last executing test programs: 8.006840844s ago: executing program 2 (id=1030): getuid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r1, @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x6, 0x9f, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x105, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x0, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") 7.872336659s ago: executing program 2 (id=1034): r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x1f, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1", 0x1, 0x0, 0x13}, 0x50) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xffffff00, 0x0, r1, 0x10, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1, 0x8}, 0x50) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x4, 0x81, 0x2, 0x1, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140614000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20008800) 6.4962725s ago: executing program 2 (id=1040): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[], 0x0, 0x5a, 0x0, 0x4, 0x33fa}, 0x28) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x10) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, &(0x7f0000000100), 0x48) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x10, 0x5, 0x8, 0x1, 0x0, 0xfffffffffffffffe, 0xb545b5febd8f5b5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2d8, 0x3, @perf_bp={&(0x7f0000000200), 0xd}, 0x1, 0x2, 0x0, 0x2, 0x10, 0x2, 0xff, 0x0, 0x2, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x9) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) 4.429505947s ago: executing program 2 (id=1047): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x10, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffffffffffb, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@noload}, {@noload}, {@minixdf}, {@lazytime}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}, @generic={0x4, 0x2}]}}}}}}}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r5 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff010000000500070000000000080009", @ANYRES32], 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cde701004002000070000000600010005000000080009000200000008000b"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) syz_usb_disconnect(r1) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0xc0085508, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000088) 2.4413234s ago: executing program 2 (id=1059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000340)={0x9, 0x9}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000380), &(0x7f00000000c0)=r4}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x102000, 0x0, 0x6, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 2.045008995s ago: executing program 1 (id=1062): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) r1 = perf_event_open(&(0x7f0000000d40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c028, 0x0, 0x3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x1d, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, &(0x7f0000000200)={{0x0, 0x0}, {0x0, 0x0}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000140)) r7 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fstat(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r10, &(0x7f0000000900)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000800)="63a7adf42c47eabe10b5ca6f146eee584262f7f4b0b2af1e11a34599005049d9748e570478e172d0ac1905273b5a914818cf368cbc6cdc4eeac6cc4d0797e0e3e9ec3c8d13c49dd69df5893a89c2c3a13eba6534bd1bc818860f4e1523e0e2a3ba9f71a045c32f2fb1d1beca44b1f2bc1ac8ee4258051909c0c48325b676a281592bd55c7c04a981e86452262dc96f6e9d7ad82c494396743aa85b9df66229c761b2cf9b7eaba4944698bc5e2e2ede8068051eb08bf41660b9e5ec39df85dab97a1bdc0d811c5eae9f912b", 0xcb}, {&(0x7f0000000440)="9d06fa243809982dbde077b44665cd91b2bda1f300079dc4a44dbc58680f2c2653abc2acb36cf9f00ee59a2501063b50e6ea50946199d42b6ec750d27aa0c9e4e930d70d0575e0eaab1bd94118ccc16eeb7895b2c514782acc2b7e7b54730c10360774eb", 0x64}, {&(0x7f00000004c0)="d026d8ba05cb5c452faeeb1de2d46079a3040ca505e68632f4e2199273ccb2b4a02185c33f2da5a1f449c0cbe8644c92c9a1894a56d90765e4f07eff8162ad2ccb6e809c4a1e0ac3232b898148a53b472f4b2bcbfb8f9ac8b787b08443dd2848246662a40c2335ded3cfbcaba9f03aa61b8f6fb32b2dfc40bd3c4a810ed750ebf6c048690571a45a4925d073fc5fdf142b6fef6a056ce5e4150d3ec7afa287cbd10f2c2a1b52c51bd8c02fcde712971fcf267a59719ffb232be02ef1ed51e4f603722dac80876f408fbac101a0f20ee47610fc263341820f4b5895ab60594e35965ae23a9d74dcb7a2461ea3a3", 0xed}, {&(0x7f0000000e00)="3055de74465734bbef90cfdf7d5f3b9ad4c558d651b98f6dd8a706a9fc38f9a4f705f19f2f9121a767cfed45afe232f76791c4f7020054ae639280d945425524a5b8b3d727ebc77ed665ba28bf348570385b12e339053caf13d91dc5ea407362530d11ac2c44d3d6", 0x68}], 0x4, 0x0, 0x0, 0x800}}, {{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000700)="bb5f8b2988f7db0072689707930e17e97c", 0x11}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000108000002000000", @ANYRESOCT=r4, @ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB="00000000f7ff0000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=0x0], 0x0, 0x1}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a40)="bf5bcd033134bd64edb515ac5cf1a5223f84af71d323220a9ac418f16038361eba9995340efa0432ad726a80bc57be4c684cbb843cb5d73c9e2f5144e5f8b79ea887e670e80858a2efd28226ed26ef034334443bf25393b240da45c139e688fbbc4e4b728f3ce25404299571d474ad6395cc2fbc8f892db729ce8f816c2a8a0a10bd025786cec661fc7252f5ab54ca9567b972353a6fed977b032e2bcf2559a3f50040acde5539094cf1a37314c9beb1d06d2bdb149d4607390acf9b9b85a632a29cb820bb795829ee1acdd088d798b14a38a8c72b73d592f953e0a26248675c2eca6405f911d456f0f432272bcafd3f", 0xf0}, {&(0x7f0000000b40)="d6673e2c554acecf16b4e03c2166331f48c3fe865e8399b373dd3d8d6c1979d8752d39e791621cad8c42bc748a7830d164cb3d993bd2f87b9924a24da3cc03076cf8b8250c7c04618893f014e0e4ba18d4e154de0aa0b37b1949a751c1d42f4ec99d72d52238ca61b6ac7111c649719e13e1c2feebca3118cbc0d180586031008f96ab66fa291a4d63aa29c0c82690d2fd77d44ffdf392aa44500bad3e4b6617afd737681e4087fff61c5c8647f68e12b3fbb2c6828721ff03a5113deaf9e89a33e0d2", 0xc3}], 0x2, &(0x7f0000000c80)=ANY=[@ANYBLOB="00000000000000001c00000001000000", @ANYRES32=r13, @ANYRESOCT=r10, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="0000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r12, @ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r9, @ANYBLOB="000000000000000000000000019883382e0deee5fd6c7788376400000001000000", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x44881}}], 0x3, 0x40028080) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{0x0, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "26ff8339dad08fbb"}, 0x10}, 0x1, 0x0, 0x0, 0x4841}, 0x44004) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008fce"], 0xfc}}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={0xffffffffffffffff, r13}, 0xc) 1.688711688s ago: executing program 1 (id=1064): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x48) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x10, 0x5, 0x8, 0x1, 0x0, 0xfffffffffffffffe, 0xb545b5febd8f5b5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2d8, 0x3, @perf_bp={&(0x7f0000000200), 0xd}, 0x1, 0x2, 0x0, 0x2, 0x10, 0x2, 0xff, 0x0, 0x2, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x9) 1.540198724s ago: executing program 3 (id=1068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000340)={0x9, 0x9}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_init_net_socket$llc(0x1a, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000380), &(0x7f00000000c0)=r4}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x102000, 0x0, 0x6, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r6, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) 1.539596924s ago: executing program 1 (id=1069): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x10, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffffffffffb, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@noload}, {@noload}, {@minixdf}, {@lazytime}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}, @generic={0x4, 0x2}]}}}}}}}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r5 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff01000000050007000000000008000900000000000600020001000000", @ANYRES32], 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cde701004002000070000000600010005000000080009000200000008000b"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) syz_usb_disconnect(r1) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0xc0085508, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000088) 825.81356ms ago: executing program 2 (id=1072): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000640)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d72656c61786564006d6f64653d3078303030303030303030303030303030312c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303027322c696f636861727365743d6d6163677265656b416d61703d61636f726e2c696f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f632c6d6f64653d3078666666666666666666666666666666652c636865636b3d7374726963742c6673636f6e746578743d73797374656d5f752c7065726d69745f64697265637469f9a8a3d75634bdd2ea56ac526f64f72223cc082f505d16b1ba5ea0fd7c9a262c91bdadc10f9c5c6437414c224bbe313a4117d1602bd35ede73d55154ae0c2cb9551143371fd32306f3dee8613d38e0060354449f63f238ae901f37b2bb89b142696a1d8401d3184a52539fe3b38c382fd66c090599baedc4872e53f40e546c780697"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") syz_clone3(0x0, 0x11) socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x8, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000380)) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="d40000001b00010027bd7000fedbdf2500000000000000000000000000000000e00000010000000000000000000000004e2400054e230002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000005000000000000007d0c0000000000000c000000000000000000000000000000480d00000000000001000080000000000300000000000000cd6200000000000003000000000000000800000000000000040000000000000010000000b76b6e00010000020000000001000000000000000a0010"], 0xd4}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)=@ethtool_stats={0x18}}) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1000}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b7020000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2b}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000300)=ANY=[], 0xff2e) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) 782.054102ms ago: executing program 0 (id=1074): r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x1f, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1", 0x1, 0x0, 0x13}, 0x50) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xffffff00, 0x0, r1, 0x10, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1, 0x8}, 0x50) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x4, 0x81, 0x2, 0x1, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140614000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20008800) 730.521453ms ago: executing program 4 (id=1075): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x10, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffffffffffb, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@noload}, {@noload}, {@minixdf}, {@lazytime}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700"], 0x3c}}, 0x0) 657.276916ms ago: executing program 4 (id=1076): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8012, 0x4, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x400000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000700)=""/4096, 0x36, 0x1000, 0x8}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socket$kcm(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r4 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r4}}, './file0\x00'}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780050007001100000005001500020000000500010006000000050700000000000005000400000000000900020073797a310000000010000300686173683a69702c6d616300f905072ebe5ea6e618f5d0461f35d2ba09eb9b457db324d1fd73412bfbb4668daa4bc420a06d4298ffbacfb91a24b58333c0f2011e0499b3baa33062f62674847273b9d565daf7d7eb6f4f771fbcbe0d6753689dd98cb73b140c74d52aeec50a3a1dc6b7b27074bf040c2da449cae6141f19712084d0d0b28ed88057a322be1f"], 0x5c}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc4e8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2088000}, 0x4060804) unshare(0xa280e84fbd9d462d) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 644.526857ms ago: executing program 3 (id=1077): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) r1 = perf_event_open(&(0x7f0000000d40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c028, 0x0, 0x3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x1d, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, &(0x7f0000000200)={{0x0, 0x0}, {0x0, 0x0}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000140)) r7 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fstat(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r10, &(0x7f0000000900)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000800)="63a7adf42c47eabe10b5ca6f146eee584262f7f4b0b2af1e11a34599005049d9748e570478e172d0ac1905273b5a914818cf368cbc6cdc4eeac6cc4d0797e0e3e9ec3c8d13c49dd69df5893a89c2c3a13eba6534bd1bc818860f4e1523e0e2a3ba9f71a045c32f2fb1d1beca44b1f2bc1ac8ee4258051909c0c48325b676a281592bd55c7c04a981e86452262dc96f6e9d7ad82c494396743aa85b9df66229c761b2cf9b7eaba4944698bc5e2e2ede8068051eb08bf41660b9e5ec39df85dab97a1bdc0d811c5eae9f912b", 0xcb}, {&(0x7f0000000440)="9d06fa243809982dbde077b44665cd91b2bda1f300079dc4a44dbc58680f2c2653abc2acb36cf9f00ee59a2501063b50e6ea50946199d42b6ec750d27aa0c9e4e930d70d0575e0eaab1bd94118ccc16eeb7895b2c514782acc2b7e7b54730c10360774eb", 0x64}, {&(0x7f00000004c0)="d026d8ba05cb5c452faeeb1de2d46079a3040ca505e68632f4e2199273ccb2b4a02185c33f2da5a1f449c0cbe8644c92c9a1894a56d90765e4f07eff8162ad2ccb6e809c4a1e0ac3232b898148a53b472f4b2bcbfb8f9ac8b787b08443dd2848246662a40c2335ded3cfbcaba9f03aa61b8f6fb32b2dfc40bd3c4a810ed750ebf6c048690571a45a4925d073fc5fdf142b6fef6a056ce5e4150d3ec7afa287cbd10f2c2a1b52c51bd8c02fcde712971fcf267a59719ffb232be02ef1ed51e4f603722dac80876f408fbac101a0f20ee47610fc263341820f4b5895ab60594e35965ae23a9d74dcb7a2461ea3a3", 0xed}, {&(0x7f0000000e00)="3055de74465734bbef90cfdf7d5f3b9ad4c558d651b98f6dd8a706a9fc38f9a4f705f19f2f9121a767cfed45afe232f76791c4f7020054ae639280d945425524a5b8b3d727ebc77ed665ba28bf348570385b12e339053caf13d91dc5ea407362530d11ac2c44d3d6", 0x68}], 0x4, 0x0, 0x0, 0x800}}, {{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000700)="bb5f8b2988f7db0072689707930e17e97c", 0x11}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000108000002000000", @ANYRESOCT=r4, @ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB="00000000f7ff0000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=0x0], 0x0, 0x1}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a40)="bf5bcd033134bd64edb515ac5cf1a5223f84af71d323220a9ac418f16038361eba9995340efa0432ad726a80bc57be4c684cbb843cb5d73c9e2f5144e5f8b79ea887e670e80858a2efd28226ed26ef034334443bf25393b240da45c139e688fbbc4e4b728f3ce25404299571d474ad6395cc2fbc8f892db729ce8f816c2a8a0a10bd025786cec661fc7252f5ab54ca9567b972353a6fed977b032e2bcf2559a3f50040acde5539094cf1a37314c9beb1d06d2bdb149d4607390acf9b9b85a632a29cb820bb795829ee1acdd088d798b14a38a8c72b73d592f953e0a26248675c2eca6405f911d456f0f432272bcafd3f", 0xf0}, {&(0x7f0000000b40)="d6673e2c554acecf16b4e03c2166331f48c3fe865e8399b373dd3d8d6c1979d8752d39e791621cad8c42bc748a7830d164cb3d993bd2f87b9924a24da3cc03076cf8b8250c7c04618893f014e0e4ba18d4e154de0aa0b37b1949a751c1d42f4ec99d72d52238ca61b6ac7111c649719e13e1c2feebca3118cbc0d180586031008f96ab66fa291a4d63aa29c0c82690d2fd77d44ffdf392aa44500bad3e4b6617afd737681e4087fff61c5c8647f68e12b3fbb2c6828721ff03a5113deaf9e89a33e0d2", 0xc3}], 0x2, &(0x7f0000000c80)=ANY=[@ANYBLOB="00000000000000001c00000001000000", @ANYRES32=r13, @ANYRESOCT=r10, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="0000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r12, @ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r9, @ANYBLOB="000000000000000000000000019883382e0deee5fd6c7788376400000001000000", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x44881}}], 0x3, 0x40028080) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{0x0, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "26ff8339dad08fbb"}, 0x10}, 0x1, 0x0, 0x0, 0x4841}, 0x44004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008fce"], 0xfc}}, 0x0) r14 = open(&(0x7f00000001c0)='./file0\x00', 0x101e00, 0x162) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r14, r13}, 0xc) 604.761728ms ago: executing program 0 (id=1078): getuid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001", @ANYRES32=r1, @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x6, 0x9f, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x105, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x0, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) inotify_init() removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") 552.34206ms ago: executing