last executing test programs: 10.043349834s ago: executing program 3 (id=282): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085"], 0x0}, 0x94) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (fail_nth: 3) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 9.706409963s ago: executing program 3 (id=284): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8995, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x806}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x800) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r6, 0x339, 0x0) 8.22830048s ago: executing program 3 (id=288): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x5) wait4(0x0, 0x0, 0x8, 0x0) r1 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffff7f}, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20240, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e"], 0x0) 8.200380132s ago: executing program 1 (id=291): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8900, 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000000000000200001304000000030000000000000b000000000400000000000008000000000000002e1f"], 0x0, 0x43}, 0x28) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x6, 0x2, 0x4}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 7.317627653s ago: executing program 1 (id=298): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8995, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x806}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x800) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r6, 0x339, 0x0) 6.532473509s ago: executing program 0 (id=303): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat(r0, &(0x7f0000000040)='./file2\x00', 0x143842, 0xe3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 6.224932617s ago: executing program 0 (id=304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x10001, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x401, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000900)=@svm={0x2, 0x1, 0x1080, {0x30000}, {"1b4198ab8c733e72c1d60b26df6ddb41dfc803b6ce2636847c6b243586f456fcbfed97c879423702159b85954f1cbd23798d12b77ef9acb124269448c524e3e37834beaab95dfb7a408645babe7c1f0a868fac42d46c8ac18c5f2484c744c566842127823d0b7767a129da9ea4fc549d6b72ba0fde22fac042fea8e61616096594244c0746357bfe1b7c6b76630f24f449786bb1d81de039caa6f0497cbaedf192b70f07e4aed04e82947483509715c8660ea91acae276144ac9bbbe6a132e5dbe4b45acd78c5c514559606fafc53aefe9785512829f3c94e256bdeb11f0564acd181c64f4b2b4dfe1906509390a9e53c0cffe0c9a2666b3ed6ce289b2d51f3824ef4daf957834c1855bc2d79998694f65a387fe8f30877ab000dc5f34bda4379272febc2fe602547ce9a57e8ed4fbd257ba567205be992a87b66d220686eadd7221bd56949f2306e6e705711be8de1d2e11829c7c39b58bfa9b923a490736c063693f1126d20b3b2e5ab96e3ae8318523ac7dc844f0648329e170ec5753a41a0abb4f8852e9123912d395ef301ba936e51b655c9879a984d3b04bc31a6a56916cc82f10bd4c5cc7e59e2c479fe7621004082b0260371f0753d9ad2f146fcefeb36cca0902f1f151f1a4d40ef88c6472b1c0d1abac0cff216ebffc83d48787237ecd21397410341fae04f3628e12a7995f31dd01a593c62a1a830460db090607387046a24be6bdee48eff8bc1fe415d64af6122280472c09499b6058b3fe09fa8b4d3e1231e888d86b9109a4f3f54b5878ba237b74183c24aa5d0d8ffd7c9470f70446657299177bc6773f36a52d9e4ccff0afe697e12f8232e38960a2e227f95fc6bc0e10baac766106c171a824481588671f0e385c5787a6528f406291e4f173ba75f70b7bf3791eae77bf0815771da71c73ce82ff9a375fa71b5b1414ff226aa3c61eba94f3e90a186b0a403974dd20190b037c480de9260923f48b654de7312c8a690ed89ec1302d78512b690d3a706d7ca82bfdb2344f9a8aeb2401f2f996fec717e0270a1b9dd9365f92f87cd19cea7ffa57554affc59f4e6f1d7c0339516e39c1b076e248bf8e0654f8f0d16c16e18b1084c2fa08b803ae62d04e42d32190a3e9aedc997162aa0a101eeeedf273e15fc1b16d7c6a2e287c1a9549401871951f172d28f81db4106647999cd0543ff610e18cd84c05e8a801f10cc465c33c1da0455fcca2b5def5ba23f80c328d9de7c54c3f97345c773d66f62e4d5bda8786234ef53bb0d3704cd01d145e633cabca2d7bb5a5a57a308bd17e46f3f3e93f6573076ea505811f65193643f2312e34ed3f42576f1fee859d53b41177fad846602a31d688833c43df775edcbdea7093aff4cf59725bc8a2a01acfa5cf8417f6bff6ce913d37c507e58abb06ce37d715fb5a609189abddcbe99d50c9e98ae999cbfb3d47b41c2f9df2e6ed57808c08417d7199f9cf7d35226cbd1bc4c7ef85d9e0eb8d017513ecac8d12a6ef34c0f493f23b4ff5aefd07315f2ddf97a5126cc0941ad3d2e68d2b6f228b0b2c3ce39f4a4e97c5abf35312a0b9704151a0a308c586995cc74ac795f4e16520d6219ab0b94e40208c8bd5ec503e4d6e210107bddadcf9f734c870a0ed80e259eb79a5d494ab029767315f5b307edbce9aa9ce5b40f130a014cd216cf16fc276abe540c3daee4c0be89d283765a8c5bb196bec91f5f0fc50fd03e680f4460efbd9598c833f666f638d2e0f298fd220daefc1ae5e2b08a7004b4dec79761a6023e51ced2b34698e78cd2c74976c22409ecf05f1a27adb1914f48473b6f536f3dd8a3ec6ab03a4cf7785559d4238c1e77252a467be34cce77f719790ae639abee884d2015ff35589168bb4aa6387377836a8e12e56f25b0a1c7700c99be067bebfd81476ae563f8f71291ce552cabd92a9873076350e8310473b8e3c12a0a70e6932220dbae950961d1ec2527f98a343356f18f5bc405c38effd25fd38965b4e6b5d0ff47a9e399dab65b1329fc96a9a78a32b92166ab4c22fc05f4e136b97c6756a6afd0e5251d2bc7861d20915f361ce3b11a87ce07a33abd78b52062c20ccbec74bf88978bb3c3ce8325f5dbe5a3c3d483434140a62b5649e3e01807560f0343953fd592859835da5f0c71d054898a617d8062c91a870fc1ed2ae94fc8559849001342590ba1e71841372f85349eb045485160d0b2dd6a5000891e022b020c3303d15fb6e299b40f1cc60334f7e6a64b808e9f71fea231b54c279b14811f27e05dfb943524dbc9ba623de95847db888a862fe1079517cd625464c8344b1aae9291438b8b27f1c0a17b8c35e7f5dc3d23021a8e79bd5de989332afff0caa49326a2f0d89ae7cac2e9dfa2c2e97c33ae6106f7cb50fb90d6f91f2dda1c25475c7b486cbdc6501796e231371efccdcd917150e73c394ebae9a063ff6c7ea7a1337f0d5c161cb219bc036ac77a3457a8eeec0cf09d36572b2710458d34ddea0b428b7ee09c9bf0cfa1c95fd9932ff512e8bdd08af3e4b58f9982ac65db98cc8be438b579be01bddb35999470a133cc14072ef7c9329168c0a1c746a94663f6244c45ee10856737a9064d30f3221b3428b0f84de9b4103152ae68dde46d64dafa14f80a6341e60ad63f148c959e5d489afc184f682331f6c62b0201adad4cc785b43c66f0d01b549c9022bc28884452b24fc8e90d36d8599ff8ea2a86727f93d4647a531819b3c24eb6a4d3d96363685e1f1149886ffe5b999242e67960c96558312fb871ed3f49e2a368c7745a75e54fdfdf72bbbda607649b4fc60261297da450c3923c95d142b08cc5c59bf8e6a2eaf8350e59202be031098e534e40efe94e5ebfdb449a70c031d182237f89cb7781857544905747d823cbb7ce41005cac5c699f6db1601901d1572f9fdd072acee97f95533d47c5b4f898be4ec4d3733088008bde8050be452c8f34fd4c852c17c9f8cf993f612b828de2fa2d590a881a477c4638238c39a8772cfd755fb4c1ee655b92887d2c6c6d1a982c4f65d556a2d0e3fc3b91c12ed3ddde6c492122d1db77db0c8dd7d192f8befca0bbda3ab3565ef543aa38b429620daf15b02dcb6a563a1fe508f29a0856040402cc6efdf472804e7d1cddcd84da15540470dfc1a8a4ede2c74f99797257174507cd8fb8959093e27122fe36e597d81616dc0bea56f5aad762de20a6432f2c49cff0b58cc39b4611ab25d6f417f6b31ad9311627cd1387af65b7a6958601a73af0affd8baf12c3fcddd1f266b75f7f05fcfeed4dde1a3dcdca7699fabec3eb71cb1efc5bbecc02587cf17959f9ef60fbf385b8f93b1c2f640d7c7bb6b7d97c4cd4c2222a6f275a4567b035cb51fb345742c3c088ff9b02f55cc12c0831c941f9d96350f8814dd2ae110c367eea37a2b42c9ce0a9a17aba0febb56e2329ff859525158f9518f617cdb92d033f094c0efc3d93dde57eec1757433d5e48f58c00768cfa1d92a6547b322a584ad8a4de952880a86acc368f7ea89de5300fb45b052755a22e1c993e591a49c82fb4de1ef74a013055d40b57e06ccb7e59c6908580b2309d5e7b7e2b6a252a8af7d47891e5c12da95428e511ba575b3395d54fa198f6015291ef8d1554b767d794d5ef68b51ff2650a7370fef2936f899f986e2bfacecbff5006bb827af16ff70c6b3d7f50b1375717e2fe99c43766d611a54a3ae8ff5f31c6a8d2796aef4f5216ec86e9aafe60444bed91e0bcdf8a08077da385b6ec2593d41d354c0492631e31350a03106199a67a7bc76abd77f15e540c33e2c060f2e17053da397b45de6c162c78568eca82719aabbcd2fee766f88e3ec1973ef92986ae65ffb6585d8f66b997f16cb90dfbecaeef810bb00dba9774a745cf66b167e68db17f07736ad42fa66ee39229716076c4fff8110965981199c2ad8d0b97f5db6b192a5a5d240704328338ae3496725e58b8c1b84b5f2e1d14f03a8c95e89d8c9748ab6560277428f11abf55059d76e1144a947b082c070151172d06bdcced821da01404d163b66dc08530463201aac7e9a70c6659dddf80ad5f8a69c920a1fcd3db8e34ab7f6d3dca399bfd55c230656993cc6a18c096f5f79cfe2e14abae6dcffaf065ed8ab18c6ebedd128bb3db02d1a2277309df18fd08f008e574eb8095f22947d9c33a696aa84deb94eec3e6bbdaab6009ad88c25a22ce05e493538cb49bf9d3072856979cb3e039f5ee71ccea1f9df102bbb52ebb7eeb61336682714cd5302d53a9c119f1166eeef873934e48802f3c39075f204242d05e79275e86f01bedf60fdec282ab50930ebc89393bc3c0d9f531b19061654d280f4914b1908fe10f0d4cea75a778f5c9decfa51690f848cdd81a1dfe0ca438b575b47c5b4f94fdad78fd8541e426b62f262440befd335618f7f471acd21034610ac10862aef93367d2668b8458d76515e1703ae6ca0625b8fd389c06a2f31319db34f35714c254f6b9111180a83bcbd705b33e1700a8e140e9e3095d144124dcdac7d147b32b199d34927479c62568467f59a6bc329878f0c30c112a108b1ff288d4943e05bd54bd14dae8fcdad936a9b7b0d30397d8922dea8fe6b25e9f1a5765f0e2040590f754ea05951ed36fe078fe8194f038ebb8ac9aeacb9b1f6dfd4a51bf596684beac6a68b77ee5cb367ebb26dd33b9c0219bc8c0e4f745bb00ea123a4da5a2cfda29b0905d9f41071b0d3e94c85710ae4f6f620acd4a951d2c104b8935710d0d1eb9b7d54b84f21db3132c479f25ecd21494f5be72532d637df963bc21bc369a684c8073552878a114937d0f4f677ab107a205102dc5a9a16dc79fa27768c873515ed12e5d60003fa41dc27ed0d26a38391ce961b13d18820942f8edb3701ba91e48f555cb56bfbae4d655130cd97c1f9cd225f38e6043fa7374f2a0488a58b9066407357e7b7e57eab4bbefde96c4a36f4111173d9b8fe2c27634d7dc5c817167c39293c81a983ecd5de769e1a4bd16e7431ec7f3d4be1bdc6ff96e736d15863b14f0765e253505c7bbe8ef307330226f6a0c740630413fee0474afca20c06e5c2b7edfe94b9ee26ee1240818cf728cdf682ac34c02cdfc76066e620b5ac85d737f9cc5a48e6496338b0f33fcd8cf559d4de5e0ec9ab534608361957efdbcdcedf28b059d34d5d8b410f810355ae80a5b3241c234f589ddfe3ca2b613f0f80aa206bf51faa36d129727966f479df9c0bc2f26eb3c4b6cb468598386fb3c120f35d695d6e6f3214f3828791d3e726d5f0f3740f9c77828dfff45e1261b6f786552f4a49c7f12b92b5f996662db3f445eeecf613fc1752e717af49fe0e335ab96f855fa3238be43cbaea97bf815e35d2a52a8bd859d253ee9539a28bf4b3957e8207477b13c6daad38412df53153f9fae0f3be80c877835c015ca44bd836e88fd771c7ed75cf31b2a7697bc2582ddb899008a05feb69baa3dfcb64714ea2cd50374344230686ad62decfef4f006fb83b416201a87914fadd2937ddcbe9d635d8df1f7b6ad6fd265fba32bba4ed938bdde78a6b37ffce2ffe6c2c65b35c5e81ab2341bc29f61760ca4eb2cd16b1d249f477a14017c9c9fb08932e2a0dbe0549b187a73f472702e691fc784a122acd80e26942b95083a1466af389be4aad9651cc5ab9fbaa61240193d736c45208d962080176814d25228b426e2ff3bdddb93a295bdbffdbeafd1b4c28f4d7370b34d7de4b3e1c7ab6f51304d1ea7973f78219c7b73480e88dc4cd023bfb8bd3598c758f4ca4678061180681e5886b32"}}) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000000)='dctcp\x00', 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) r4 = open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000)="96", 0xfffffe3b, 0x0, 0x0, 0x0, r4}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) r6 = openat(r4, &(0x7f0000000300)='./file0\x00', 0x264a42, 0x8) io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, r6}]) 5.567784235s ago: executing program 1 (id=305): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) symlinkat(&(0x7f0000000300)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00') r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x240a0, 0x4c4}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x5c}}, 0x8008010) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) ioctl$sock_bt_hci(r6, 0x400448e1, &(0x7f00000001c0)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x30000, &(0x7f00000001c0)={'trans=unix,', {[{@loose}, {@aname={'aname', 0x3d, '[{$'}}, {@access_uid={'access', 0x3d, r2}}], [{@obj_user}, {@euid_lt}]}}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001300192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 5.549424376s ago: executing program 2 (id=308): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8) io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) (fail_nth: 3) 5.497150939s ago: executing program 0 (id=309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) copy_file_range(r4, &(0x7f0000000100)=0x100, r2, &(0x7f0000000180)=0x5, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'virt_wifi0\x00', @local}) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x8880) r5 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 5.351137688s ago: executing program 4 (id=310): keyctl$set_reqkey_keyring(0xe, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f00000005c0)=0x400000001, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @remote, 0x3}, 0x1c) getpeername(r1, &(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, &(0x7f0000000080)=0x80) sendmsg$inet(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='.