last executing test programs: 4m36.835501393s ago: executing program 0 (id=1957): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3}, {0x7d}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d6, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, {{@in=@remote, 0xffffffff, 0x33}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x10}, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010000000006000000000a0000000e0003006269746d61ca0369e65db244703a697000000005000400000000000900020073797a30000000001800078005000300230000000c000180080001400a010102050005000200000005"], 0x60}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001214200025bd7000fbdbdf2508004b001300000008001fab6b366249d84bc3c59c9f4b0013080000000200000008004b001300ea0008004f0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000044010500ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000"], 0x1fc}}, 0x0) 4m36.834790883s ago: executing program 0 (id=1958): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x11, 0x25b4e59c81b60c2e, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e20, 0xe25, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x3}}}}}}}, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a310000000005000500020000000500010006000000"], 0x48}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 4m36.489937613s ago: executing program 0 (id=1962): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) unshare(0x2e000200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4000, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000, 0x4000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x1, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x80000}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {0x4000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x1, 0xfffffffc, 0x200}, {0x5, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x5, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x100000, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r3, r3, 0x0, 0x800000009) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100037040400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700fc0200000000000000000000000000000400120008000100", @ANYRES32=r4, @ANYBLOB="f425d192532c3588fb45c19edf0c55eb70ac34942962ea6131f3f12142ab94fa0147fd97c7ede81afd3a9b9efff44285b9f7a49061282f8bee03928bd018461fe28ee84ac3208dce06e01d7d88b211c307d1a6b2bcba8bf4e9a3a7bdcb41a28d0b166200fd93b4ca2c0b96f97000000000000000a59d57f5cd819feea1cd7165499a9e0aa22603"], 0x6c}}, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4m36.298805534s ago: executing program 0 (id=1964): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r0, 0x0, 0x840) 4m36.251682717s ago: executing program 0 (id=1965): r0 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x40003, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xc62a}}) keyctl$set_timeout(0xf, 0x0, 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r3) io_uring_enter(r0, 0xdb4, 0xd44a, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0xfffffffffffffffe, r0, 0x33, {0x5, 0x10001}, 0x6}, 0x1) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000400), 0x0, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(r5, 0x40603d07, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0xf) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x97) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000240)='./file0\x00', 0x800000, 0xc4) fchdir(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x2, 0x4) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000380)={'\x00', 0xfff1, 0x4, 0x5c4, 0x4a6, 0x3, 0x0}) write$cgroup_pid(r6, &(0x7f0000000100)=r7, 0x12) 4m35.833722641s ago: executing program 0 (id=1968): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x80040) socket$netlink(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x240000000000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c02002c00"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lstat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r0, 0x81fe) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 4m35.772967955s ago: executing program 32 (id=1968): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x80040) socket$netlink(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x240000000000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lstat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r0, 0x81fe) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 1m49.484971206s ago: executing program 5 (id=3461): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x1e, 0x2, 0x5) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x6025, 0x4005, 0xb, 0x6, 0x1, 0xfffffffd, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x9, 0x6d05, 0x6}) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x0, 0x9, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62cee", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], &(0x7f0000000380), 0x0, 0x2}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x4590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'pimreg1\x00', {}, 0x5}) 1m49.372484163s ago: executing program 5 (id=3463): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000010000000000a247c22218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70a0000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500004086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x4}, 0x94) 1m49.24739937s ago: executing program 5 (id=3466): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) r5 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x8044, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0xd4, 0x2}, 0x100, 0x32, 0x1, 0x5, 0x8, 0x9b9b, 0x6fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b0007"], 0x50}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/uts\x00') ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32, @ANYBLOB="003000000000000014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x2, 0x1}, 0x8}, 0x94) openat$snapshot(0xffffffffffffff9c, 0x0, 0x20001, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) close_range(r3, 0xffffffffffffffff, 0x200000000000000) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') ioctl$NS_GET_PARENT(r8, 0x8004b709, 0x0) 1m49.199731973s ago: executing program 5 (id=3467): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sync() r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000680)={0x7, 0x7fffffffffffffff, 0x80, 0x2, 0xfffffffffffffffb, 0xca, 0x3}, 0x0, &(0x7f0000000700)={0xf, 0x8, 0x40, 0x5, 0xffffffffffffffff, 0xac, 0xed6f, 0xe21}, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) r2 = socket$kcm(0x2b, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000b5002471083ec6991778581acb6bfe01ff0000000309", 0x48}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = request_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='key_or_keyring:', r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) faccessat(0xffffffffffffffff, 0x0, 0x5) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) r9 = getegid() keyctl$chown(0x4, r5, r8, r9) ioctl(r2, 0xb, &(0x7f0000000080)="5957c5f2b105a064ee8e2ef90ecf9a52a88cc2ef7821f6057324ab6e47b6d506c43086db6a7881eddf73b5e5fc5763534977d1b7f8e18e05b6316d") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000300)={0x2f, @empty, 0x4e24, 0x4, 'nq\x00', 0x12, 0x9, 0x75}, 0x2c) 1m48.339633544s ago: executing program 5 (id=3482): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044) 1m48.195944102s ago: executing program 5 (id=3484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x5, @mcast1, 0x8eeb}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_procfs(0x0, 0x0) symlink(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x3f, 0x0, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="000001000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="1a0000000300000000000200004000001811e8035278bf0000000000000092014d2600000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000070000009500"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x1a0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @remote, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r6 = socket$kcm(0x10, 0x2, 0x0) mount(&(0x7f0000000880)=@rnullb, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000009c0)='bfs\x00', 0x100002, &(0x7f0000000a00)='%pS \x00') sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e79917b6fbc5d0000002e88ba2f3e328f9eac532bd00000810804fb7fec59d4096dcd295d", 0x25}, {&(0x7f00000000c0)="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", 0x14f}, {&(0x7f0000000240)="b3a5c0efef65554993a03ff4f9afb7bd0f61cdd9661c2b30ec3ca638b7bdb100f91756ec0a0c4e5d3e5c56dcc3be2a8d6d4d933b32a373913a042d37d521489791b5a88aaa38561f06b9bb09678db5ba101402f1", 0x54}], 0x3}, 0x4000) 1m48.018442422s ago: executing program 33 (id=3484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x5, @mcast1, 0x8eeb}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$eJzs3T1oO2UcB/DfXZJ/34JWBRHFFxARLZS6CSLoolAQKSKCChURJ2mFanFrnFwcdFbp5FLEzeooLsVF6Fq1Q0UQsThYHHSIXC6RmCZaL82l/+TzgfTuubsnv0vJ97mH0lwCmFqLEfFYRFQiYikiahGRdB9wT/5YbDd35w7WI5rNZ35NWsfl7Vyn30JENCLi4YhqZ9/2/gsnvx89ef+7b9bu+3j/+bkSXlqld8PpyfFTZx89/c5nqw9tp+1t9fay+3Vcottv7LOxmkTcPIJiV0VSHfcZcBFrb336bRaSWyLi3lb+a5G2I/ve1rWvavHgh4P6vv/L4R1lnitw+ZrNWnYNbDSBqZO25sBJuhwR+XqaLi/nc/jvKvPpa5tbbyy9ulnZeKV71Chj+g6MSj3i+IkvZj5f6Mn/T5U8/8DkyvL/7Nre99n62bm/lAET6c58keV/6aWdB0L+YerIP0yG+QJ95B8mQr1gJ/mH613B7BbI/60/Hj5arBhwpVww/z+XeU5AOcz/YYLVOiuNvrvlH6bXhfPvX31h4nTy79IP06f7+g8ATJfmzLg/gQyMy7jHHwAAAAAAAAAAAAAAAAAA4LzduYP1ziMiKaXm1x9EnD4eEdXe+tH6YoO0tZxt/Zz/LckO+1uSd2u7Vqj+i3cPc/bD+2T0n76u9rRnuxs3/DDy+v/qm7tG87xv/7M58A6WOxsRjezglWr1/Psvab//irvpP/bXXh6ywP/Um+pHniuj6uDf4p97ZdQfbPUo4sts/FnpN/6kcVtr2X/8qXffYrmg1/8Y8gkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAozV8BAAD///BWbAI=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_procfs(0x0, 0x0) symlink(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x3f, 0x0, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="000001000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="1a0000000300000000000200004000001811e8035278bf0000000000000092014d2600000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000070000009500"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x1a0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @remote, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r6 = socket$kcm(0x10, 0x2, 0x0) mount(&(0x7f0000000880)=@rnullb, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000009c0)='bfs\x00', 0x100002, &(0x7f0000000a00)='%pS \x00') sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e79917b6fbc5d0000002e88ba2f3e328f9eac532bd00000810804fb7fec59d4096dcd295d", 0x25}, {&(0x7f00000000c0)="f6e14ee68a941888e6364c1ea67689229c02c7f9ffc03e01fb1dc2459a38f6b30beef3517638db3247127c4295c27a19d343432dca560ee77ab66b952fc38834ea3793105cfc015d3f4587705b28ea3de1d1b2dc1c1b42cc49980230202992698768be2e4ae8d51a4b19c6551e6df91cf5d874bcaaf86c631085919d7773d949acfb4ba6ac722c1382190050cd299e4de7ba71e7170f253ed7fcfef313eef553d9c7f5d121658664e882d42f2a0a0012b235a0e15c7d0e19f7cd464bf90ab0cde7ee96684f0645b15e363d8d445515467996b5a519cbd4577513e69e4046e72d6b195ac7fc2495aa41ba7de01e2ba466d2f87f8572a354e7d41ac0ca2ac29f4171a0670748c6e6c39ec365c470503b4df443df1e80e82887524a8bf1fcfeb8ace8fcf4e3e97ae4ba4a96311f777a7ba8515487768e75e09825c1eb0c2f1e5b7912e63c553dcd1722c5639033218966", 0x14f}, {&(0x7f0000000240)="b3a5c0efef65554993a03ff4f9afb7bd0f61cdd9661c2b30ec3ca638b7bdb100f91756ec0a0c4e5d3e5c56dcc3be2a8d6d4d933b32a373913a042d37d521489791b5a88aaa38561f06b9bb09678db5ba101402f1", 0x54}], 0x3}, 0x4000) 16.223278677s ago: executing program 2 (id=5075): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x28, r0, 0xcf400542d4f8196d, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4020000}, 0x44050) 16.203402738s ago: executing program 2 (id=5079): r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000140)="26eba9fdb4cbab48929e1af151000000000000000000000000000100", 0x1c}], 0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}]}, 0x30}}, 0x20000000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, 0x0, 0x41000) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) 15.937780283s ago: executing program 2 (id=5083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x2, 0x5}, {0x6, 0xa}], r5}, 0x18, 0x3) ioprio_get$uid(0x3, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) 15.754215314s ago: executing program 2 (id=5093): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setaffinity(0x0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000240)={0x0, "ee5850cbe0600e743f062e17346abbb3726213e32115fd1bc3acccaca72cef7cfeded5bad33019336c107184b7a85f72f5508ac62c9fb8096bf111e5742dcd12", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$reject(0x13, r1, 0x40, 0x6, r1) fcntl$lock(r0, 0x5, &(0x7f0000000100)={0x2, 0x2, 0x73f, 0x800000000000000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000140), 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 15.669649299s ago: executing program 2 (id=5094): unshare(0x26020480) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) unshare(0x20080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@inlinecrypt}]}, 0x1, 0x518, &(0x7f0000000c40)="$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") ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000001, 0x1010, r1, 0x100000001) creat(&(0x7f0000000000)='./file1\x00', 0x14c) lchown(&(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082104, 0x0) 15.46995674s ago: executing program 2 (id=5097): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@data_writeback}, {@errors_continue}]}, 0x0, 0x45d, &(0x7f0000000ac0)="$eJzs3M1vFOUfAPDvzLaFH2/tD/EFRG1CDI0vLS2oHLxoNPGA0UQPeKzbQggLNbQmQohUY/BiYoh6Nh5N/Ce8GPVk4lXvhoQoF9BTzczOwHbZLSxddiv7+SQDz7PzdJ/n22eemWfm2W0AA2s8+yeJ2BYRv0XEaD27usB4/b/rV89X/756vprEyspbfyZ5uWtXz1fLouXPbS0yE2lE+klSVLLa4tlzJ2drtfkzRX5q6dR7U4tnzz174tTs8fnj86dnDh8+dHD6hednnutKnFlc1/Z8uLB392vvXHq9evTSuz99l7V3W7G/MY5uGc8C/2sl17zvyW5X1mfbG9LJUB8bQkcqEZF113A+/kejEjc7bzRe/bivjQPuqezatKn97uUV4D6WRL9bAPRHeaHP7n/LrUdTjw3hykv1G6As7uvFVt8zFGlRZrjp/rabxiPi6PI/X2db3KPnEAAAjT6rfnUknmk1/0vjoYZyO4o1lLGI+H9E7IyIByJiV0Q8GJGXfTgiHumw/ualoVvnP+nluwrsDmXzvxeLta3V879y9hdjlSK3PY9/ODl2ojZ/oPidTMTwpiw/vUYd37/y6+ft9jXO/7Itq7+cCxbtuDzU9IBubnZpNp+UdsGVjyL2DLWKP7mxEpBExO6I2NPZW+8oEyee+nZvu0K3j38NXVhnWvkmYn+9/5ejKf5Ssvb65NTmqM0fmCqPilv9/MvFN9vVv674uyDr/y2rj//mImNJ43rtYud1XPz907b3NHd7/I8kb+fno7KjPphdWjozHTGSHMlfHCnK5q/P3PzZMl+Wz+Kf2Nd6/O+MmxU8GhHZQfxYRDweEU8UbS+Pkn1rxP/jy+33bYT+n2t5/rtx/Df1f+eJyskfYnOb+u+s/w/lqYnilfz8dxt32sB1/fIAAADgPyLNPwOfpJM30mk6OVn/DP+u2JLWFhaXnj628P7pufpn5cdiOC2fdI02PA+dTpaLd6znZ4pnxeX+g8Vz4y8r/8vzk9WF2lyfY4dBt7XN+M/8Uel364B7rtU62sxIHxoC9Fzz+E9XZy+80cvGAD3l+9owuG4z/tNetQPoPdd/GFytxv+Fpry1ALg/uf7D4DL+YXAZ/zC4jH8YSOv5Xv8gJco/krpR2tP/RKQbohmdJcor3UZpT/cT+7+oR7juN+znWQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB7/g0AAP//0TLrKA==") syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), 0x0, 0x2000000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000040)=0x1ff, 0x4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x42) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) 2.776720987s ago: executing program 4 (id=5290): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x8, 0x9, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) dup3(r3, 0xffffffffffffffff, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000002cbd7000fcdbdf2502000800080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000004d3f600070c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 2.703447751s ago: executing program 4 (id=5292): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000001404000000ffffffdc04000040000000b704000010000020620700fe00000000850000002f000000b70000000a00000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r2) r4 = dup3(r1, 0xffffffffffffffff, 0x80000) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1402, 0x12, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x24040011) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r3, 0x333, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 2.646868624s ago: executing program 4 (id=5294): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x20, 0x2000, 0x8000) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x4, 0x5, 0x12, 0x2}]}) migrate_pages(0x0, 0xb, 0x0, &(0x7f0000005080)=0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000240)) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x7f, 0x7}) fcntl$lock(r1, 0x80f41c35309e8c5d, &(0x7f00000000c0)={0x0, 0x0, 0x543117df, 0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_config_ext={0x7f, 0x8001}, 0x100ba8, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x7, 0x0) socket$packet(0x11, 0x3, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000380), 0x7, 0x8382) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="ac1414aaac1414bb0000000009000000aca9154c1193cbd9260101007f000001e00000020a010100e003000000000000001414bb"], 0x34) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x377cf) 2.605622426s ago: executing program 4 (id=5295): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x20000000) 2.513755422s ago: executing program 4 (id=5297): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x412502, 0x48) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='b 7:', @ANYRESDEC=0x0], 0x8) prlimit64(0x0, 0x2, &(0x7f00000007c0)={0xfd, 0x88}, 0x0) r1 = getpgid(0xffffffffffffffff) sched_setscheduler(r1, 0x3, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x51d, &(0x7f0000000240)="$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") r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd73, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x424}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xc929, 0x30202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x20, 0x0, 0xa1e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000100)) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000300)) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) unshare(0x8040480) fadvise64(0xffffffffffffffff, 0x2, 0x20000, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f00000008c0)=""/23) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) socket$inet6(0xa, 0x1, 0x0) 2.401242449s ago: executing program 6 (id=5303): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0xa5456c2fe1cd7aeb, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (rerun: 64) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x2}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000100}, 0x802) setresuid(0xee00, 0xee00, 0x0) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) (async) faccessat(0xffffffffffffffff, 0x0, 0x5) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="1a82e69138"], 0x8) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'phy1\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}}, 0x24040040) 2.322526263s ago: executing program 6 (id=5306): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20005e, &(0x7f0000000300)={[{@abort}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@resgid}, {@nolazytime}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@data_journal}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x476, &(0x7f0000000700)="$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") r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, 0x0, 0x0, 0x9040, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r2}, 0x4) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x58001, 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) 2.20147479s ago: executing program 1 (id=5309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000080)={0x18, 0x1, 0x2, 0x3, 0x2c000000, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 2.104462226s ago: executing program 1 (id=5310): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000040)='./file0\x00', 0x14507e, 0x30) io_setup(0x7d, &(0x7f0000000180)=0x0) socket(0x27, 0x1, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r0}]) 2.000196912s ago: executing program 1 (id=5311): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000400)=ANY=[], 0x10040) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="aefdda9d240300005a66000000000000000000bbee07cb010052f436dd2a0000000000bd000000000000", 0x2a}, {&(0x7f0000000080)='D.', 0x2}], 0x2) 