program 3 (id=1079): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x48) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x10, 0x5, 0x8, 0x1, 0x0, 0xfffffffffffffffe, 0xb545b5febd8f5b5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2d8, 0x3, @perf_bp={&(0x7f0000000200), 0xd}, 0x1, 0x2, 0x0, 0x2, 0x10, 0x2, 0xff, 0x0, 0x2, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x9) 539.758831ms ago: executing program 1 (id=1080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[], 0x0, 0x5a, 0x0, 0x4, 0x33fa}, 0x28) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x10) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, &(0x7f0000000100), 0x48) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x10, 0x5, 0x8, 0x1, 0x0, 0xfffffffffffffffe, 0xb545b5febd8f5b5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2d8, 0x3, @perf_bp={&(0x7f0000000200), 0xd}, 0x1, 0x2, 0x0, 0x2, 0x10, 0x2, 0xff, 0x0, 0x2, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x9) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) 487.132353ms ago: executing program 4 (id=1081): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) writev(0xffffffffffffffff, 0x0, 0x0) sigaltstack(&(0x7f0000001dc0)={0x0, 0x80000002}, &(0x7f0000001e40)={0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=@deltaction={0x14, 0x31, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80d4}, 0x20040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2c5, &(0x7f0000000600)="$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") ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) 400.103096ms ago: executing program 3 (id=1082): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x31, 0x2}, 0x80, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) 399.671036ms ago: executing program 4 (id=1083): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[], 0x0, 0x5a, 0x0, 0x4, 0x33fa}, 0x28) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x10) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000100), 0x48) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x10, 0x5, 0x8, 0x1, 0x0, 0xfffffffffffffffe, 0xb545b5febd8f5b5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2d8, 0x3, @perf_bp={&(0x7f0000000200), 0xd}, 0x1, 0x2, 0x0, 0x2, 0x10, 0x2, 0xff, 0x0, 0x2, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x9) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) 371.225467ms ago: executing program 3 (id=1084): socket$kcm(0x1e, 0x4, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000900)="27030200590200000100002f1eafaef706e1050000008847000f110186cee84400000008000000001900000000000200000000000000000000000000266c9356927e7c8b73ee7f717395a0296526bfa631", 0x51}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55", 0x76}, {&(0x7f0000000280)="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", 0x19c}], 0x3}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xffffff00, 0x0, r0, 0x10, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x8}, 0x50) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x4, 0x81, 0x2, 0x1, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140614000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20008800) 359.974297ms ago: executing program 0 (id=1085): r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000900)="27030200590200000100002f1eafaef706e1050000008847000f110186cee84400000008000000001900000000000200000000000000000000000000266c9356927e7c8b73ee7f717395a0296526bfa631", 0x51}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55", 0x76}, {&(0x7f0000000280)="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", 0x19c}], 0x3}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xffffff00, 0x0, r1, 0x10, '\x00', r3, 0xffffffffffffffff, 0x5, 0x1, 0x8}, 0x50) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x4, 0x81, 0x2, 0x1, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140614000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20008800) 359.647167ms ago: executing program 4 (id=1086): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x10020) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x22}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 317.802479ms ago: executing program 4 (id=1087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000340)={0x9, 0x9}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_init_net_socket$llc(0x1a, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000380), &(0x7f00000000c0)=r4}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x102000, 0x0, 0x6, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r6, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) 270.227541ms ago: executing program 0 (id=1088): r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x1f, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1", 0x1, 0x0, 0x13}, 0x50) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xffffff00, 0x0, r1, 0x10, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1, 0x8}, 0x50) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x4, 0x81, 0x2, 0x1, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140614000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20008800) 195.402044ms ago: executing program 1 (id=1089): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000025000700000020200000000000007fff00bfa1000000ffffffb702000008000000b70300000000000085000000ca00000095000000000000000000000000000000b3257351951c30177da5106620355193c5d5fa0b32ea01209c05cb720d459e9d9a095fdc951291864ac05401bed49998bcc34e6ac930b7c922e118d9b7c8f8a1c8e46530bf7c93c0b5a495b0012f00"/166], 0x0, 0x6}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="150a0000600000103c841d00"], &(0x7f0000000000)='GPL\x00'}, 0x80) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d0000000400000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r1}, 0x38) socket$can_j1939(0x1d, 0x2, 0x7) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8000000000009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x4, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x8006, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3ffffffffe, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x80}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x5}, 0x0, 0x0, 0xfffffffa, 0x6, 0x6, 0xc9, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x7d691000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1a16ae, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1194, 0xa4, 0x8, 0x0, 0xa1, 0x9b9b, 0x10, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) 191.868224ms ago: executing program 3 (id=1090): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x10, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffffffffffb, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@noload}, {@noload}, {@minixdf}, {@lazytime}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}, @generic={0x4, 0x2}]}}}}}}}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r5 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff01000000050007000000000008000900000000000600020001000000", @ANYRES32], 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cde701004002000070000000600010005000000080009000200000008000b"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) syz_usb_disconnect(r1) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0xc0085508, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000088) 57.513238ms ago: executing program 0 (id=1091): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8012, 0x4, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x400000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/slabinfo\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000700)=""/4096, 0x36, 0x1000, 0x8}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socket$kcm(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r4 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r4}}, './file0\x00'}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780050007001100000005001500020000000500010006000000050700000000000005000400000000000900020073797a310000000010000300686173683a69702c6d616300f905072ebe5ea6e618f5d0461f35d2ba09eb9b457db324d1fd73412bfbb4668daa4bc420a06d4298ffbacfb91a24b58333c0f2011e0499b3baa33062f62674847273b9d565daf7d7eb6f4f771fbcbe0d6753689dd98cb73b140c74d52aeec50a3a1dc6b7b27074bf040c2da449cae6141f19712084d0d0b28ed88057a322be1f"], 0x5c}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc4e8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2088000}, 0x4060804) unshare(0xa280e84fbd9d462d) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 17.2939ms ago: executing program 0 (id=1092): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000025000700000020200000000000007fff00bfa1000000ffffffb702000008000000b70300000000000085000000ca00000095000000000000000000000000000000b3257351951c30177da5106620355193c5d5fa0b32ea01209c05cb720d459e9d9a095fdc951291864ac05401bed49998bcc34e6ac930b7c922e118d9b7c8f8a1c8e46530bf7c93c0b5a495b0012f00"/166], 0x0, 0x6}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="150a0000600000103c841d00"], &(0x7f0000000000)='GPL\x00'}, 0x80) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d0000000400000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r1}, 0x38) socket$can_j1939(0x1d, 0x2, 0x7) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8000000000009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x4, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x8006, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3ffffffffe, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x80}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x5}, 0x0, 0x0, 0xfffffffa, 0x6, 0x6, 0xc9, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x7d691000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1a16ae, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1194, 0xa4, 0x8, 0x0, 0xa1, 0x9b9b, 0x10, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) process_vm_writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f0000001140)=[{&(0x7f0000000200)=""/142, 0x8e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf2501000000040001800400030004000280"], 0x20}, 0x1, 0x0, 0x0, 0x80d0}, 0x4800) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0), 0xff, 0x255, &(0x7f00000017c0)="$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") 0s ago: executing program 1 (id=1093): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) writev(0xffffffffffffffff, 0x0, 0x0) sigaltstack(&(0x7f0000001dc0)={0x0, 0x80000002}, &(0x7f0000001e40)={0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=@deltaction={0x14, 0x31, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80d4}, 0x20040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2c5, &(0x7f0000000600)="$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") ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) kernel console output (not intermixed with test programs): report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.008981][ T3915] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.130: couldn't read orphan inode 15 (err -117) [ 54.018370][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 54.018393][ C0] EXT4-fs (loop4): initial error at time 1780312447: ext4_orphan_get:1397: inode 15 [ 54.018424][ C0] EXT4-fs (loop4): last error at time 1780312447: ext4_orphan_get:1397: inode 15 [ 54.189437][ T3915] loop4: lost filesystem error report for type 5 error -117 [ 54.190194][ T3915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.211955][ T3915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.130'. [ 54.223890][ T3915] EXT4-fs (loop4): shut down requested (1) [ 54.982381][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 54.982399][ T28] audit: type=1400 audit(1780312447.829:302): avc: denied { bpf } for pid=3921 comm="syz.2.133" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.029321][ T28] audit: type=1400 audit(1780312447.869:303): avc: denied { perfmon } for pid=3921 comm="syz.2.133" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.080911][ T3928] FAULT_INJECTION: forcing a failure. [ 55.080911][ T3928] name failslab, interval 1, probability 0, space 0, times 0 [ 55.102296][ T3928] CPU: 1 UID: 0 PID: 3928 Comm: syz.3.135 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.102331][ T3928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 55.102343][ T3928] Call Trace: [ 55.102349][ T3928] [ 55.102358][ T3928] __dump_stack+0x1d/0x30 [ 55.102387][ T3928] dump_stack_lvl+0x95/0xd0 [ 55.102425][ T3928] dump_stack+0x15/0x1b [ 55.102479][ T3928] should_fail_ex+0x263/0x280 [ 55.102505][ T3928] should_failslab+0x8c/0xb0 [ 55.102586][ T3928] kmem_cache_alloc_noprof+0x66/0x3f0 [ 55.102626][ T3928] ? skb_clone+0x151/0x1f0 [ 55.102653][ T3928] skb_clone+0x151/0x1f0 [ 55.102680][ T3928] __netlink_deliver_tap+0x2c9/0x500 [ 55.102719][ T3928] netlink_unicast+0x653/0x680 [ 55.102760][ T3928] netlink_sendmsg+0x5c8/0x6f0 [ 55.102859][ T3928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.102890][ T3928] sock_sendmsg+0x213/0x240 [ 55.102953][ T3928] splice_to_socket+0x6e2/0xa80 [ 55.103006][ T3928] ? rw_verify_area+0x8d/0x160 [ 55.103069][ T3928] ? __pfx_splice_to_socket+0x10/0x10 [ 55.103129][ T3928] do_splice+0x970/0x10b0 [ 55.103152][ T3928] ? proc_fail_nth_write+0x13b/0x160 [ 55.103182][ T3928] ? __rcu_read_unlock+0x4e/0x70 [ 55.103208][ T3928] ? __fget_files+0x184/0x1c0 [ 55.103306][ T3928] __se_sys_splice+0x26c/0x3a0 [ 55.103329][ T3928] __x64_sys_splice+0x78/0x90 [ 55.103354][ T3928] x64_sys_call+0x16ef/0x3020 [ 55.103383][ T3928] do_syscall_64+0x12c/0x3b0 [ 55.103498][ T3928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.103520][ T3928] RIP: 0033:0x7f8b107ece59 [ 55.103555][ T3928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.103577][ T3928] RSP: 002b:00007f8b0f247028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 55.103602][ T3928] RAX: ffffffffffffffda RBX: 00007f8b10a65fa0 RCX: 00007f8b107ece59 [ 55.103620][ T3928] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 55.103635][ T3928] RBP: 00007f8b0f247090 R08: 000000000000fffd R09: 0000000000000000 [ 55.103651][ T3928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.103688][ T3928] R13: 00007f8b10a66038 R14: 00007f8b10a65fa0 R15: 00007ffedd148d78 [ 55.103705][ T3928] [ 55.103834][ T3928] netlink: 60 bytes leftover after parsing attributes in process `syz.3.135'. [ 55.337609][ T28] audit: type=1400 audit(1780312447.879:304): avc: denied { getopt } for pid=3921 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.357873][ T28] audit: type=1400 audit(1780312448.449:305): avc: denied { connect } for pid=3925 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.378104][ T28] audit: type=1400 audit(1780312448.449:306): avc: denied { read } for pid=3925 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.416652][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.644730][ T28] audit: type=1400 audit(1780312449.039:307): avc: denied { write } for pid=3925 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.323330][ T3941] loop3: detected capacity change from 0 to 512 [ 56.366074][ T3941] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.440569][ T3941] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.137: invalid indirect mapped block 9 (level 0) [ 56.461441][ T3941] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.480799][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 56.496440][ C1] EXT4-fs (loop3): initial error at time 1780312449: ext4_free_branches:1023: inode 11 [ 56.506151][ C1] EXT4-fs (loop3): last error at time 1780312449: ext4_free_branches:1023: inode 11 [ 56.546423][ T3941] EXT4-fs (loop3): 1 truncate cleaned up [ 56.562365][ T3941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.871099][ T28] audit: type=1400 audit(1780312449.989:308): avc: denied { write } for pid=3936 comm="syz.3.137" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.897598][ T28] audit: type=1400 audit(1780312449.999:309): avc: denied { read write } for pid=3936 comm="syz.3.137" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 57.080970][ T28] audit: type=1400 audit(1780312449.999:310): avc: denied { open } for pid=3936 comm="syz.3.137" path="/24/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 58.710670][ T3961] netlink: 72 bytes leftover after parsing attributes in process `syz.4.142'. [ 58.889548][ T3959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 59.105264][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.157512][ T3959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.199720][ T3964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'. [ 59.224542][ T3959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.253320][ T28] audit: type=1400 audit(1780312452.639:311): avc: denied { bind } for pid=3965 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.295533][ T3967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.147'. [ 59.693901][ T3978] loop4: detected capacity change from 0 to 512 [ 59.720499][ T3978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.740613][ T3975] loop3: detected capacity change from 0 to 512 [ 59.793936][ T3978] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 59.833065][ T3975] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 59.847040][ T3975] System zones: 0-2, 18-18, 34-34 [ 59.873100][ T3988] netlink: 256 bytes leftover after parsing attributes in process `syz.2.153'. [ 59.961949][ T3975] EXT4-fs (loop3): 1 orphan inode deleted [ 59.972726][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 59.975046][ T3975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.984366][ T30] loop3: lost filesystem error report for type 5 error -117 [ 59.985117][ T30] EXT4-fs (loop3): Remounting filesystem read-only [ 60.019880][ T3975] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.283854][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.394709][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 60.394723][ T28] audit: type=1400 audit(1780312453.779:318): avc: denied { read } for pid=3996 comm="syz.0.156" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.405047][ T3995] netlink: 256 bytes leftover after parsing attributes in process `syz.1.155'. [ 60.436623][ T28] audit: type=1400 audit(1780312453.789:319): avc: denied { open } for pid=3996 comm="syz.0.156" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.461992][ T28] audit: type=1400 audit(1780312453.829:320): avc: denied { ioctl } for pid=3996 comm="syz.0.156" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.514488][ T4003] netlink: 72 bytes leftover after parsing attributes in process `syz.2.157'. [ 60.560030][ T28] audit: type=1400 audit(1780312453.949:321): avc: denied { load_policy } for pid=3996 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 60.665093][ T3998] SELinux: failed to load policy [ 60.676976][ T28] audit: type=1400 audit(1780312454.069:322): avc: denied { write } for pid=4009 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 60.722560][ T28] audit: type=1400 audit(1780312454.069:323): avc: denied { ioctl } for pid=4009 comm="syz.3.160" path="socket:[6963]" dev="sockfs" ino=6963 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 60.790266][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.096726][ T4022] netlink: 256 bytes leftover after parsing attributes in process `syz.4.164'. [ 61.149776][ T4035] loop4: detected capacity change from 0 to 256 [ 61.169621][ T4035] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.547679][ T28] audit: type=1400 audit(1780312454.939:324): avc: denied { create } for pid=4042 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 61.598555][ T28] audit: type=1400 audit(1780312454.939:325): avc: denied { sys_admin } for pid=4042 comm="syz.0.174" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 61.623108][ T28] audit: type=1400 audit(1780312454.969:326): avc: denied { remount } for pid=4042 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.643138][ T28] audit: type=1400 audit(1780312454.969:327): avc: denied { create } for pid=4042 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 62.040543][ T4050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.175'. [ 62.495614][ T4048] loop4: detected capacity change from 0 to 512 [ 62.666684][ T4048] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 62.704498][ T4048] System zones: 0-2, 18-18, 34-34 [ 62.786090][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 62.802175][ T4048] EXT4-fs (loop4): 1 orphan inode deleted [ 62.822451][ T3430] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 62.824999][ T4048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.845527][ T3430] loop4: lost filesystem error report for type 5 error -117 [ 62.847867][ T3430] EXT4-fs (loop4): Remounting filesystem read-only [ 62.876012][ T4048] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.957883][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.100011][ T4062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.138801][ T4062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.151060][ T4072] netlink: 5 bytes leftover after parsing attributes in process `syz.4.182'. [ 63.449858][ T4079] loop4: detected capacity change from 0 to 512 [ 63.459953][ T4079] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.512179][ T4079] EXT4-fs (loop4): too many log groups per flexible block group [ 63.586168][ T4079] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 63.610562][ T4079] EXT4-fs (loop4): mount failed [ 64.084836][ T4091] tmpfs: Bad value for 'mpol' [ 64.259032][ T4096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 65.040165][ T4117] loop4: detected capacity change from 0 to 164 [ 65.168527][ T4112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'. [ 65.317336][ T4115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 65.532148][ T4112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.545062][ T4112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.557349][ T4115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.569987][ T4115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.593276][ T28] kauditd_printk_skb: 331 callbacks suppressed [ 65.593299][ T28] audit: type=1400 audit(1780312458.989:658): avc: denied { setopt } for pid=4125 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.628701][ T28] audit: type=1400 audit(1780312459.019:659): avc: denied { write } for pid=4125 comm="syz.1.200" laddr=100.1.1.0 lport=62630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.690713][ T4131] netlink: 256 bytes leftover after parsing attributes in process `syz.1.202'. [ 65.803597][ T4141] FAULT_INJECTION: forcing a failure. [ 65.803597][ T4141] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.816876][ T4141] CPU: 1 UID: 0 PID: 4141 Comm: syz.1.206 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.816984][ T4141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 65.816997][ T4141] Call Trace: [ 65.817006][ T4141] [ 65.817015][ T4141] __dump_stack+0x1d/0x30 [ 65.817045][ T4141] dump_stack_lvl+0x95/0xd0 [ 65.817068][ T4141] dump_stack+0x15/0x1b [ 65.817104][ T4141] should_fail_ex+0x263/0x280 [ 65.817123][ T4141] should_fail+0xb/0x20 [ 65.817139][ T4141] should_fail_usercopy+0x1a/0x20 [ 65.817179][ T4141] _copy_from_user+0x1c/0xb0 [ 65.817210][ T4141] get_user_ifreq+0x52/0x110 [ 65.817243][ T4141] sock_ioctl+0x54e/0x610 [ 65.817347][ T4141] ? __pfx_sock_ioctl+0x10/0x10 [ 65.817379][ T4141] __se_sys_ioctl+0xce/0x140 [ 65.817422][ T4141] __x64_sys_ioctl+0x43/0x50 [ 65.817509][ T4141] x64_sys_call+0x1563/0x3020 [ 65.817532][ T4141] do_syscall_64+0x12c/0x3b0 [ 65.817563][ T4141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.817640][ T4141] RIP: 0033:0x7f46c9b6ce59 [ 65.817660][ T4141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.817678][ T4141] RSP: 002b:00007f46c85c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.817698][ T4141] RAX: ffffffffffffffda RBX: 00007f46c9de5fa0 RCX: 00007f46c9b6ce59 [ 65.817716][ T4141] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 65.817729][ T4141] RBP: 00007f46c85c7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.817811][ T4141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.817844][ T4141] R13: 00007f46c9de6038 R14: 00007f46c9de5fa0 R15: 00007ffea50bdd08 [ 65.817866][ T4141] [ 66.063318][ T4149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.071932][ T4149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.167142][ T4156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 66.237246][ T4160] netlink: 256 bytes leftover after parsing attributes in process `syz.0.214'. [ 66.381184][ T28] audit: type=1400 audit(1780312459.769:660): avc: denied { connect } for pid=4168 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.401706][ T4156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.415571][ T4156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.446271][ T4169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 66.505520][ T28] audit: type=1400 audit(1780312459.769:661): avc: denied { name_connect } for pid=4168 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 66.526255][ T28] audit: type=1400 audit(1780312459.829:662): avc: denied { shutdown } for pid=4168 comm="syz.0.216" lport=55308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.547259][ T28] audit: type=1400 audit(1780312459.839:663): avc: denied { getopt } for pid=4168 comm="syz.0.216" lport=55308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.583325][ T28] audit: type=1400 audit(1780312459.979:664): avc: denied { ioctl } for pid=4172 comm="syz.0.217" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=7343 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.726210][ T28] audit: type=1400 audit(1780312460.029:665): avc: denied { read } for pid=4172 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.182571][ T4193] loop4: detected capacity change from 0 to 512 [ 67.253002][ T4193] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 67.429262][ T4193] EXT4-fs (loop4): 1 truncate cleaned up [ 67.457285][ T4193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.589111][ T28] audit: type=1400 audit(1780312460.959:666): avc: denied { getopt } for pid=4197 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.904468][ T4193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 68.045802][ T4212] macvlan0: entered promiscuous mode [ 68.070359][ T4212] dummy0: entered promiscuous mode [ 68.087051][ T4212] hsr1: entered promiscuous mode [ 68.092164][ T4212] hsr1: entered allmulticast mode [ 68.097230][ T4212] macvlan0: entered allmulticast mode [ 68.102677][ T4212] veth1_vlan: entered allmulticast mode [ 68.108417][ T4212] dummy0: entered allmulticast mode [ 68.190054][ T4193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.201563][ T4193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.316764][ T28] audit: type=1400 audit(1780312461.709:667): avc: denied { ioctl } for pid=4214 comm="syz.0.231" path="socket:[8321]" dev="sockfs" ino=8321 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.440672][ T4221] mmap: syz.0.231 (4221) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.127071][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.188023][ T4255] netlink: 72 bytes leftover after parsing attributes in process `syz.1.239'. [ 69.254877][ T4254] netlink: 72 bytes leftover after parsing attributes in process `syz.4.237'. [ 69.324466][ T4257] Restarting kernel threads ... [ 69.329581][ T4257] Done restarting kernel threads. [ 69.335402][ T4257] Restarting kernel threads ... [ 69.340433][ T4257] Done restarting kernel threads. [ 69.346308][ T4257] Restarting kernel threads ... [ 69.351502][ T4257] Done restarting kernel threads. [ 69.985404][ T4277] loop4: detected capacity change from 0 to 512 [ 70.050172][ T4277] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 70.130527][ T4277] EXT4-fs (loop4): 1 truncate cleaned up [ 70.153514][ T4277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.180625][ T4297] netlink: 72 bytes leftover after parsing attributes in process `syz.3.251'. [ 70.191777][ T4296] Restarting kernel threads ... [ 70.212421][ T4296] Done restarting kernel threads. [ 70.217998][ T4296] Restarting kernel threads ... [ 70.228397][ T4296] Done restarting kernel threads. [ 70.238763][ T4296] Restarting kernel threads ... [ 70.250303][ T4296] Done restarting kernel threads. [ 70.530259][ T4312] netlink: 256 bytes leftover after parsing attributes in process `syz.1.260'. [ 70.588312][ T4277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.629869][ T4277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.800327][ T4309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.839496][ T4318] netlink: 'syz.2.261': attribute type 4 has an invalid length. [ 70.858416][ T4309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.904507][ T4318] netlink: 152 bytes leftover after parsing attributes in process `syz.2.261'. [ 70.964275][ T28] audit: type=1400 audit(1780312464.359:668): avc: denied { create } for pid=4317 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 71.004617][ T4318] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 71.040965][ T28] audit: type=1400 audit(1780312464.379:669): avc: denied { getopt } for pid=4317 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 71.065236][ T28] audit: type=1400 audit(1780312464.439:670): avc: denied { write } for pid=4317 comm="syz.2.261" path="socket:[8437]" dev="sockfs" ino=8437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 71.149212][ T4327] netlink: 64 bytes leftover after parsing attributes in process `syz.2.264'. [ 71.229719][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.293942][ T4337] netlink: 72 bytes leftover after parsing attributes in process `syz.2.268'. [ 71.629582][ T4339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 71.910634][ T4357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 71.923528][ T4339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.935412][ T4339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.141969][ T4357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.157311][ T28] audit: type=1400 audit(1780312465.549:671): avc: denied { name_connect } for pid=4358 comm="syz.4.275" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 72.188090][ T4357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.011407][ T4380] loop4: detected capacity change from 0 to 128 [ 73.516130][ T4378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.595311][ T4378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.734055][ T4401] netlink: 'syz.3.292': attribute type 178 has an invalid length. [ 73.772514][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 73.854036][ T4405] loop4: detected capacity change from 0 to 512 [ 73.860746][ T4405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.871960][ T4405] EXT4-fs (loop4): too many log groups per flexible block group [ 73.879789][ T4405] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 73.886933][ T4405] EXT4-fs (loop4): mount failed [ 73.989423][ T4400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.001390][ T4400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.244080][ T4423] netlink: 72 bytes leftover after parsing attributes in process `syz.1.298'. [ 74.472801][ T4435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.304'. [ 74.583147][ T4438] Restarting kernel threads ... [ 74.588359][ T4438] Done restarting kernel threads. [ 74.595459][ T4438] Restarting kernel threads ... [ 74.600949][ T4438] Done restarting kernel threads. [ 74.607554][ T4438] Restarting kernel threads ... [ 74.613055][ T4438] Done restarting kernel threads. [ 74.728910][ T4447] FAULT_INJECTION: forcing a failure. [ 74.728910][ T4447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.760599][ T4447] CPU: 1 UID: 0 PID: 4447 Comm: syz.4.308 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.760629][ T4447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 74.760645][ T4447] Call Trace: [ 74.760653][ T4447] [ 74.760663][ T4447] __dump_stack+0x1d/0x30 [ 74.760704][ T4447] dump_stack_lvl+0x95/0xd0 [ 74.760730][ T4447] dump_stack+0x15/0x1b [ 74.760755][ T4447] should_fail_ex+0x263/0x280 [ 74.760824][ T4447] should_fail+0xb/0x20 [ 74.760846][ T4447] should_fail_usercopy+0x1a/0x20 [ 74.760870][ T4447] _copy_from_user+0x1c/0xb0 [ 74.760896][ T4447] ___sys_sendmsg+0xc1/0x1e0 [ 74.761003][ T4447] ? _raw_spin_unlock+0x9/0x30 [ 74.761041][ T4447] __x64_sys_sendmsg+0xd4/0x160 [ 74.761076][ T4447] x64_sys_call+0x194c/0x3020 [ 74.761163][ T4447] do_syscall_64+0x12c/0x3b0 [ 74.761204][ T4447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.761233][ T4447] RIP: 0033:0x7fb13033ce59 [ 74.761250][ T4447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.761283][ T4447] RSP: 002b:00007fb12ed97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.761309][ T4447] RAX: ffffffffffffffda RBX: 00007fb1305b5fa0 RCX: 00007fb13033ce59 [ 74.761344][ T4447] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 74.761361][ T4447] RBP: 00007fb12ed97090 R08: 0000000000000000 R09: 0000000000000000 [ 74.761378][ T4447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.761393][ T4447] R13: 00007fb1305b6038 R14: 00007fb1305b5fa0 R15: 00007fffec04dd88 [ 74.761474][ T4447] [ 75.199076][ T4449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.215345][ T4466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 75.232860][ T4449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.395401][ T4473] netlink: 256 bytes leftover after parsing attributes in process `syz.2.318'. [ 75.456818][ T4466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.485510][ T28] audit: type=1400 audit(1780312468.879:672): avc: denied { connect } for pid=4470 comm="syz.0.317" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.496983][ T4466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.515229][ T28] audit: type=1400 