\x00', &(0x7f0000000000)='ext4\x00', 0x0, 0x0) 5.184294607s ago: executing program 2 (id=311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/152, 0x98}], 0x1}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x3d, &(0x7f00000005c0)="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", 0x0, 0x3, 0x0, 0x0, 0xfe25, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x2b) r4 = socket$netlink(0x10, 0x3, 0x8000000004) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) symlinkat(&(0x7f0000000300)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00') r6 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r7, 0x240a0, 0x4c4}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x5c}}, 0x8008010) sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000300)=ANY=[], 0xa}}], 0x1, 0x4000084) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x0) ioctl$sock_bt_hci(r8, 0x400448e1, &(0x7f00000001c0)) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r10, &(0x7f0000000000), 0xd) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x30000, &(0x7f00000001c0)={'trans=unix,', {[{@loose}, {@aname={'aname', 0x3d, '[{$'}}, {@access_uid={'access', 0x3d, r5}}], [{@obj_user}, {@euid_lt}]}}) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 4.568031923s ago: executing program 3 (id=312): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) pipe2(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000ef3329051a1095f2ffff727a4148edcc33f6d400000000000095000021003d10bddb983560a9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x3f, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 4.514523176s ago: executing program 0 (id=313): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085"], 0x0}, 0x94) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (fail_nth: 4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 4.505784587s ago: executing program 4 (id=314): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) kcmp(r0, r0, 0x5, r3, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r6, 0x339, 0x0) 4.135273458s ago: executing program 0 (id=315): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8995, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x806}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x800) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r6, 0x339, 0x0) 1.907106998s ago: executing program 4 (id=316): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x3, 0x3}, 0xe) 1.904203688s ago: executing program 3 (id=317): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) 1.885722899s ago: executing program 1 (id=318): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2bf}}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0xc) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) setpriority(0x0, r0, 0x7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) socket$netlink(0x10, 0x3, 0x0) preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/60, 0x3c}], 0x1, 0x4, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'batadv_slave_0\x00'}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x3, 0x10013}, {0xa}, {0x6, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 1.88477635s ago: executing program 4 (id=319): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x0, 0x0, 0x60d3, 0xfffffffffffffff2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x7000003) r0 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file0\x00', 0x842, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0], 0x1, 0x1536, &(0x7f0000003480)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x181000, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000080)={0x3, 0x0, [{0xfffffff9, 0x3, 0x1, 0x0, @irqchip={0x0, 0xff}}, {0x9, 0x4, 0x1, 0x0, @adapter={0x6, 0xfffffffffffffff6, 0x2, 0x5d, 0x5}}, {0xffffffff, 0x1, 0x1, 0x0, @irqchip={0x55f}}]}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x2, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x1, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) 1.8838676s ago: executing program 2 (id=320): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001e80)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000008c0)=&(0x7f0000000880)) 1.834828872s ago: executing program 0 (id=321): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%ps \x00'}, 0x20) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x40c8800, &(0x7f00000000c0)={0xa, 0x4e21, 0xdff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x26}, 0x1c) pwritev(r1, &(0x7f0000004800)=[{0x0}], 0x1, 0xfffff223, 0x7ff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r0}, 0x4) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x803) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10000248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair(0x2c, 0x1, 0x10000, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000140), &(0x7f0000000280)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) tkill(r4, 0x38) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8010, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffff149, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c6661756c745f747970653d30303030303030303030223030303033323736372c6261636b67726f756e645f67633d6f66662c6e6b666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e7361636c2c0b33d231636f6d70726573735f63616368652c616c6c6f635f6d6f64653d64656661756c742c6e6f696e6c696e655f7861747472296772706a71756f74613d2c636865636b706f696e743d64697361623ffdc8a89658cd75346b67d7ac20d99de3fd8dd826372e591b"], 0x4, 0x5510, &(0x7f00000020c0)="$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") r8 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file2\x00', 0x6b142, 0x0) pwritev2(r8, &(0x7f0000000380)=[{&(0x7f0000000340)}, {&(0x7f0000000440)="edc4365c9fdb59ee3e659dc9a4008daf4f2670892f28ad113e84591f165aefc471c163b92bd5a86ba813ce58d350a878bf6621b0136505bb43bdd445258e3c8f321f95b1949b96b117624775867041adfe6b", 0x52}, {&(0x7f0000007600)="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", 0x1000}], 0x3, 0x4, 0x100, 0x12) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000140)={r8, 0x0, 0x100000000000000}) 1.744790618s ago: executing program 2 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) readlink(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001300)=""/220, 0xdc) 1.333180562s ago: executing program 1 (id=323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) copy_file_range(r3, &(0x7f0000000100)=0x100, r2, &(0x7f0000000180)=0x5, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'virt_wifi0\x00', @local}) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x8880) r4 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 1.058759927s ago: executing program 3 (id=324): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000300)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x5) wait4(0x0, 0x0, 0x8, 0x0) r1 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20240, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e"], 0x0) 1.006038051s ago: executing program 4 (id=325): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8900, 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000000000000200001304000000030000000000000b000000000400000000000008000000000000002e1f"], 0x0, 0x43}, 0x28) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x6, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 977.829772ms ago: executing program 4 (id=326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) copy_file_range(r4, &(0x7f0000000100)=0x100, r2, &(0x7f0000000180)=0x5, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'virt_wifi0\x00', @local}) r5 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0x2020) 884.299438ms ago: executing program 2 (id=327): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000020000000000000001600"/28], 0x37) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000051a922a0db5e131c78e82558290000000000000000"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3, 0x3}, 0xe) write(r5, &(0x7f0000000040)="864f5d198e692c43540cb6ea7b287d6c339f304c35909e2b99a8ca129471636531a73a418de4a6faa75877996dbfe818d4c97f69142bf2ada28a4381ddce1f396fc07603009001ed36d2cf67a41d1929d7269b4354", 0x55) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r8, 0x0) shutdown(r8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000c85000)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045808}, 0x0) r11 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r14 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r13, @ANYBLOB="00000000100000001c001a80080002802d00ff00080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000500)={'ip6_vti0\x00', r13, 0x4, 0x0, 0xf, 0x5, 0x2c, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, 0x69, 0x81, 0xfffff210, 0x8}}) 436.746504ms ago: executing program 1 (id=328): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) kcmp(r0, r0, 0x5, r3, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r6, 0x339, 0x0) 0s ago: executing program 2 (id=329): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) symlinkat(&(0x7f0000000300)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00') r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x240a0, 0x4c4}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x5c}}, 0x8008010) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) ioctl$sock_bt_hci(r6, 0x400448e1, &(0x7f00000001c0)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x30000, &(0x7f00000001c0)={'trans=unix,', {[{@loose}, {@aname={'aname', 0x3d, '[{$'}}, {@access_uid={'access', 0x3d, r2}}], [{@obj_user}, {@euid_lt}]}}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001300192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.215' (ED25519) to the list of known hosts. [ 20.677906][ T28] audit: type=1400 audit(1769850858.743:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.681124][ T274] cgroup: Unknown subsys name 'net' [ 20.700688][ T28] audit: type=1400 audit(1769850858.743:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.727904][ T28] audit: type=1400 audit(1769850858.773:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.728403][ T274] cgroup: Unknown subsys name 'devices' [ 20.885940][ T274] cgroup: Unknown subsys name 'hugetlb' [ 20.891624][ T274] cgroup: Unknown subsys name 'rlimit' [ 20.996191][ T28] audit: type=1400 audit(1769850859.063:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.019402][ T28] audit: type=1400 audit(1769850859.063:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.044282][ T28] audit: type=1400 audit(1769850859.063:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.062504][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.076172][ T28] audit: type=1400 audit(1769850859.143:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.101600][ T28] audit: type=1400 audit(1769850859.143:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.108436][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.127839][ T28] audit: type=1400 audit(1769850859.163:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.161351][ T28] audit: type=1400 audit(1769850859.163:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.341783][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.348988][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.356554][ T282] device bridge_slave_0 entered promiscuous mode [ 22.363584][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.370698][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.378300][ T282] device bridge_slave_1 entered promiscuous mode [ 22.427052][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.434206][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.441616][ T283] device bridge_slave_0 entered promiscuous mode [ 22.449603][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.456686][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.464275][ T283] device bridge_slave_1 entered promiscuous mode [ 22.487075][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.494182][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.501620][ T284] device bridge_slave_0 entered promiscuous mode [ 22.509744][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.516821][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.524309][ T284] device bridge_slave_1 entered promiscuous mode [ 22.572025][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.579197][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.586667][ T285] device bridge_slave_0 entered promiscuous mode [ 22.596521][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.603580][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.611020][ T285] device bridge_slave_1 entered promiscuous mode [ 22.714719][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.721775][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.729195][ T286] device bridge_slave_0 entered promiscuous mode [ 22.737541][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.744619][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.752000][ T286] device bridge_slave_1 entered promiscuous mode [ 