1.911755168s ago: executing program 1 (id=5312): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x7045, &(0x7f0000000100)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, r4}}) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 1.481810753s ago: executing program 6 (id=5314): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004a00)=ANY=[], 0x438}, 0x0, 0x12f4c4729364eade, 0x1}) io_uring_enter(r1, 0x3516, 0xa00100, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2, 0x0, 0x0, 0x3b}, {0x0, 0xfffffffffffffffe, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x28, 0x14, 0x9, 0x3, 0x25dfdbff, {0x5}, [@typed={0x11, 0x1, 0x0, 0x0, @str='/dev/rnullb0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x26) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000080)) 1.427328646s ago: executing program 6 (id=5316): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4de, &(0x7f0000000a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x34) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r1) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0xa3a743e7de85212) lseek(r0, 0xfffffffffffffffc, 0x2) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x42000020) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0xe2fd2000) finit_module(r3, &(0x7f0000000080)='ext4\x00', 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents(r0, 0x0, 0x54) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) 1.259569396s ago: executing program 3 (id=5319): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711816000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xeff, 0x7, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x17, 0x8002) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r4, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x1f, 0x1, 0x4, r3, &(0x7f0000000280)='a', 0x1, 0x5}]) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x5c0, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.19112473s ago: executing program 1 (id=5320): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file2\x00', 0xa04416, &(0x7f0000000500)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db9d6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c0fc56d5161ae3c622a649f9f85781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ee6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb0687020daf57ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e39445634147700565f4cab17c0e618b4a3d4bea681cf45b9a75a65260c3f", @ANYRES32, @ANYRES32], 0xff, 0x2be, &(0x7f00000001c0)="$eJzs3E1rE1sYwPEnmTST9tKX1YV7Nz7oRjdDjUsVGqUFMaCkHVEXwpRONSQmZSZoIoJZu+rnKC7dCeIX6N4P4K4I0lVXjjSZTCcxfQs1qen/B2XOOc85M2fmtPCcwszO482XpXXfWndqksyoJEWasicyJ0XpSITHdKucjtrldlaacm3+1e775SdP7+fy+cWC6lJu5UZWVWcufX799sPlL7V/Hn2cMU3Znnu28yP7bfvf7f92fq68KPpa9LVSramjq9VqzVktu7pW9EuW6sOy6/iuFiu+63XF18vVjY2GOpW16akNz/V9dSoNTUpDa1XNhLOqqGVZOj21X87IBZI+9Qh7q1Bwcn1DF+rJjTfPyzmGiEz+tqb21mhmBAAARunw/D8Z9enk/8ne/F/kmPz/Xdhr5tPA+X9C+uf/hkT5f8lt5f81r6HOc6cYz/9xJHuhUHAmDuoLJxqV/HMTwqASzVjlTlfI83KT/QeR/wMAAAAAAAAAAAAAAAAAAAAA8DfYC4LZIAhm949JEQnCuikiRqzeZyhviI+B+PoHsR8zXOAj1h9jIPbiXkbke7Nu1+1E69iOL93LL85rS+zFv9163Tai+PV2XLvjEzIVxrN942m5eqUd34/dfZCPxzfr9qSs9czV6Ko1z/IxAAAAAAAw1iyNzEWNGYn295alpvTGW/v3ViElIp3/D/Ts71Pyf2qINwIAAAAAAA7lN96UnHLZ9YZTMIZ4rYELIoMNvxmYZzINQ0RiLWa4VPE+hWWR05w5JUf1Scuxt6wnupYpbme2w124r7mBh2fOyW/dCQu3zuyEQUKk3dL5AnTPXwEAAACA8XKwHxj1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLiG8emyUd8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcF78CgAA//8fCrEr") socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000014000000110001000000000000000022"], 0x74}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@acl}]}, 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000000), &(0x7f00000002c0)="ff7f000000000000000000004406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x80, 0x5, 0x54, @local, @loopback, 0x20, 0x7, 0x9, 0x6}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@newqdisc={0x24, 0x24, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff3}, {0x13, 0x10}, {0xa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x44) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r3 = syz_io_uring_setup(0x5cb, &(0x7f0000000300)={0x0, 0xb17f, 0x400, 0x4, 0x1000000}, &(0x7f0000000200)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 1.148191372s ago: executing program 34 (id=5097): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@data_writeback}, {@errors_continue}]}, 0x0, 0x45d, &(0x7f0000000ac0)="$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") syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), 0x0, 0x2000000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000040)=0x1ff, 0x4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x42) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) 1.119266794s ago: executing program 3 (id=5322): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x1, 0x70bd26, 0x1000000, {{@in6=@rand_addr=' \x01\x00', @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2c}, {@in6=@private1, 0x4, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, {0xfff, 0x800}, {0x10, 0x0, 0x2}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x26}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e21, @in=@local}}]}, 0x154}}, 0x0) 907.535346ms ago: executing program 3 (id=5323): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0xb41}, 0x120, 0x10000, 0x33f8, 0x3, 0xd2, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x991}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x7, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r2, &(0x7f0000000180), 0x0, 0x840, 0x0, 0x0) 907.336907ms ago: executing program 3 (id=5324): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000100)=[{0x14, 0x0, [0x7ff, 0x10001, 0x7, 0x100, 0x9, 0x6, 0x6, 0x1, 0xfe55, 0x5b, 0x10001, 0x800, 0x233a, 0x8, 0x6, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) 521.072929ms ago: executing program 6 (id=5325): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x8, 0x9, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) dup3(r3, 0xffffffffffffffff, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000002cbd7000fcdbdf2502000800080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000004d3f600070c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 518.327789ms ago: executing program 3 (id=5326): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0xfffffffc) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x2404c081) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000300)={'\x00', 0xd488, 0x2, 0x4, 0x200, 0xde2e, r6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r9 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r3}, &(0x7f0000000940), &(0x7f00000009c0)=r0}, 0x20) close(0x3) 5.17544ms ago: executing program 6 (id=5327): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0xb32, 0x8, 0x9, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) unshare(0x22020600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x1a) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x18, r7, 0x1, 0x81}, 0x14) sendmmsg(r5, &(0x7f000000c340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810) setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) sendmsg$nl_route_sched(r10, 0xffffffffffffffff, 0x4004) setns(r9, 0x24020000) unshare(0x28020480) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_clone(0x10800, 0x0, 0x0, 0x0, 0x0, 0x0) 1.65902ms ago: executing program 1 (id=5328): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r2 = syz_clone(0x100, &(0x7f0000000180)="17b52c7adaffc360fcd0d2552ff6d78717e481e99e18f3163ebd6c14f0e840d251a422306c40a5ebd0b3287b6124ff932a6732ab2c709444942874ae676f90d60f69c9f1ecb0bbd41817db4e9a2206e3dabd8fcff572976219c817ff51327c6a5d4111788a437336bcba068aeb172ade3f63375b9950e5323b4a72b173304647bdc06b4b6928d884192d7a6396d348525eb494e2d9f179191b5dc4a5a4834cbdb63ed207807d79419acbfe6b1420", 0xae, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280)="743002196dc3b155d442fdb91039cf3c80ab778fec5ed85a7b0467d7e5785521a4dafb3cfe8a32a5de97e065de0f85a0e4765f809b1efc81002b1127b5f95f73b24d23bd076ad1fb45cea82b45ac10cc5058804c73e3d4763d292ca5bb3575be91e1d91ff2d54828494cfbf0601091c2474e40e117b8a224a708bf6e98ef0c924493f0b156280fe5b82a7096a77025c8e0e5c9322572c4fcf411ae7724918485ac1335b5c5b6d6363e9064b647aa377400411ff10e25") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x8}, {}, {0xfff3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\t\x00\n\x00', @ANYRES32=r4, @ANYRES32, @ANYBLOB="080003"], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x61, 0x3, 0xff, 0x9, 0x0, 0x100000001, 0x10020, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x4100, 0x1, 0x151d39d0, 0x0, 0xf, 0x1, 0x8, 0x0, 0x9, 0x0, 0x3}, r2, 0x9, r1, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x80) 461.22µs ago: executing program 3 (id=5329): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0}}, 0x20000000) 0s ago: executing program 4 (id=5330): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x7045, &(0x7f0000000100)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, r4}}) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 361.769402][T16665] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 361.777101][T16665] vhci_hcd vhci_hcd.0: Device attached [ 361.783563][T16666] sctp: [Deprecated]: syz.2.4286 (pid 16666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.783563][T16666] Use struct sctp_sack_info instead [ 361.800718][T16646] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(18) [ 361.807420][T16646] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.815056][T16646] vhci_hcd vhci_hcd.0: Device attached [ 361.823425][T16647] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.862667][T16651] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 361.869339][T16651] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.871348][T16646] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.877196][T16651] vhci_hcd vhci_hcd.0: Device attached [ 361.888755][ T1035] usb 9-1: new low-speed USB device number 3 using vhci_hcd [ 361.917250][T16665] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 