audit(1780312468.899:673): avc: denied { setopt } for pid=4470 comm="syz.0.317" laddr=fe80::a8aa:aaff:feaa:aaaa lport=58 faddr=ff03::1 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.567380][ T28] audit: type=1400 audit(1780312468.949:674): avc: denied { write } for pid=4470 comm="syz.0.317" laddr=fe80::a8aa:aaff:feaa:aaaa lport=58 faddr=ff03::1 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.628306][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 75.679985][ T28] audit: type=1400 audit(1780312469.069:675): avc: denied { create } for pid=4480 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=ieee802154_socket permissive=1 [ 75.842728][ T4495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.327'. [ 75.883768][ T4498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.328'. [ 75.901232][ T28] audit: type=1400 audit(1780312469.289:676): avc: denied { bind } for pid=4483 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.942300][ T28] audit: type=1400 audit(1780312469.289:677): avc: denied { write } for pid=4483 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.154672][ T4511] FAULT_INJECTION: forcing a failure. [ 76.154672][ T4511] name failslab, interval 1, probability 0, space 0, times 0 [ 76.177537][ T4511] CPU: 1 UID: 0 PID: 4511 Comm: syz.4.333 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.177623][ T4511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 76.177635][ T4511] Call Trace: [ 76.177642][ T4511] [ 76.177651][ T4511] __dump_stack+0x1d/0x30 [ 76.177776][ T4511] dump_stack_lvl+0x95/0xd0 [ 76.177809][ T4511] dump_stack+0x15/0x1b [ 76.177833][ T4511] should_fail_ex+0x263/0x280 [ 76.177858][ T4511] should_failslab+0x8c/0xb0 [ 76.177909][ T4511] kmem_cache_alloc_noprof+0x66/0x3f0 [ 76.177996][ T4511] ? skb_clone+0x151/0x1f0 [ 76.178111][ T4511] skb_clone+0x151/0x1f0 [ 76.178145][ T4511] nfnetlink_rcv+0x316/0x1720 [ 76.178178][ T4511] ? __account_obj_stock+0x111/0x5f0 [ 76.178210][ T4511] ? xas_load+0x413/0x430 [ 76.178368][ T4511] ? __rcu_read_unlock+0x4e/0x70 [ 76.178394][ T4511] ? xa_load+0xb1/0xe0 [ 76.178424][ T4511] ? memcg_list_lru_alloc+0xd0/0x4f0 [ 76.178479][ T4511] ? set_normalized_timespec64+0xe0/0x110 [ 76.178501][ T4511] ? __account_obj_stock+0x3ba/0x5f0 [ 76.178525][ T4511] ? __rcu_read_unlock+0x4e/0x70 [ 76.178582][ T4511] ? should_fail_ex+0x30/0x280 [ 76.178606][ T4511] ? __rcu_read_unlock+0x4e/0x70 [ 76.178626][ T4511] ? avc_has_perm_noaudit+0xab/0x130 [ 76.178673][ T4511] netlink_unicast+0x5a8/0x680 [ 76.178762][ T4511] netlink_sendmsg+0x5c8/0x6f0 [ 76.178806][ T4511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.178846][ T4511] ____sys_sendmsg+0x563/0x5b0 [ 76.178945][ T4511] ___sys_sendmsg+0x195/0x1e0 [ 76.179064][ T4511] __x64_sys_sendmsg+0xd4/0x160 [ 76.179102][ T4511] x64_sys_call+0x194c/0x3020 [ 76.179134][ T4511] do_syscall_64+0x12c/0x3b0 [ 76.179171][ T4511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.179243][ T4511] RIP: 0033:0x7fb13033ce59 [ 76.179263][ T4511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.179286][ T4511] RSP: 002b:00007fb12ed97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.179312][ T4511] RAX: ffffffffffffffda RBX: 00007fb1305b5fa0 RCX: 00007fb13033ce59 [ 76.179329][ T4511] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 76.179385][ T4511] RBP: 00007fb12ed97090 R08: 0000000000000000 R09: 0000000000000000 [ 76.179398][ T4511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.179456][ T4511] R13: 00007fb1305b6038 R14: 00007fb1305b5fa0 R15: 00007fffec04dd88 [ 76.179475][ T4511] [ 76.759905][ T4526] netlink: 256 bytes leftover after parsing attributes in process `syz.3.338'. [ 76.763181][ T4521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.336'. [ 76.822332][ T28] audit: type=1400 audit(1780312470.209:678): avc: denied { name_bind } for pid=4528 comm="syz.1.339" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 76.965044][ T4537] netlink: 256 bytes leftover after parsing attributes in process `syz.1.342'. [ 77.116382][ T28] audit: type=1400 audit(1780312470.509:679): avc: denied { getopt } for pid=4543 comm="syz.3.343" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.477296][ T28] audit: type=1400 audit(1780312470.869:680): avc: denied { getopt } for pid=4560 comm="syz.2.348" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.618039][ T28] audit: type=1400 audit(1780312470.919:681): avc: denied { read } for pid=4560 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.821724][ T4571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 77.998368][ T4582] FAULT_INJECTION: forcing a failure. [ 77.998368][ T4582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.011721][ T4582] CPU: 1 UID: 0 PID: 4582 Comm: syz.3.354 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.011780][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 78.011797][ T4582] Call Trace: [ 78.011804][ T4582] [ 78.011815][ T4582] __dump_stack+0x1d/0x30 [ 78.011846][ T4582] dump_stack_lvl+0x95/0xd0 [ 78.011868][ T4582] dump_stack+0x15/0x1b [ 78.011962][ T4582] should_fail_ex+0x263/0x280 [ 78.011988][ T4582] should_fail+0xb/0x20 [ 78.012007][ T4582] should_fail_usercopy+0x1a/0x20 [ 78.012096][ T4582] _copy_from_user+0x1c/0xb0 [ 78.012120][ T4582] do_sock_getsockopt+0x122/0x570 [ 78.012159][ T4582] __x64_sys_getsockopt+0x11d/0x1a0 [ 78.012186][ T4582] x64_sys_call+0x2dcf/0x3020 [ 78.012232][ T4582] do_syscall_64+0x12c/0x3b0 [ 78.012274][ T4582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.012302][ T4582] RIP: 0033:0x7f8b107ece59 [ 78.012337][ T4582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.012354][ T4582] RSP: 002b:00007f8b0f247028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 78.012382][ T4582] RAX: ffffffffffffffda RBX: 00007f8b10a65fa0 RCX: 00007f8b107ece59 [ 78.012400][ T4582] RDX: 0000000000000045 RSI: 0000000000000029 RDI: 0000000000000004 [ 78.012415][ T4582] RBP: 00007f8b0f247090 R08: 0000200000000400 R09: 0000000000000000 [ 78.012478][ T4582] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 78.012497][ T4582] R13: 00007f8b10a66038 R14: 00007f8b10a65fa0 R15: 00007ffedd148d78 [ 78.012521][ T4582] [ 78.199846][ T4571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.201955][ T4585] netlink: 256 bytes leftover after parsing attributes in process `syz.0.355'. [ 78.222800][ T4571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.310609][ T4591] Driver unsupported XDP return value 0 on prog (id 75) dev N/A, expect packet loss! [ 78.336454][ T28] audit: type=1400 audit(1780312471.729:682): avc: denied { read } for pid=4577 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.356696][ T4587] netlink: 'syz.4.352': attribute type 2 has an invalid length. [ 78.432571][ T4594] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 80.276163][ T4613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.386564][ T4613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.839099][ T4627] syz.1.368 (4627) used greatest stack depth: 8272 bytes left [ 82.475056][ T4674] Restarting kernel threads ... [ 82.482538][ T4672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.504354][ T4674] Done restarting kernel threads. [ 82.545016][ T4672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.381708][ T4684] Restarting kernel threads ... [ 83.386972][ T4684] Done restarting kernel threads. [ 83.393120][ T4684] Restarting kernel threads ... [ 83.401063][ T28] audit: type=1400 audit(1780312476.739:683): avc: denied { write } for pid=4663 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.422815][ T4684] Done restarting kernel threads. [ 83.670254][ T4695] FAULT_INJECTION: forcing a failure. [ 83.670254][ T4695] name failslab, interval 1, probability 0, space 0, times 0 [ 83.695918][ T4695] CPU: 1 UID: 0 PID: 4695 Comm: syz.0.389 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.695951][ T4695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.695976][ T4695] Call Trace: [ 83.695984][ T4695] [ 83.695993][ T4695] __dump_stack+0x1d/0x30 [ 83.696092][ T4695] dump_stack_lvl+0x95/0xd0 [ 83.696118][ T4695] dump_stack+0x15/0x1b [ 83.696136][ T4695] should_fail_ex+0x263/0x280 [ 83.696156][ T4695] should_failslab+0x8c/0xb0 [ 83.696265][ T4695] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 83.696298][ T4695] ? __alloc_skb+0x2d6/0x690 [ 83.696334][ T4695] __alloc_skb+0x2d6/0x690 [ 83.696361][ T4695] ? __alloc_skb+0x200/0x690 [ 83.696390][ T4695] netlink_alloc_large_skb+0xbf/0xf0 [ 83.696422][ T4695] netlink_sendmsg+0x40c/0x6f0 [ 83.696512][ T4695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.696560][ T4695] __sys_sendto+0x42e/0x490 [ 83.696601][ T4695] __x64_sys_sendto+0x76/0x90 [ 83.696630][ T4695] x64_sys_call+0x2d35/0x3020 [ 83.696682][ T4695] do_syscall_64+0x12c/0x3b0 [ 83.696716][ T4695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.696744][ T4695] RIP: 0033:0x7ff44e75ce59 [ 83.696763][ T4695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.696843][ T4695] RSP: 002b:00007ff44d18e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 83.696871][ T4695] RAX: ffffffffffffffda RBX: 00007ff44e9d6090 RCX: 00007ff44e75ce59 [ 83.696890][ T4695] RDX: 0000000000000090 RSI: 0000200000000540 RDI: 0000000000000003 [ 83.696907][ T4695] RBP: 00007ff44d18e090 R08: 0000000000000000 R09: 0000000000000000 [ 83.696923][ T4695] R10: 0000000000048040 R11: 0000000000000246 R12: 0000000000000001 [ 83.697010][ T4695] R13: 00007ff44e9d6128 R14: 00007ff44e9d6090 R15: 00007ffc83c53098 [ 83.697036][ T4695] [ 83.749529][ T4701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.396'. [ 84.074573][ T4706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.397'. [ 84.660673][ T4720] netlink: 764 bytes leftover after parsing attributes in process `syz.1.402'. [ 84.824032][ T4718] FAULT_INJECTION: forcing a failure. [ 84.824032][ T4718] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 84.858290][ T4718] CPU: 0 UID: 0 PID: 4718 Comm: syz.0.401 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.858324][ T4718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 84.858366][ T4718] Call Trace: [ 84.858406][ T4718] [ 84.858415][ T4718] __dump_stack+0x1d/0x30 [ 84.858444][ T4718] dump_stack_lvl+0x95/0xd0 [ 84.858521][ T4718] dump_stack+0x15/0x1b [ 84.858539][ T4718] should_fail_ex+0x263/0x280 [ 84.858565][ T4718] should_fail_alloc_page+0xf2/0x100 [ 84.858603][ T4718] __alloc_frozen_pages_noprof+0x108/0x350 [ 84.858682][ T4718] alloc_pages_mpol+0xb3/0x260 [ 84.858720][ T4718] folio_alloc_mpol_noprof+0x39/0x80 [ 84.858745][ T4718] swap_cache_alloc_folio+0x8b/0x120 [ 84.858770][ T4718] read_swap_cache_async+0x90/0x1d0 [ 84.858821][ T4718] swapin_walk_pmd_entry+0x1a7/0x2c0 [ 84.858852][ T4718] walk_pgd_range+0xa76/0x1520 [ 84.858936][ T4718] __walk_page_range+0xdd/0x340 [ 84.859058][ T4718] walk_page_range_vma_unsafe+0x2cd/0x320 [ 84.859083][ T4718] walk_page_range_vma+0x56/0x70 [ 84.859109][ T4718] madvise_vma_behavior+0xe77/0x2100 [ 84.859138][ T4718] ? mas_prev+0x5a/0x80 [ 84.859167][ T4718] ? find_vma_prev+0x9c/0xe0 [ 84.859246][ T4718] madvise_do_behavior+0x5de/0xa10 [ 84.859277][ T4718] do_madvise+0x10e/0x190 [ 84.859402][ T4718] __x64_sys_madvise+0x63/0x80 [ 84.859425][ T4718] x64_sys_call+0x1eff/0x3020 [ 84.859487][ T4718] do_syscall_64+0x12c/0x3b0 [ 84.859518][ T4718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.859538][ T4718] RIP: 0033:0x7ff44e75ce59 [ 84.859557][ T4718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.859593][ T4718] RSP: 002b:00007ff44d1af028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 84.859619][ T4718] RAX: ffffffffffffffda RBX: 00007ff44e9d5fa0 RCX: 00007ff44e75ce59 [ 84.859637][ T4718] RDX: 0000000000000003 RSI: 000000000060005f RDI: 0000200000000000 [ 84.859654][ T4718] RBP: 00007ff44d1af090 R08: 0000000000000000 R09: 0000000000000000 [ 84.859670][ T4718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.859683][ T4718] R13: 00007ff44e9d6038 R14: 00007ff44e9d5fa0 R15: 00007ffc83c53098 [ 84.859760][ T4718] [ 85.086748][ T4728] FAULT_INJECTION: forcing a failure. [ 85.086748][ T4728] name failslab, interval 1, probability 0, space 0, times 0 [ 85.128858][ T4728] CPU: 1 UID: 0 PID: 4728 Comm: syz.4.404 Not tainted syzkaller #0 PREEMPT(lazy) [ 85.128892][ T4728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 85.128904][ T4728] Call Trace: [ 85.128911][ T4728] [ 85.128919][ T4728] __dump_stack+0x1d/0x30 [ 85.128942][ T4728] dump_stack_lvl+0x95/0xd0 [ 85.128969][ T4728] dump_stack+0x15/0x1b [ 85.129035][ T4728] should_fail_ex+0x263/0x280 [ 85.129056][ T4728] should_failslab+0x8c/0xb0 [ 85.129087][ T4728] kmem_cache_alloc_noprof+0x66/0x3f0 [ 85.129123][ T4728] ? skb_clone+0x151/0x1f0 [ 85.129205][ T4728] skb_clone+0x151/0x1f0 [ 85.129231][ T4728] nfnetlink_rcv+0x316/0x1720 [ 85.129255][ T4728] ? __account_obj_stock+0x3ba/0x5f0 [ 85.129305][ T4728] ? xas_load+0x413/0x430 [ 85.129387][ T4728] ? __rcu_read_unlock+0x4e/0x70 [ 85.129464][ T4728] ? lapic_next_event+0x11/0x20 [ 85.129484][ T4728] ? clockevents_program_event+0x2fd/0x340 [ 85.129505][ T4728] ? tick_program_event+0x79/0xc0 [ 85.129533][ T4728] ? __account_obj_stock+0x3f5/0x5f0 [ 85.129566][ T4728] ? irqentry_exit+0x55c/0x5d0 [ 85.129598][ T4728] ? __rcu_read_unlock+0x4e/0x70 [ 85.129671][ T4728] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 85.129705][ T4728] netlink_unicast+0x5a8/0x680 [ 85.129768][ T4728] netlink_sendmsg+0x5c8/0x6f0 [ 85.129870][ T4728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.129930][ T4728] ____sys_sendmsg+0x563/0x5b0 [ 85.129967][ T4728] ___sys_sendmsg+0x195/0x1e0 [ 85.130016][ T4728] __x64_sys_sendmsg+0xd4/0x160 [ 85.130044][ T4728] x64_sys_call+0x194c/0x3020 [ 85.130122][ T4728] do_syscall_64+0x12c/0x3b0 [ 85.130201][ T4728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.130224][ T4728] RIP: 0033:0x7fb13033ce59 [ 85.130274][ T4728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.130297][ T4728] RSP: 002b:00007fb12ed97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.130321][ T4728] RAX: ffffffffffffffda RBX: 00007fb1305b5fa0 RCX: 00007fb13033ce59 [ 85.130339][ T4728] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000010 [ 85.130355][ T4728] RBP: 00007fb12ed97090 R08: 0000000000000000 R09: 0000000000000000 [ 85.130367][ T4728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.130445][ T4728] R13: 00007fb1305b6038 R14: 00007fb1305b5fa0 R15: 00007fffec04dd88 [ 85.130468][ T4728] [ 85.531272][ T4743] syzkaller1: entered promiscuous mode [ 85.536793][ T4743] syzkaller1: entered allmulticast mode [ 85.564767][ T28] audit: type=1400 audit(1780312478.959:684): avc: denied { read } for pid=4742 comm="syz.3.410" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.587807][ T28] audit: type=1400 audit(1780312478.959:685): avc: denied { open } for pid=4742 comm="syz.3.410" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.737641][ T28] audit: type=1400 audit(1780312478.959:686): avc: denied { ioctl } for pid=4742 comm="syz.3.410" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.766786][ T28] audit: type=1400 audit(1780312478.959:687): avc: denied { connect } for pid=4742 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.068576][ T4754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 86.085498][ T4754] ipt_REJECT: TCP_RESET invalid for non-tcp [ 86.436002][ T28] audit: type=1400 audit(1780312478.959:688): avc: denied { write } for pid=4742 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.462147][ T4758] FAULT_INJECTION: forcing a failure. [ 86.462147][ T4758] name failslab, interval 1, probability 0, space 0, times 0 [ 86.474961][ T4758] CPU: 0 UID: 0 PID: 4758 Comm: syz.3.413 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.474995][ T4758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 86.475038][ T4758] Call Trace: [ 86.475046][ T4758] [ 86.475057][ T4758] __dump_stack+0x1d/0x30 [ 86.475087][ T4758] dump_stack_lvl+0x95/0xd0 [ 86.475109][ T4758] dump_stack+0x15/0x1b [ 86.475127][ T4758] should_fail_ex+0x263/0x280 [ 86.475146][ T4758] should_failslab+0x8c/0xb0 [ 86.475226][ T4758] kmem_cache_alloc_noprof+0x66/0x3f0 [ 86.475337][ T4758] ? skb_clone+0x151/0x1f0 [ 86.475371][ T4758] skb_clone+0x151/0x1f0 [ 86.475404][ T4758] __netlink_deliver_tap+0x2c9/0x500 [ 86.475465][ T4758] netlink_unicast+0x653/0x680 [ 86.475497][ T4758] netlink_sendmsg+0x5c8/0x6f0 [ 86.475599][ T4758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.475698][ T4758] ____sys_sendmsg+0x563/0x5b0 [ 86.475736][ T4758] ___sys_sendmsg+0x195/0x1e0 [ 86.475779][ T4758] __x64_sys_sendmsg+0xd4/0x160 [ 86.475815][ T4758] x64_sys_call+0x194c/0x3020 [ 86.475918][ T4758] do_syscall_64+0x12c/0x3b0 [ 86.475960][ T4758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.475999][ T4758] RIP: 0033:0x7f8b107ece59 [ 86.476022][ T4758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.476084][ T4758] RSP: 002b:00007f8b0f247028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.476109][ T4758] RAX: ffffffffffffffda