22.805401][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.812434][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.819713][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.826753][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.863877][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.870949][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.878247][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.885307][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.893437][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.900525][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.907833][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.914887][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.926448][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.933504][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.940792][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.947830][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.001001][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.008293][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.015827][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.023003][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.030882][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.038165][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.045423][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.052633][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.060818][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.068388][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.104164][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.111755][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.119377][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.127119][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.136300][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.143327][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.175726][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.183964][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.191006][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.198858][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.208152][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.215218][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.222540][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.230730][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.237772][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.245236][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.253166][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.261190][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.269128][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.277099][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.285250][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.292264][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.299624][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.307756][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.314803][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.327052][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.349037][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.357254][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.365416][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.373712][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.382098][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.389223][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.397052][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.405265][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.413145][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.421570][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.429879][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.436909][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.444436][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.452447][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.460769][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.468846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.490232][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.498245][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.506469][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.514943][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.522725][ T282] device veth0_vlan entered promiscuous mode [ 23.536913][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.545336][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.553599][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.561722][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.569944][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.578044][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.585562][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.594080][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.602383][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.610068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.621846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.630226][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.638534][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.645594][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.652971][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.661321][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.669515][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.676579][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.684669][ T284] device veth0_vlan entered promiscuous mode [ 23.694101][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.705485][ T285] device veth0_vlan entered promiscuous mode [ 23.716701][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.724790][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.732784][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.741228][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.753946][ T282] device veth1_macvtap entered promiscuous mode [ 23.763470][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.771166][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.778694][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.786722][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.794803][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.805024][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.813213][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.825995][ T285] device veth1_macvtap entered promiscuous mode [ 23.837742][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.846092][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.854447][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.862070][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.870758][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.879174][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.887079][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.895336][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.902802][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.913275][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.921758][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.930721][ T283] device veth0_vlan entered promiscuous mode [ 23.944451][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.952819][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.961223][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.976440][ T286] device veth0_vlan entered promiscuous mode [ 23.982777][ T283] device veth1_macvtap entered promiscuous mode [ 23.989905][ T284] device veth1_macvtap entered promiscuous mode [ 24.001934][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.010210][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.017757][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.025361][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.032961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.041415][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.049706][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.057449][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.065833][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.084959][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 24.094143][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.102516][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.124200][ T286] device veth1_macvtap entered promiscuous mode [ 24.132839][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.143713][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.152974][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.161486][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.169912][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.178357][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.186974][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.195345][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.203661][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.225454][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.236698][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.246393][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.418280][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 24.893931][ T320] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.074014][ T320] usb 5-1: Using ep0 maxpacket: 16 [ 25.080504][ T320] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.092422][ T320] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 25.102003][ T320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.111537][ T320] usb 5-1: Product: syz [ 25.116006][ T320] usb 5-1: Manufacturer: syz [ 25.120671][ T320] usb 5-1: SerialNumber: syz [ 25.126590][ T320] usb 5-1: config 0 descriptor?? [ 25.256419][ T369] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.080692][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 26.080707][ T28] audit: type=1400 audit(1769850864.143:124): avc: denied { create } for pid=377 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.155625][ T28] audit: type=1400 audit(1769850864.143:125): avc: denied { write } for pid=377 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.176046][ T28] audit: type=1400 audit(1769850864.143:126): avc: denied { read } for pid=377 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.463881][ T371] Bluetooth: hci0: command 0x1003 tx timeout [ 26.470052][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 26.545994][ T28] audit: type=1400 audit(1769850864.613:127): avc: denied { create } for pid=382 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.565554][ T383] loop0: detected capacity change from 0 to 256 [ 26.566934][ T28] audit: type=1400 audit(1769850864.613:128): avc: denied { bind } for pid=382 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.602622][ T28] audit: type=1400 audit(1769850864.613:129): avc: denied { listen } for pid=382 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.623032][ T28] audit: type=1400 audit(1769850864.613:130): avc: denied { connect } for pid=382 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.660413][ T383] FAT-fs (loop0): Directory bread(block 64) failed [ 26.667042][ T383] FAT-fs (loop0): Directory bread(block 65) failed [ 26.673628][ T383] FAT-fs (loop0): Directory bread(block 66) failed [ 26.680223][ T383] FAT-fs (loop0): Directory bread(block 67) failed [ 26.686849][ T383] FAT-fs (loop0): Directory bread(block 68) failed [ 26.693397][ T383] FAT-fs (loop0): Directory bread(block 69) failed [ 26.699996][ T383] FAT-fs (loop0): Directory bread(block 70) failed [ 26.706964][ T383] FAT-fs (loop0): Directory bread(block 71) failed [ 26.713548][ T383] FAT-fs (loop0): Directory bread(block 72) failed [ 26.720125][ T383] FAT-fs (loop0): Directory bread(block 73) failed [ 26.738479][ T383] process 'syz.0.13' launched './file0' with NULL argv: empty string added [ 26.747713][ T383] syz.0.13: attempt to access beyond end of device [ 26.747713][ T383] loop0: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 26.761320][ T383] syz.0.13: attempt to access beyond end of device [ 26.761320][ T383] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 26.834883][ T28] audit: type=1400 audit(1769850864.803:131): avc: denied { mount } for pid=382 comm="syz.0.13" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 26.907329][ T386] syz.0.13: attempt to access beyond end of device [ 26.907329][ T386] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 26.974826][ T388] loop3: detected capacity change from 0 to 256 [ 26.981513][ T388] ======================================================= [ 26.981513][ T388] WARNING: The mand mount option has been deprecated and [ 26.981513][ T388] and is ignored by this kernel. Remove the mand [ 26.981513][ T388] option from the mount to silence this warning. [ 26.981513][ T388] ======================================================= [ 27.019263][ T388] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 