 R08: 0000000000000000 R09: 0000000000000000 [ 118.003688][ T7118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.003700][ T7118] R13: 00007f3f5de66038 R14: 00007f3f5de65fa0 R15: 00007ffd1ccaed48 [ 118.003718][ T7118] [ 118.389254][ T7137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1496'. [ 118.982885][ T7168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1509'. [ 119.083474][ T7172] FAULT_INJECTION: forcing a failure. [ 119.083474][ T7172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.120460][ T7172] CPU: 0 UID: 0 PID: 7172 Comm: syz.2.1511 Tainted: G W syzkaller #0 PREEMPT(full) [ 119.120555][ T7172] Tainted: [W]=WARN [ 119.120562][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.120575][ T7172] Call Trace: [ 119.120585][ T7172] [ 119.120594][ T7172] __dump_stack+0x1d/0x30 [ 119.120661][ T7172] dump_stack_lvl+0x95/0xd0 [ 119.120687][ T7172] dump_stack+0x15/0x1b [ 119.120823][ T7172] should_fail_ex+0x263/0x280 [ 119.120916][ T7172] should_fail+0xb/0x20 [ 119.120990][ T7172] should_fail_usercopy+0x1a/0x20 [ 119.121021][ T7172] _copy_from_user+0x1c/0xb0 [ 119.121110][ T7172] kstrtouint_from_user+0x69/0xf0 [ 119.121135][ T7172] ? 0xffffffff81000000 [ 119.121152][ T7172] ? selinux_file_permission+0x1e1/0x320 [ 119.121225][ T7172] proc_fail_nth_write+0x50/0x160 [ 119.121259][ T7172] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 119.121297][ T7172] vfs_write+0x269/0x9f0 [ 119.121384][ T7172] ? __rcu_read_unlock+0x4e/0x70 [ 119.121411][ T7172] ? __fget_files+0x184/0x1c0 [ 119.121487][ T7172] ? mutex_lock+0x57/0x90 [ 119.121533][ T7172] ksys_write+0xdc/0x1a0 [ 119.121598][ T7172] __x64_sys_write+0x40/0x50 [ 119.121632][ T7172] x64_sys_call+0x27e1/0x3020 [ 119.121722][ T7172] do_syscall_64+0x12c/0x3b0 [ 119.121757][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.121784][ T7172] RIP: 0033:0x7fb6a3edd68e [ 119.121802][ T7172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.121866][ T7172] RSP: 002b:00007fb6a2976fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.121891][ T7172] RAX: ffffffffffffffda RBX: 00007fb6a29776c0 RCX: 00007fb6a3edd68e [ 119.121906][ T7172] RDX: 0000000000000001 RSI: 00007fb6a29770a0 RDI: 0000000000000006 [ 119.121919][ T7172] RBP: 00007fb6a2977090 R08: 0000000000000000 R09: 0000000000000000 [ 119.121932][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.122011][ T7172] R13: 00007fb6a4196038 R14: 00007fb6a4195fa0 R15: 00007ffeacbd2fa8 [ 119.122088][ T7172] [ 120.031384][ T7199] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1522'. [ 120.107707][ T7207] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1524'. [ 120.320577][ T7218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1528'. [ 120.749691][ T7236] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1536'. [ 121.060576][ T7252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=7252 comm=syz.0.1542 [ 121.575472][ T7275] loop0: detected capacity change from 0 to 8192 [ 122.260780][ T7287] loop4: detected capacity change from 0 to 8192 [ 122.307934][ T28] kauditd_printk_skb: 537 callbacks suppressed [ 122.307951][ T28] audit: type=1400 audit(2000000029.880:11953): avc: denied { write } for pid=7279 comm="syz.0.1554" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.377828][ T28] audit: type=1400 audit(2000000029.950:11954): avc: denied { append } for pid=7288 comm="syz.0.1557" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.413008][ T28] audit: type=1400 audit(2000000029.960:11955): avc: denied { create } for pid=7288 comm="syz.0.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.488938][ T28] audit: type=1400 audit(2000000030.060:11956): avc: denied { create } for pid=7293 comm="syz.1.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.503904][ T7295] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1561'. [ 122.534980][ T7297] loop4: detected capacity change from 0 to 1024 [ 122.543041][ T28] audit: type=1400 audit(2000000030.070:11957): avc: denied { allowed } for pid=7293 comm="syz.1.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 122.576943][ T28] audit: type=1400 audit(2000000030.070:11958): avc: denied { create } for pid=7293 comm="syz.1.1559" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.598455][ T7289] loop0: detected capacity change from 0 to 8192 [ 122.608243][ T28] audit: type=1400 audit(2000000030.070:11959): avc: denied { read } for pid=7293 comm="syz.1.1559" path="socket:[21006]" dev="sockfs" ino=21006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.634471][ T7295] gretap0: entered promiscuous mode [ 122.647305][ T7297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.702178][ T28] audit: type=1400 audit(2000000030.270:11960): avc: denied { mount } for pid=7296 comm="syz.4.1560" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 122.726842][ T7295] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1561'. [ 122.753033][ T28] audit: type=1400 audit(2000000030.280:11961): avc: denied { getopt } for pid=7288 comm="syz.0.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.824061][ T7300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1561'. [ 122.858648][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.870328][ T7295] 0ªî{X¹¦: renamed from gretap0 [ 122.878951][ T28] audit: type=1400 audit(2000000030.330:11962): avc: denied { create } for pid=7296 comm="syz.4.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.885465][ T7311] loop1: detected capacity change from 0 to 8192 [ 122.908513][ T7300] loop2: detected capacity change from 0 to 1024 [ 122.925700][ T7300] ext4: Unknown parameter 'measure' [ 122.959937][ T7295] 0ªî{X¹¦: left promiscuous mode [ 122.965568][ T7295] 0ªî{X¹¦: entered allmulticast mode [ 123.045019][ T7295] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 123.787998][ T7318] loop4: detected capacity change from 0 to 512 [ 123.817014][ T7318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.861778][ T7318] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.004369][ T7323] loop2: detected capacity change from 0 to 8192 [ 124.264353][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.274997][ T7329] netlink: 'syz.0.1571': attribute type 1 has an invalid length. [ 124.340184][ T7330] loop1: detected capacity change from 0 to 8192 [ 124.496551][ T7329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.564907][ T7341] bond1: (slave geneve2): making interface the new active one [ 124.574559][ T7341] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 124.584933][ T7349] loop2: detected capacity change from 0 to 128 [ 124.684174][ T7351] binfmt_misc: register: failed to install interpreter file ./file0 [ 124.834368][ T7353] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 124.841026][ T7353] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.887682][ T7353] vhci_hcd vhci_hcd.0: Device attached [ 124.907349][ T7357] vhci_hcd: connection closed [ 124.907484][ T1335] vhci_hcd vhci_hcd.0: stop threads [ 124.935570][ T1335] vhci_hcd vhci_hcd.0: release socket [ 124.946288][ T1335] vhci_hcd vhci_hcd.0: disconnect device [ 125.327841][ T7372] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1580'. [ 126.269074][ T7381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1582'. [ 127.121538][ T7383] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1584'. [ 127.453723][ T7381] loop1: detected capacity change from 0 to 1024 [ 127.461753][ T7387] loop3: detected capacity change from 0 to 8192 [ 127.481372][ T7381] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.490782][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 127.490798][ T28] audit: type=1400 audit(2000000035.060:12005): avc: denied { mounton } for pid=7375 