361.924106][T16665] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.931726][T16665] vhci_hcd vhci_hcd.0: Device attached [ 361.959078][T16647] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.991749][T16651] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(18) [ 361.998577][T16651] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 362.006949][T16651] vhci_hcd vhci_hcd.0: Device attached [ 362.008959][T16665] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 362.046540][T16665] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 362.055293][T16660] vhci_hcd: connection closed [ 362.055418][T16654] vhci_hcd: connection closed [ 362.055733][T16652] vhci_hcd: connection closed [ 362.065045][T16658] vhci_hcd: connection closed [ 362.065150][T16669] vhci_hcd: connection closed [ 362.070153][T16648] vhci_hcd: connection closed [ 362.079205][T14730] vhci_hcd vhci_hcd.3: stop threads [ 362.089332][T14730] vhci_hcd vhci_hcd.3: release socket [ 362.094757][T14730] vhci_hcd vhci_hcd.3: disconnect device [ 362.113226][T14730] vhci_hcd vhci_hcd.3: stop threads [ 362.118524][T14730] vhci_hcd vhci_hcd.3: release socket [ 362.124097][T14730] vhci_hcd vhci_hcd.3: disconnect device [ 362.143578][T16651] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 362.152312][T14730] vhci_hcd vhci_hcd.3: stop threads [ 362.157647][T14730] vhci_hcd vhci_hcd.3: release socket [ 362.163089][T14730] vhci_hcd vhci_hcd.3: disconnect device [ 362.175884][T14730] vhci_hcd vhci_hcd.3: stop threads [ 362.181194][T14730] vhci_hcd vhci_hcd.3: release socket [ 362.186708][T14730] vhci_hcd vhci_hcd.3: disconnect device [ 362.203059][T14730] vhci_hcd vhci_hcd.3: stop threads [ 362.208381][T14730] vhci_hcd vhci_hcd.3: release socket [ 362.213892][T14730] vhci_hcd vhci_hcd.3: disconnect device [ 362.229636][T14730] vhci_hcd vhci_hcd.3: stop threads [ 362.234983][T14730] vhci_hcd vhci_hcd.3: release socket [ 362.240487][T14730] vhci_hcd vhci_hcd.3: disconnect device [ 362.247124][T16678] vhci_hcd: connection closed [ 362.247243][T16662] vhci_hcd: connection closed [ 362.247646][T16667] vhci_hcd: connection closed [ 362.252574][T16656] vhci_hcd: connection reset by peer [ 362.267928][T16671] vhci_hcd: connection closed [ 362.268033][T16675] vhci_hcd: connection closed [ 362.271198][T14730] vhci_hcd vhci_hcd.4: stop threads [ 362.282981][T14730] vhci_hcd vhci_hcd.4: release socket [ 362.288597][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 362.322738][T14730] vhci_hcd vhci_hcd.4: stop threads [ 362.328076][T14730] vhci_hcd vhci_hcd.4: release socket [ 362.333513][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 362.356395][T14730] vhci_hcd vhci_hcd.4: stop threads [ 362.361785][T14730] vhci_hcd vhci_hcd.4: release socket [ 362.367250][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 362.386612][T14730] vhci_hcd vhci_hcd.4: stop threads [ 362.391982][T14730] vhci_hcd vhci_hcd.4: release socket [ 362.397468][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 362.405801][T14730] vhci_hcd vhci_hcd.4: stop threads [ 362.411151][T14730] vhci_hcd vhci_hcd.4: release socket [ 362.416745][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 362.424623][T14730] vhci_hcd vhci_hcd.4: stop threads [ 362.429964][T14730] vhci_hcd vhci_hcd.4: release socket [ 362.435550][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 362.537916][T16692] netlink: 'syz.6.4293': attribute type 1 has an invalid length. [ 362.591664][T16694] lo speed is unknown, defaulting to 1000 [ 362.662637][T16695] lo speed is unknown, defaulting to 1000 [ 362.668786][T16694] lo speed is unknown, defaulting to 1000 [ 362.708184][T16706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4299'. [ 362.819071][T16695] lo speed is unknown, defaulting to 1000 [ 363.099382][ T3398] usb 7-1: enqueue for inactive port 0 [ 363.107167][ T3398] usb 7-1: enqueue for inactive port 0 [ 363.185508][ T3398] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 363.270377][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 363.270394][ T29] audit: type=1400 audit(1769649316.593:44787): avc: denied { create } for pid=16721 comm="syz.2.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 363.296530][ T29] audit: type=1400 audit(1769649316.593:44788): avc: denied { name_bind } for pid=16721 comm="syz.2.4305" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 363.318534][ T29] audit: type=1400 audit(1769649316.593:44789): avc: denied { open } for pid=16721 comm="syz.2.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 363.338259][ T29] audit: type=1400 audit(1769649316.593:44790): avc: denied { prog_load } for pid=16721 comm="syz.2.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 363.357635][ T29] audit: type=1400 audit(1769649316.593:44791): avc: denied { create } for pid=16721 comm="syz.2.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 363.378547][ T29] audit: type=1400 audit(1769649316.593:44792): avc: denied { create } for pid=16721 comm="syz.2.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 363.399364][ T29] audit: type=1400 audit(1769649316.593:44793): avc: denied { create } for pid=16721 comm="syz.2.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 363.486260][ T29] audit: type=1400 audit(1769649316.772:44794): avc: denied { read write } for pid=12396 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 363.511589][ T29] audit: type=1400 audit(1769649316.782:44795): avc: denied { name_bind } for pid=16725 comm="syz.4.4307" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 363.533543][ T29] audit: type=1400 audit(1769649316.782:44796): avc: denied { create } for pid=16725 comm="syz.4.4307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 364.297279][T16802] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 364.308721][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4336'. [ 365.019989][T16855] lo speed is unknown, defaulting to 1000 [ 365.059612][T16855] lo speed is unknown, defaulting to 1000 [ 365.420191][T16884] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4368'. [ 365.633453][T16892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=16892 comm=syz.1.4371 [ 365.657576][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4371'. [ 366.655869][T16926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16926 comm=syz.4.4384 [ 366.756237][ T1035] usb 9-1: enqueue for inactive port 0 [ 366.761997][ T1035] usb 9-1: enqueue for inactive port 0 [ 366.832184][ T1035] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 367.451753][T16979] lo speed is unknown, defaulting to 1000 [ 367.487957][T16979] lo speed is unknown, defaulting to 1000 [ 368.041857][T17013] lo speed is unknown, defaulting to 1000 [ 368.078559][T17013] lo speed is unknown, defaulting to 1000 [ 368.183305][ T29] kauditd_printk_skb: 671 callbacks suppressed [ 368.183325][ T29] audit: type=1400 audit(1769649577.770:45468): avc: denied { read write } for pid=12167 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 368.251396][ T29] audit: type=1400 audit(1769649577.801:45469): avc: denied { create } for pid=17016 comm="syz.3.4419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 368.272481][ T29] audit: type=1400 audit(1769649577.801:45470): avc: denied { map_create } for pid=17016 comm="syz.3.4419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 368.292994][ T29] audit: type=1400 audit(1769649577.801:45471): avc: denied { prog_load } for pid=17016 comm="syz.3.4419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 368.312625][ T29] audit: type=1400 audit(1769649577.812:45472): avc: denied { create } for pid=17016 comm="syz.3.4419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 368.332486][ T29] audit: type=1400 audit(1769649577.812:45473): avc: denied { create } for pid=17016 comm="syz.3.4419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 368.352255][ T29] audit: type=1400 audit(1769649577.832:45474): avc: denied { read write } for pid=14095 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 368.376665][ T29] audit: type=1400 audit(1769649577.832:45475): avc: denied { read write } for pid=12167 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 368.411804][ T29] audit: type=1400 audit(1769649577.990:45476): avc: denied { read } for pid=17018 comm="syz.3.4420" dev="nsfs" ino=4026532467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 368.433352][ T29] audit: type=1400 audit(1769649578.000:45477): avc: denied { read write } for pid=17018 comm="syz.3.4420" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 368.532377][T17026] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4423'. [ 368.571585][T17031] FAULT_INJECTION: forcing a failure. [ 368.571585][T17031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.585495][T17031] CPU: 0 UID: 0 PID: 17031 Comm: syz.2.4425 Not tainted syzkaller #0 PREEMPT(voluntary) [ 368.585535][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 368.585551][T17031] Call Trace: [ 368.585560][T17031] [ 368.585571][T17031] __dump_stack+0x1d/0x30 [ 368.585733][T17031] dump_stack_lvl+0x95/0xd0 [ 368.585764][T17031] dump_stack+0x15/0x1b [ 368.585792][T17031] should_fail_ex+0x263/0x280 [ 368.585834][T17031] should_fail+0xb/0x20 [ 368.585892][T17031] should_fail_usercopy+0x1a/0x20 [ 368.585927][T17031] _copy_from_iter+0xcf/0xea0 [ 368.585965][T17031] ? __alloc_skb+0x397/0x4b0 [ 368.586049][T17031] ? __alloc_skb+0x219/0x4b0 [ 368.586083][T17031] netlink_sendmsg+0x4ae/0x6f0 [ 368.586107][T17031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.586202][T17031] ____sys_sendmsg+0x5af/0x600 [ 368.586227][T17031] ___sys_sendmsg+0x195/0x1e0 [ 368.586325][T17031] __x64_sys_sendmsg+0xd4/0x160 [ 368.586350][T17031] x64_sys_call+0x17ba/0x3000 [ 368.586377][T17031] do_syscall_64+0xc0/0x2a0 [ 368.586450][T17031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.586474][T17031] RIP: 0033:0x7f716e89aeb9 [ 368.586492][T17031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.586512][T17031] RSP: 002b:00007f716d2f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.586543][T17031] RAX: ffffffffffffffda RBX: 00007f716eb15fa0 RCX: 00007f716e89aeb9 [ 