RBX: 00007f8b10a65fa0 RCX: 00007f8b107ece59 [ 86.476127][ T4758] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000c [ 86.476144][ T4758] RBP: 00007f8b0f247090 R08: 0000000000000000 R09: 0000000000000000 [ 86.476160][ T4758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.476196][ T4758] R13: 00007f8b10a66038 R14: 00007f8b10a65fa0 R15: 00007ffedd148d78 [ 86.476221][ T4758] [ 87.829964][ T4771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.416'. [ 88.058423][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 88.071423][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 88.080309][ T4784] netlink: 48 bytes leftover after parsing attributes in process `syz.0.419'. [ 88.237176][ T28] audit: type=1400 audit(1780312481.549:689): avc: denied { mount } for pid=4787 comm="syz.1.422" name="/" dev="ramfs" ino=9494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 88.259301][ T28] audit: type=1400 audit(1780312481.549:690): avc: denied { write } for pid=4787 comm="syz.1.422" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.283307][ T28] audit: type=1400 audit(1780312481.549:691): avc: denied { open } for pid=4787 comm="syz.1.422" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.307603][ T28] audit: type=1400 audit(1780312481.549:692): avc: denied { ioctl } for pid=4787 comm="syz.1.422" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.385139][ T4790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 88.451299][ T4795] netlink: 72 bytes leftover after parsing attributes in process `syz.0.424'. [ 88.611905][ T4790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.633944][ T4790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.757870][ T4798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.766438][ T4798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.860738][ T4803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.869291][ T4803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.292177][ T4826] FAULT_INJECTION: forcing a failure. [ 89.292177][ T4826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.305237][ T4826] CPU: 1 UID: 0 PID: 4826 Comm: syz.2.438 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.305322][ T4826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.305333][ T4826] Call Trace: [ 89.305339][ T4826] [ 89.305346][ T4826] __dump_stack+0x1d/0x30 [ 89.305367][ T4826] dump_stack_lvl+0x95/0xd0 [ 89.305404][ T4826] dump_stack+0x15/0x1b [ 89.305445][ T4826] should_fail_ex+0x263/0x280 [ 89.305510][ T4826] should_fail+0xb/0x20 [ 89.305524][ T4826] should_fail_usercopy+0x1a/0x20 [ 89.305612][ T4826] _copy_from_iter+0x328/0xea0 [ 89.305633][ T4826] ? __alloc_skb+0x200/0x690 [ 89.305654][ T4826] netlink_sendmsg+0x4ae/0x6f0 [ 89.305745][ T4826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.305774][ T4826] ____sys_sendmsg+0x563/0x5b0 [ 89.305800][ T4826] ___sys_sendmsg+0x195/0x1e0 [ 89.305837][ T4826] __x64_sys_sendmsg+0xd4/0x160 [ 89.305864][ T4826] x64_sys_call+0x194c/0x3020 [ 89.305886][ T4826] do_syscall_64+0x12c/0x3b0 [ 89.305915][ T4826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.305934][ T4826] RIP: 0033:0x7f63ac64ce59 [ 89.305970][ T4826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.305985][ T4826] RSP: 002b:00007f63ab0a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.306002][ T4826] RAX: ffffffffffffffda RBX: 00007f63ac8c5fa0 RCX: 00007f63ac64ce59 [ 89.306014][ T4826] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 89.306025][ T4826] RBP: 00007f63ab0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.306041][ T4826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.306081][ T4826] R13: 00007f63ac8c6038 R14: 00007f63ac8c5fa0 R15: 00007ffd3d48c938 [ 89.306098][ T4826] [ 89.503498][ T4836] __nla_validate_parse: 3 callbacks suppressed [ 89.503517][ T4836] netlink: 72 bytes leftover after parsing attributes in process `syz.2.439'. [ 89.669707][ T4852] FAULT_INJECTION: forcing a failure. [ 89.669707][ T4852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.682973][ T4852] CPU: 0 UID: 0 PID: 4852 Comm: syz.4.445 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.683004][ T4852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.683018][ T4852] Call Trace: [ 89.683026][ T4852] [ 89.683035][ T4852] __dump_stack+0x1d/0x30 [ 89.683104][ T4852] dump_stack_lvl+0x95/0xd0 [ 89.683129][ T4852] dump_stack+0x15/0x1b [ 89.683217][ T4852] should_fail_ex+0x263/0x280 [ 89.683238][ T4852] should_fail+0xb/0x20 [ 89.683255][ T4852] should_fail_usercopy+0x1a/0x20 [ 89.683351][ T4852] _copy_from_iter+0xcf/0xea0 [ 89.683377][ T4852] ? __alloc_skb+0x4f6/0x690 [ 89.683403][ T4852] ? __alloc_skb+0x200/0x690 [ 89.683424][ T4852] netlink_sendmsg+0x4ae/0x6f0 [ 89.683493][ T4852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.683640][ T4852] ____sys_sendmsg+0x563/0x5b0 [ 89.683746][ T4852] ___sys_sendmsg+0x195/0x1e0 [ 89.683837][ T4852] __x64_sys_sendmsg+0xd4/0x160 [ 89.683877][ T4852] x64_sys_call+0x194c/0x3020 [ 89.683925][ T4852] do_syscall_64+0x12c/0x3b0 [ 89.684067][ T4852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.684140][ T4852] RIP: 0033:0x7fb13033ce59 [ 89.684161][ T4852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.684182][ T4852] RSP: 002b:00007fb12ed97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.684231][ T4852] RAX: ffffffffffffffda RBX: 00007fb1305b5fa0 RCX: 00007fb13033ce59 [ 89.684252][ T4852] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 89.684315][ T4852] RBP: 00007fb12ed97090 R08: 0000000000000000 R09: 0000000000000000 [ 89.684329][ T4852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.684341][ T4852] R13: 00007fb1305b6038 R14: 00007fb1305b5fa0 R15: 00007fffec04dd88 [ 89.684361][ T4852] [ 89.703425][ T4856] FAULT_INJECTION: forcing a failure. [ 89.703425][ T4856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.822662][ T4860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.449'. [ 89.853764][ T4856] CPU: 0 UID: 0 PID: 4856 Comm: syz.0.446 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.853879][ T4856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.853919][ T4856] Call Trace: [ 89.853948][ T4856] [ 89.853970][ T4856] __dump_stack+0x1d/0x30 [ 89.854049][ T4856] dump_stack_lvl+0x95/0xd0 [ 89.854260][ T4856] dump_stack+0x15/0x1b [ 89.854323][ T4856] should_fail_ex+0x263/0x280 [ 89.854393][ T4856] should_fail+0xb/0x20 [ 89.854441][ T4856] should_fail_usercopy+0x1a/0x20 [ 89.854508][ T4856] _copy_from_iter+0xcf/0xea0 [ 89.854646][ T4856] ? __alloc_skb+0x4f6/0x690 [ 89.854724][ T4856] ? __alloc_skb+0x200/0x690 [ 89.854857][ T4856] netlink_sendmsg+0x4ae/0x6f0 [ 89.854891][ T4856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.854947][ T4856] ____sys_sendmsg+0x563/0x5b0 [ 89.855053][ T4856] ___sys_sendmsg+0x195/0x1e0 [ 89.855186][ T4856] __x64_sys_sendmsg+0xd4/0x160 [ 89.855286][ T4856] x64_sys_call+0x194c/0x3020 [ 89.855359][ T4856] do_syscall_64+0x12c/0x3b0 [ 89.855454][ T4856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.855585][ T4856] RIP: 0033:0x7ff44e75ce59 [ 89.855635][ T4856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.855766][ T4856] RSP: 002b:00007ff44d1af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.855829][ T4856] RAX: ffffffffffffffda RBX: 00007ff44e9d5fa0 RCX: 00007ff44e75ce59 [ 89.855871][ T4856] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000013 [ 89.855911][ T4856] RBP: 00007ff44d1af090 R08: 0000000000000000 R09: 0000000000000000 [ 89.855953][ T4856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.855994][ T4856] R13: 00007ff44e9d6038 R14: 00007ff44e9d5fa0 R15: 00007ffc83c53098 [ 89.856055][ T4856] [ 90.081345][ T4863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 90.450688][ T4872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.453'. [ 90.721250][ T4863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.729770][ T4863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.208835][ T4886] netlink: 72 bytes leftover after parsing attributes in process `syz.0.458'. [ 91.332051][ T4893] netlink: 764 bytes leftover after parsing attributes in process `syz.2.462'. [ 91.361839][ T4896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.463'. [ 91.388770][ T4898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 91.506200][ T4903] netlink: 68 bytes leftover after parsing attributes in process `syz.1.466'. [ 91.532541][ T4906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.467'. [ 91.682220][ T4898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.690729][ T4898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.735794][ T28] audit: type=1400 audit(1780312485.079:693): avc: denied { ioctl } for pid=4924 comm="syz.3.474" path="socket:[10999]" dev="sockfs" ino=10999 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.790332][ T4930] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 91.792241][ T28] audit: type=1400 audit(1780312485.179:694): avc: denied { relabelfrom } for pid=4928 comm="syz.1.476" name="" dev="pipefs" ino=9744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 91.822949][ T28] audit: type=1400 audit(1780312485.179:695): avc: denied { mac_admin } for pid=4928 comm="syz.1.476" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.843856][ T28] audit: type=1400 audit(1780312485.199:696): avc: denied { relabelto } for pid=4928 comm="syz.1.476" name="" dev="pipefs" ino=9744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 91.861507][ T4933] FAULT_INJECTION: forcing a failure. [ 91.861507][ T4933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.884493][ T4933] CPU: 0 UID: 0 PID: 4933 Comm: syz.1.477 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.884524][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.884578][ T4933] Call Trace: [ 91.884585][ T4933] [ 91.884594][ T4933] __dump_stack+0x1d/0x30 [ 91.884623][ T4933] dump_stack_lvl+0x95/0xd0 [ 91.884648][ T4933] dump_stack+0x15/0x1b [ 91.884673][ T4933] should_fail_ex+0x263/0x280 [ 91.884764][ T4933] should_fail+0xb/0x20 [ 91.884782][ T4933] should_fail_usercopy+0x1a/0x20 [ 91.884828][ T4933] _copy_from_iter+0xcf/0xea0 [ 91.884853][ T4933] ? __alloc_skb+0x4f6/0x690 [ 91.884879][ T4933] ? __alloc_skb+0x200/0x690 [ 91.884983][ T4933] netlink_sendmsg+0x4ae/0x6f0 [ 91.885022][ T4933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.885063][ T4933] ____sys_sendmsg+0x563/0x5b0 [ 91.885163][ T4933] ___sys_sendmsg+0x195/0x1e0 [ 91.885208][ T4933] __x64_sys_sendmsg+0xd4/0x160 [ 91.885245][ T4933] x64_sys_call+0x194c/0x3020 [ 91.885283][ T4933] do_syscall_64+0x12c/0x3b0 [ 91.885320][ T4933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.885357][ T4933] RIP: 0033:0x7f46c9b6ce59 [ 91.885376][ T4933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.885393][ T4933] RSP: 002b:00007f46c85c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.885412][ T4933] RAX: ffffffffffffffda RBX: 00007f46c9de5fa0 RCX: 00007f46c9b6ce59 [ 91.885426][ T4933] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 91.885438][ T4933] RBP: 00007f46c85c7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.885507][ T4933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.885518][ T4933] R13: 00007f46c9de6038 R14: 00007f46c9de5fa0 R15: 00007ffea50bdd08 [ 91.885537][ T4933] [ 92.075547][ T4927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.084012][ T4927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.088743][ T4934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.100289][ T4934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.439151][ T4943] FAULT_INJECTION: forcing a failure. [ 92.439151][ T4943] name failslab, interval 1, probability 0, space 0, times 0 [ 92.492910][ T4943] CPU: 0 UID: 0 PID: 4943 Comm: syz.4.480 Not tainted syzkaller #0 PREEMPT(lazy) [ 92.492944][ T4943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 92.492957][ T4943] Call Trace: [ 92.492965][ T4943] [ 92.492975][ T4943] __dump_stack+0x1d/0x30 [ 92.493066][ T4943] dump_stack_lvl+0x95/0xd0 [ 92.493116][ T4943] dump_stack+0x15/0x1b [ 92.493246][ T4943] should_fail_ex+0x263/0x280 [ 92.493265][ T4943] should_failslab+0x8c/0xb0 [ 92.493365][ T4943] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 92.493411][ T4943] ? __alloc_skb+0x2d6/0x690 [ 92.493440][ T4943] __alloc_skb+0x2d6/0x690 [ 92.493465][ T4943] ? __alloc_skb+0x200/0x690 [ 92.493577][ T4943] netlink_alloc_large_skb+0xbf/0xf0 [ 92.493634][ T4943] netlink_sendmsg+0x40c/0x6f0 [ 92.493672][ T4943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.493746][ T4943] __sys_sendto+0x42e/0x490 [ 92.493778][ T4943] __x64_sys_sendto+0x76/0x90 [ 92.493805][ T4943] x64_sys_call+0x2d35/0x3020 [ 92.493832][ T4943] do_syscall_64+0x12c/0x3b0 [ 92.493992][ T4943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.494016][ T4943] RIP: 0033:0x7fb13033ce59 [ 92.494031][ T4943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.494048][ T4943] RSP: 002b:00007fb12ed97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 92.494136][ T4943] RAX: ffffffffffffffda RBX: 00007fb1305b5fa0 RCX: 00007fb13033ce59 [ 92.494201][ T4943] RDX: 0000000000000090 RSI: 0000200000000180 RDI: 0000000000000003 [ 92.494217][ T4943] RBP: 00007fb12ed97090 R08: 0000000000000000 R09: 0000000000000000 [ 92.494236][ T4943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.494248][ T4943] R13: 00007fb1305b6038 R14: 00007fb1305b5fa0 R15: 00007fffec04dd88 [ 92.494349][ T4943] [ 94.460578][ T4952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.469387][ T4952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.736861][ T4976] __nla_validate_parse: 5 callbacks suppressed [ 94.736884][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 95.113211][ T4982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.130456][ T4982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.535652][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 96.852771][ T4991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.861297][ T4991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.915669][ T4995] netlink: 256 bytes leftover after parsing attributes in process `syz.2.498'. [ 97.008663][ T5003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.502'. [ 97.405376][ T5012] netlink: 764 bytes leftover after parsing attributes in process `syz.4.504'. [ 97.650573][ T5025] netlink: 20 bytes leftover after parsing attributes in process `syz.4.509'. [ 97.847479][ T5030] netlink: 256 bytes leftover after parsing attributes in process `syz.0.511'. [ 97.936122][ T5041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.515'. [ 97.946058][ T5039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 98.284827][ T5039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.295057][ T5039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.471927][ T5049] FAULT_INJECTION: forcing a failure. [ 98.471927][ T5049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.485090][ T5049] CPU: 1 UID: 0 PID: 5049 Comm: syz.1.517 Not tainted syzkaller #0 PREEMPT(lazy) [ 98.485117][ T5049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.485129][ T5049] Call Trace: [ 98.485136][ T5049] [ 98.485144][ T5049] __dump_stack+0x1d/0x30 [ 98.485242][ T5049] dump_stack_lvl+0x95/0xd0 [ 98.485262][ T5049] dump_stack+0x15/0x1b [ 98.485280][ T5049] should_fail_ex+0x263/0x280 [ 98.485302][ T5049] should_fail+0xb/0x20 [ 98.485324][ T5049] should_fail_usercopy+0x1a/0x20 [ 98.485359][ T5049] _copy_from_user+0x1c/0xb0 [ 98.485395][ T5049] kstrtouint_from_user+0x69/0xf0 [ 98.485432][ T5049] ? 