comm="syz.1.1582" path="/325/file1" dev="tmpfs" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.588161][ T7381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.649027][ T7381] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.950940][ T7394] loop3: detected capacity change from 0 to 8192 [ 128.431731][ T7400] loop3: detected capacity change from 0 to 128 [ 128.457521][ T7400] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 128.526692][ T28] audit: type=1400 audit(2000000036.100:12006): avc: denied { read write } for pid=7399 comm="syz.3.1588" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.553491][ T7400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.575080][ T7404] loop0: detected capacity change from 0 to 128 [ 128.587066][ T7400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.603302][ T28] audit: type=1400 audit(2000000036.100:12007): avc: denied { open } for pid=7399 comm="syz.3.1588" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.605373][ T7404] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.632323][ T28] audit: type=1400 audit(2000000036.140:12008): avc: denied { ioctl } for pid=7399 comm="syz.3.1588" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.671554][ T28] audit: type=1400 audit(2000000036.150:12009): avc: denied { ioctl } for pid=7403 comm="syz.0.1590" path="socket:[21853]" dev="sockfs" ino=21853 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.705356][ T28] audit: type=1400 audit(2000000036.150:12010): avc: denied { write } for pid=7403 comm="syz.0.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.722460][ T7404] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.725405][ T28] audit: type=1400 audit(2000000036.150:12011): avc: denied { getopt } for pid=7403 comm="syz.0.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.765973][ T7407] loop4: detected capacity change from 0 to 8192 [ 128.779485][ T28] audit: type=1400 audit(2000000036.360:12012): avc: denied { write } for pid=7403 comm="syz.0.1590" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.848499][ T28] audit: type=1400 audit(2000000036.360:12013): avc: denied { create } for pid=7403 comm="syz.0.1590" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.873836][ T28] audit: type=1400 audit(2000000036.360:12014): avc: denied { write } for pid=7403 comm="syz.0.1590" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.901166][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.120101][ T7417] loop4: detected capacity change from 0 to 8192 [ 129.225567][ T7420] loop3: detected capacity change from 0 to 8192 [ 129.350378][ T7426] No such timeout policy "syz0" [ 129.446025][ T7426] loop4: detected capacity change from 0 to 512 [ 129.482045][ T7426] EXT4-fs (loop4): 1 truncate cleaned up [ 129.500356][ T7426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.666298][ T7432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1600'. [ 129.952104][ T7438] loop3: detected capacity change from 0 to 1024 [ 129.974988][ T7438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.012971][ T7438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.091091][ T7438] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.455072][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.512198][ T7446] netlink: 'syz.4.1604': attribute type 3 has an invalid length. [ 130.599497][ T7450] EXT4-fs (loop4): 1 truncate cleaned up [ 130.608370][ T7450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.626738][ T7450] EXT4-fs (loop4): shut down requested (1) [ 130.658104][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.778479][ T7460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.853413][ T7453] tmpfs: Unknown parameter 'ÿ' [ 130.860925][ T7460] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.011051][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'. [ 131.044051][ T7467] xt_hashlimit: size too large, truncated to 1048576 [ 131.160656][ T7472] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1613'. [ 131.203422][ T7472] gretap0: entered promiscuous mode [ 131.242056][ T7472] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1613'. [ 131.318302][ T7472] 0ªî{X¹¦: renamed from gretap0 [ 131.377943][ T7478] ext4: Unknown parameter 'measure' [ 131.424155][ T7472] 0ªî{X¹¦: left promiscuous mode [ 131.434331][ T7472] 0ªî{X¹¦: entered allmulticast mode [ 131.473564][ T7480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 131.489202][ T7472] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 131.510082][ T7480] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.521352][ T7473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1613'. [ 131.642684][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.894027][ T7485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1617'. [ 131.907179][ T7491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1616'. [ 132.179543][ T7493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.271618][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.383235][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 132.420619][ T7509] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 132.463960][ T7505] tmpfs: Unknown parameter 'ÿ' [ 132.470912][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.481220][ T7512] netlink: 'syz.2.1625': attribute type 3 has an invalid length. [ 132.504857][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.547558][ T7513] set_capacity_and_notify: 10 callbacks suppressed [ 132.547578][ T7513] loop1: detected capacity change from 0 to 8192 [ 132.669460][ T7515] loop3: detected capacity change from 0 to 8192 [ 132.702305][ T7517] loop4: detected capacity change from 0 to 8192 [ 132.744902][ T7517] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.773194][ T7517] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 132.785456][ T7518] loop2: detected capacity change from 0 to 512 [ 132.805258][ T7517] FAT-fs (loop4): Filesystem has been set read-only [ 132.813962][ T7517] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 132.823401][ T7517] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 132.832848][ T7517] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 132.847531][ T7522] loop3: detected capacity change from 0 to 512 [ 132.860915][ T7517] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 132.871514][ T7522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.884484][ T7517] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 132.886884][ T7522] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.894064][ T7517] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 132.917110][ T7517] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 132.944413][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 132.944429][ T28] audit: type=1400 audit(2000000040.520:12051): avc: denied { write } for pid=7521 comm="syz.3.1629" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.952338][ T7517] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 133.066280][ T7517] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 133.444731][ T28] audit: type=1400 audit(2000000041.020:12052): avc: denied { create } for pid=7528 comm="syz.0.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 133.551808][ T28] audit: type=1400 audit(2000000041.130:12053): avc: denied { create } for pid=7534 comm="syz.4.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.561986][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1631'. [ 133.573597][ T7535] loop4: detected capacity change from 0 to 164 [ 133.599815][ T7529] loop0: detected capacity change from 0 to 8192 [ 133.607123][ T7535] ISOFS: unable to read i-node block [ 133.612510][ T7535] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 133.625943][ T28] audit: type=1400 audit(2000000041.130:12054): avc: denied { setopt } for pid=7534 comm="syz.4.