27.033608][ T28] audit: type=1400 audit(1769850865.093:132): avc: denied { create } for pid=387 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.053018][ T28] audit: type=1400 audit(1769850865.093:133): avc: denied { ioctl } for pid=387 comm="syz.3.14" path="socket:[16086]" dev="sockfs" ino=16086 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.229266][ T390] xt_CT: No such helper "netbios-ns" [ 27.429429][ T356] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 27.455715][ T336] usb 5-1: USB disconnect, device number 2 [ 27.466463][ T393] ž˙: renamed from team_slave_1 [ 27.932673][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 27.945315][ T401] loop4: detected capacity change from 0 to 256 [ 27.957341][ T401] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 28.369288][ T413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22'. [ 28.562691][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 30.853810][ C0] sched: RT throttling activated [ 30.854368][ T19] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.867219][ T356] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.873345][ T356] Bluetooth: hci1: command 0x1003 tx timeout [ 30.879386][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 32.213864][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 32.220292][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.251917][ T19] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 32.261465][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.269614][ T19] usb 2-1: Product: syz [ 32.273847][ T19] usb 2-1: Manufacturer: syz [ 32.278479][ T19] usb 2-1: SerialNumber: syz [ 32.287012][ T19] usb 2-1: config 0 descriptor?? [ 32.374109][ T19] usb 2-1: USB disconnect, device number 2 [ 32.425553][ T457] loop2: detected capacity change from 0 to 256 [ 32.438544][ T457] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 33.053890][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 33.053906][ T28] audit: type=1400 audit(1769850871.113:149): avc: denied { create } for pid=473 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.079701][ T28] audit: type=1400 audit(1769850871.123:150): avc: denied { setopt } for pid=473 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.236129][ T480] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 33.253932][ T480] EXT4-fs (loop4): unable to read superblock [ 34.073863][ T447] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 34.101626][ T500] loop3: detected capacity change from 0 to 256 [ 34.147843][ T472] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 34.158052][ T500] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 34.523843][ T472] usb 3-1: Using ep0 maxpacket: 16 [ 34.530141][ T472] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.547612][ T472] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 34.563036][ T472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.571324][ T472] usb 3-1: Product: syz [ 34.575647][ T472] usb 3-1: Manufacturer: syz [ 34.580392][ T472] usb 3-1: SerialNumber: syz [ 34.586375][ T472] usb 3-1: config 0 descriptor?? [ 35.263729][ T28] audit: type=1400 audit(1769850873.323:151): avc: denied { read write } for pid=519 comm="syz.0.52" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.290090][ T28] audit: type=1400 audit(1769850873.353:152): avc: denied { open } for pid=519 comm="syz.0.52" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.400148][ T28] audit: type=1400 audit(1769850873.353:153): avc: denied { ioctl } for pid=519 comm="syz.0.52" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.037033][ T536] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 36.046664][ T536] EXT4-fs (loop3): unable to read superblock [ 36.106636][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.940831][ T314] usb 3-1: USB disconnect, device number 2 [ 38.526411][ T371] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.594361][ T28] audit: type=1400 audit(1769850876.663:154): avc: denied { create } for pid=562 comm="syz.4.67" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.639705][ T28] audit: type=1400 audit(1769850876.703:155): avc: denied { read } for pid=562 comm="syz.4.67" name="file0" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.662946][ T28] audit: type=1400 audit(1769850876.703:156): avc: denied { open } for pid=562 comm="syz.4.67" path="/12/file0" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.703562][ T576] loop3: detected capacity change from 0 to 256 [ 38.713007][ T576] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 38.760568][ T28] audit: type=1400 audit(1769850876.823:157): avc: denied { unlink } for pid=286 comm="syz-executor" name="file0" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 39.221223][ T586] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 39.230927][ T586] EXT4-fs (loop4): unable to read superblock [ 39.515943][ T28] audit: type=1400 audit(1769850877.583:158): avc: denied { read write } for pid=589 comm="syz.2.73" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 39.565080][ T28] audit: type=1400 audit(1769850877.583:159): avc: denied { open } for pid=589 comm="syz.2.73" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 39.647570][ T28] audit: type=1400 audit(1769850877.713:160): avc: denied { create } for pid=589 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.693036][ T28] audit: type=1400 audit(1769850877.733:161): avc: denied { connect } for pid=589 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.714123][ T28] audit: type=1400 audit(1769850877.733:162): avc: denied { write } for pid=589 comm="syz.2.73" path="socket:[17640]" dev="sockfs" ino=17640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.739027][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.748993][ T43] Bluetooth: hci1: Frame reassembly failed (-84) [ 39.755713][ T28] audit: type=1400 audit(1769850877.753:163): avc: denied { read } for pid=594 comm="syz.3.75" dev="nsfs" ino=4026532642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 41.313126][ T628] loop2: detected capacity change from 0 to 256 [ 41.322790][ T8] Bluetooth: hci2: Frame reassembly failed (-84) [ 41.338000][ T628] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 41.743878][ T356] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.743889][ T629] Bluetooth: hci0: command 0x1003 tx timeout [ 41.823869][ T632] Bluetooth: hci1: command 0x1003 tx timeout [ 41.829950][ T371] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 43.853945][ T371] Bluetooth: hci2: command 0x1003 tx timeout [ 43.855856][ T45] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 44.847068][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 44.847082][ T28] audit: type=1400 audit(1769850882.913:170): avc: denied { getopt } for pid=650 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.856981][ T652] Zero length message leads to an empty skb [ 44.885657][ T655] loop1: detected capacity change from 0 to 128 [ 44.921547][ T655] cgroup: Unknown subsys name '¬§@﬽ćě¦4*oäÂŇŁhÓîşoţüíUÜ' [ 44.929495][ T28] audit: type=1400 audit(1769850882.983:171): avc: denied { mounton } for pid=654 comm="syz.1.96" path="/16/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 44.965401][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.242916][ T672] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 45.299556][ T672] EXT4-fs (loop3): unable to read superblock [ 45.806904][ T28] audit: type=1400 audit(1769850883.873:172): avc: denied { setopt } for pid=681 comm="syz.3.104" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.811440][ T682] xt_hashlimit: size too large, truncated to 1048576 [ 45.849258][ T684] loop1: detected capacity change from 0 to 256 [ 45.964555][ T684] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 48.253934][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.502610][ T717] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 48.531534][ T717] EXT4-fs (loop1): unable to read superblock [ 48.555396][ T722] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 48.566546][ T722] EXT4-fs (loop0): unable to read superblock [ 49.180411][ T731] xt_hashlimit: size too large, truncated to 1048576 [ 50.673054][ T760] FAULT_INJECTION: forcing a failure. [ 50.673054][ T760] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.686223][ T28] audit: type=1400 audit(1769850888.733:173): avc: denied { name_bind } for pid=757 comm="syz.3.128" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 50.710341][ T760] CPU: 1 PID: 760 Comm: syz.3.128 Not tainted syzkaller #0 [ 50.717569][ T760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.727715][ T760] Call Trace: [ 50.731003][ T760] [ 50.733937][ T760] __dump_stack+0x21/0x24 [ 50.738306][ T760] dump_stack_lvl+0x110/0x170 [ 50.742997][ T760] ? __cfi_dump_stack_lvl+0x8/0x8 [ 50.748037][ T760] ? stack_trace_save+0xa6/0xf0 [ 50.752912][ T760] dump_stack+0x15/0x24 [ 50.757079][ T760] should_fail_ex+0x3d4/0x520 [ 50.761769][ T760] should_fail+0xb/0x10 [ 50.765939][ T760] should_fail_usercopy+0x1a/0x20 [ 50.771000][ T760] _copy_from_user+0x1e/0xc0 [ 50.775608][ T760] ___sys_recvmsg+0x172/0x590 [ 50.780304][ T760] ? __sys_recvmsg+0x280/0x280 [ 50.785084][ T760] ? kstrtouint_from_user+0x113/0x170 [ 50.790477][ T760] ? __fget_files+0x2d5/0x330 [ 50.795172][ T760] ? __fdget+0x19c/0x220 [ 50.799437][ T760] ? do_recvmmsg+0x1aa/0x840 [ 50.804058][ T760] do_recvmmsg+0x393/0x840 [ 50.808501][ T760] ? __sys_recvmmsg+0x290/0x290 [ 50.813387][ T760] ? __cfi_mutex_unlock+0x10/0x10 [ 50.818440][ T760] ? __kasan_check_write+0x14/0x20 [ 50.823571][ T760] __x64_sys_recvmmsg+0x195/0x250 [ 50.828639][ T760] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 50.834206][ T760] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 50.840276][ T760] x64_sys_call+0x3e7/0x9a0 [ 50.844799][ T760] do_syscall_64+0x4c/0xa0 [ 50.849216][ T760] ? clear_bhb_loop+0x30/0x80 [ 50.853889][ T760] ? clear_bhb_loop+0x30/0x80 [ 50.858577][ T760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 50.864509][ T760] RIP: 0033:0x7fd75139aeb9 [ 50.868963][ T760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.888607][ T760] RSP: 002b:00007fd7522e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 50.897028][ T760] RAX: ffffffffffffffda RBX: 00007fd751615fa0 RCX: 00007fd75139aeb9 [ 50.904995][ T760] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 50.912970][ T760] RBP: 00007fd7522e8090 R08: 0000000000000000 R09: 0000000000000000 [ 50.920967][ T760] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 50.928965][ T760] R13: 00007fd751616038 R14: 00007fd751615fa0 R15: 00007ffdb5cf6e58 [ 50.936966][ T760] [ 51.149067][ T774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=774 comm=syz.3.132 [ 51.204265][ T776] loop2: detected capacity change from 0 to 256 [ 51.357721][ T776] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 51.922003][ T780] xt_hashlimit: size too large, truncated to 1048576 [ 52.146573][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.587158][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 53.665472][ T28] audit: type=1400 audit(1769850891.733:174): avc: denied { create } for pid=811 comm="syz.2.144" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.724581][ T28] audit: type=1400 audit(1769850891.743:175): avc: denied { map } for pid=811 comm="syz.2.144" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 54.509443][ T632] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.580651][ T818] loop4: detected capacity change from 0 to 512 [ 54.606767][ T28] audit: type=1400 audit(1769850891.743:176): avc: denied { read write } for pid=811 comm="syz.2.144" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 54.653955][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 54.723297][ T820] loop1: detected capacity change from 0 to 40427 [ 54.730945][ T820] F2FS-fs (loop1): Unrecognized mount option "Uđ€" or missing value [ 54.796681][ T812] loop2: detected capacity change from 0 to 40427 [ 54.816152][ T28] audit: type=1400 audit(1769850892.883:177): avc: denied { read append } for pid=819 comm="syz.1.147" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.003192][ T28] audit: type=1400 audit(1769850892.883:178): avc: denied { open } for pid=819 comm="syz.1.147" path="/dev/input/event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.029051][ T28] audit: type=1400 audit(1769850892.903:179): avc: denied { remount } for pid=811 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.090896][ T28] audit: type=1400 audit(1769850892.953:180): avc: denied { create } for pid=826 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.946867][ T28] audit: type=1400 audit(1769850892.953:181): avc: denied { ioctl } for pid=826 comm="syz.1.151" path="socket:[18061]" dev="sockfs" ino=18061 