0xffffffff81000000 [ 98.485516][ T5049] ? selinux_file_permission+0x1e1/0x320 [ 98.485545][ T5049] proc_fail_nth_write+0x50/0x160 [ 98.485576][ T5049] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 98.485658][ T5049] vfs_write+0x269/0x9f0 [ 98.485723][ T5049] ? __rcu_read_unlock+0x4e/0x70 [ 98.485808][ T5049] ? __fget_files+0x184/0x1c0 [ 98.485834][ T5049] ? mutex_lock+0x57/0x90 [ 98.485924][ T5049] ksys_write+0xdc/0x1a0 [ 98.485963][ T5049] __x64_sys_write+0x40/0x50 [ 98.486006][ T5049] x64_sys_call+0x27e1/0x3020 [ 98.486045][ T5049] do_syscall_64+0x12c/0x3b0 [ 98.486134][ T5049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.486159][ T5049] RIP: 0033:0x7f46c9b2d68e [ 98.486174][ T5049] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.486191][ T5049] RSP: 002b:00007f46c8584fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.486210][ T5049] RAX: ffffffffffffffda RBX: 00007f46c85856c0 RCX: 00007f46c9b2d68e [ 98.486223][ T5049] RDX: 0000000000000001 RSI: 00007f46c85850a0 RDI: 000000000000000a [ 98.486307][ T5049] RBP: 00007f46c8585090 R08: 0000000000000000 R09: 0000000000000000 [ 98.486336][ T5049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.486348][ T5049] R13: 00007f46c9de6218 R14: 00007f46c9de6180 R15: 00007ffea50bdd08 [ 98.486373][ T5049] [ 99.120544][ T5060] FAULT_INJECTION: forcing a failure. [ 99.120544][ T5060] name failslab, interval 1, probability 0, space 0, times 0 [ 99.133469][ T5060] CPU: 1 UID: 0 PID: 5060 Comm: syz.2.519 Not tainted syzkaller #0 PREEMPT(lazy) [ 99.133501][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 99.133518][ T5060] Call Trace: [ 99.133525][ T5060] [ 99.133676][ T5060] __dump_stack+0x1d/0x30 [ 99.133731][ T5060] dump_stack_lvl+0x95/0xd0 [ 99.133752][ T5060] dump_stack+0x15/0x1b [ 99.133770][ T5060] should_fail_ex+0x263/0x280 [ 99.133864][ T5060] should_failslab+0x8c/0xb0 [ 99.133900][ T5060] kmem_cache_alloc_noprof+0x66/0x3f0 [ 99.133965][ T5060] ? alloc_empty_file+0x70/0x1e0 [ 99.133994][ T5060] alloc_empty_file+0x70/0x1e0 [ 99.134021][ T5060] path_openat+0x65/0x2050 [ 99.134102][ T5060] ? _raw_spin_unlock+0x9/0x30 [ 99.134213][ T5060] ? __schedule+0x951/0xd40 [ 99.134232][ T5060] ? preempt_schedule_irq+0x2d/0x50 [ 99.134278][ T5060] ? preempt_schedule_irq+0x2d/0x50 [ 99.134304][ T5060] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 99.134336][ T5060] do_file_open+0x16c/0x290 [ 99.134395][ T5060] io_openat2+0x168/0x470 [ 99.134418][ T5060] io_openat+0x1b/0x30 [ 99.134435][ T5060] __io_issue_sqe+0xfd/0x2d0 [ 99.134468][ T5060] io_issue_sqe+0x206/0xba0 [ 99.134511][ T5060] ? io_openat_prep+0x252/0x2a0 [ 99.134539][ T5060] io_submit_sqes+0x7f0/0x1170 [ 99.134582][ T5060] __se_sys_io_uring_enter+0x25c/0xfc0 [ 99.134620][ T5060] ? mutex_unlock+0x4e/0x90 [ 99.134763][ T5060] __x64_sys_io_uring_enter+0x78/0x90 [ 99.134800][ T5060] x64_sys_call+0x1e16/0x3020 [ 99.134825][ T5060] do_syscall_64+0x12c/0x3b0 [ 99.134906][ T5060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.134927][ T5060] RIP: 0033:0x7f63ac64ce59 [ 99.134944][ T5060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.134965][ T5060] RSP: 002b:00007f63ab065028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 99.134984][ T5060] RAX: ffffffffffffffda RBX: 00007f63ac8c6180 RCX: 00007f63ac64ce59 [ 99.134998][ T5060] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 99.135080][ T5060] RBP: 00007f63ab065090 R08: 0000000000000000 R09: 0000000000000000 [ 99.135093][ T5060] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 99.135104][ T5060] R13: 00007f63ac8c6218 R14: 00007f63ac8c6180 R15: 00007ffd3d48c938 [ 99.135136][ T5060] [ 100.053926][ T5063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 100.235168][ T28] audit: type=1400 audit(1780312493.629:697): avc: denied { ioctl } for pid=5066 comm="syz.2.523" path="socket:[10123]" dev="sockfs" ino=10123 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.248598][ T5068] program syz.2.523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.260725][ T28] audit: type=1400 audit(1780312493.629:698): avc: denied { read write } for pid=5066 comm="syz.2.523" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 100.270619][ T5072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.525'. [ 100.342205][ T5063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.350656][ T5063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.375831][ T28] audit: type=1400 audit(1780312493.629:699): avc: denied { open } for pid=5066 comm="syz.2.523" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 100.582273][ T5081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.529'. [ 101.023973][ T5086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.531'. [ 101.129468][ T5087] netlink: 72 bytes leftover after parsing attributes in process `syz.1.530'. [ 101.445972][ T28] audit: type=1400 audit(1780312494.839:700): avc: denied { write } for pid=5102 comm="syz.3.536" path="socket:[11386]" dev="sockfs" ino=11386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.512403][ T5111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 101.788464][ T5111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.797024][ T5111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.588946][ T5133] FAULT_INJECTION: forcing a failure. [ 103.588946][ T5133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.602047][ T5133] CPU: 1 UID: 0 PID: 5133 Comm: syz.4.547 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.602114][ T5133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.602131][ T5133] Call Trace: [ 103.602183][ T5133] [ 103.602191][ T5133] __dump_stack+0x1d/0x30 [ 103.602261][ T5133] dump_stack_lvl+0x95/0xd0 [ 103.602282][ T5133] dump_stack+0x15/0x1b [ 103.602301][ T5133] should_fail_ex+0x263/0x280 [ 103.602324][ T5133] should_fail+0xb/0x20 [ 103.602346][ T5133] should_fail_usercopy+0x1a/0x20 [ 103.602416][ T5133] _copy_from_user+0x1c/0xb0 [ 103.602486][ T5133] dev_ethtool+0x52/0x16a0 [ 103.602507][ T5133] ? full_name_hash+0x92/0xe0 [ 103.602534][ T5133] ? strcmp+0x22/0x50 [ 103.602645][ T5133] dev_ioctl+0x2e0/0x960 [ 103.602697][ T5133] sock_do_ioctl+0x1aa/0x230 [ 103.602918][ T5133] sock_ioctl+0x41b/0x610 [ 103.602955][ T5133] ? mutex_lock+0x57/0x90 [ 103.603014][ T5133] ? __pfx_sock_ioctl+0x10/0x10 [ 103.603053][ T5133] __se_sys_ioctl+0xce/0x140 [ 103.603092][ T5133] __x64_sys_ioctl+0x43/0x50 [ 103.603169][ T5133] x64_sys_call+0x1563/0x3020 [ 103.603200][ T5133] do_syscall_64+0x12c/0x3b0 [ 103.603240][ T5133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.603287][ T5133] RIP: 0033:0x7fb13033ce59 [ 103.603307][ T5133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.603331][ T5133] RSP: 002b:00007fb12ed97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.603394][ T5133] RAX: ffffffffffffffda RBX: 00007fb1305b5fa0 RCX: 00007fb13033ce59 [ 103.603413][ T5133] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000a [ 103.603428][ T5133] RBP: 00007fb12ed97090 R08: 0000000000000000 R09: 0000000000000000 [ 103.603443][ T5133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.603459][ T5133] R13: 00007fb1305b6038 R14: 00007fb1305b5fa0 R15: 00007fffec04dd88 [ 103.603485][ T5133] [ 103.845559][ T5136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.548'. [ 104.074415][ T5148] netlink: 256 bytes leftover after parsing attributes in process `syz.2.553'. [ 104.245372][ T5167] netlink: 72 bytes leftover after parsing attributes in process `syz.4.559'. [ 104.336022][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 104.548438][ T5171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.557045][ T5171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.398684][ T28] audit: type=1400 audit(1780312498.769:701): avc: denied { connect } for pid=5187 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.602549][ T28] audit: type=1400 audit(1780312498.779:702): avc: denied { write } for pid=5187 comm="syz.0.565" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 105.675953][ T5199] netlink: 256 bytes leftover after parsing attributes in process `syz.3.568'. [ 105.871550][ T5208] FAULT_INJECTION: forcing a failure. [ 105.871550][ T5208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.910364][ T5208] CPU: 0 UID: 0 PID: 5208 Comm: syz.1.572 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.910399][ T5208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.910413][ T5208] Call Trace: [ 105.910420][ T5208] [ 105.910428][ T5208] __dump_stack+0x1d/0x30 [ 105.910452][ T5208] dump_stack_lvl+0x95/0xd0 [ 105.910541][ T5208] dump_stack+0x15/0x1b [ 105.910563][ T5208] should_fail_ex+0x263/0x280 [ 105.910583][ T5208] should_fail+0xb/0x20 [ 105.910603][ T5208] should_fail_usercopy+0x1a/0x20 [ 105.910631][ T5208] _copy_from_user+0x1c/0xb0 [ 105.910740][ T5208] ___sys_sendmsg+0xc1/0x1e0 [ 105.910785][ T5208] __x64_sys_sendmsg+0xd4/0x160 [ 105.910820][ T5208] x64_sys_call+0x194c/0x3020 [ 105.910925][ T5208] do_syscall_64+0x12c/0x3b0 [ 105.910958][ T5208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.910986][ T5208] RIP: 0033:0x7f46c9b6ce59 [ 105.911006][ T5208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.911102][ T5208] RSP: 002b:00007f46c85c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.911122][ T5208] RAX: ffffffffffffffda RBX: 00007f46c9de5fa0 RCX: 00007f46c9b6ce59 [ 105.911136][ T5208] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000003 [ 105.911161][ T5208] RBP: 00007f46c85c7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.911173][ T5208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.911184][ T5208] R13: 00007f46c9de6038 R14: 00007f46c9de5fa0 R15: 00007ffea50bdd08 [ 105.911203][ T5208] [ 106.961712][ T5221] netlink: 72 bytes leftover after parsing attributes in process `syz.0.575'. [ 107.231856][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'. [ 107.278705][ T5228] FAULT_INJECTION: forcing a failure. [ 107.278705][ T5228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.292020][ T5228] CPU: 0 UID: 0 PID: 5228 Comm: syz.2.579 Not tainted syzkaller #0 PREEMPT(lazy) [ 107.292045][ T5228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.292062][ T5228] Call Trace: [ 107.292070][ T5228] [ 107.292080][ T5228] __dump_stack+0x1d/0x30 [ 107.292106][ T5228] dump_stack_lvl+0x95/0xd0 [ 107.292157][ T5228] dump_stack+0x15/0x1b [ 107.292174][ T5228] should_fail_ex+0x263/0x280 [ 107.292301][ T5228] should_fail+0xb/0x20 [ 107.292361][ T5228] should_fail_usercopy+0x1a/0x20 [ 107.292385][ T5228] _copy_from_iter+0x21c/0xea0 [ 107.292422][ T5228] ? __alloc_skb+0x200/0x690 [ 107.292517][ T5228] netlink_sendmsg+0x4ae/0x6f0 [ 107.292629][ T5228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.292664][ T5228] ____sys_sendmsg+0x563/0x5b0 [ 107.292692][ T5228] ___sys_sendmsg+0x195/0x1e0 [ 107.292753][ T5228] __x64_sys_sendmsg+0xd4/0x160 [ 107.292781][ T5228] x64_sys_call+0x194c/0x3020 [ 107.292806][ T5228] do_syscall_64+0x12c/0x3b0 [ 107.292847][ T5228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.292922][ T5228] RIP: 0033:0x7f63ac64ce59 [ 107.292941][ T5228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.292963][ T5228] RSP: 002b:00007f63ab0a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.292989][ T5228] RAX: ffffffffffffffda RBX: 00007f63ac8c5fa0 RCX: 00007f63ac64ce59 [ 107.293007][ T5228] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 107.293055][ T5228] RBP: 00007f63ab0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.293112][ T5228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.293127][ T5228] R13: 00007f63ac8c6038 R14: 00007f63ac8c5fa0 R15: 00007ffd3d48c938 [ 107.293152][ T5228] [ 107.489034][ T5225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.498176][ T5225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.719213][ T5234] netlink: 256 bytes leftover after parsing attributes in process `syz.2.582'. [ 107.885195][ T28] audit: type=1400 audit(1780312501.279:703): avc: denied { write } for pid=5241 comm="syz.2.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.915533][ T5242] netlink: 44 bytes leftover after parsing attributes in process `syz.2.585'. [ 107.935560][ T5242] SET target dimension over the limit! [ 108.206289][ T28] audit: type=1400 audit(1780312501.599:704): avc: denied { ioctl } for pid=5246 comm="syz.2.587" path="socket:[12735]" dev="sockfs" ino=12735 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.657986][ T5260] netlink: 72 bytes leftover after parsing attributes in process `syz.4.590'. [ 108.958849][ T5271] netlink: 256 bytes leftover after parsing attributes in process `syz.4.594'. [ 110.256501][ T5293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.600'. [ 110.274960][ T5297] FAULT_INJECTION: forcing a failure. [ 110.274960][ T5297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.288105][ T5297] CPU: 1 UID: 0 PID: 5297 Comm: syz.1.602 Not tainted syzkaller #0 PREEMPT(lazy) [ 110.288138][ T5297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 110.288155][ T5297] Call Trace: [ 110.288163][ T5297] [ 110.288210][ T5297] __dump_stack+0x1d/0x30 [ 110.288240][ T5297] dump_stack_lvl+0x95/0xd0 [ 110.288263][ T5297] dump_stack+0x15/0x1b [ 110.288288][ T5297] should_fail_ex+0x263/0x280 [ 110.288314][ T5297] should_fail+0xb/0x20 [ 110.288331][ T5297] should_fail_usercopy+0x1a/0x20 [ 110.288404][ T5297] _copy_from_user+0x1c/0xb0 [ 110.288431][ T5297] ___sys_sendmsg+0xc1/0x1e0 [ 110.288507][ T5297] __x64_sys_sendmsg+0xd4/0x160 [ 110.288537][ T5297] x64_sys_call+0x194c/0x3020 [ 110.288567][ T5297] do_syscall_64+0x12c/0x3b0 [ 110.288664][ T5297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.288688][ T5297] RIP: 0033:0x7f46c9b6ce59 [ 110.288708][ T5297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.288769][ T5297] RSP: 002b:00007f46c85c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.288790][ T5297] RAX: ffffffffffffffda RBX: 00007f46c9de5fa0 RCX: 00007f46c9b6ce59 [ 110.288831][ T5297] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000003 [ 110.288846][ T5297] RBP: 00007f46c85c7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.288863][ T5297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.288879][ T5297] R13: 00007f46c9de6038 R14: 00007f46c9de5fa0 R15: 00007ffea50bdd08 [ 110.288953][ T5297] [ 110.811366][ T5304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'. [ 111.172602][ T5312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.182546][ T5312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.201950][ T28] audit: type=1400 audit(1780312504.589:705): avc: denied { map } for pid=5313 comm="syz.0.606" path="socket:[11849]" dev="sockfs" ino=11849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 111.273016][ T28] audit: type=1400 audit(1780312504.589:706): avc: denied { write } for pid=5313 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 111.330103][ T28] audit: type=1400 audit(1780312504.659:707): avc: denied { checkpoint_restore } for pid=5317 comm="syz.0.608" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.379249][ T5319] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.608'. [ 112.626573][ T28] audit: type=1400 audit(1780312506.019:708): avc: denied { read } for pid=5348 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.697926][ T28] audit: type=1326 audit(1780312506.089:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.0.618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44e75ce59 code=0x7ffc0000 [ 112.775918][ T28] audit: type=1326 audit(1780312506.119:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.0.618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44e75ce59 code=0x7ffc0000 [ 112.823926][ T5358] capability: warning: `syz.0.618' uses 32-bit capabilities (legacy support in use) [ 112.855876][ T28] audit: type=1326 audit(1780312506.119:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.0.618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44e75ce59 code=0x7ffc0000 [ 112.919002][ T28] audit: type=1326 audit(1780312506.119:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.0.618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7ff44e75ce59 code=0x7ffc0000 [ 112.952613][ T28] audit: type=1326 audit(1780312506.119:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.0.618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44e75ce59 code=0x7ffc0000 [ 112.978103][ T28] audit: type=1326 audit(1780312506.119:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5353 comm="syz.0.618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44e75ce59 code=0x7ffc0000 [ 113.033966][ T5362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 113.043299][ T5360] program syz.0.618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.125353][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'. [ 113.209377][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 113.276659][ T5362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.285299][ T5362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.420818][ T5370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.429272][ T5370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.683564][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 113.909153][ T5374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.922978][ T5374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.440939][ T5391] netlink: 72 bytes leftover after parsing attributes in process `syz.2.630'. [ 115.233648][ T5402] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.240976][ T5402] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.284290][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 115.367776][ T5402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.428395][ T5402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.501491][ T5408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.513906][ T5408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.535843][ T5402] veth1_vlan: left allmulticast mode [ 115.759090][ T3430] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.768576][ T3430] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.799240][ T3430] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.827494][ T3430] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.870451][ T5416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.878572][ T5416] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.888590][ T5416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.931427][ T5416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.940070][ T5416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.952443][ T5416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.964551][ T5421] netlink: 72 bytes leftover after parsing attributes in process `syz.2.639'. [ 115.985500][ T5416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.001430][ T5416] veth1_vlan: left promiscuous mode [ 116.007507][ T5416] veth0_vlan: left promiscuous mode [ 116.013438][ T5416] veth0_vlan: entered promiscuous mode [ 116.021795][ T5416] veth1_vlan: entered promiscuous mode [ 116.027364][ T5416] veth1_vlan: entered allmulticast mode [ 116.037834][ T5416] veth1_macvtap: left promiscuous mode [ 116.044211][ T5416] veth0_macvtap: left promiscuous mode [ 116.050489][ T5416] veth0_macvtap: entered promiscuous mode [ 116.058804][ T5416] veth1_macvtap: entered promiscuous mode [ 116.067582][ T5416] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.076855][ T5416] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.085450][ T5416] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.094402][ T5416] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.102762][ T5416] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 116.132439][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.139577][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.147579][ T860] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 116.355577][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.362783][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.791120][ T111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.850178][ T3430] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 116.862857][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 117.081216][ T111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.090235][ T860] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 117.090267][ T111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.110243][ T111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.337711][ T5444] netlink: 256 bytes leftover after parsing attributes in process `syz.0.647'. [ 117.371706][ T5448] netlink: 72 bytes leftover after parsing attributes in process `syz.3.646'. [ 117.410697][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 117.410714][ T28] audit: type=1400 audit(1780312510.769:820): avc: denied { bind } for pid=5450 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.457143][ T3485] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 118.465166][ T3485] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 119.541123][ T3288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 119.742093][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.749445][ T5484] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.807262][ T5488] netlink: 'syz.3.660': attribute type 17 has an invalid length. [ 119.831651][ T5484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.841240][ T5484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.918968][ T3485] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.939627][ T3485] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.949573][ T3485] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.958743][ T3485] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.971130][ T5496] netlink: 72 bytes leftover after parsing attributes in process `syz.4.661'. [ 119.984252][ T3485] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.993198][ T3485] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.003118][ T3485] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.012026][ T3485] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.148258][ T5503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 120.380866][ T5512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 120.424463][ T5512] veth0_macvtap: left promiscuous mode [ 120.431131][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 120.654106][ T5514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.665258][ T5514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.675843][ T5522] FAULT_INJECTION: forcing a failure. [ 120.675843][ T5522] name failslab, interval 1, probability 0, space 0, times 0 [ 120.713215][ T5522] CPU: 0 UID: 0 PID: 5522 Comm: syz.2.670 Not tainted syzkaller #0 PREEMPT(lazy) [ 120.713309][ T5522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.713321][ T5522] Call Trace: [ 120.713327][ T5522] [ 120.713335][ T5522] __dump_stack+0x1d/0x30 [ 120.713358][ T5522] dump_stack_lvl+0x95/0xd0 [ 120.713382][ T5522] dump_stack+0x15/0x1b [ 120.713443][ T5522] should_fail_ex+0x263/0x280 [ 120.713491][ T5522] should_failslab+0x8c/0xb0 [ 120.713527][ T5522] __kmalloc_noprof+0xb8/0x4d0 [ 120.713569][ T5522] ? security_sk_alloc+0x52/0x120 [ 120.713729][ T5522] security_sk_alloc+0x52/0x120 [ 120.713771][ T5522] sk_prot_alloc+0xc2/0x180 [ 120.713801][ T5522] sk_alloc+0x35/0x3e0 [ 120.713830][ T5522] xsk_create+0xc6/0x3c0 [ 120.713910][ T5522] __sock_create+0x2e4/0x580 [ 120.713953][ T5522] __sys_socket+0xaf/0x180 [ 120.713971][ T5522] __x64_sys_socket+0x3f/0x50 [ 120.713990][ T5522] x64_sys_call+0x11fc/0x3020 [ 120.714039][ T5522] do_syscall_64+0x12c/0x3b0 [ 120.714085][ T5522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.714107][ T5522] RIP: 0033:0x7f63ac64ce59 [ 120.714128][ T5522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.714206][ T5522] RSP: 002b:00007f63ab0a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 120.714229][ T5522] RAX: ffffffffffffffda RBX: 00007f63ac8c5fa0 RCX: 00007f63ac64ce59 [ 120.714242][ T5522] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 120.714257][ T5522] RBP: 00007f63ab0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.714287][ T5522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.714306][ T5522] R13: 00007f63ac8c6038 R14: 00007f63ac8c5fa0 R15: 00007ffd3d48c938 [ 120.714332][ T5522] [ 121.132474][ T5529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.142122][ T5529] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.155913][ T5529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.412471][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 121.690294][ T860] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 121.701946][ T5543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'. [ 121.713071][ T5543] netlink: 'syz.0.677': attribute type 10 has an invalid length. [ 121.723329][ T5545] FAULT_INJECTION: forcing a failure. [ 121.723329][ T5545] name failslab, interval 1, probability 0, space 0, times 0 [ 121.736168][ T5545] CPU: 1 UID: 0 PID: 5545 Comm: syz.4.678 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.736194][ T5545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.736222][ T5545] Call Trace: [ 121.736233][ T5545] [ 121.736258][ T5545] __dump_stack+0x1d/0x30 [ 121.736341][ T5545] dump_stack_lvl+0x95/0xd0 [ 121.736393][ T5545] dump_stack+0x15/0x1b [ 121.736414][ T5545] should_fail_ex+0x263/0x280 [ 121.736442][ T5545] should_failslab+0x8c/0xb0 [ 121.736498][ T5545] kmem_cache_alloc_noprof+0x66/0x3f0 [ 121.736535][ T5545] ? skb_clone+0x151/0x1f0 [ 121.736569][ T5545] skb_clone+0x151/0x1f0 [ 121.736602][ T5545] __netlink_deliver_tap+0x2c9/0x500 [ 121.736674][ T5545] netlink_unicast+0x653/0x680 [ 121.736705][ T5545] netlink_sendmsg+0x5c8/0x6f0 [ 121.736828][ T5545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.736861][ T5545] ____sys_sendmsg+0x563/0x5b0 [ 121.736968][ T5545] ___sys_sendmsg+0x195/0x1e0 [ 121.737009][ T5545] __x64_sys_sendmsg+0xd4/0x160 [ 121.737040][ T5545] x64_sys_call+0x194c/0x3020 [ 121.737069][ T5545] do_syscall_64+0x12c/0x3b0 [ 121.737134][ T5545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.737156][ T5545] RIP: 0033:0x7fb13033ce59 [ 121.737173][ T5545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.737191][ T5545] RSP: 002b:00007fb12ed97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.737232][ T5545] RAX: ffffffffffffffda RBX: 00007fb1305b5fa0 RCX: 00007fb13033ce59 [ 121.737246][ T5545] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 121.737260][ T5545] RBP: 00007fb12ed97090 R08: 0000000000000000 R09: 0000000000000000 [ 121.737316][ T5545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.737329][ T5545] R13: 00007fb1305b6038 R14: 00007fb1305b5fa0 R15: 00007fffec04dd88 [ 121.737349][ T5545] [ 121.928280][ T3378] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 121.937213][ T5543] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.954344][ T5536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.956432][ T5543] team0: Port device netdevsim2 added [ 121.962805][ T5536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.968443][ T5546] netlink: 'syz.0.677': attribute type 10 has an invalid length. [ 122.010923][ T5546] team0: Port device netdevsim2 removed [ 122.017460][ T5546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.026240][ T5546] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 122.107699][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 122.229240][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 122.253007][ T28] audit: type=1400 audit(1780312515.649:821): avc: denied { create } for pid=5564 comm="syz.0.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.587093][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 122.685018][ T3485] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 122.846716][ T5574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.855205][ T5574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.448460][ T111] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 124.468592][ T111] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 124.768364][ T5597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 124.808285][ T5601] syzkaller0: entered promiscuous mode [ 124.813850][ T5601] syzkaller0: entered allmulticast mode [ 124.823628][ T5601] tipc: Started in network mode [ 124.828565][ T5601] tipc: Node identity 5e1d6a51b9e1, cluster identity 4711 [ 124.835777][ T5601] tipc: Enabled bearer , priority 0 [ 124.844203][ T5600] tipc: Resetting bearer [ 124.859639][ T3378] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 124.884353][ T5600] tipc: Disabling bearer [ 124.982174][ T5597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.990893][ T5597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.138750][ T5603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.210031][ T5603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.279419][ T5609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 125.492716][ T5609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.501244][ T5609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.680635][ T5620] hub 8-0:1.0: USB hub found [ 125.685559][ T5620] hub 8-0:1.0: 8 ports detected [ 126.157038][ T5630] netlink: 72 bytes leftover after parsing attributes in process `syz.4.707'. [ 126.982463][ T5635] netlink: 256 bytes leftover after parsing attributes in process `syz.3.710'. [ 126.993377][ T5638] FAULT_INJECTION: forcing a failure. [ 126.993377][ T5638] name failslab, interval 1, probability 0, space 0, times 0 [ 127.006024][ T5638] CPU: 1 UID: 0 PID: 5638 Comm: syz.2.711 Not tainted syzkaller #0 PREEMPT(lazy) [ 127.006051][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.006117][ T5638] Call Trace: [ 127.006124][ T5638] [ 127.006132][ T5638] __dump_stack+0x1d/0x30 [ 127.006224][ T5638] dump_stack_lvl+0x95/0xd0 [ 127.006245][ T5638] dump_stack+0x15/0x1b [ 127.006262][ T5638] should_fail_ex+0x263/0x280 [ 127.006363][ T5638] should_failslab+0x8c/0xb0 [ 127.006399][ T5638] kmem_cache_alloc_noprof+0x66/0x3f0 [ 127.006440][ T5638] ? skb_clone+0x151/0x1f0 [ 127.006552][ T5638] skb_clone+0x151/0x1f0 [ 127.006581][ T5638] pfkey_sendmsg+0x2cc/0x9b0 [ 127.006616][ T5638] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 127.006641][ T5638] ____sys_sendmsg+0x563/0x5b0 [ 127.006749][ T5638] ___sys_sendmsg+0x195/0x1e0 [ 127.006787][ T5638] __x64_sys_sendmsg+0xd4/0x160 [ 127.006816][ T5638] x64_sys_call+0x194c/0x3020 [ 127.006883][ T5638] do_syscall_64+0x12c/0x3b0 [ 127.006914][ T5638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.007010][ T5638] RIP: 0033:0x7f63ac64ce59 [ 127.007025][ T5638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.007042][ T5638] RSP: 002b:00007f63ab0a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.007063][ T5638] RAX: ffffffffffffffda RBX: 00007f63ac8c5fa0 RCX: 00007f63ac64ce59 [ 127.007088][ T5638] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 127.007104][ T5638] RBP: 00007f63ab0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.007121][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.007138][ T5638] R13: 00007f63ac8c6038 R14: 00007f63ac8c5fa0 R15: 00007ffd3d48c938 [ 127.007157][ T5638] [ 128.493294][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'. [ 128.603610][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 128.633796][ T5660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.642275][ T5660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.709668][ T5662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.718211][ T5662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.700842][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 129.713679][ T3379] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 129.770336][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.000869][ T3393] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 131.006723][ T5704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.023589][ T5704] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.036014][ T5704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.148634][ T5704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.161908][ T5710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 131.172491][ T5704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.182711][ T5704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.193084][ T5704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.205555][ T5704] veth1_vlan: left promiscuous mode [ 131.211556][ T5704] veth0_vlan: left promiscuous mode [ 131.217272][ T5704] veth0_vlan: entered promiscuous mode [ 131.226119][ T5704] veth1_vlan: entered promiscuous mode [ 131.234776][ T5704] veth1_macvtap: left promiscuous mode [ 131.241468][ T5704] veth0_macvtap: left promiscuous mode [ 131.247540][ T5704] veth0_macvtap: entered promiscuous mode [ 131.261488][ T5704] veth1_macvtap: entered promiscuous mode [ 131.270532][ T5704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.279624][ T5704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.288213][ T5704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 131.297031][ T5704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.332756][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.339923][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.354298][ T3378] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 131.362481][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.369563][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.403813][ T5710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.412407][ T5710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.462096][ T3378] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 131.470106][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.478861][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.487757][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.496523][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.829963][ T5684] Bluetooth: hci0: command 0x1003 tx timeout [ 131.850369][ T3430] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 131.858646][ T3516] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.881345][ T5717] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 131.905130][ T5717] bond1 (unregistering): Released all slaves [ 132.035107][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.081676][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.131497][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.178379][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.566798][ T5728] netlink: 128 bytes leftover after parsing attributes in process `syz.0.736'. [ 132.575817][ T5728] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 132.704712][ T860] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 132.742090][ T860] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 133.340573][ T3430] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 133.395004][ T5741] netlink: 72 bytes leftover after parsing attributes in process `syz.2.737'. [ 134.191776][ T23] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 134.191796][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 136.336328][ T5777] netlink: 72 bytes leftover after parsing attributes in process `syz.2.750'. [ 136.740863][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 137.342327][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 137.461097][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 137.471234][ T5803] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 137.797562][ T5820] netlink: 72 bytes leftover after parsing attributes in process `syz.2.763'. [ 137.927050][ T28] audit: type=1326 audit(1780312531.319:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f46c9b29bbb code=0x7ffc0000 [ 137.998120][ T28] audit: type=1326 audit(1780312531.319:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c9b6ce59 code=0x7ffc0000 [ 138.059229][ T28] audit: type=1326 audit(1780312531.319:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c9b6ce59 code=0x7ffc0000 [ 138.084532][ T28] audit: type=1326 audit(1780312531.319:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c9b6ce59 code=0x7ffc0000 [ 138.109781][ T28] audit: type=1326 audit(1780312531.319:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f46c9b292ac code=0x7ffc0000 [ 138.135188][ T28] audit: type=1326 audit(1780312531.319:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f46c9b2930e code=0x7ffc0000 [ 138.161652][ T28] audit: type=1326 audit(1780312531.319:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f46c9b6ce59 code=0x7ffc0000 [ 138.187422][ T28] audit: type=1326 audit(1780312531.319:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c9b6ce59 code=0x7ffc0000 [ 138.216148][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 138.219416][ T28] audit: type=1326 audit(1780312531.319:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c9b6ce59 code=0x7ffc0000 [ 138.250813][ T28] audit: type=1326 audit(1780312531.319:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5825 comm="syz.1.