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.655531][ T28] audit: type=1400 audit(2000000041.160:12055): avc: denied { ioctl } for pid=7534 comm="syz.4.1632" path="socket:[21375]" dev="sockfs" ino=21375 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.684536][ T28] audit: type=1400 audit(2000000041.160:12056): avc: denied { bind } for pid=7534 comm="syz.4.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.685622][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.717121][ T7529] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.727684][ T28] audit: type=1400 audit(2000000041.270:12057): avc: denied { mount } for pid=7534 comm="syz.4.1632" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 133.759571][ T7529] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 133.785892][ T7529] FAT-fs (loop0): Filesystem has been set read-only [ 133.803994][ T7542] tmpfs: Unknown parameter 'ÿ' [ 133.805662][ T7529] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 133.845212][ T7529] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 133.859989][ T7529] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 133.869824][ T7529] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 133.883500][ T28] audit: type=1400 audit(2000000041.470:12058): avc: denied { mount } for pid=7547 comm="syz.3.1634" name="/" dev="ramfs" ino=21412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 133.884883][ T7529] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 133.919083][ T7529] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 133.929582][ T7529] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 133.947907][ T7549] loop1: detected capacity change from 0 to 8192 [ 133.948420][ T7529] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 133.976225][ T7529] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 134.090432][ T7551] loop2: detected capacity change from 0 to 8192 [ 134.391479][ T7565] loop1: detected capacity change from 0 to 8192 [ 134.513951][ T28] audit: type=1400 audit(2000000042.090:12059): avc: denied { write } for pid=7568 comm="syz.2.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 134.542048][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 134.572494][ T7571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1644'. [ 134.843214][ T7584] SELinux: policydb string Sÿÿÿ does not match my string SE Linux [ 134.851357][ T28] audit: type=1400 audit(2000000042.420:12060): avc: denied { load_policy } for pid=7572 comm="syz.1.1656" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 134.892636][ T7584] SELinux: failed to load policy [ 134.910900][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'. [ 135.325422][ T7592] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.429253][ T7592] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 135.477368][ T7592] FAT-fs (loop0): Filesystem has been set read-only [ 135.526183][ T7592] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 135.566682][ T7592] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 135.605524][ T7592] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 135.637073][ T7592] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 135.661553][ T7592] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 135.688495][ T7592] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 135.718805][ T7592] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 135.727848][ T7592] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 135.741427][ T7592] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 136.095280][ T7612] __nla_validate_parse: 2 callbacks suppressed [ 136.095339][ T7612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1659'. [ 136.109148][ T7614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1660'. [ 136.160009][ T7616] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1662'. [ 136.276300][ T7621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1664'. [ 136.362875][ T7630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.386328][ T7630] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.191802][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.417601][ T7652] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1669: inode has both inline data and extents flags [ 137.430843][ T7652] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.431332][ T7652] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1669: couldn't read orphan inode 15 (err -117) [ 137.440566][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 137.440586][ C1] EXT4-fs (loop1): initial error at time 2000000301: ext4_orphan_get:1397: inode 15 [ 137.440613][ C1] EXT4-fs (loop1): last error at time 2000000301: ext4_orphan_get:1397: inode 15 [ 137.477556][ T7652] loop1: lost filesystem error report for type 5 error -117 [ 137.479086][ T7652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.030951][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 138.030982][ T28] audit: type=1400 audit(2000000301.089:12107): avc: denied { write } for pid=7647 comm="syz.1.1669" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.253773][ T28] audit: type=1400 audit(2000000301.089:12108): avc: denied { ioctl } for pid=7647 comm="syz.1.1669" path="/341/file0/cpu.stat" dev="loop1" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 138.295030][ T7651] set_capacity_and_notify: 7 callbacks suppressed [ 138.295048][ T7651] loop0: detected capacity change from 0 to 8192 [ 138.569053][ T7659] xt_hashlimit: size too large, truncated to 1048576 [ 138.888786][ T28] audit: type=1400 audit(2000000302.469:12109): avc: denied { accept } for pid=7662 comm="syz.3.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 138.915899][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.972507][ T7665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1674'. [ 139.067785][ T7667] loop4: detected capacity change from 0 to 8192 [ 139.242212][ T7672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1676'. [ 139.368633][ T7678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1688'. [ 139.492509][ T7682] loop0: detected capacity change from 0 to 512 [ 139.498988][ T7677] loop4: detected capacity change from 0 to 8192 [ 139.539007][ T7682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.604637][ T7687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1677'. [ 139.616334][ T28] audit: type=1400 audit(2000000303.199:12110): avc: denied { read } for pid=7673 comm="syz.1.1677" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 139.648089][ T7682] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.728788][ T7686] loop2: detected capacity change from 0 to 8192 [ 139.747027][ T7688] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 139.753811][ T7688] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 139.814391][ T28] audit: type=1400 audit(2000000303.199:12111): avc: denied { open } for pid=7673 comm="syz.1.1677" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 139.950195][ T7688] vhci_hcd vhci_hcd.0: Device attached [ 139.957905][ T28] audit: type=1400 audit(2000000303.199:12112): avc: denied { ioctl } for pid=7673 comm="syz.1.1677" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 140.133829][ T7689] vhci_hcd: connection closed [ 140.134421][ T1738] vhci_hcd vhci_hcd.3: stop threads [ 140.159792][ T28] audit: type=1400 audit(2000000303.369:12113): avc: denied { write } for pid=7681 comm="syz.0.1680" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.179596][ T1738] vhci_hcd vhci_hcd.3: release socket [ 140.237641][ T28] audit: type=1326 