368.586619][T17031] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 368.586633][T17031] RBP: 00007f716d2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 368.586647][T17031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.586661][T17031] R13: 00007f716eb16038 R14: 00007f716eb15fa0 R15: 00007ffec9ce3b98 [ 368.586682][T17031] [ 368.589366][T17033] netlink: 'syz.3.4426': attribute type 10 has an invalid length. [ 368.787589][T17026] ªªªªªª: renamed from vlan0 (while UP) [ 368.942228][T17053] lo speed is unknown, defaulting to 1000 [ 368.985642][T17053] lo speed is unknown, defaulting to 1000 [ 369.220033][T17067] erspan0: entered promiscuous mode [ 369.462664][T17089] ±ÿ: renamed from team_slave_1 [ 369.560849][T17098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.568555][T17098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.577855][T17098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.585433][T17098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.792688][T17113] lo speed is unknown, defaulting to 1000 [ 369.832564][T17113] lo speed is unknown, defaulting to 1000 [ 370.504411][T17171] lo speed is unknown, defaulting to 1000 [ 370.549364][T17171] lo speed is unknown, defaulting to 1000 [ 370.871494][ T3841] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 371.280971][T17190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4485'. [ 371.290027][T17190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4485'. [ 371.342980][T17192] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 371.382155][T17197] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4487'. [ 371.393344][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4487'. [ 371.481844][T17203] lo speed is unknown, defaulting to 1000 [ 371.618697][T17203] lo speed is unknown, defaulting to 1000 [ 371.721183][T17225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17225 comm=syz.1.4499 [ 371.766856][T17225] netlink: 'syz.1.4499': attribute type 9 has an invalid length. [ 371.896372][ T6783] Bluetooth: hci0: Frame reassembly failed (-84) [ 371.961069][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4501'. [ 372.644818][T17258] lo speed is unknown, defaulting to 1000 [ 372.729371][T17258] lo speed is unknown, defaulting to 1000 [ 372.947634][ T29] kauditd_printk_skb: 17921 callbacks suppressed [ 372.947656][ T29] audit: type=1400 audit(1769649838.761:62964): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 372.970050][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 372.975306][ T29] audit: type=1400 audit(1769649838.772:62965): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 372.981776][ T3039] audit: audit_lost=146 audit_rate_limit=0 audit_backlog_limit=64 [ 373.003092][ T29] audit: type=1400 audit(1769649838.772:62966): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 373.033920][ T3039] audit: backlog limit exceeded [ 373.036156][ T29] audit: type=1400 audit(1769649838.772:62967): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 373.043117][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 373.060090][ T29] audit: type=1400 audit(1769649838.772:62968): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 373.068312][ T3039] audit: audit_lost=147 audit_rate_limit=0 audit_backlog_limit=64 [ 373.254545][T17271] veth2: entered promiscuous mode [ 373.259679][T17271] veth2: entered allmulticast mode [ 373.495152][T17287] lo speed is unknown, defaulting to 1000 [ 373.596821][T17287] lo speed is unknown, defaulting to 1000 [ 373.667278][T17294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4526'. [ 373.844566][ T3841] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 374.026523][T17303] ªªªªªª: renamed from vlan0 [ 374.540344][T17326] lo speed is unknown, defaulting to 1000 [ 374.629508][T17326] lo speed is unknown, defaulting to 1000 [ 374.670251][T17339] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 374.676828][T17339] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 374.684393][T17339] vhci_hcd vhci_hcd.0: Device attached [ 374.692906][T17339] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 374.699773][T17339] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 374.707330][T17339] vhci_hcd vhci_hcd.0: Device attached [ 374.713807][T17339] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 374.720443][T17339] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 374.728192][T17339] vhci_hcd vhci_hcd.0: Device attached [ 374.762491][T17339] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 374.769220][T17339] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 374.777619][T17339] vhci_hcd vhci_hcd.0: Device attached [ 374.793156][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4548'. [ 374.814944][T17339] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17) [ 374.821608][T17339] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 374.829257][T17339] vhci_hcd vhci_hcd.0: Device attached [ 374.862858][T17361] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(20) [ 374.869513][T17361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 374.877195][T17361] vhci_hcd vhci_hcd.0: Device attached [ 374.910020][ T1035] usb 5-1: new low-speed USB device number 6 using vhci_hcd [ 374.917767][T17339] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 374.926821][T17339] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 374.935536][T17339] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 374.945594][T17362] vhci_hcd: connection closed [ 374.945851][ T52] vhci_hcd vhci_hcd.2: stop threads [ 374.955967][ T52] vhci_hcd vhci_hcd.2: release socket [ 374.961410][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 374.968863][T17354] vhci_hcd: connection closed [ 374.968899][T17344] vhci_hcd: connection closed [ 374.969239][T17352] vhci_hcd: connection closed [ 374.974090][T17342] vhci_hcd: connection closed [ 374.983623][T17340] vhci_hcd: connection reset by peer [ 375.043701][ T52] vhci_hcd vhci_hcd.2: stop threads [ 375.049007][ T52] vhci_hcd vhci_hcd.2: release socket [ 375.054483][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 375.070393][ T52] vhci_hcd vhci_hcd.2: stop threads [ 375.075728][ T52] vhci_hcd vhci_hcd.2: release socket [ 375.081223][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 375.100547][ T52] vhci_hcd vhci_hcd.2: stop threads [ 375.105813][ T52] vhci_hcd vhci_hcd.2: release socket [ 375.111274][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 375.133503][ T52] vhci_hcd vhci_hcd.2: stop threads [ 375.138925][ T52] vhci_hcd vhci_hcd.2: release socket [ 375.144351][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 375.169267][ T52] vhci_hcd vhci_hcd.2: stop threads [ 375.174643][ T52] vhci_hcd vhci_hcd.2: release socket [ 375.180209][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 375.864676][T17394] netlink: 'syz.2.4563': attribute type 8 has an invalid length. [ 375.935991][T17411] lo speed is unknown, defaulting to 1000 [ 375.979229][T17414] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 375.985945][T17414] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 375.993555][T17414] vhci_hcd vhci_hcd.0: Device attached [ 376.036642][T17421] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 376.043346][T17421] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 376.050958][T17421] vhci_hcd vhci_hcd.0: Device attached [ 376.084002][T17414] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11) [ 376.090677][T17414] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 376.099091][T17414] vhci_hcd vhci_hcd.0: Device attached [ 376.102345][T17411] lo speed is unknown, defaulting to 1000 [ 376.130244][T17414] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 376.136918][T17414] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 376.144526][T17414] vhci_hcd vhci_hcd.0: Device attached [ 376.172749][T17414] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(17) [ 376.179445][T17414] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 376.187034][T17414] vhci_hcd vhci_hcd.0: Device attached [ 376.210797][T17414] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(19) [ 376.217484][T17414] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 376.225079][T17414] vhci_hcd vhci_hcd.0: Device attached [ 376.233808][ T3740] usb 3-1: new low-speed USB device number 4 using vhci_hcd [ 376.245118][T17414] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.268655][T17414] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.289395][T17414] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.311093][T17430] vhci_hcd: connection closed [ 376.311253][T17424] vhci_hcd: connection closed [ 376.311737][T17428] vhci_hcd: connection closed [ 376.316235][T17418] vhci_hcd: connection reset by peer [ 376.321093][T17426] vhci_hcd: connection closed [ 376.331983][T17422] vhci_hcd: connection closed [ 376.336969][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 376.346949][ T6769] vhci_hcd vhci_hcd.1: release socket [ 376.353202][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 376.359572][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 376.364830][ T6769] vhci_hcd vhci_hcd.1: release socket [ 376.370424][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 376.376574][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 376.382714][ T6769] vhci_hcd vhci_hcd.1: release socket [ 376.388256][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 376.406424][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 376.411759][ T6769] vhci_hcd vhci_hcd.1: release socket [ 376.417244][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 376.424742][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 376.430056][ T6769] vhci_hcd vhci_hcd.1: release socket [ 376.436359][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 376.442422][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 376.447770][ T6769] vhci_hcd vhci_hcd.1: release socket [ 376.453226][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 377.048364][T17456] lo speed is unknown, defaulting to 1000 [ 377.230384][T17456] lo speed is unknown, defaulting to 1000 [ 377.628884][T17478] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 