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c9b6ce59 code=0x7ffc0000 [ 138.313867][ T3393] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 138.511205][ T5836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.519779][ T5836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.298773][ T5869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.778'. [ 139.364538][ T5875] netlink: 36 bytes leftover after parsing attributes in process `syz.1.784'. [ 139.408197][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 139.593052][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'. [ 139.641040][ T5894] netlink: 72 bytes leftover after parsing attributes in process `syz.3.790'. [ 139.653996][ T5879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.662478][ T5879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.953704][ T5897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.964273][ T5897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.464956][ T5915] 8021q: VLANs not supported on syzkaller1 [ 140.472098][ T5916] netlink: 72 bytes leftover after parsing attributes in process `syz.2.795'. [ 140.541976][ T5918] syzkaller0: entered promiscuous mode [ 140.547717][ T5918] syzkaller0: entered allmulticast mode [ 140.560669][ T5918] syzkaller0: tun_net_xmit 1280 [ 140.566069][ T5918] syzkaller0: create flow: hash 1366428558 index 1 [ 140.582623][ T5917] syzkaller0: delete flow: hash 1366428558 index 1 [ 140.669895][ T5910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.678455][ T5910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.776466][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 140.996849][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.013108][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.543415][ T5947] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 142.020246][ T5959] netlink: 44 bytes leftover after parsing attributes in process `syz.1.814'. [ 142.030646][ T5959] SET target dimension over the limit! [ 142.365150][ T5967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.373684][ T5967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.239074][ T5984] __nla_validate_parse: 1 callbacks suppressed [ 143.239127][ T5984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.824'. [ 143.791039][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 144.086495][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 144.202912][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 144.202954][ T28] audit: type=1400 audit(1780312537.599:911): avc: denied { mounton } for pid=6004 comm="syz.3.832" path="/157/file0" dev="tmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.304945][ T6007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.313439][ T6007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.510806][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'. [ 145.612169][ T6046] netlink: 72 bytes leftover after parsing attributes in process `syz.3.845'. [ 145.621357][ T3406] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 145.687774][ T11] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 145.700883][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 145.799862][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'. [ 145.876216][ T11] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 146.094434][ T6055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.103894][ T6055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.668874][ T3379] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 147.754078][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 147.858610][ T6079] netlink: 72 bytes leftover after parsing attributes in process `syz.3.860'. [ 147.863934][ T3406] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 147.981735][ T11] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 148.128295][ T6097] netlink: 72 bytes leftover after parsing attributes in process `syz.0.867'. [ 148.144654][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 148.291196][ T3406] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 148.507833][ T6094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.519889][ T6094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.901399][ T3378] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 148.971208][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 149.000907][ T6120] netlink: 256 bytes leftover after parsing attributes in process `syz.2.876'. [ 149.019054][ T28] audit: type=1400 audit(1780312542.329:912): avc: denied { read } for pid=3020 comm="dhcpcd" name="n48" dev="tmpfs" ino=2114 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.343347][ T6132] netlink: 72 bytes leftover after parsing attributes in process `syz.3.878'. [ 149.517355][ T28] audit: type=1400 audit(1780312542.329:913): avc: denied { open } for pid=3020 comm="dhcpcd" path="/run/udev/data/n48" dev="tmpfs" ino=2114 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.542893][ T28] audit: type=1400 audit(1780312542.329:914): avc: denied { getattr } for pid=3020 comm="dhcpcd" path="/run/udev/data/n48" dev="tmpfs" ino=2114 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.696174][ T3379] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 149.916344][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 150.028545][ T3406] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 150.074431][ T6140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.083984][ T6140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.186177][ T3406] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 150.196030][ T6153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.205196][ T6153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.229149][ T6159] netlink: 256 bytes leftover after parsing attributes in process `syz.3.889'. [ 150.523596][ T3406] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 150.660896][ T3406] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 151.894159][ T6146] Set syz1 is full, maxelem 65536 reached [ 152.529956][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'. [ 152.610051][ T6214] netlink: 256 bytes leftover after parsing attributes in process `syz.0.904'. [ 152.684555][ T28] audit: type=1400 audit(1780312546.079:915): avc: denied { setattr } for pid=6222 comm="syz.1.907" name="HCI" dev="sockfs" ino=16658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.795629][ T28] audit: type=1400 audit(1780312546.189:916): avc: denied { name_bind } for pid=6228 comm="syz.1.908" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 152.825930][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 152.836270][ T6229] veth0_macvtap: left promiscuous mode [ 153.048998][ T3393] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 153.380863][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 154.105186][ T3414] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 154.296757][ T6258] netlink: 44 bytes leftover after parsing attributes in process `syz.1.917'. [ 154.352038][ T6261] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.918'. [ 155.256990][ T6289] netlink: 72 bytes leftover after parsing attributes in process `syz.3.923'. [ 155.378100][ T3414] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 155.841219][ T3393] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 156.040600][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 156.106844][ T6309] netlink: 44 bytes leftover after parsing attributes in process `syz.3.934'. [ 156.146911][ T6313] netlink: 72 bytes leftover after parsing attributes in process `syz.3.935'. [ 156.322061][ T3386] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 156.481341][ T3393] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 156.683830][ T6338] netlink: 44 bytes leftover after parsing attributes in process `syz.3.945'. [ 156.743639][ T6351] netlink: 72 bytes leftover after parsing attributes in process `syz.4.947'. [ 156.814209][ T6357] netlink: 72 bytes leftover after parsing attributes in process `syz.0.949'. [ 157.391344][ T3378] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 157.843804][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'. [ 158.131569][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.140319][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.230808][ T3378] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 159.607002][ T6414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.616523][ T6414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.028881][ T6440] __nla_validate_parse: 3 callbacks suppressed [ 160.028895][ T6440] netlink: 44 bytes leftover after parsing attributes in process `syz.1.981'. [ 160.095150][ T6444] netlink: 44 bytes leftover after parsing attributes in process `syz.3.984'. [ 160.176682][ T3379] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 160.277875][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 160.607125][ T6472] netlink: 44 bytes leftover after parsing attributes in process `syz.1.995'. [ 160.628489][ T6469] SET target dimension over the limit! [ 160.710532][ T6461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.749491][ T6461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.760927][ T3379] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 161.036612][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.998'. [ 161.140890][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 161.255362][ T6479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.263922][ T6479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.456077][ T6503] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1008'. [ 161.459877][ T6499] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1006'. [ 161.734553][ T3386] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 162.106688][ T6537] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1020'. [ 162.297208][ T3386] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 162.314144][ T3379] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 162.353807][ T6544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1023'. [ 162.365119][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 162.481184][ T3393] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 162.621067][ T11] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 162.638636][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.647145][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.868136][ T11] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 166.727684][ T6614] __nla_validate_parse: 2 callbacks suppressed [ 166.727766][ T6614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1048'. [ 166.745426][ T6612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1047'. [ 166.764854][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 166.833500][ T11] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 167.065935][ T6612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.074464][ T6612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.244670][ T6632] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1054'. [ 168.112095][ T3379] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 168.122132][ T6640] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1056'. [ 168.387349][ T6653] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1058'. [ 168.439308][ T3393] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 168.856187][ T6664] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1062'. [ 169.112946][ T11] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 169.121375][ T6666] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1063'. [ 169.294001][ T6681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1069'. [ 169.303766][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 169.526275][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.535831][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.105140][ T11] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 170.211330][ T3379] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 170.233301][ T6709] loop0: detected capacity change from 0 to 512 [ 170.248855][ T6705] SET target dimension over the limit! [ 170.265086][ T3414] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 170.336697][ T6709] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 170.354148][ T6709] System zones: 0-2, 18-18, 34-34 [ 170.360731][ T6709] EXT4-fs (loop0): 1 orphan inode deleted [ 170.366880][ T6709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.379379][ T6709] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.402104][ T30] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 170.411888][ T30] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 170.423563][ T30] EXT4-fs (loop0): Remounting filesystem read-only [ 170.431074][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.690844][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 170.725975][ T6744] SET target dimension over the limit! [ 170.823025][ T3406] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 170.824727][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.839336][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.880192][ T6746] ================================================================== [ 170.888337][ T6746] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 170.895400][ T6746] [ 170.897746][ T6746] write to 0xffff888107c29820 of 8 bytes by task 6749 on cpu 1: [ 170.905389][ T6746] shmem_fallocate+0x367/0x920 [ 170.910190][ T6746] vfs_fallocate+0x3b6/0x400 [ 170.914810][ T6746] madvise_vma_behavior+0x2a1/0x2100 [ 170.920116][ T6746] madvise_do_behavior+0x5de/0xa10 [ 170.925244][ T6746] do_madvise+0x10e/0x190 [ 170.929612][ T6746] __x64_sys_madvise+0x63/0x80 [ 170.934412][ T6746] x64_sys_call+0x1eff/0x3020 [ 170.939117][ T6746] do_syscall_64+0x12c/0x3b0 [ 170.943742][ T6746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.949656][ T6746] [ 170.951994][ T6746] read to 0xffff888107c29820 of 8 bytes by task 6746 on cpu 0: [ 170.959550][ T6746] shmem_fault+0x90/0x250 [ 170.963911][ T6746] handle_mm_fault+0x1a26/0x2e70 [ 170.968896][ T6746] __get_user_pages+0x1290/0x1f10 [ 170.973955][ T6746] faultin_page_range+0x107/0x4d0 [ 170.979014][ T6746] madvise_do_behavior+0x19f/0xa10 [ 170.984145][ T6746] do_madvise+0x10e/0x190 [ 170.988507][ T6746] __x64_sys_madvise+0x63/0x80 [ 170.993288][ T6746] x64_sys_call+0x1eff/0x3020 [ 170.997991][ T6746] do_syscall_64+0x12c/0x3b0 [ 171.002611][ T6746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.008527][ T6746] [ 171.010865][ T6746] value changed: 0xffffc9001236fb48 -> 0x0000000000000000 [ 171.017989][ T6746] [ 171.020330][ T6746] Reported by Kernel Concurrency Sanitizer on: [ 171.026508][ T6746] CPU: 0 UID: 0 PID: 6746 Comm: syz.0.1092 Not tainted syzkaller #0 PREEMPT(lazy) [ 171.035824][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.045900][ T6746] ================================================================== [ 171.116823][ T6749] loop0: detected capacity change from 0 to 128 [ 171.133311][ T6749] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.142400][ T3406] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 171.153313][ T6749] ext4 filesystem being mounted at /241/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.198799][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.