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.996768][ T28] audit: type=1400 audit(1769850892.953:182): avc: denied { setopt } for pid=826 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.016097][ T847] loop0: detected capacity change from 0 to 256 [ 56.033522][ T847] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 57.959086][ T28] audit: type=1400 audit(1769850896.023:183): avc: denied { execute } for pid=865 comm="syz.4.161" name="file1" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.034147][ T28] audit: type=1400 audit(1769850896.043:184): avc: denied { execute_no_trans } for pid=865 comm="syz.4.161" path="/28/file1" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.059656][ T341] Bluetooth: hci0: Frame reassembly failed (-84) [ 58.067272][ T874] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 58.083160][ T874] EXT4-fs (loop0): unable to read superblock [ 58.254333][ T899] loop4: detected capacity change from 0 to 256 [ 58.261146][ T28] audit: type=1400 audit(1769850896.293:185): avc: denied { read } for pid=895 comm="syz.2.170" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.292709][ T899] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 58.327464][ T28] audit: type=1400 audit(1769850896.293:186): avc: denied { open } for pid=895 comm="syz.2.170" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.361799][ T28] audit: type=1400 audit(1769850896.293:187): avc: denied { ioctl } for pid=895 comm="syz.2.170" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.388438][ T892] FAULT_INJECTION: forcing a failure. [ 58.388438][ T892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.425372][ T892] CPU: 0 PID: 892 Comm: syz.3.168 Not tainted syzkaller #0 [ 58.432608][ T892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.442671][ T892] Call Trace: [ 58.445958][ T892] [ 58.448904][ T892] __dump_stack+0x21/0x24 [ 58.453268][ T892] dump_stack_lvl+0x110/0x170 [ 58.457967][ T892] ? __cfi_dump_stack_lvl+0x8/0x8 [ 58.463010][ T892] ? __sys_recvmsg_sock+0x50/0x50 [ 58.468051][ T892] dump_stack+0x15/0x24 [ 58.472219][ T892] should_fail_ex+0x3d4/0x520 [ 58.476926][ T892] should_fail+0xb/0x10 [ 58.481100][ T892] should_fail_usercopy+0x1a/0x20 [ 58.486136][ T892] _copy_from_user+0x1e/0xc0 [ 58.490741][ T892] ___sys_recvmsg+0x172/0x590 [ 58.495440][ T892] ? __sys_recvmsg+0x280/0x280 [ 58.500215][ T892] ? kstrtouint_from_user+0x113/0x170 [ 58.505597][ T892] ? __fget_files+0x2d5/0x330 [ 58.510279][ T892] ? __fdget+0x19c/0x220 [ 58.514523][ T892] ? do_recvmmsg+0x1aa/0x840 [ 58.519131][ T892] do_recvmmsg+0x393/0x840 [ 58.523560][ T892] ? __sys_recvmmsg+0x290/0x290 [ 58.528425][ T892] ? __cfi_mutex_unlock+0x10/0x10 [ 58.533477][ T892] ? __kasan_check_write+0x14/0x20 [ 58.538596][ T892] __x64_sys_recvmmsg+0x195/0x250 [ 58.543643][ T892] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 58.549212][ T892] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 58.555287][ T892] x64_sys_call+0x3e7/0x9a0 [ 58.559798][ T892] do_syscall_64+0x4c/0xa0 [ 58.564223][ T892] ? clear_bhb_loop+0x30/0x80 [ 58.568905][ T892] ? clear_bhb_loop+0x30/0x80 [ 58.573594][ T892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.579499][ T892] RIP: 0033:0x7fd75139aeb9 [ 58.583920][ T892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.603533][ T892] RSP: 002b:00007fd7522e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 58.611955][ T892] RAX: ffffffffffffffda RBX: 00007fd751615fa0 RCX: 00007fd75139aeb9 [ 58.619934][ T892] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 58.627948][ T892] RBP: 00007fd7522e8090 R08: 0000000000000000 R09: 0000000000000000 [ 58.635961][ T892] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 58.643945][ T892] R13: 00007fd751616038 R14: 00007fd751615fa0 R15: 00007ffdb5cf6e58 [ 58.651955][ T892] [ 59.055284][ T911] loop4: detected capacity change from 0 to 512 [ 59.072825][ T911] FAULT_INJECTION: forcing a failure. [ 59.072825][ T911] name failslab, interval 1, probability 0, space 0, times 1 [ 59.086189][ T911] CPU: 0 PID: 911 Comm: syz.4.174 Not tainted syzkaller #0 [ 59.093449][ T911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.103511][ T911] Call Trace: [ 59.106800][ T911] [ 59.109737][ T911] __dump_stack+0x21/0x24 [ 59.114083][ T911] dump_stack_lvl+0x110/0x170 [ 59.118771][ T911] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.123815][ T911] dump_stack+0x15/0x24 [ 59.128009][ T911] should_fail_ex+0x3d4/0x520 [ 59.132704][ T911] ? getname_flags+0xb9/0x500 [ 59.137414][ T911] __should_failslab+0xac/0xf0 [ 59.142199][ T911] should_failslab+0x9/0x20 [ 59.146717][ T911] kmem_cache_alloc+0x3b/0x330 [ 59.151501][ T911] getname_flags+0xb9/0x500 [ 59.156030][ T911] __x64_sys_renameat2+0xc3/0xf0 [ 59.161000][ T911] x64_sys_call+0x6b8/0x9a0 [ 59.165524][ T911] do_syscall_64+0x4c/0xa0 [ 59.169961][ T911] ? clear_bhb_loop+0x30/0x80 [ 59.174659][ T911] ? clear_bhb_loop+0x30/0x80 [ 59.179370][ T911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.185282][ T911] RIP: 0033:0x7fee70f9aeb9 [ 59.189709][ T911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.209331][ T911] RSP: 002b:00007fee71e8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 59.217763][ T911] RAX: ffffffffffffffda RBX: 00007fee71215fa0 RCX: 00007fee70f9aeb9 [ 59.225775][ T911] RDX: ffffffffffffff9c RSI: 0000200000000280 RDI: ffffffffffffff9c [ 59.233766][ T911] RBP: 00007fee71e8a090 R08: 0000000000000000 R09: 0000000000000000 [ 59.241749][ T911] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 59.249729][ T911] R13: 00007fee71216038 R14: 00007fee71215fa0 R15: 00007ffda5fb6b28 [ 59.257724][ T911] [ 59.327376][ T921] loop4: detected capacity change from 0 to 512 [ 59.334900][ T921] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 59.343325][ T921] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.350594][ T921] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 59.360142][ T921] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 59.370167][ T921] EXT4-fs error (device loop4): ext4_acquire_dquot:6798: comm syz.4.178: Failed to acquire dquot type 1 [ 59.381948][ T921] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.178: bg 0: block 40: padding at end of block bitmap is not set [ 59.396413][ T921] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 59.405489][ T921] EXT4-fs (loop4): 1 truncate cleaned up [ 59.411247][ T921] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.420470][ T28] audit: type=1400 audit(1769850897.483:188): avc: denied { mount } for pid=920 comm="syz.4.178" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.289469][ T371] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.295710][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 60.307737][ T935] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #16: comm syz.4.178: corrupted xattr block 31 [ 60.404822][ T935] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 60.414093][ T935] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #16: comm syz.4.178: corrupted xattr block 31 [ 60.428620][ T935] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 60.438361][ T941] loop3: detected capacity change from 0 to 512 [ 60.458077][ T935] EXT4-fs error (device loop4): ext4_get_link:104: inode #16: comm syz.4.178: bad symlink. [ 60.468652][ T941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.509205][ T286] EXT4-fs (loop4): unmounting filesystem. [ 60.528773][ T941] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 60.547173][ T941] System zones: 0-2, 18-18, 34-34 [ 60.575398][ T941] EXT4-fs (loop3): orphan cleanup on readonly fs [ 60.621297][ T941] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.186: bg 0: block 248: padding at end of block bitmap is not set [ 60.655965][ T941] EXT4-fs error (device loop3): ext4_acquire_dquot:6798: comm syz.3.186: Failed to acquire dquot type 1 [ 60.667795][ T941] EXT4-fs (loop3): 1 truncate cleaned up [ 60.673916][ T941] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 60.708474][ T941] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 60.722317][ T965] loop4: detected capacity change from 0 to 256 [ 60.729341][ T941] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 60.740964][ T965] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 60.848137][ T941] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 60.855061][ T941] ext4 filesystem being remounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.868290][ T941] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 60.881035][ T941] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 60.890999][ T941] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 61.111177][ T941] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 61.229177][ T285] EXT4-fs (loop3): unmounting filesystem. [ 61.235112][ T941] syz.3.186 (941) used greatest stack depth: 21408 bytes left [ 61.307602][ T341] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.428270][ T984] loop1: detected capacity change from 0 to 256 [ 61.439880][ T984] FAT-fs (loop1): Directory bread(block 64) failed [ 61.446493][ T984] FAT-fs (loop1): Directory bread(block 65) failed [ 61.453046][ T984] FAT-fs (loop1): Directory bread(block 66) failed [ 61.460194][ T984] FAT-fs (loop1): Directory bread(block 67) failed [ 61.466828][ T984] FAT-fs (loop1): Directory bread(block 68) failed [ 61.473357][ T984] FAT-fs (loop1): Directory bread(block 69) failed [ 61.479933][ T984] FAT-fs (loop1): Directory bread(block 70) failed [ 61.486486][ T984] FAT-fs (loop1): Directory bread(block 71) failed [ 61.493033][ T984] FAT-fs (loop1): Directory bread(block 72) failed [ 61.499591][ T984] FAT-fs (loop1): Directory bread(block 73) failed [ 61.511195][ T984] syz.1.199: attempt to access beyond end of device [ 61.511195][ T984] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 61.524869][ T984] syz.1.199: attempt to access beyond end of device [ 61.524869][ T984] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 61.588682][ T988] loop2: detected capacity change from 0 to 256 [ 61.614956][ T988] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 61.634587][ T984] syz.1.199: attempt to access beyond end of device [ 61.634587][ T984] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 62.017758][ T1012] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 62.052447][ T1012] EXT4-fs (loop4): unable to read superblock [ 62.386894][ T1021] loop0: detected capacity change from 0 to 40427 [ 62.402246][ T1021] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 62.442928][ T1021] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 62.454077][ T1021] F2FS-fs (loop0): Unrecognized mount option "00000000000000000000˙˙˙˙" or missing value [ 62.594787][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 62.594802][ T28] audit: type=1400 audit(1769850900.663:192): avc: denied { read } for pid=1025 comm="syz.1.214" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.595767][ T1026] binder: 1025:1026 ioctl c0306201 0 returned -14 [ 62.609309][ T28] audit: type=1400 audit(1769850900.663:193): avc: denied { open } for pid=1025 comm="syz.1.214" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.678457][ T1028] loop4: detected capacity change from 0 to 256 [ 62.692237][ T1028] FAT-fs (loop4): Directory bread(block 64) failed [ 62.699051][ T1028] FAT-fs (loop4): Directory bread(block 65) failed [ 62.705660][ T1028] FAT-fs (loop4): Directory bread(block 66) failed [ 62.712190][ T1028] FAT-fs (loop4): Directory bread(block 67) failed [ 62.718789][ T1028] FAT-fs (loop4): Directory bread(block 68) failed [ 62.725345][ T1028] FAT-fs (loop4): Directory bread(block 69) failed [ 62.731897][ T1028] FAT-fs (loop4): Directory bread(block 70) failed [ 62.737528][ T1021] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1021 comm=syz.0.212 [ 62.738532][ T1028] FAT-fs (loop4): Directory bread(block 71) failed [ 62.757498][ T1028] FAT-fs (loop4): Directory bread(block 72) failed [ 62.760329][ T1026] loop1: detected capacity change from 0 to 8192 [ 62.764072][ T1028] FAT-fs (loop4): Directory bread(block 73) failed [ 62.771186][ T28] audit: type=1400 audit(1769850900.663:194): avc: denied { ioctl } for pid=1025 comm="syz.1.214" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.806131][ T1028] syz.4.215: attempt to access beyond end of device [ 62.806131][ T1028] loop4: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 62.815457][ T28] audit: type=1400 audit(1769850900.783:195): avc: denied { mounton } for pid=1020 comm="syz.0.212" path="/syzcgroup/cpu/syz0/syz0" dev="cgroup" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 62.820548][ T1028] syz.4.215: attempt to access beyond end of device [ 62.820548][ T1028] loop4: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 62.845134][ T28] audit: type=1400 audit(1769850900.783:196): avc: denied { mount } for pid=1020 comm="syz.0.212" name="/" dev="pstore" ino=12993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 62.879367][ T28] audit: type=1400 audit(1769850900.793:197): avc: denied { create } for pid=1020 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.900072][ T1028] syz.4.215: attempt to access beyond end of device [ 62.900072][ T1028] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 62.907368][ T1026] loop1: p1 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 62.914744][ T28] audit: type=1400 audit(1769850900.793:198): avc: denied { setopt } for pid=1020 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.343869][ T371] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.343898][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 63.476083][ T341] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.664136][ T858] udevd[858]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 63.666172][ T338] udevd[338]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 63.677226][ T359] udevd[359]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 63.843507][ T438] udevd[438]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 64.167004][ T858] udevd[858]: inotify_add_watch(7, /dev/loop1p17, 10) failed: No such file or directory [ 64.167597][ T338] udevd[338]: inotify_add_watch(7, /dev/loop1p15, 10) failed: No such file or directory [ 64.186116][ T438] udevd[438]: inotify_add_watch(7, /dev/loop1p18, 10) failed: No such file or directory [ 64.189446][ T359] udevd[359]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory [ 64.552666][ T1059] udevd[1059]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 64.562846][ T1057] udevd[1057]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 64.651928][ T1077] loop2: detected capacity change from 0 to 512 [ 64.673029][ T1077] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 64.965308][ T1084] loop1: detected capacity change from 0 to 256 [ 64.976886][ T1084] FAT-fs (loop1): Directory bread(block 64) failed [ 64.983460][ T1084] FAT-fs (loop1): Directory bread(block 65) failed [ 64.990060][ T1084] FAT-fs (loop1): Directory bread(block 66) failed [ 64.996993][ T1084] FAT-fs (loop1): Directory bread(block 67) failed [ 65.003549][ T1084] FAT-fs (loop1): Directory bread(block 68) failed [ 65.010112][ T1084] FAT-fs (loop1): Directory bread(block 69) failed [ 65.016704][ T1084] FAT-fs (loop1): Directory bread(block 70) failed [ 65.023233][ T1084] FAT-fs (loop1): Directory bread(block 71) failed [ 65.029821][ T1084] FAT-fs (loop1): Directory bread(block 72) failed [ 65.036401][ T1084] FAT-fs (loop1): Directory bread(block 73) failed [ 65.049051][ T1084] syz.1.231: attempt to access beyond end of device [ 65.049051][ T1084] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 65.062693][ T1084] syz.1.231: attempt to access beyond end of device [ 65.062693][ T1084] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 65.077135][ T1084] syz.1.231: attempt to access beyond end of device [ 65.077135][ T1084] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 65.198881][ T335] Bluetooth: hci1: Frame reassembly failed (-84) [ 65.503850][ T632] Bluetooth: hci0: command 0x1003 tx timeout [ 65.509903][ T371] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.896175][ T28] audit: type=1400 audit(1769850903.963:199): avc: denied { create } for pid=1106 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.934002][ T28] audit: type=1400 audit(1769850903.963:200): avc: denied { write } for pid=1106 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.036569][ T1092] loop4: detected capacity change from 0 to 131072 [ 66.049261][ T1110] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 66.054491][ T1092] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 66.065311][ T1110] EXT4-fs (loop2): unable to read superblock [ 66.087295][ T1092] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 66.100105][ T1092] F2FS-fs (loop4): invalid crc value [ 66.107285][ T1092] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.145279][ T1092] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 66.152492][ T1092] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 66.197753][ T28] audit: type=1400 audit(1769850904.263:201): avc: denied { write } for pid=1091 comm="syz.4.234" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.450417][ T1120] loop0: detected capacity change from 0 to 256 [ 66.462076][ T1120] FAT-fs (loop0): Directory bread(block 64) failed [ 66.468707][ T1120] FAT-fs (loop0): Directory bread(block 65) failed [ 66.475798][ T1120] FAT-fs (loop0): Directory bread(block 66) failed [ 66.482333][ T1120] FAT-fs (loop0): Directory bread(block 67) failed [ 66.488910][ T1120] FAT-fs (loop0): Directory bread(block 68) failed [ 66.494228][ T1107] loop3: detected capacity change from 0 to 131072 [ 66.495474][ T1120] FAT-fs (loop0): Directory bread(block 69) failed [ 66.503702][ T1107] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 66.508500][ T1120] FAT-fs (loop0): Directory bread(block 70) failed [ 66.508523][ T1120] FAT-fs (loop0): Directory bread(block 71) failed [ 66.531006][ T1120] FAT-fs (loop0): Directory bread(block 72) failed [ 66.534287][ T1107] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 66.537631][ T1120] FAT-fs (loop0): Directory bread(block 73) failed [ 66.559995][ T1120] syz.0.243: attempt to access beyond end of device [ 66.559995][ T1120] loop0: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 66.573652][ T1120] syz.0.243: attempt to access beyond end of device [ 66.573652][ T1120] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 66.576301][ T1107] F2FS-fs (loop3): invalid crc value [ 66.593255][ T1120] syz.0.243: attempt to access beyond end of device [ 66.593255][ T1120] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 66.633941][ T1107] F2FS-fs (loop3): Found nat_bits in checkpoint [ 66.660680][ T1107] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 66.667785][ T1107] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 66.856327][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.263910][ T632] Bluetooth: hci1: command 0x1003 tx timeout [ 67.264775][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 67.789189][ T1158] netlink: 104 bytes leftover after parsing attributes in process `syz.0.255'. [ 67.799187][ T1157] netlink: 104 bytes leftover after parsing attributes in process `syz.0.255'. [ 67.907567][ T1165] loop4: detected capacity change from 0 to 256 [ 67.918722][ T1165] FAT-fs (loop4): Directory bread(block 64) failed [ 67.925705][ T1165] FAT-fs (loop4): Directory bread(block 65) failed [ 67.932263][ T1165] FAT-fs (loop4): Directory bread(block 66) failed [ 67.938836][ T1165] FAT-fs (loop4): Directory bread(block 67) failed [ 67.945429][ T1165] FAT-fs (loop4): Directory bread(block 68) failed [ 67.951969][ T1165] FAT-fs (loop4): Directory bread(block 69) failed [ 67.958569][ T1165] FAT-fs (loop4): Directory bread(block 70) failed [ 67.965115][ T1165] FAT-fs (loop4): Directory bread(block 71) failed [ 67.971686][ T1165] FAT-fs (loop4): Directory bread(block 72) failed [ 67.978227][ T1165] FAT-fs (loop4): Directory bread(block 73) failed [ 68.168051][ T1168] syz.4.257: attempt to access beyond end of device [ 68.168051][ T1168] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 68.526718][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 68.526749][ T28] audit: type=1400 audit(1769850906.593:204): avc: denied { ioctl } for pid=1178 comm="syz.3.261" path="socket:[19383]" dev="sockfs" ino=19383 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.645900][ T28] audit: type=1400 audit(1769850906.713:205): avc: denied { ioctl } for pid=1186 comm="syz.1.264" path="/46/file0" dev="tmpfs" ino=266 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.737808][ T1191] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 68.747724][ T1191] EXT4-fs (loop3): unable to read superblock [ 68.863893][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 68.869967][ T371] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.445132][ T1208] loop3: detected capacity change from 0 to 512 [ 69.479735][ T1208] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 69.489019][ T1208] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.515716][ T28] audit: type=1400 audit(1769850907.583:206): avc: denied { create } for pid=1207 comm="syz.3.270" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.535986][ T1208] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.270: corrupted xattr block 32 [ 69.558352][ T1208] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 69.581251][ T1208] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.270: corrupted xattr block 32 [ 69.611832][ T1208] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 69.639477][ T28] audit: type=1400 audit(1769850907.703:207): avc: denied { read write } for pid=1207 comm="syz.3.270" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.639510][ T1208] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.270: corrupted xattr block 32 [ 69.674768][ T1208] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 69.684517][ T28] audit: type=1400 audit(1769850907.753:208): avc: denied { open } for pid=1207 comm="syz.3.270" path="/49/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.828531][ T1223] loop2: detected capacity change from 0 to 256 [ 71.725193][ T1223] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 72.597047][ T285] EXT4-fs (loop3): unmounting filesystem. [ 72.663551][ T1250] FAULT_INJECTION: forcing a failure. [ 72.663551][ T1250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.677151][ T1250] CPU: 1 PID: 1250 Comm: syz.3.282 Not tainted syzkaller #0 [ 72.684462][ T1250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.694546][ T1250] Call Trace: [ 72.697843][ T1250] [ 72.700786][ T1250] __dump_stack+0x21/0x24 [ 72.705139][ T1250] dump_stack_lvl+0x110/0x170 [ 72.709837][ T1250] ? __cfi_dump_stack_lvl+0x8/0x8 [ 72.714900][ T1250] ? __sys_recvmsg_sock+0x50/0x50 [ 72.719944][ T1250] dump_stack+0x15/0x24 [ 72.724117][ T1250] should_fail_ex+0x3d4/0x520 [ 72.728824][ T1250] should_fail+0xb/0x10 [ 72.733003][ T1250] should_fail_usercopy+0x1a/0x20 [ 72.738049][ T1250] _copy_from_user+0x1e/0xc0 [ 72.742665][ T1250] ___sys_recvmsg+0x172/0x590 [ 72.747373][ T1250] ? __sys_recvmsg+0x280/0x280 [ 72.752161][ T1250] ? kstrtouint_from_user+0x113/0x170 [ 72.757550][ T1250] ? __fget_files+0x2d5/0x330 [ 72.762245][ T1250] ? __fdget+0x19c/0x220 [ 72.766498][ T1250] ? do_recvmmsg+0x1aa/0x840 [ 72.771108][ T1250] do_recvmmsg+0x393/0x840 [ 72.775543][ T1250] ? __sys_recvmmsg+0x290/0x290 [ 72.780415][ T1250] ? __cfi_mutex_unlock+0x10/0x10 [ 72.785466][ T1250] ? __kasan_check_write+0x14/0x20 [ 72.790596][ T1250] __x64_sys_recvmmsg+0x195/0x250 [ 72.795645][ T1250] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 72.801320][ T1250] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 72.807416][ T1250] x64_sys_call+0x3e7/0x9a0 [ 72.811948][ T1250] do_syscall_64+0x4c/0xa0 [ 72.816382][ T1250] ? clear_bhb_loop+0x30/0x80 [ 72.821077][ T1250] ? clear_bhb_loop+0x30/0x80 [ 72.825773][ T1250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.831694][ T1250] RIP: 0033:0x7fd75139aeb9 [ 72.836119][ T1250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.855750][ T1250] RSP: 002b:00007fd7522e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 72.864195][ T1250] RAX: ffffffffffffffda RBX: 00007fd751615fa0 RCX: 00007fd75139aeb9 [ 72.872203][ T1250] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 72.880199][ T1250] RBP: 00007fd7522e8090 R08: 0000000000000000 R09: 0000000000000000 [ 72.888191][ T1250] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 72.896182][ T1250] R13: 00007fd751616038 R14: 00007fd751615fa0 R15: 00007ffdb5cf6e58 [ 72.904176][ T1250] [ 72.927559][ T1256] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 72.976076][ T1256] EXT4-fs (loop1): unable to read superblock [ 73.030519][ T1260] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 74.543862][ T1242] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 74.689898][ T1296] loop4: detected capacity change from 0 to 256 [ 74.706492][ T1296] FAT-fs (loop4): Directory bread(block 64) failed [ 74.713071][ T1296] FAT-fs (loop4): Directory bread(block 65) failed [ 74.719854][ T1296] FAT-fs (loop4): Directory bread(block 66) failed [ 74.726482][ T1296] FAT-fs (loop4): Directory bread(block 67) failed [ 74.733045][ T1296] FAT-fs (loop4): Directory bread(block 68) failed [ 74.739599][ T1296] FAT-fs (loop4): Directory bread(block 69) failed [ 74.746159][ T1296] FAT-fs (loop4): Directory bread(block 70) failed [ 74.752674][ T1296] FAT-fs (loop4): Directory bread(block 71) failed [ 74.759239][ T1296] FAT-fs (loop4): Directory bread(block 