377.635461][T17478] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 377.643095][T17478] vhci_hcd vhci_hcd.0: Device attached [ 377.663822][T17478] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 377.670647][T17478] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 377.678313][T17478] vhci_hcd vhci_hcd.0: Device attached [ 377.702805][T17478] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 377.709473][T17478] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 377.717199][T17478] vhci_hcd vhci_hcd.0: Device attached [ 377.724967][ T29] kauditd_printk_skb: 19175 callbacks suppressed [ 377.724998][ T29] audit: type=1400 audit(1769649843.790:78729): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.740890][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 377.759321][ T3039] audit: audit_lost=1286 audit_rate_limit=0 audit_backlog_limit=64 [ 377.767256][ T3039] audit: backlog limit exceeded [ 377.775894][ T29] audit: type=1400 audit(1769649843.790:78730): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.797999][ T29] audit: type=1400 audit(1769649843.790:78731): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.799345][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 377.819270][ T29] audit: type=1400 audit(1769649843.790:78732): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.825820][ T3039] audit: audit_lost=1287 audit_rate_limit=0 audit_backlog_limit=64 [ 377.825839][ T3039] audit: backlog limit exceeded [ 377.882536][T17478] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 377.889198][T17478] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 377.896957][T17478] vhci_hcd vhci_hcd.0: Device attached [ 377.910634][T17496] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(21) [ 377.917297][T17496] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 377.924839][T17496] vhci_hcd vhci_hcd.0: Device attached [ 377.955183][T17478] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 377.964536][T17490] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 377.971254][T17490] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 377.978820][T17490] vhci_hcd vhci_hcd.0: Device attached [ 378.000616][T17478] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 378.025152][T17478] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 378.052423][T17497] vhci_hcd: connection closed [ 378.052743][ T31] vhci_hcd vhci_hcd.2: stop threads [ 378.053045][T17493] vhci_hcd: connection closed [ 378.057555][ T31] vhci_hcd vhci_hcd.2: release socket [ 378.057583][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 378.065620][T17492] vhci_hcd: connection closed [ 378.079792][ T31] vhci_hcd vhci_hcd.2: stop threads [ 378.089921][ T31] vhci_hcd vhci_hcd.2: release socket [ 378.091931][T17507] FAULT_INJECTION: forcing a failure. [ 378.091931][T17507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.095408][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 378.108415][T17507] CPU: 0 UID: 0 PID: 17507 Comm: syz.1.4594 Not tainted syzkaller #0 PREEMPT(voluntary) [ 378.108471][T17507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.108567][T17507] Call Trace: [ 378.108608][T17507] [ 378.108646][T17507] __dump_stack+0x1d/0x30 [ 378.108723][T17507] dump_stack_lvl+0x95/0xd0 [ 378.108862][T17507] dump_stack+0x15/0x1b [ 378.108927][T17507] should_fail_ex+0x263/0x280 [ 378.109066][T17507] should_fail+0xb/0x20 [ 378.109142][T17507] should_fail_usercopy+0x1a/0x20 [ 378.109248][T17507] _copy_from_user+0x1c/0xb0 [ 378.109362][T17507] kstrtouint_from_user+0x69/0xf0 [ 378.109470][T17507] proc_fail_nth_write+0x50/0x160 [ 378.109563][T17507] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 378.109678][T17507] vfs_write+0x269/0x9f0 [ 378.109742][T17507] ? __rcu_read_unlock+0x4e/0x70 [ 378.109849][T17507] ? __fget_files+0x184/0x1c0 [ 378.109938][T17507] ? mutex_lock+0x57/0x90 [ 378.110065][T17507] ksys_write+0xdc/0x1a0 [ 378.110087][T17507] __x64_sys_write+0x40/0x50 [ 378.110144][T17507] x64_sys_call+0x2847/0x3000 [ 378.110228][T17507] do_syscall_64+0xc0/0x2a0 [ 378.110340][T17507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.110414][T17507] RIP: 0033:0x7f3bb540b78e [ 378.110497][T17507] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 378.110560][T17507] RSP: 002b:00007f3bb3ea6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 378.110632][T17507] RAX: ffffffffffffffda RBX: 00007f3bb3ea76c0 RCX: 00007f3bb540b78e [ 378.110738][T17507] RDX: 0000000000000001 RSI: 00007f3bb3ea70a0 RDI: 0000000000000003 [ 378.110781][T17507] RBP: 00007f3bb3ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 378.110832][T17507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.110881][T17507] R13: 00007f3bb56c6038 R14: 00007f3bb56c5fa0 R15: 00007ffedf86ce38 [ 378.110945][T17507] [ 378.140937][T17485] vhci_hcd: connection closed [ 378.145541][ T31] vhci_hcd vhci_hcd.2: stop threads [ 378.151082][T17482] vhci_hcd: connection closed [ 378.153562][ T31] vhci_hcd vhci_hcd.2: release socket [ 378.153676][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 378.159159][T17479] vhci_hcd: connection closed [ 378.182682][ T31] vhci_hcd vhci_hcd.2: stop threads [ 378.329201][T17509] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4595'. [ 378.333242][ T31] vhci_hcd vhci_hcd.2: release socket [ 378.357622][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 378.363116][T17509] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4595'. [ 378.404334][ T31] vhci_hcd vhci_hcd.2: stop threads [ 378.409667][ T31] vhci_hcd vhci_hcd.2: release socket [ 378.415198][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 378.421254][ T31] vhci_hcd vhci_hcd.2: stop threads [ 378.426521][ T31] vhci_hcd vhci_hcd.2: release socket [ 378.432013][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 378.636416][T17528] netlink: 'syz.2.4603': attribute type 27 has an invalid length. [ 378.717164][T17528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.754018][T17528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.853816][T17531] erspan0: left promiscuous mode [ 378.890758][T17531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.906353][ T6773] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.917854][ T6773] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.927307][ T6773] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.939364][ T6773] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.009720][T14730] Bluetooth: hci1: Frame reassembly failed (-84) [ 379.256232][T17547] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=40 sclass=netlink_tcpdiag_socket pid=17547 comm=syz.1.4608 [ 379.415451][T17561] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 379.422015][T17561] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 379.430515][T17561] vhci_hcd vhci_hcd.0: Device attached [ 379.437113][T17561] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 379.443816][T17561] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 379.451619][T17561] vhci_hcd vhci_hcd.0: Device attached [ 379.460388][T17561] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 379.467041][T17561] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 379.474765][T17561] vhci_hcd vhci_hcd.0: Device attached [ 379.486591][T17561] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 379.493244][T17561] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 379.500971][T17561] vhci_hcd vhci_hcd.0: Device attached [ 379.516784][T17561] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(17) [ 379.523442][T17561] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 379.531133][T17561] vhci_hcd vhci_hcd.0: Device attached [ 379.538947][T17561] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(19) [ 379.545748][T17561] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 379.554084][T17561] vhci_hcd vhci_hcd.0: Device attached [ 379.564326][T17561] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 379.573210][T17561] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 379.582947][T17561] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 379.593046][T17572] vhci_hcd: connection closed [ 379.593182][T14730] vhci_hcd vhci_hcd.1: stop threads [ 379.593476][T17564] vhci_hcd: connection closed [ 379.597979][T14730] vhci_hcd vhci_hcd.1: release socket [ 379.598085][T14730] vhci_hcd vhci_hcd.1: disconnect device [ 379.619169][T17562] vhci_hcd: connection closed [ 379.619404][T17566] vhci_hcd: connection closed [ 379.624502][T17568] vhci_hcd: connection closed [ 379.629253][T17570] vhci_hcd: connection closed [ 379.635737][T14730] vhci_hcd vhci_hcd.1: stop threads [ 379.645859][T14730] vhci_hcd vhci_hcd.1: release socket [ 379.651457][T14730] vhci_hcd vhci_hcd.1: disconnect device [ 379.657918][T14730] vhci_hcd vhci_hcd.1: stop threads [ 379.663961][T14730] vhci_hcd vhci_hcd.1: release socket [ 379.669532][T14730] vhci_hcd vhci_hcd.1: disconnect device [ 379.676201][T14730] vhci_hcd vhci_hcd.1: stop threads [ 379.681477][T14730] vhci_hcd vhci_hcd.1: release socket [ 379.687108][T14730] vhci_hcd vhci_hcd.1: disconnect device [ 379.693968][T14730] vhci_hcd vhci_hcd.1: stop threads [ 379.699406][T14730] vhci_hcd vhci_hcd.1: release socket [ 379.704936][T14730] vhci_hcd vhci_hcd.1: disconnect device [ 379.713966][T14730] vhci_hcd vhci_hcd.1: stop threads [ 379.719324][T14730] vhci_hcd vhci_hcd.1: release socket [ 379.720288][ T1035] usb 5-1: enqueue for inactive port 0 [ 379.726438][T14730] vhci_hcd vhci_hcd.1: disconnect device [ 379.731787][ T1035] usb 5-1: enqueue for inactive port 0 [ 379.815368][ T1035] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 380.702295][ T3841] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 380.930055][ T3841] Bluetooth: hci1: command 0x1003 tx timeout [ 380.930248][T17534] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 381.016979][ T3740] usb 3-1: enqueue for inactive port 0 [ 381.022727][ T3740] usb 3-1: enqueue for inactive port 0 [ 381.092743][ T3740] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 381.346757][T17607] bridge_slave_1: left allmulticast mode [ 