audit(2000000303.599:12114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.4.1682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13654ce59 code=0x7ffc0000 [ 140.301363][ T28] audit: type=1326 audit(2000000303.599:12115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.4.1682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13654ce59 code=0x7ffc0000 [ 140.398552][ T28] audit: type=1326 audit(2000000303.599:12116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.4.1682" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe13654ce59 code=0x7ffc0000 [ 140.455436][ T1738] vhci_hcd vhci_hcd.3: disconnect device [ 141.077294][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.090927][ T7701] loop1: detected capacity change from 0 to 512 [ 141.104472][ T7701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.143546][ T7701] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.253335][ T7708] loop2: detected capacity change from 0 to 8192 [ 141.446165][ T7722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1692'. [ 141.935327][ T7729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1694'. [ 142.027943][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.216652][ T7734] loop3: detected capacity change from 0 to 1024 [ 142.243900][ T7734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.291419][ T7734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.304358][ T7734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.636919][ T7750] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1696'. [ 143.396902][ T7761] xt_hashlimit: size too large, truncated to 1048576 [ 143.490408][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 143.490426][ T28] audit: type=1400 audit(2000000307.069:12175): avc: denied { ioctl } for pid=7764 comm="syz.4.1701" path="socket:[23651]" dev="sockfs" ino=23651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.522969][ T7765] loop4: detected capacity change from 0 to 128 [ 143.602593][ T28] audit: type=1400 audit(2000000307.069:12176): avc: denied { bind } for pid=7764 comm="syz.4.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.663574][ T28] audit: type=1400 audit(2000000307.109:12177): avc: denied { connect } for pid=7764 comm="syz.4.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.690830][ T7768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1702'. [ 143.826427][ T7779] loop4: detected capacity change from 0 to 512 [ 143.998613][ T7783] FAULT_INJECTION: forcing a failure. [ 143.998613][ T7783] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 144.014876][ T7783] CPU: 1 UID: 0 PID: 7783 Comm: syz.0.1705 Tainted: G W syzkaller #0 PREEMPT(full) [ 144.014947][ T7783] Tainted: [W]=WARN [ 144.014956][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.014970][ T7783] Call Trace: [ 144.014980][ T7783] [ 144.014989][ T7783] __dump_stack+0x1d/0x30 [ 144.015024][ T7783] dump_stack_lvl+0x95/0xd0 [ 144.015071][ T7783] dump_stack+0x15/0x1b [ 144.015090][ T7783] should_fail_ex+0x263/0x280 [ 144.015264][ T7783] should_fail_alloc_page+0xf2/0x100 [ 144.015307][ T7783] __alloc_frozen_pages_noprof+0x108/0x350 [ 144.015381][ T7783] alloc_pages_mpol+0xb3/0x260 [ 144.015405][ T7783] alloc_frozen_pages_noprof+0x8f/0x110 [ 144.015451][ T7783] __kmalloc_large_node_noprof+0x58/0x150 [ 144.015492][ T7783] __kmalloc_noprof+0x268/0x4d0 [ 144.015552][ T7783] ? iovec_from_user+0x84/0x200 [ 144.015586][ T7783] iovec_from_user+0x84/0x200 [ 144.015668][ T7783] __import_iovec+0xf3/0x530 [ 144.015703][ T7783] import_iovec+0x60/0x80 [ 144.015743][ T7783] blk_rq_map_user_io+0xb9/0x280 [ 144.015770][ T7783] ? sg_link_reserve+0x117/0x140 [ 144.015795][ T7783] sg_common_write+0xb3d/0xc70 [ 144.015874][ T7783] sg_new_write+0x7d0/0x8a0 [ 144.015905][ T7783] ? do_vfs_ioctl+0x84f/0xe70 [ 144.015933][ T7783] sg_ioctl+0xbec/0x1340 [ 144.015959][ T7783] ? __pfx_sg_ioctl+0x10/0x10 [ 144.016045][ T7783] __se_sys_ioctl+0xce/0x140 [ 144.016138][ T7783] __x64_sys_ioctl+0x43/0x50 [ 144.016168][ T7783] x64_sys_call+0x1563/0x3020 [ 144.016197][ T7783] do_syscall_64+0x12c/0x3b0 [ 144.016286][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.016312][ T7783] RIP: 0033:0x7f657492ce59 [ 144.016333][ T7783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.016355][ T7783] RSP: 002b:00007f657333d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.016404][ T7783] RAX: ffffffffffffffda RBX: 00007f6574ba6180 RCX: 00007f657492ce59 [ 144.016419][ T7783] RDX: 00002000000000c0 RSI: 0000000000002285 RDI: 0000000000000008 [ 144.016433][ T7783] RBP: 00007f657333d090 R08: 0000000000000000 R09: 0000000000000000 [ 144.016449][ T7783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.016465][ T7783] R13: 00007f6574ba6218 R14: 00007f6574ba6180 R15: 00007ffd114b4d78 [ 144.016504][ T7783] [ 144.339507][ T7780] loop2: detected capacity change from 0 to 8192 [ 144.753215][ T7779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.791133][ T7779] ext4 filesystem being mounted at /361/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.840017][ T28] audit: type=1400 audit(2000000308.419:12178): avc: denied { write } for pid=7773 comm="syz.4.1706" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.852106][ T7774] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1706: iget: bad i_size value: 2533274857506816 [ 144.886878][ T7791] loop2: detected capacity change from 0 to 8192 [ 145.056791][ T7797] FAULT_INJECTION: forcing a failure. [ 145.056791][ T7797] name failslab, interval 1, probability 0, space 0, times 0 [ 145.069545][ T7797] CPU: 1 UID: 0 PID: 7797 Comm: syz.2.1711 Tainted: G W syzkaller #0 PREEMPT(full) [ 145.069585][ T7797] Tainted: [W]=WARN [ 145.069593][ T7797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.069608][ T7797] Call Trace: [ 145.069631][ T7797] [ 145.069641][ T7797] __dump_stack+0x1d/0x30 [ 145.069670][ T7797] dump_stack_lvl+0x95/0xd0 [ 145.069723][ T7797] dump_stack+0x15/0x1b [ 145.069746][ T7797] should_fail_ex+0x263/0x280 [ 145.069779][ T7797] should_failslab+0x8c/0xb0 [ 145.069815][ T7797] __kmalloc_noprof+0xb8/0x4d0 [ 145.069878][ T7797] ? security_sk_alloc+0x52/0x120 [ 145.069916][ T7797] security_sk_alloc+0x52/0x120 [ 145.070026][ T7797] sk_prot_alloc+0xc2/0x180 [ 145.070061][ T7797] sk_alloc+0x35/0x3e0 [ 145.070085][ T7797] ? tipc_sk_create+0xa6/0x1100 [ 145.070156][ T7797] tipc_sk_create+0xdc/0x1100 [ 145.070188][ T7797] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 145.070224][ T7797] ? security_inode_alloc+0x37/0x100 [ 145.070277][ T7797] ? selinux_inode_alloc_security+0x103/0x130 [ 145.070306][ T7797] ? security_inode_alloc+0x69/0x100 [ 145.070360][ T7797] ? __pfx_sock_alloc_inode+0x10/0x10 [ 145.070396][ T7797] __sock_create+0x2e4/0x580 [ 145.070466][ T7797] __sys_socketpair+0x16f/0x420 [ 145.070503][ T7797] ? ksys_write+0x194/0x1a0 [ 145.070615][ T7797] __x64_sys_socketpair+0x52/0x60 [ 145.070653][ T7797] x64_sys_call+0x2de5/0x3020 [ 145.070758][ T7797] do_syscall_64+0x12c/0x3b0 [ 145.070793][ T7797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.070820][ T7797] RIP: 0033:0x7fb6a3f1ce59 [ 145.070839][ T7797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.070904][ T7797] RSP: 002b:00007fb6a2977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 145.070929][ T7797] RAX: ffffffffffffffda RBX: 00007fb6a4195fa0 RCX: 00007fb6a3f1ce59 [ 145.070947][ T7797] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 145.070963][ T7797] RBP: 00007fb6a2977090 R08: 0000000000000000 R09: 0000000000000000 [ 145.071003][ T7797] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.071019][ T7797] R13: 00007fb6a4196038 R14: 00007fb6a4195fa0 R15: 00007ffeacbd2fa8 [ 145.071047][ T7797] [ 145.675238][ T7804] FAULT_INJECTION: forcing a failure. [ 