72) failed [ 74.765779][ T1296] FAT-fs (loop4): Directory bread(block 73) failed [ 75.059507][ T1301] syz.4.296: attempt to access beyond end of device [ 75.059507][ T1301] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 75.323843][ T315] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.053887][ T315] usb 4-1: Using ep0 maxpacket: 16 [ 76.060151][ T315] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.081092][ T315] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 76.097871][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.112132][ T315] usb 4-1: Product: syz [ 76.116568][ T315] usb 4-1: Manufacturer: syz [ 76.121206][ T315] usb 4-1: SerialNumber: syz [ 76.151282][ T315] usb 4-1: config 0 descriptor?? [ 77.150034][ T1337] FAULT_INJECTION: forcing a failure. [ 77.150034][ T1337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.163309][ T341] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.184181][ T1337] CPU: 1 PID: 1337 Comm: syz.2.308 Not tainted syzkaller #0 [ 77.191499][ T1337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.201572][ T1337] Call Trace: [ 77.204858][ T1337] [ 77.207795][ T1337] __dump_stack+0x21/0x24 [ 77.212150][ T1337] dump_stack_lvl+0x110/0x170 [ 77.216861][ T1337] ? __cfi_dump_stack_lvl+0x8/0x8 [ 77.221910][ T1337] dump_stack+0x15/0x24 [ 77.226096][ T1337] should_fail_ex+0x3d4/0x520 [ 77.230787][ T1337] should_fail+0xb/0x10 [ 77.234955][ T1337] should_fail_usercopy+0x1a/0x20 [ 77.239999][ T1337] _copy_to_user+0x1e/0x90 [ 77.244442][ T1337] simple_read_from_buffer+0xe9/0x160 [ 77.249835][ T1337] proc_fail_nth_read+0x1a6/0x220 [ 77.254877][ T1337] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 77.260447][ T1337] ? security_file_permission+0x94/0xb0 [ 77.266035][ T1337] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 77.271600][ T1337] vfs_read+0x27a/0x910 [ 77.275783][ T1337] ? __cfi_vfs_read+0x10/0x10 [ 77.280493][ T1337] ? __kasan_check_write+0x14/0x20 [ 77.285613][ T1337] ? mutex_lock+0x93/0x1b0 [ 77.290052][ T1337] ? __cfi_mutex_lock+0x10/0x10 [ 77.294927][ T1337] ? __fdget_pos+0x2cd/0x380 [ 77.299533][ T1337] ? ksys_read+0x71/0x250 [ 77.303874][ T1337] ksys_read+0x149/0x250 [ 77.308135][ T1337] ? __cfi_ksys_read+0x10/0x10 [ 77.312947][ T1337] ? debug_smp_processor_id+0x17/0x20 [ 77.318360][ T1337] __x64_sys_read+0x7b/0x90 [ 77.322875][ T1337] x64_sys_call+0x2f/0x9a0 [ 77.327309][ T1337] do_syscall_64+0x4c/0xa0 [ 77.331750][ T1337] ? clear_bhb_loop+0x30/0x80 [ 77.336444][ T1337] ? clear_bhb_loop+0x30/0x80 [ 77.341162][ T1337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.347074][ T1337] RIP: 0033:0x7f02c915b78e [ 77.351484][ T1337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.371078][ T1337] RSP: 002b:00007f02ca092fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.379480][ T1337] RAX: ffffffffffffffda RBX: 00007f02ca0936c0 RCX: 00007f02c915b78e [ 77.387444][ T1337] RDX: 000000000000000f RSI: 00007f02ca0930a0 RDI: 0000000000000004 [ 77.395448][ T1337] RBP: 00007f02ca093090 R08: 0000000000000000 R09: 0000000000000000 [ 77.403445][ T1337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.411438][ T1337] R13: 00007f02c9416038 R14: 00007f02c9415fa0 R15: 00007ffd9b7c8c78 [ 77.419441][ T1337] [ 77.555260][ T1348] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 77.565906][ T1348] EXT4-fs (loop4): unable to read superblock [ 77.576780][ T341] Bluetooth: hci1: Frame reassembly failed (-84) [ 77.587361][ T341] Bluetooth: hci1: Frame reassembly failed (-84) [ 78.113987][ T314] usb 4-1: USB disconnect, device number 2 [ 78.233423][ T1354] FAULT_INJECTION: forcing a failure. [ 78.233423][ T1354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.246841][ T1354] CPU: 0 PID: 1354 Comm: syz.0.313 Not tainted syzkaller #0 [ 78.254159][ T1354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.264224][ T1354] Call Trace: [ 78.267513][ T1354] [ 78.270462][ T1354] __dump_stack+0x21/0x24 [ 78.274823][ T1354] dump_stack_lvl+0x110/0x170 [ 78.279537][ T1354] ? __cfi_dump_stack_lvl+0x8/0x8 [ 78.284581][ T1354] ? __sys_recvmsg_sock+0x50/0x50 [ 78.289612][ T1354] dump_stack+0x15/0x24 [ 78.293781][ T1354] should_fail_ex+0x3d4/0x520 [ 78.298482][ T1354] should_fail+0xb/0x10 [ 78.302650][ T1354] should_fail_usercopy+0x1a/0x20 [ 78.307696][ T1354] _copy_from_user+0x1e/0xc0 [ 78.312299][ T1354] ___sys_recvmsg+0x172/0x590 [ 78.316982][ T1354] ? __sys_recvmsg+0x280/0x280 [ 78.321754][ T1354] ? kstrtouint_from_user+0x113/0x170 [ 78.327133][ T1354] ? __fget_files+0x2d5/0x330 [ 78.331819][ T1354] ? __fdget+0x19c/0x220 [ 78.336067][ T1354] ? do_recvmmsg+0x1aa/0x840 [ 78.340669][ T1354] do_recvmmsg+0x393/0x840 [ 78.345096][ T1354] ? __sys_recvmmsg+0x290/0x290 [ 78.349953][ T1354] ? __cfi_mutex_unlock+0x10/0x10 [ 78.354982][ T1354] ? __kasan_check_write+0x14/0x20 [ 78.360096][ T1354] __x64_sys_recvmmsg+0x195/0x250 [ 78.365135][ T1354] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 78.370694][ T1354] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 78.376765][ T1354] x64_sys_call+0x3e7/0x9a0 [ 78.381272][ T1354] do_syscall_64+0x4c/0xa0 [ 78.385704][ T1354] ? clear_bhb_loop+0x30/0x80 [ 78.390381][ T1354] ? clear_bhb_loop+0x30/0x80 [ 78.395059][ T1354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.400961][ T1354] RIP: 0033:0x7f4eb8b9aeb9 [ 78.405369][ T1354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.424972][ T1354] RSP: 002b:00007f4eb99cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 78.433382][ T1354] RAX: ffffffffffffffda RBX: 00007f4eb8e15fa0 RCX: 00007f4eb8b9aeb9 [ 78.441350][ T1354] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 78.449316][ T1354] RBP: 00007f4eb99cb090 R08: 0000000000000000 R09: 0000000000000000 [ 78.457290][ T1354] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 78.465257][ T1354] R13: 00007f4eb8e16038 R14: 00007f4eb8e15fa0 R15: 00007ffef94593f8 [ 78.473226][ T1354] [ 78.476326][ T1355] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 80.741274][ T355] Bluetooth: hci0: command 0x1003 tx timeout [ 80.747426][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 80.754144][ T371] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.767156][ T1331] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 80.810985][ T1372] loop1: detected capacity change from 0 to 512 [ 80.820232][ T1373] loop4: detected capacity change from 0 to 256 [ 80.829290][ T1373] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 80.843989][ T1372] EXT4-fs: Ignoring removed bh option [ 80.921043][ T1372] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.932927][ T1372] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.988222][ T28] audit: type=1400 audit(1769850919.053:209): avc: denied { setopt } for pid=1370 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.016243][ T28] audit: type=1400 audit(1769850919.083:210): avc: denied { create } for pid=1375 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.356890][ T284] EXT4-fs (loop1): unmounting filesystem. [ 81.378243][ T1385] loop0: detected capacity change from 0 to 256 [ 81.438603][ T1385] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 81.985718][ T28] audit: type=1400 audit(1769850920.053:211): avc: denied { mounton } for pid=1403 comm="syz.2.327" path="/64/file0" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 82.313841][ T1361] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.503898][ T1361] usb 4-1: Using ep0 maxpacket: 16 [ 82.510775][ T1361] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.523636][ T1361] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 82.533158][ T1361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.541309][ T1361] usb 4-1: Product: syz [ 82.545883][ T1361] usb 4-1: Manufacturer: syz [ 82.550645][ T1361] usb 4-1: SerialNumber: syz [ 82.567580][ T1361] usb 4-1: config 0 descriptor?? [ 82.783884][ C1] ================================================================== [ 82.791993][ C1] BUG: KASAN: use-after-free in __run_timers+0x340/0x9f0 [ 82.799083][ C1] Write of size 8 at addr ffff8881139eca00 by task syz.1.328/1410 [ 82.806924][ C1] [ 82.809278][ C1] CPU: 1 PID: 1410 Comm: syz.1.328 Not tainted syzkaller #0 [ 82.816575][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.826655][ C1] Call Trace: [ 82.829951][ C1] [ 82.832806][ C1] __dump_stack+0x21/0x24 [ 82.837158][ C1] dump_stack_lvl+0x110/0x170 [ 82.841849][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 82.846867][ C1] ? __kasan_check_read+0x11/0x20 [ 82.851891][ C1] ? __run_timers+0x340/0x9f0 [ 82.856566][ C1] print_address_description+0x71/0x200 [ 82.862116][ C1] print_report+0x4a/0x60 [ 82.866463][ C1] kasan_report+0x122/0x150 [ 82.870977][ C1] ? __run_timers+0x340/0x9f0 [ 82.875662][ C1] __asan_report_store8_noabort+0x17/0x20 [ 82.881376][ C1] __run_timers+0x340/0x9f0 [ 82.885881][ C1] ? calc_index+0x200/0x200 [ 82.890379][ C1] ? __irq_exit_rcu+0x5e/0xf0 [ 82.895047][ C1] ? asm_sysvec_irq_work+0x1b/0x20 [ 82.900156][ C1] run_timer_softirq+0x6a/0xf0 [ 82.904915][ C1] handle_softirqs+0x1d7/0x600 [ 82.909674][ C1] ? irqtime_account_irq+0xc4/0x240 [ 82.914872][ C1] __irq_exit_rcu+0x52/0xf0 [ 82.919370][ C1] irq_exit_rcu+0x9/0x10 [ 82.923601][ C1] sysvec_call_function_single+0xa6/0xc0 [ 82.929224][ C1] [ 82.932147][ C1] [ 82.935075][ C1] asm_sysvec_call_function_single+0x1b/0x20 [ 82.941049][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 82.947463][ C1] Code: 00 d5 0d 87 e8 2c 43 b6 fc 4c 89 f7 48 83 3d 31 7e 0d 02 00 74 30 e8 9e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d6 4a 4c fc 65 8b 05 d7 16 02 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 82.967060][ C1] RSP: 0018:ffffc9000f6bf5a0 EFLAGS: 00000206 [ 82.973122][ C1] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 82.981085][ C1] RDX: ffffc9000eb87678 RSI: 0000000000000a06 RDI: 0000000000000001 [ 82.989043][ C1] RBP: ffffc9000f6bf5b0 R08: ffff88811396a887 R09: 1ffff1102272d510 [ 82.997014][ C1] R10: dffffc0000000000 R11: ffffed102272d511 R12: ffff888134cf6700 [ 83.004993][ C1] R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000000 [ 83.012967][ C1] __wake_up_sync_key+0x17b/0x2b0 [ 83.017994][ C1] ? __cfi___wake_up_sync_key+0x10/0x10 [ 83.023539][ C1] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 83.029167][ C1] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 83.034540][ C1] __unix_dgram_recvmsg+0x4c1/0xdc0 [ 83.039781][ C1] ? up_read+0x56/0x1d0 [ 83.043936][ C1] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 83.049654][ C1] ? exc_page_fault+0x5e/0xb0 [ 83.054321][ C1] unix_dgram_recvmsg+0xc7/0xe0 [ 83.059160][ C1] ? __cfi_unix_dgram_recvmsg+0x10/0x10 [ 83.064703][ C1] ____sys_recvmsg+0x2d9/0x5f0 [ 83.069495][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 83.074526][ C1] ? import_iovec+0x7c/0xb0 [ 83.079023][ C1] ___sys_recvmsg+0x212/0x590 [ 83.083689][ C1] ? __sys_recvmsg+0x280/0x280 [ 83.088443][ C1] ? cgroup_rstat_updated+0xf5/0x360 [ 83.093722][ C1] ? do_recvmmsg+0x35e/0x840 [ 83.098301][ C1] ? ___sys_recvmsg+0xc/0x590 [ 83.102972][ C1] do_recvmmsg+0x393/0x840 [ 83.107377][ C1] ? __sys_recvmmsg+0x290/0x290 [ 83.112212][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 83.117228][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 83.123107][ C1] ? __set_current_blocked+0x204/0x230 [ 83.128558][ C1] ? __fget_files+0x2d5/0x330 [ 83.133231][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 83.138248][ C1] ? __kasan_check_write+0x14/0x20 [ 83.143348][ C1] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 83.148880][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 83.154938][ C1] x64_sys_call+0x3e7/0x9a0 [ 83.159434][ C1] do_syscall_64+0x4c/0xa0 [ 83.163847][ C1] ? clear_bhb_loop+0x30/0x80 [ 83.168511][ C1] ? clear_bhb_loop+0x30/0x80 [ 83.173183][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.179062][ C1] RIP: 0033:0x7fa95b19aeb9 [ 83.183461][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.203048][ C1] RSP: 002b:00007fa95bf9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 83.211445][ C1] RAX: ffffffffffffffda RBX: 00007fa95b416090 RCX: 00007fa95b19aeb9 [ 83.219399][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 83.227360][ C1] RBP: 00007fa95b208c1f R08: 0000000000000000 R09: 0000000000000000 [ 83.235314][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 83.243269][ C1] R13: 00007fa95b416128 R14: 00007fa95b416090 R15: 00007ffdd0443c38 [ 83.251225][ C1] [ 83.254239][ C1] [ 83.256546][ C1] Allocated by task 1331: [ 83.260867][ C1] kasan_set_track+0x4b/0x70 [ 83.265447][ C1] kasan_save_alloc_info+0x25/0x30 [ 83.270549][ C1] __kasan_kmalloc+0x95/0xb0 [ 83.275122][ C1] __kmalloc+0xb1/0x1e0 [ 83.279261][ C1] hci_alloc_dev_priv+0x27/0x1bd0 [ 83.284278][ C1] hci_uart_tty_ioctl+0x3d6/0xa20 [ 83.289291][ C1] tty_ioctl+0x8ef/0xc60 [ 