381.352559][T17607] bridge_slave_1: left promiscuous mode [ 381.358355][T17607] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.367055][T17607] bridge_slave_0: left allmulticast mode [ 381.372886][T17607] bridge_slave_0: left promiscuous mode [ 381.378670][T17607] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.508865][T17610] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 381.515456][T17610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.523889][T17610] vhci_hcd vhci_hcd.0: Device attached [ 381.543253][T17610] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 381.549923][T17610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.550009][T17616] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 381.559370][T17610] vhci_hcd vhci_hcd.0: Device attached [ 381.585927][T17610] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 381.592623][T17610] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 381.601012][T17610] vhci_hcd vhci_hcd.0: Device attached [ 381.609464][T17610] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 381.616180][T17610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.623926][T17610] vhci_hcd vhci_hcd.0: Device attached [ 381.634020][T17610] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17) [ 381.640675][T17610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.648318][T17610] vhci_hcd vhci_hcd.0: Device attached [ 381.660352][T17610] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(19) [ 381.667090][T17610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.674860][T17610] vhci_hcd vhci_hcd.0: Device attached [ 381.701695][T17610] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 381.724624][T17610] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 381.734076][T17610] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 381.749573][ T3385] usb 5-1: new low-speed USB device number 7 using vhci_hcd [ 381.769948][T17627] vhci_hcd: connection closed [ 381.770184][T17617] vhci_hcd: connection closed [ 381.770444][T17613] vhci_hcd: connection closed [ 381.775338][T17621] vhci_hcd: connection closed [ 381.780523][ T6773] vhci_hcd vhci_hcd.2: stop threads [ 381.789193][T17623] vhci_hcd: connection closed [ 381.789765][T17611] vhci_hcd: connection reset by peer [ 381.794444][ T6773] vhci_hcd vhci_hcd.2: release socket [ 381.810060][ T6773] vhci_hcd vhci_hcd.2: disconnect device [ 381.853560][ T6773] vhci_hcd vhci_hcd.2: stop threads [ 381.859535][ T6773] vhci_hcd vhci_hcd.2: release socket [ 381.865074][ T6773] vhci_hcd vhci_hcd.2: disconnect device [ 381.871274][ T6773] vhci_hcd vhci_hcd.2: stop threads [ 381.876703][ T6773] vhci_hcd vhci_hcd.2: release socket [ 381.882214][ T6773] vhci_hcd vhci_hcd.2: disconnect device [ 381.902779][ T6773] vhci_hcd vhci_hcd.2: stop threads [ 381.908299][ T6773] vhci_hcd vhci_hcd.2: release socket [ 381.914588][ T6773] vhci_hcd vhci_hcd.2: disconnect device [ 381.937142][ T6773] vhci_hcd vhci_hcd.2: stop threads [ 381.943250][ T6773] vhci_hcd vhci_hcd.2: release socket [ 381.948792][ T6773] vhci_hcd vhci_hcd.2: disconnect device [ 381.976062][ T6773] vhci_hcd vhci_hcd.2: stop threads [ 381.981385][ T6773] vhci_hcd vhci_hcd.2: release socket [ 381.986824][ T6773] vhci_hcd vhci_hcd.2: disconnect device [ 382.492305][ T29] kauditd_printk_skb: 23548 callbacks suppressed [ 382.492336][ T29] audit: type=1400 audit(1769649848.797:100451): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.537810][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 382.544423][ T3039] audit: audit_lost=1898 audit_rate_limit=0 audit_backlog_limit=64 [ 382.553158][ T3039] audit: backlog limit exceeded [ 382.566367][T13130] audit: audit_backlog=65 > audit_backlog_limit=64 [ 382.569243][ T29] audit: type=1400 audit(1769649848.797:100452): avc: denied { map_create } for pid=17672 comm="syz.6.4651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 382.573182][T13130] audit: audit_lost=1899 audit_rate_limit=0 audit_backlog_limit=64 [ 382.594184][ T29] audit: type=1400 audit(1769649848.797:100453): avc: denied { prog_load } for pid=17672 comm="syz.6.4651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 382.600425][T13130] audit: backlog limit exceeded [ 382.621186][ T29] audit: type=1400 audit(1769649848.829:100454): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.694591][T17682] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 382.701176][T17682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 382.708787][T17682] vhci_hcd vhci_hcd.0: Device attached [ 382.741709][T17682] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 382.748400][T17682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 382.756051][T17682] vhci_hcd vhci_hcd.0: Device attached [ 382.773961][T17682] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 382.780826][T17682] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 382.788574][T17682] vhci_hcd vhci_hcd.0: Device attached [ 382.814835][T17682] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 382.821490][T17682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 382.829818][T17682] vhci_hcd vhci_hcd.0: Device attached [ 382.855929][T17682] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17) [ 382.862632][T17682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 382.870281][T17682] vhci_hcd vhci_hcd.0: Device attached [ 382.887868][T17682] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(19) [ 382.894533][T17682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 382.902222][T17682] vhci_hcd vhci_hcd.0: Device attached [ 382.929479][T17682] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 382.956993][T17682] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 382.978723][T17682] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 382.998848][T17693] vhci_hcd: connection closed [ 382.999192][ T31] vhci_hcd vhci_hcd.2: stop threads [ 383.009334][ T31] vhci_hcd vhci_hcd.2: release socket [ 383.014843][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 383.021348][T17690] vhci_hcd: connection closed [ 383.021350][T17683] vhci_hcd: connection closed [ 383.027181][ T31] vhci_hcd vhci_hcd.2: stop threads [ 383.035984][T17699] vhci_hcd: connection closed [ 383.037191][ T31] vhci_hcd vhci_hcd.2: release socket [ 383.037468][T17702] vhci_hcd: connection closed [ 383.042089][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 383.047650][T17704] vhci_hcd: connection closed [ 383.053554][ T31] vhci_hcd vhci_hcd.2: stop threads [ 383.068037][ T31] vhci_hcd vhci_hcd.2: release socket [ 383.073532][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 383.086383][ T31] vhci_hcd vhci_hcd.2: stop threads [ 383.091777][ T31] vhci_hcd vhci_hcd.2: release socket [ 383.097274][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 383.105034][ T31] vhci_hcd vhci_hcd.2: stop threads [ 383.111599][ T31] vhci_hcd vhci_hcd.2: release socket [ 383.117096][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 383.123646][ T31] vhci_hcd vhci_hcd.2: stop threads [ 383.128956][ T31] vhci_hcd vhci_hcd.2: release socket [ 383.134450][ T31] vhci_hcd vhci_hcd.2: disconnect device [ 383.577439][T17714] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4662'. [ 383.623072][T17717] netlink: 'syz.1.4664': attribute type 27 has an invalid length. [ 383.896147][T17717] ip6gretap1: left promiscuous mode [ 383.917639][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.933556][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.968760][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.981620][T17736] lo speed is unknown, defaulting to 1000 [ 383.987705][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.036646][T17742] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 384.043418][T17742] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 384.051014][T17742] vhci_hcd vhci_hcd.0: Device attached [ 384.078571][T17742] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 384.085294][T17742] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 384.093575][T17742] vhci_hcd vhci_hcd.0: Device attached [ 384.100773][T17736] lo speed is unknown, defaulting to 1000 [ 384.118484][T17742] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 384.125142][T17742] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 384.133688][T17742] vhci_hcd vhci_hcd.0: Device attached [ 384.157212][T17742] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 384.163899][T17742] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 384.172206][T17742] vhci_hcd vhci_hcd.0: Device attached [ 384.186892][T17742] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 384.193557][T17742] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 384.201906][T17742] vhci_hcd vhci_hcd.0: Device attached [ 384.228229][T17742] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(21) [ 384.234975][T17742] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 384.242593][T17742] vhci_hcd vhci_hcd.0: Device attached [ 384.264693][T17742] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 384.284655][T17742] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 384.302838][T17742] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 384.311515][ T36] usb 9-1: new low-speed USB device number 4 using vhci_hcd [ 384.320919][T17754] vhci_hcd: connection closed [ 384.321166][ T31] vhci_hcd vhci_hcd.4: stop threads [ 384.321183][T17752] vhci_hcd: connection closed [ 384.331256][ T31] vhci_hcd vhci_hcd.4: release socket [ 384.341404][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 384.347508][T17748] vhci_hcd: connection closed [ 384.347759][T17743] vhci_hcd: connection closed [ 384.348469][T17750] vhci_hcd: connection closed [ 384.353654][T17744] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 384.358167][T17746] vhci_hcd: connection closed [ 384.369205][ T31] vhci_hcd vhci_hcd.4: stop threads [ 384.379199][ T31] vhci_hcd vhci_hcd.4: release socket [ 384.384667][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 384.392113][ T31] vhci_hcd vhci_hcd.4: stop threads [ 384.397509][ T31] vhci_hcd vhci_hcd.4: release socket [ 384.402961][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 