145.675238][ T7804] name failslab, interval 1, probability 0, space 0, times 0 [ 145.739107][ T7804] CPU: 1 UID: 0 PID: 7804 Comm: syz.2.1712 Tainted: G W syzkaller #0 PREEMPT(full) [ 145.739225][ T7804] Tainted: [W]=WARN [ 145.739234][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.739247][ T7804] Call Trace: [ 145.739254][ T7804] [ 145.739263][ T7804] __dump_stack+0x1d/0x30 [ 145.739293][ T7804] dump_stack_lvl+0x95/0xd0 [ 145.739384][ T7804] dump_stack+0x15/0x1b [ 145.739408][ T7804] should_fail_ex+0x263/0x280 [ 145.739441][ T7804] should_failslab+0x8c/0xb0 [ 145.739518][ T7804] kmem_cache_alloc_noprof+0x66/0x3f0 [ 145.739553][ T7804] ? skb_clone+0x151/0x1f0 [ 145.739582][ T7804] skb_clone+0x151/0x1f0 [ 145.739656][ T7804] __netlink_deliver_tap+0x2c9/0x500 [ 145.739691][ T7804] ? netlink_attachskb+0x2e2/0x660 [ 145.739722][ T7804] netlink_sendskb+0x126/0x150 [ 145.739801][ T7804] netlink_unicast+0x28a/0x680 [ 145.739832][ T7804] netlink_ack+0x4c8/0x500 [ 145.739865][ T7804] netlink_rcv_skb+0x192/0x220 [ 145.739894][ T7804] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.739934][ T7804] rtnetlink_rcv+0x1c/0x30 [ 145.739962][ T7804] netlink_unicast+0x5a8/0x680 [ 145.740000][ T7804] netlink_sendmsg+0x5c8/0x6f0 [ 145.740108][ T7804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.740142][ T7804] ____sys_sendmsg+0x563/0x5b0 [ 145.740185][ T7804] ___sys_sendmsg+0x195/0x1e0 [ 145.740218][ T7804] __x64_sys_sendmsg+0xd4/0x160 [ 145.740283][ T7804] x64_sys_call+0x194c/0x3020 [ 145.740311][ T7804] do_syscall_64+0x12c/0x3b0 [ 145.740345][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.740371][ T7804] RIP: 0033:0x7fb6a3f1ce59 [ 145.740432][ T7804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.740454][ T7804] RSP: 002b:00007fb6a2977028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.740478][ T7804] RAX: ffffffffffffffda RBX: 00007fb6a4195fa0 RCX: 00007fb6a3f1ce59 [ 145.740501][ T7804] RDX: 0000000004000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 145.740517][ T7804] RBP: 00007fb6a2977090 R08: 0000000000000000 R09: 0000000000000000 [ 145.740612][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.740627][ T7804] R13: 00007fb6a4196038 R14: 00007fb6a4195fa0 R15: 00007ffeacbd2fa8 [ 145.740649][ T7804] [ 146.171937][ T28] audit: type=1400 audit(2000000309.749:12179): avc: denied { ioctl } for pid=7808 comm="syz.2.1714" path="socket:[23714]" dev="sockfs" ino=23714 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.323316][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.361522][ T7816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.389699][ T7816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.418883][ T7817] loop1: detected capacity change from 0 to 8192 [ 146.450856][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1717'. [ 146.527203][ T7767] loop3: detected capacity change from 0 to 1024 [ 147.279357][ T7827] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1719'. [ 147.565394][ T7767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.661534][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1721'. [ 147.691894][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1721'. [ 148.013914][ T7836] loop4: detected capacity change from 0 to 8192 [ 148.506394][ T7767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.605063][ T7767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.856552][ T7855] loop1: detected capacity change from 0 to 512 [ 148.894634][ T7855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.929330][ T7855] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.940083][ T28] audit: type=1400 audit(2000000312.529:12180): avc: denied { accept } for pid=7860 comm="syz.3.1730" lport=44976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.961099][ T28] audit: type=1400 audit(2000000312.529:12181): avc: denied { write } for pid=7854 comm="syz.1.1728" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.992227][ T7855] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1728: iget: bad i_size value: 2533274857506816 [ 149.164508][ T7868] loop4: detected capacity change from 0 to 8192 [ 149.900013][ T7878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1733'. [ 149.950310][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1733'. [ 150.034141][ T7883] loop3: detected capacity change from 0 to 8192 [ 150.077603][ T7885] loop2: detected capacity change from 0 to 1024 [ 150.084441][ T7885] EXT4-fs: test_dummy_encryption option not supported [ 150.117225][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.251217][ T7893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1739'. [ 150.260352][ T7887] loop4: detected capacity change from 0 to 8192 [ 150.483232][ T7898] loop1: detected capacity change from 0 to 8192 [ 150.599251][ T7904] loop3: detected capacity change from 0 to 8192 [ 150.694160][ T28] audit: type=1400 audit(2000000314.269:12182): avc: denied { shutdown } for pid=7908 comm="syz.1.1745" laddr=::1 lport=20003 faddr=::1 fport=55266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.914612][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1749'. [ 151.074761][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1749'. [ 151.439369][ T7937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1751'. [ 151.584298][ T7942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1753'. [ 151.704202][ T7944] tmpfs: Unknown parameter 'ÿ' [ 151.897839][ T7949] loop3: detected capacity change from 0 to 8192 [ 152.492872][ T7968] loop1: detected capacity change from 0 to 1024 [ 152.590853][ T7968] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 152.610673][ T7968] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 152.623747][ T7968] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.1760: inode #1: comm syz.1.1760: iget: illegal inode # [ 152.638058][ T7968] loop1: lost filesystem error report for type 5 error -117 [ 152.644650][ T7968] EXT4-fs (loop1): no journal found [ 152.652936][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 152.653008][ C1] EXT4-fs (loop1): initial error at time 2000000316: ext4_get_journal_inode:5896 [ 152.653487][ C1] EXT4-fs (loop1): last error at time 2000000316: ext4_get_journal_inode:5896 [ 152.702018][ T7968] EXT4-fs (loop1): can't get journal size [ 152.735010][ T7968] EXT4-fs (loop1): failed to initialize system zone (-22) [ 152.744101][ T7968] EXT4-fs (loop1): mount failed [ 152.781790][ T7962] loop4: detected capacity change from 0 to 2048 [ 153.066368][ T7962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.349215][ T28] audit: type=1400 audit(2000000316.929:12183): avc: denied { write } for pid=7938 comm="syz.4.1752" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.379138][ T7976] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.416646][ T7976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.429745][ T7976] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.614180][ T28] audit: type=1400 audit(2000000317.059:12184): avc: denied { write } for pid=7960 comm="syz.1.1760" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.659708][ T7980] __nla_validate_parse: 8 callbacks suppressed [ 153.659737][ T7980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1763'. [ 153.906659][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1752'. [ 153.935734][ T7942] netlink: 'syz.0.1753': attribute type 3 has an invalid length. [ 153.972645][ T28] audit: type=1400 audit(2000000317.549:12185): avc: denied { ioctl } for pid=7938 comm="syz.4.1752" path="socket:[24077]" dev="sockfs" ino=24077 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.027148][ T7942] netlink: 'syz.0.1753': attribute type 7 has an invalid length. [ 