83.293516][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 83.298175][ C1] __x64_sys_ioctl+0x7b/0x90 [ 83.302766][ C1] x64_sys_call+0x58b/0x9a0 [ 83.307267][ C1] do_syscall_64+0x4c/0xa0 [ 83.311666][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.317556][ C1] [ 83.319875][ C1] Freed by task 1330: [ 83.323838][ C1] kasan_set_track+0x4b/0x70 [ 83.328415][ C1] kasan_save_free_info+0x31/0x50 [ 83.333432][ C1] ____kasan_slab_free+0x132/0x180 [ 83.338530][ C1] __kasan_slab_free+0x11/0x20 [ 83.343285][ C1] slab_free_freelist_hook+0xc2/0x190 [ 83.348661][ C1] __kmem_cache_free+0xb7/0x1b0 [ 83.353521][ C1] kfree+0x6f/0xf0 [ 83.357226][ C1] hci_release_dev+0x12a3/0x13b0 [ 83.362160][ C1] bt_host_release+0x82/0x90 [ 83.366747][ C1] device_release+0xa4/0x1d0 [ 83.371355][ C1] kobject_put+0x19d/0x280 [ 83.375763][ C1] put_device+0x1f/0x30 [ 83.379923][ C1] hci_free_dev+0x1c/0x20 [ 83.384243][ C1] hci_uart_tty_close+0x1a3/0x230 [ 83.389253][ C1] tty_ldisc_kill+0x10f/0x1f0 [ 83.393911][ C1] tty_ldisc_release+0x1a5/0x200 [ 83.398831][ C1] tty_release_struct+0x29/0xe0 [ 83.403667][ C1] tty_release+0xbfd/0x1210 [ 83.408152][ C1] __fput+0x1fc/0x8f0 [ 83.412138][ C1] ____fput+0x15/0x20 [ 83.416106][ C1] task_work_run+0x1e1/0x250 [ 83.420678][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 83.425862][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 83.431306][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 83.436747][ C1] do_syscall_64+0x58/0xa0 [ 83.441148][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.447029][ C1] [ 83.449346][ C1] Last potentially related work creation: [ 83.455048][ C1] kasan_save_stack+0x3a/0x60 [ 83.459710][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 83.465160][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 83.470957][ C1] insert_work+0x51/0x300 [ 83.475271][ C1] __queue_work+0x9b1/0xd30 [ 83.479779][ C1] queue_work_on+0xde/0x150 [ 83.484284][ C1] __hci_cmd_sync_sk+0xa7f/0xd30 [ 83.489223][ C1] hci_cmd_sync_status+0x53/0x120 [ 83.494251][ C1] hci_dev_cmd+0x648/0x740 [ 83.498655][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 83.503325][ C1] sock_do_ioctl+0x114/0x330 [ 83.507916][ C1] sock_ioctl+0x4ca/0x720 [ 83.512232][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 83.516894][ C1] __x64_sys_ioctl+0x7b/0x90 [ 83.521474][ C1] x64_sys_call+0x58b/0x9a0 [ 83.525995][ C1] do_syscall_64+0x4c/0xa0 [ 83.530402][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.536302][ C1] [ 83.538621][ C1] Second to last potentially related work creation: [ 83.545185][ C1] kasan_save_stack+0x3a/0x60 [ 83.549855][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 83.555218][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 83.561015][ C1] insert_work+0x51/0x300 [ 83.565330][ C1] __queue_work+0x9b1/0xd30 [ 83.569824][ C1] queue_work_on+0xde/0x150 [ 83.574325][ C1] hci_cmd_timeout+0x191/0x200 [ 83.579088][ C1] process_one_work+0x71f/0xc40 [ 83.583923][ C1] worker_thread+0xa29/0x11e0 [ 83.588583][ C1] kthread+0x281/0x320 [ 83.592636][ C1] ret_from_fork+0x1f/0x30 [ 83.597051][ C1] [ 83.599363][ C1] The buggy address belongs to the object at ffff8881139ec000 [ 83.599363][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 83.613400][ C1] The buggy address is located 2560 bytes inside of [ 83.613400][ C1] 8192-byte region [ffff8881139ec000, ffff8881139ee000) [ 83.626833][ C1] [ 83.629142][ C1] The buggy address belongs to the physical page: [ 83.635544][ C1] page:ffffea00044e7a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1139e8 [ 83.645763][ C1] head:ffffea00044e7a00 order:3 compound_mapcount:0 compound_pincount:0 [ 83.654069][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 83.660129][ C1] raw: 4000000000010200 ffffea00044b7200 dead000000000002 ffff888100043500 [ 83.668706][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 83.677355][ C1] page dumped because: kasan: bad access detected [ 83.683759][ C1] page_owner tracks the page as allocated [ 83.689452][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 369, tgid 368 (syz.0.9), ts 25256192608, free_ts 25001691650 [ 83.709483][ C1] post_alloc_hook+0x1f5/0x210 [ 83.714234][ C1] prep_new_page+0x1c/0x110 [ 83.718721][ C1] get_page_from_freelist+0x2d12/0x2d80 [ 83.724270][ C1] __alloc_pages+0x1d9/0x480 [ 83.728851][ C1] alloc_slab_page+0x6e/0xf0 [ 83.733429][ C1] new_slab+0x98/0x3d0 [ 83.737486][ C1] ___slab_alloc+0x6bd/0xb20 [ 83.742061][ C1] __slab_alloc+0x5e/0xa0 [ 83.746376][ C1] __kmem_cache_alloc_node+0x203/0x2c0 [ 83.751831][ C1] kmalloc_trace+0x29/0xb0 [ 83.756240][ C1] audit_log_d_path+0xc6/0x240 [ 83.760996][ C1] common_lsm_audit+0x926/0x1730 [ 83.765926][ C1] slow_avc_audit+0x1c4/0x240 [ 83.770591][ C1] avc_has_extended_perms+0x945/0xed0 [ 83.775947][ C1] ioctl_has_perm+0x3a6/0x4f0 [ 83.780612][ C1] selinux_file_ioctl+0x3a0/0x4d0 [ 83.785623][ C1] page last free stack trace: [ 83.790274][ C1] free_unref_page_prepare+0x742/0x750 [ 83.795722][ C1] free_unref_page+0x95/0x540 [ 83.800410][ C1] __free_pages+0x67/0x100 [ 83.804817][ C1] __free_slab+0xca/0x1a0 [ 83.809142][ C1] __unfreeze_partials+0x160/0x190 [ 83.814245][ C1] put_cpu_partial+0xa9/0x100 [ 83.818912][ C1] __slab_free+0x1c4/0x280 [ 83.823321][ C1] ___cache_free+0xbf/0xd0 [ 83.827730][ C1] qlist_free_all+0xc6/0x140 [ 83.832311][ C1] kasan_quarantine_reduce+0x14a/0x170 [ 83.837754][ C1] __kasan_slab_alloc+0x24/0x80 [ 83.842610][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 83.847710][ C1] kmem_cache_alloc+0x16e/0x330 [ 83.852551][ C1] getname_flags+0xb9/0x500 [ 83.857038][ C1] user_path_at_empty+0x30/0x1c0 [ 83.861981][ C1] do_readlinkat+0xd9/0x490 [ 83.866476][ C1] [ 83.868805][ C1] Memory state around the buggy address: [ 83.874419][ C1] ffff8881139ec900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.882462][ C1] ffff8881139ec980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.890514][ C1] >ffff8881139eca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.898560][ C1] ^ [ 83.902614][ C1] ffff8881139eca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.910657][ C1] ffff8881139ecb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.918726][ C1] ================================================================== [ 83.926773][ C1] Disabling lock debugging due to kernel taint [ 83.932996][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 83.944727][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 83.953174][ C1] CPU: 1 PID: 1410 Comm: syz.1.328 Tainted: G B syzkaller #0 [ 83.961955][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.972034][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 83.977340][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 18 47 29 00 4c 89 ff e8 10 31 b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 74 6e 00 49 8b 7d 00 e8 a3 2c [ 83.996954][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 84.003036][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88813560e540 [ 84.011005][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 84.018997][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 84.026965][ C1] R10: dffffc0000000000 R11: ffffed102273d939 R12: dffffc0000000000 [ 84.034936][ C1] R13: 0000000000000000 R14: ffff8881139ec9c8 R15: 0000000000000008 [ 84.042905][ C1] FS: 00007fa95bf9d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 84.051853][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.058458][ C1] CR2: 00002000001ba030 CR3: 00000001102fb000 CR4: 00000000003506a0 [ 84.066435][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.074416][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.082388][ C1] Call Trace: [ 84.085663][ C1] [ 84.088514][ C1] delayed_work_timer_fn+0x61/0x80 [ 84.093636][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 84.099443][ C1] call_timer_fn+0x46/0x2a0 [ 84.103947][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 84.109754][ C1] __run_timers+0x689/0x9f0 [ 84.114267][ C1] ? calc_index+0x200/0x200 [ 84.118778][ C1] ? __irq_exit_rcu+0x5e/0xf0 [ 84.123460][ C1] ? asm_sysvec_irq_work+0x1b/0x20 [ 84.128579][ C1] run_timer_softirq+0x6a/0xf0 [ 84.133349][ C1] handle_softirqs+0x1d7/0x600 [ 84.138117][ C1] ? irqtime_account_irq+0xc4/0x240 [ 84.143322][ C1] __irq_exit_rcu+0x52/0xf0 [ 84.147825][ C1] irq_exit_rcu+0x9/0x10 [ 84.152092][ C1] sysvec_call_function_single+0xa6/0xc0 [ 84.157724][ C1] [ 84.160660][ C1] [ 84.163613][ C1] asm_sysvec_call_function_single+0x1b/0x20 [ 84.169597][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 84.176030][ C1] Code: 00 d5 0d 87 e8 2c 43 b6 fc 4c 89 f7 48 83 3d 31 7e 0d 02 00 74 30 e8 9e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d6 4a 4c fc 65 8b 05 d7 16 02 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 84.195632][ C1] RSP: 0018:ffffc9000f6bf5a0 EFLAGS: 00000206 [ 84.201701][ C1] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 84.209676][ C1] RDX: ffffc9000eb87678 RSI: 0000000000000a06 RDI: 0000000000000001 [ 84.217644][ C1] RBP: ffffc9000f6bf5b0 R08: ffff88811396a887 R09: 1ffff1102272d510 [ 84.225619][ C1] R10: dffffc0000000000 R11: ffffed102272d511 R12: ffff888134cf6700 [ 84.233610][ C1] R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000000 [ 84.241585][ C1] __wake_up_sync_key+0x17b/0x2b0 [ 84.246614][ C1] ? __cfi___wake_up_sync_key+0x10/0x10 [ 84.252172][ C1] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 84.257807][ C1] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 84.263190][ C1] __unix_dgram_recvmsg+0x4c1/0xdc0 [ 84.268393][ C1] ? up_read+0x56/0x1d0 [ 84.272559][ C1] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 84.278283][ C1] ? exc_page_fault+0x5e/0xb0 [ 84.282960][ C1] unix_dgram_recvmsg+0xc7/0xe0 [ 84.287809][ C1] ? __cfi_unix_dgram_recvmsg+0x10/0x10 [ 84.293355][ C1] ____sys_recvmsg+0x2d9/0x5f0 [ 84.298125][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 84.303154][ C1] ? import_iovec+0x7c/0xb0 [ 84.307661][ C1] ___sys_recvmsg+0x212/0x590 [ 84.312345][ C1] ? __sys_recvmsg+0x280/0x280 [ 84.317116][ C1] ? cgroup_rstat_updated+0xf5/0x360 [ 84.322404][ C1] ? do_recvmmsg+0x35e/0x840 [ 84.326995][ C1] ? ___sys_recvmsg+0xc/0x590 [ 84.331676][ C1] do_recvmmsg+0x393/0x840 [ 84.336103][ C1] ? __sys_recvmmsg+0x290/0x290 [ 84.340959][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 84.346009][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 84.351909][ C1] ? __set_current_blocked+0x204/0x230 [ 84.357477][ C1] ? __fget_files+0x2d5/0x330 [ 84.362177][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 84.367225][ C1] ? __kasan_check_write+0x14/0x20 [ 84.372369][ C1] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 84.377937][ C1] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 84.384022][ C1] x64_sys_call+0x3e7/0x9a0 [ 84.388533][ C1] do_syscall_64+0x4c/0xa0 [ 84.392971][ C1] ? clear_bhb_loop+0x30/0x80 [ 84.397655][ C1] ? clear_bhb_loop+0x30/0x80 [ 84.402337][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.408243][ C1] RIP: 0033:0x7fa95b19aeb9 [ 84.412659][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.432263][ C1] RSP: 002b:00007fa95bf9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 84.440675][ C1] RAX: ffffffffffffffda RBX: 00007fa95b416090 RCX: 00007fa95b19aeb9 [ 84.448646][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 84.456623][ C1] RBP: 00007fa95b208c1f R08: 0000000000000000 R09: 0000000000000000 [ 84.464608][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 84.472577][ C1] R13: 00007fa95b416128 R14: 00007fa95b416090 R15: 00007ffdd0443c38 [ 84.480550][ C1] [ 84.483574][ C1] Modules linked in: [ 84.487474][ C1] ---[ end trace 0000000000000000 ]--- [ 84.492923][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 84.498214][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 18 47 29 00 4c 89 ff e8 10 31 b8 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 74 6e 00 49 8b 7d 00 e8 a3 2c [ 84.517830][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 84.523916][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88813560e540 [ 84.531901][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 84.539873][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 84.547848][ C1] R10: dffffc0000000000 R11: ffffed102273d939 R12: dffffc0000000000 [ 84.555822][ C1] R13: 0000000000000000 R14: ffff8881139ec9c8 R15: 0000000000000008 [ 84.563796][ C1] FS: 00007fa95bf9d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 84.572725][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.579307][ C1] CR2: 00002000001ba030 CR3: 00000001102fb000 CR4: 00000000003506a0 [ 84.587295][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.595276][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.603252][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 84.610988][ C1] Kernel Offset: disabled [ 84.615307][ C1] Rebooting in 86400 seconds..