154.088432][ T7985] set_capacity_and_notify: 2 callbacks suppressed [ 154.088449][ T7985] loop2: detected capacity change from 0 to 128 [ 154.111044][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1753'. [ 154.122361][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.169659][ T7985] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 154.256389][ T28] audit: type=1400 audit(2000000317.839:12186): avc: denied { write } for pid=7987 comm="syz.1.1764" name="netlink" dev="proc" ino=4026532440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 154.301025][ T7988] loop1: detected capacity change from 0 to 512 [ 154.328869][ T7988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.368371][ T7988] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.384631][ T28] audit: type=1400 audit(2000000317.969:12187): avc: denied { write } for pid=7987 comm="syz.1.1764" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.413651][ T7988] EXT4-fs warning (device loop1): verify_group_input:156: Last group not full [ 154.451158][ T7988] netlink: 'syz.1.1764': attribute type 1 has an invalid length. [ 154.466584][ T28] audit: type=1400 audit(2000000317.969:12188): avc: denied { append } for pid=7987 comm="syz.1.1764" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.525843][ T28] audit: type=1400 audit(2000000317.989:12189): avc: denied { ioctl } for pid=7987 comm="syz.1.1764" path="/358/file1/file1" dev="loop1" ino=15 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.551239][ T7997] bond1: (slave dummy0): making interface the new active one [ 154.579892][ T7997] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 154.618369][ T7988] bond1: entered promiscuous mode [ 154.636048][ T7988] dummy0: entered promiscuous mode [ 154.695378][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.719188][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'. [ 154.729974][ T1335] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 154.753847][ T7987] bond1: left promiscuous mode [ 154.764920][ T7987] dummy0: left promiscuous mode [ 154.775145][ T8005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1769'. [ 154.807199][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.823219][ T8005] loop2: detected capacity change from 0 to 1024 [ 154.830946][ T8005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.866014][ T8005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.908380][ T8005] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.158262][ T8020] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1770'. [ 155.442970][ T8022] loop4: detected capacity change from 0 to 512 [ 155.596737][ T8022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.610028][ T8022] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.638767][ T28] audit: type=1400 audit(2000000319.219:12190): avc: denied { write } for pid=8021 comm="syz.4.1773" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.786576][ T8028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1774'. [ 156.712176][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.115654][ T8036] loop3: detected capacity change from 0 to 1024 [ 157.911135][ T8036] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 157.925221][ T8036] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 157.938876][ T8036] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: comm syz.3.1776: inode #1: comm syz.3.1776: iget: illegal inode # [ 157.953308][ T8036] loop3: lost filesystem error report for type 5 error -117 [ 157.955773][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 157.969671][ C1] EXT4-fs (loop3): initial error at time 2000000321: ext4_get_journal_inode:5896 [ 157.978905][ C1] EXT4-fs (loop3): last error at time 2000000321: ext4_get_journal_inode:5896 [ 158.898781][ T8036] EXT4-fs (loop3): no journal found [ 158.905405][ T8036] EXT4-fs (loop3): can't get journal size [ 158.914130][ T8036] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 158.914769][ T8036] EXT4-fs: failed to create workqueue [ 158.932989][ T8036] EXT4-fs (loop3): mount failed [ 159.584639][ T8052] loop4: detected capacity change from 0 to 128 [ 159.608396][ T28] audit: type=1400 audit(2000000323.179:12191): avc: denied { sys_module } for pid=8046 comm="syz.0.1780" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 159.632455][ T8054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1782'. [ 159.719460][ T8043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1779'. [ 159.827227][ T8054] loop1: detected capacity change from 0 to 1024 [ 159.837736][ T8054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.899719][ T8054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.928160][ T8054] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.117077][ T8060] syz.3.1783 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 160.159072][ T8070] loop2: detected capacity change from 0 to 8192 [ 160.189608][ T8060] CPU: 1 UID: 0 PID: 8060 Comm: syz.3.1783 Tainted: G W syzkaller #0 PREEMPT(full) [ 160.189740][ T8060] Tainted: [W]=WARN [ 160.189748][ T8060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.189764][ T8060] Call Trace: [ 160.189772][ T8060] [ 160.189781][ T8060] __dump_stack+0x1d/0x30 [ 160.189811][ T8060] dump_stack_lvl+0x95/0xd0 [ 160.189845][ T8060] dump_stack+0x15/0x1b [ 160.189864][ T8060] dump_header+0x80/0x240 [ 160.189946][ T8060] oom_kill_process+0x295/0x350 [ 160.189984][ T8060] out_of_memory+0x97d/0xb80 [ 160.190018][ T8060] try_charge_memcg+0x62f/0xa10 [ 160.190061][ T8060] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 160.190162][ T8060] __alloc_frozen_pages_noprof+0x18a/0x350 [ 160.190194][ T8060] alloc_pages_mpol+0xb3/0x260 [ 160.190223][ T8060] alloc_pages_noprof+0x8f/0x140 [ 160.190317][ T8060] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 160.190347][ T8060] ? do_replace+0x1b4/0x360 [ 160.190375][ T8060] __vmalloc_noprof+0xa4/0xf0 [ 160.190399][ T8060] ? do_replace+0x1b4/0x360 [ 160.190495][ T8060] do_replace+0x1b4/0x360 [ 160.190524][ T8060] do_ebt_set_ctl+0x12e/0xcd0 [ 160.190549][ T8060] ? __rcu_read_unlock+0x4e/0x70 [ 160.190574][ T8060] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 160.190690][ T8060] ? ip4_datagram_release_cb+0x3ee/0x420 [ 160.190807][ T8060] ? _raw_spin_unlock_bh+0x18/0x20 [ 160.190905][ T8060] ? release_sock+0x10c/0x180 [ 160.190947][ T8060] ? sockopt_release_sock+0x41/0x50 [ 160.191029][ T8060] ? do_ip_setsockopt+0x1af1/0x2290 [ 160.191133][ T8060] nf_setsockopt+0x199/0x1b0 [ 160.191232][ T8060] ip_setsockopt+0x102/0x110 [ 160.191265][ T8060] udp_setsockopt+0x89/0xa0 [ 160.191293][ T8060] sock_common_setsockopt+0x69/0x80 [ 160.191399][ T8060] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 160.191440][ T8060] __sys_setsockopt+0x184/0x200 [ 160.191469][ T8060] __x64_sys_setsockopt+0x64/0x80 [ 160.191533][ T8060] x64_sys_call+0x2327/0x3020 [ 160.191642][ T8060] do_syscall_64+0x12c/0x3b0 [ 160.191681][ T8060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.191755][ T8060] RIP: 0033:0x7f3f5dbece59 [ 160.191858][ T8060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.191882][ T8060] RSP: 002b:00007f3f5c647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.191910][ T8060] RAX: ffffffffffffffda RBX: 00007f3f5de65fa0 RCX: 00007f3f5dbece59 [ 160.191929][ T8060] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 160.191945][ T8060] RBP: 00007f3f5dc82d6f R08: 0000000000000108 R09: 0000000000000000 [ 160.191972][ T8060] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000000 [ 160.191988][ T8060] R13: 00007f3f5de66038 R14: 00007f3f5de65fa0 R15: 00007ffd1ccaed48 [ 160.192010][ T8060] [ 160.356255][ T8060] memory: usage 307200kB, limit 307200kB, failcnt 815 [ 160.499934][ T8060] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 160.525473][ T8060] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 160.545907][ T8060] Memory cgroup stats for /syz3: [ 160.546346][ T8060] cache 0 [ 160.557645][ T8060] rss 4096 [ 160.564424][ T8060] shmem 0 [ 160.574501][ T8060] mapped_file 0 [ 160.578163][ T8060] dirty 0 [ 160.582622][ T8060] writeback 0 [ 160.588962][ T8060] workingset_refault_anon 4 [ 160.598330][ T8060] workingset_refault_file 1 [ 160.607249][ T8060] swap 299008 [ 160.615805][ T8060] swapcached 356352 [ 160.625814][ T8060] pgpgin 136880 [ 160.629368][ T8060] pgpgout 136872 [ 160.633989][ T8081] loop2: detected capacity change from 0 to 8192 [ 160.643105][ T8060] pgfault 175611 [ 160.647782][ T8060] pgmajfault 7 [ 160.651583][ T8060] inactive_anon 20480 [ 160.660594][ T8060] active_anon 12288 [ 160.678685][ T8060] inactive_file 0 [ 160.685798][ T8060] active_file 0 [ 160.693655][ T8060] unevictable 0 [ 160.702651][ T8060] hierarchical_memory_limit 314572800 [ 160.717135][ T8060] hierarchical_memsw_limit 9223372036854771712 [ 160.732086][ T8060] total_cache 0 [ 160.742555][ T8060] total_rss 4096 [ 160.746932][ T8060] total_shmem 0 [ 160.753308][ T8060] total_mapped_file 0 [ 160.763592][ T8060] total_dirty 0 [ 160.770933][ T8060] total_writeback 0 [ 160.793993][ T8060] total_workingset_refault_anon 4 [ 160.803654][ T8060] total_workingset_refault_file 1 [ 160.815859][ T8060] total_swap 299008 [ 160.820115][ T8084] loop2: detected capacity change from 0 to 8192 [ 160.826671][ T8060] total_swapcached 356352 [ 160.831156][ T8060] total_pgpgin 136880 [ 160.848593][ T8060] total_pgpgout 136872 [ 160.864315][ T8060] total_pgfault 175611 [ 160.874364][ T8060] total_pgmajfault 7 [ 160.908958][ T8060] total_inactive_anon 20480 [ 160.920819][ T8060] total_active_anon 12288 [ 160.937538][ T8060] total_inactive_file 0 [ 160.993968][ T8060] total_active_file 0 [ 161.001380][ T8060] total_unevictable 0 [ 161.009763][ T8060] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1783,pid=8059,uid=0 [ 161.033231][ T8060] Memory cgroup out of memory: Killed process 8059 (syz.3.1783) total-vm:94036kB, anon-rss:1236kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 161.075514][ T8089] loop2: detected capacity change from 0 to 1024 [ 161.228522][ T8089] EXT4-fs: test_dummy_encryption option not supported [ 161.892732][ T28] audit: type=1400 audit(2000000325.469:12192): avc: denied { block_suspend } for pid=8093 comm="syz.3.1791" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.286183][ C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 162.353662][ T8094] loop3: detected capacity change from 0 to 1024 [ 162.410692][ T8094] EXT4-fs: Ignoring removed orlov option [ 162.442284][ T8094] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 162.582011][ T8094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.731601][ T28] audit: type=1400 audit(2000000326.309:12193): avc: denied { map } for pid=8093 comm="syz.3.1791" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.790291][ T8101] cgroup: Bad value for 'name' [ 162.825225][ T28] audit: type=1400 audit(2000000326.309:12194): avc: denied { read write } for pid=8093 comm="syz.3.1791" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.903072][ T28] audit: type=1400 audit(2000000326.349:12195): avc: denied { read } for pid=8099 comm="syz.0.1793" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 162.972971][ T28] audit: type=1400 audit(2000000326.349:12196): avc: denied { open } for pid=8099 comm="syz.0.1793" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 163.050103][ T28] audit: type=1400 audit(2000000326.369:12197): avc: denied { mounton } for pid=8093 comm="syz.3.1791" path="/338/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.128138][ T8104] xt_hashlimit: size too large, truncated to 1048576 [ 163.138302][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.450690][ T8113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8113 comm=syz.1.1798 [ 163.629184][ T8117] loop1: detected capacity change from 0 to 8192 [ 163.777185][ T8118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1796'. [ 163.879016][ T8123] loop1: detected capacity change from 0 to 8192 [ 164.048445][ T8125] loop4: detected capacity change from 0 to 8192 [ 164.068983][ T28] audit: type=1400 audit(2000000327.649:12198): avc: denied { write } for pid=8128 comm="syz.1.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.157306][ T8131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.265498][ T8131] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.407216][ T28] audit: type=1400 audit(2000000327.909:12199): avc: denied { write } for pid=8130 comm="syz.3.1805" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.548718][ T8145] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1808'. [ 165.061319][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.342405][ T8142] set_capacity_and_notify: 3 callbacks suppressed [ 165.342443][ T8142] loop4: detected capacity change from 0 to 1024 [ 165.400499][ T8142] EXT4-fs: Ignoring removed orlov option [ 165.435663][ T8142] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 165.502581][ T8142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.523259][ T28] audit: type=1400 audit(2000000329.099:12200): avc: denied { connect } for pid=8147 comm="syz.1.1810" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.643565][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1810'. [ 165.664253][ T8142] cgroup: Bad value for 'name' [ 166.002056][ T8161] loop3: detected capacity change from 0 to 128 [ 166.293382][ T28] audit: type=1400 audit(2000000329.869:12201): avc: denied { map } for pid=8162 comm="syz.2.1814" path="socket:[24430]" dev="sockfs" ino=24430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.342166][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.371186][ T8167] netlink: 'syz.2.1817': attribute type 19 has an invalid length. [ 166.385936][ T28] audit: type=1400 audit(2000000329.869:12202): avc: denied { accept } for pid=8162 comm="syz.2.1814" path="socket:[24430]" dev="sockfs" ino=24430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.414704][ T8167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1817'. [ 166.419366][ T8168] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 166.518633][ T8176] netlink: 736 bytes leftover after parsing attributes in process `syz.4.1819'. [ 166.539979][ T8176] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1819'. [ 166.558706][ T28] audit: type=1400 audit(2000000330.139:12203): avc: denied { write } for pid=8175 comm="syz.4.1819" lport=57823 faddr=fc02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 167.908151][ T8187] loop1: detected capacity change from 0 to 512 [ 167.942094][ T8187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.004388][ T8187] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.040580][ T28] audit: type=1400 audit(2000000331.619:12204): avc: denied { write } for pid=8186 comm="syz.1.1822" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.227187][ T8193] loop2: detected capacity change from 0 to 8192 [ 168.738761][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.707988][ T8215] loop2: detected capacity change from 0 to 8192 [ 169.903319][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1834'. [ 169.938548][ T8220] loop1: detected capacity change from 0 to 8192 [ 170.188996][ T8230] loop1: detected capacity change from 0 to 8192 [ 170.227548][ T8228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1838'. [ 170.356120][ T8236] loop1: detected capacity change from 0 to 512 [ 170.378820][ T8236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.414509][ T8236] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.453627][ T28] audit: type=1400 audit(2000000334.029:12205): avc: denied { write } for pid=8235 comm="syz.1.1841" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.505145][ T8231] loop4: detected capacity change from 0 to 1024 [ 170.540753][ T8231] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.687239][ T8231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.719862][ T8231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.986390][ T8248] xt_hashlimit: size too large, truncated to 1048576 [ 171.127278][ T8256] xt_hashlimit: size too large, truncated to 1048576 [ 171.197920][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.263449][ T8262] xt_hashlimit: size too large, truncated to 1048576 [ 171.313893][ T8260] loop3: detected capacity change from 0 to 8192 [ 171.786023][ T8275] netlink: 'syz.0.1853': attribute type 21 has an invalid length. [ 171.797058][ T8275] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1853'. [ 171.923873][ T8277] loop2: detected capacity change from 0 to 512 [ 171.945192][ T6458] udevd[6458]: incorrect ext4 checksum on /dev/loop2 [ 172.025392][ T8288] loop4: detected capacity change from 0 to 512 [ 172.052439][ T8288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.138239][ T8288] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.158054][ T28] audit: type=1400 audit(2000000335.739:12206): avc: denied { write } for pid=8287 comm="syz.4.1858" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.220107][ T8294] loop1: detected capacity change from 0 to 8192 [ 172.292291][ T8298] loop2: detected capacity change from 0 to 128 [ 172.620737][ T8310] xt_hashlimit: size too large, truncated to 1048576 [ 172.689969][ T8308] loop3: detected capacity change from 0 to 8192 [ 172.868342][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.987610][ T28] audit: type=1400 audit(2000000336.569:12207): avc: denied { create } for pid=8316 comm="syz.4.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 173.088044][ T28] audit: type=1400 audit(2000000336.589:12208): avc: denied { getopt } for pid=8316 comm="syz.4.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 173.437261][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1868'. [ 173.541837][ T8331] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 173.550258][ T8330] loop1: detected capacity change from 0 to 8192 [ 173.809064][ T8340] xfrm0 speed is unknown, defaulting to 1000 [ 173.860509][ T8340] xfrm0 speed is unknown, defaulting to 1000 [ 173.904651][ T8340] xfrm0 speed is unknown, defaulting to 1000 [ 174.209247][ T8340] infiniband syz0: set active [ 174.219705][ T8340] infiniband syz0: added xfrm0 [ 174.231027][ T1039] xfrm0 speed is unknown, defaulting to 1000 [ 174.315261][ T8340] RDS/IB: syz0: added [ 174.321198][ T8340] smc: adding ib device syz0 with port count 1 [ 174.328537][ T8340] smc: ib device syz0 port 1 has no pnetid [ 174.335261][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 174.350083][ T8340] xfrm0 speed is unknown, defaulting to 1000 [ 174.797061][ T8340] xfrm0 speed is unknown, defaulting to 1000 [ 174.846641][ T8340] xfrm0 speed is unknown, defaulting to 1000 [ 174.881440][ T8359] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1879'. [ 175.160157][ T8340] xfrm0 speed is unknown, defaulting to 1000 [ 175.340124][ T28] audit: type=1400 audit(2000000338.919:12209): avc: denied { listen } for pid=8360 comm="syz.0.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.675187][ T28] audit: type=1400 audit(2000000338.949:12210): avc: denied { setopt } for pid=8360 comm="syz.0.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.712206][ T8340] xfrm0 speed is unknown, defaulting to 1000 [ 175.767901][ T8363] xt_hashlimit: size too large, truncated to 1048576 [ 175.783424][ T28] audit: type=1400 audit(2000000339.229:12211): avc: denied { accept } for pid=8360 comm="syz.0.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.880179][ T28] audit: type=1400 audit(2000000339.249:12212): avc: denied { ioctl } for pid=8360 comm="syz.0.1880" path="socket:[25926]" dev="sockfs" ino=25926 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.914521][ T8340] xfrm0 speed is unknown, defaulting to 1000 [ 176.245220][ T8368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1882'. [ 176.414141][ T28] audit: type=1400 audit(2000000339.989:12213): avc: denied { setopt } for pid=8369 comm="syz.4.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.446555][ T8368] loop1: detected capacity change from 0 to 1024 [ 176.486586][ T8368] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.501020][ T28] audit: type=1400 audit(2000000339.989:12214): avc: denied { setattr } for pid=8369 comm="syz.4.1883" name="CAN_J1939" dev="sockfs" ino=25963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.612222][ T28] audit: type=1400 audit(2000000340.189:12215): avc: denied { ioctl } for pid=8371 comm="syz.4.1884" path="socket:[25971]" dev="sockfs" ino=25971 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.694253][ T8368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.732634][ T8368] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.801261][ T8377] loop3: detected capacity change from 0 to 8192 [ 176.935625][ T8381] xfrm0 speed is unknown, defaulting to 1000 [ 177.039049][ T8387] loop1: detected capacity change from 0 to 128 [ 177.128853][ T1896] ================================================================== [ 177.137001][ T1896] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 177.145300][ T1896] [ 177.147648][ T1896] write to 0xffff88811a89d8e0 of 44 bytes by task 8389 on cpu 1: [ 177.155389][ T1896] tty_set_termios+0xc0/0x910 [ 177.160111][ T1896] set_termios+0x4a7/0x4f0 [ 177.164562][ T1896] tty_mode_ioctl+0x37f/0x5b0 [ 177.169291][ T1896] n_tty_ioctl_helper+0x87/0x370 [ 177.174261][ T1896] n_tty_ioctl+0x101/0x220 [ 177.178698][ T1896] tty_ioctl+0x83e/0xb80 [ 177.182977][ T1896] __se_sys_ioctl+0xce/0x140 [ 177.187598][ T1896] __x64_sys_ioctl+0x43/0x50 [ 177.192222][ T1896] x64_sys_call+0x1563/0x3020 [ 177.196929][ T1896] do_syscall_64+0x12c/0x3b0 [ 177.201570][ T1896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.207488][ T1896] [ 177.209832][ T1896] read to 0xffff88811a89d8f9 of 1 bytes by task 1896 on cpu 0: [ 177.217387][ T1896] n_tty_lookahead_flow_ctrl+0x137/0x300 [ 177.223043][ T1896] tty_port_default_lookahead_buf+0x91/0xc0 [ 177.228984][ T1896] flush_to_ldisc+0x288/0x340 [ 177.233691][ T1896] process_scheduled_works+0x4f0/0x9c0 [ 177.239176][ T1896] worker_thread+0x58a/0x780 [ 177.243796][ T1896] kthread+0x22a/0x280 [ 177.247883][ T1896] ret_from_fork+0x146/0x330 [ 177.252502][ T1896] ret_from_fork_asm+0x1a/0x30 [ 177.257288][ T1896] [ 177.259626][ T1896] value changed: 0x11 -> 0x74 [ 177.264309][ T1896] [ 177.266643][ T1896] Reported by Kernel Concurrency Sanitizer on: [ 177.272807][ T1896] CPU: 0 UID: 0 PID: 1896 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT(full) [ 177.283958][ T1896] Tainted: [W]=WARN [ 177.287768][ T1896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.297854][ T1896] Workqueue: events_unbound flush_to_ldisc [ 177.304048][ T1896] ================================================================== [ 177.318281][ T8393] loop1: detected capacity change from 0 to 512 [ 177.332265][ T8393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.410069][ T8393] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.454962][ T28] audit: type=1400 audit(2000000341.029:12216): avc: denied { write } for pid=8392 comm="syz.1.1890" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.159348][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.