384.409267][ T31] vhci_hcd vhci_hcd.4: stop threads [ 384.414577][ T31] vhci_hcd vhci_hcd.4: release socket [ 384.420184][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 384.439141][ T31] vhci_hcd vhci_hcd.4: stop threads [ 384.444425][ T31] vhci_hcd vhci_hcd.4: release socket [ 384.449875][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 384.456845][ T31] vhci_hcd vhci_hcd.4: stop threads [ 384.462107][ T31] vhci_hcd vhci_hcd.4: release socket [ 384.467655][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 384.926274][T17780] lo speed is unknown, defaulting to 1000 [ 385.012911][T17780] lo speed is unknown, defaulting to 1000 [ 385.465947][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4693'. [ 385.496221][T17806] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 385.502923][T17806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 385.510676][T17806] vhci_hcd vhci_hcd.0: Device attached [ 385.551680][T17806] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 385.558345][T17806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 385.566020][T17806] vhci_hcd vhci_hcd.0: Device attached [ 385.603195][T17806] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 385.609904][T17806] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 385.617656][T17806] vhci_hcd vhci_hcd.0: Device attached [ 385.654337][T17822] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 385.661009][T17822] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 385.668649][T17822] vhci_hcd vhci_hcd.0: Device attached [ 385.684230][T17806] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 385.690891][T17806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 385.698555][T17806] vhci_hcd vhci_hcd.0: Device attached [ 385.706557][T17806] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21) [ 385.713212][T17806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 385.721823][T17806] vhci_hcd vhci_hcd.0: Device attached [ 385.736595][T17806] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 385.745211][T17806] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 385.759198][T17806] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 385.759488][ T3740] usb 3-1: new low-speed USB device number 5 using vhci_hcd [ 385.775242][T17834] netlink: 'syz.2.4701': attribute type 13 has an invalid length. [ 385.793470][T17823] vhci_hcd: connection closed [ 385.793704][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 385.794323][T17815] vhci_hcd: connection closed [ 385.798565][ T6769] vhci_hcd vhci_hcd.1: release socket [ 385.798589][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 385.804518][T17829] vhci_hcd: connection closed [ 385.811615][T17825] vhci_hcd: connection closed [ 385.815362][T17811] vhci_hcd: connection closed [ 385.829967][T17807] vhci_hcd: connection reset by peer [ 385.843398][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 385.848788][ T6769] vhci_hcd vhci_hcd.1: release socket [ 385.854242][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 385.862271][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 385.867606][ T6769] vhci_hcd vhci_hcd.1: release socket [ 385.873123][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 385.880323][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 385.885719][ T6769] vhci_hcd vhci_hcd.1: release socket [ 385.891336][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 385.900626][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 385.906040][ T6769] vhci_hcd vhci_hcd.1: release socket [ 385.911553][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 385.918092][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 385.923464][ T6769] vhci_hcd vhci_hcd.1: release socket [ 385.928909][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 386.046876][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 386.345018][T17849] lo speed is unknown, defaulting to 1000 [ 386.388756][T17849] lo speed is unknown, defaulting to 1000 [ 386.563865][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 386.570451][ T3385] usb 5-1: enqueue for inactive port 0 [ 386.579406][ T3385] usb 5-1: enqueue for inactive port 0 [ 386.654815][ T3385] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 386.682422][T17859] netlink: 'syz.4.4709': attribute type 39 has an invalid length. [ 386.792980][T17865] FAULT_INJECTION: forcing a failure. [ 386.792980][T17865] name failslab, interval 1, probability 0, space 0, times 0 [ 386.805835][T17865] CPU: 0 UID: 0 PID: 17865 Comm: syz.1.4712 Not tainted syzkaller #0 PREEMPT(voluntary) [ 386.805884][T17865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.805966][T17865] Call Trace: [ 386.805975][T17865] [ 386.805985][T17865] __dump_stack+0x1d/0x30 [ 386.806024][T17865] dump_stack_lvl+0x95/0xd0 [ 386.806054][T17865] dump_stack+0x15/0x1b [ 386.806075][T17865] should_fail_ex+0x263/0x280 [ 386.806124][T17865] should_failslab+0x8c/0xb0 [ 386.806157][T17865] kmem_cache_alloc_noprof+0x68/0x490 [ 386.806221][T17865] ? getname_flags+0x7f/0x3b0 [ 386.806255][T17865] getname_flags+0x7f/0x3b0 [ 386.806284][T17865] user_path_at+0x28/0x130 [ 386.806326][T17865] __se_sys_inotify_add_watch+0x100/0x780 [ 386.806421][T17865] ? mutex_unlock+0x4e/0x90 [ 386.806447][T17865] ? fput+0x8f/0xc0 [ 386.806484][T17865] ? ksys_write+0x194/0x1a0 [ 386.806520][T17865] __x64_sys_inotify_add_watch+0x43/0x50 [ 386.806562][T17865] x64_sys_call+0xa6d/0x3000 [ 386.806593][T17865] do_syscall_64+0xc0/0x2a0 [ 386.806624][T17865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.806686][T17865] RIP: 0033:0x7f3bb544aeb9 [ 386.806769][T17865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.806794][T17865] RSP: 002b:00007f3bb3ea7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 386.806814][T17865] RAX: ffffffffffffffda RBX: 00007f3bb56c5fa0 RCX: 00007f3bb544aeb9 [ 386.806829][T17865] RDX: 00000000950009ba RSI: 0000200000000080 RDI: 0000000000000003 [ 386.806842][T17865] RBP: 00007f3bb3ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 386.806910][T17865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.806927][T17865] R13: 00007f3bb56c6038 R14: 00007f3bb56c5fa0 R15: 00007ffedf86ce38 [ 386.806953][T17865] [ 387.264403][ T29] kauditd_printk_skb: 18258 callbacks suppressed [ 387.264449][ T29] audit: type=1400 audit(1769649853.794:118431): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.294677][ T29] audit: type=1400 audit(1769649853.805:118432): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.315977][ T29] audit: type=1400 audit(1769649853.805:118433): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.337344][ T29] audit: type=1400 audit(1769649853.805:118434): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.358627][ T29] audit: type=1400 audit(1769649853.805:118435): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.380011][ T29] audit: type=1400 audit(1769649853.805:118436): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.401332][ T29] audit: type=1400 audit(1769649853.805:118437): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.422584][ T29] audit: type=1400 audit(1769649853.805:118438): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.443937][ T29] audit: type=1400 audit(1769649853.805:118439): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.465197][ T29] audit: type=1400 audit(1769649853.805:118440): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.779201][T17892] lo speed is unknown, defaulting to 1000 [ 387.820631][T17892] lo speed is unknown, defaulting to 1000 [ 388.016903][T17534] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 388.018796][ T3755] Bluetooth: hci0: command 0x1003 tx timeout [ 388.474156][T17534] Bluetooth: hci1: command 0x1003 tx timeout [ 388.480805][ T3841] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 389.160328][ T36] usb 9-1: enqueue for inactive port 0 [ 389.166996][ T36] usb 9-1: enqueue for inactive port 0 [ 389.236961][ T36] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 389.371352][T17949] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 389.378041][T17949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.385772][T17949] vhci_hcd vhci_hcd.0: Device attached [ 389.432337][T17949] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 389.439016][T17949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.447298][T17949] vhci_hcd vhci_hcd.0: Device attached [ 389.449951][T17955] ip6tnl1: entered promiscuous mode [ 389.478246][T17949] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 389.484973][T17949] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 389.492704][T17949] vhci_hcd vhci_hcd.0: Device attached [ 389.501009][T17949] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 389.507678][T17949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.516136][T17949] vhci_hcd vhci_hcd.0: Device attached [ 389.539606][T17949] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 389.546331][T17949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.554727][T17949] vhci_hcd vhci_hcd.0: Device attached [ 389.566451][T17949] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(21) [ 389.573148][T17949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.581745][T17949] vhci_hcd vhci_hcd.0: Device attached [ 389.589418][T17949] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 389.600834][T17949] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 389.626584][T17949] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 389.645582][T17967] vhci_hcd: connection closed [ 389.645769][ T6769] vhci_hcd vhci_hcd.3: stop threads [ 389.646931][T17963] vhci_hcd: connection closed [ 389.650552][ T6769] vhci_hcd vhci_hcd.3: release socket [ 389.656790][T17960] vhci_hcd: connection closed [ 389.660524][ T6769] vhci_hcd vhci_hcd.3: disconnect device [ 389.660904][ T1035] usb 7-1: new low-speed USB device number 4 using vhci_hcd [ 389.696087][ T6769] vhci_hcd vhci_hcd.3: stop threads [ 389.701375][ T6769] vhci_hcd vhci_hcd.3: release socket [ 389.706834][ T6769] vhci_hcd vhci_hcd.3: disconnect device [ 389.713739][T17950] vhci_hcd: connection reset by peer [ 389.724813][T17956] vhci_hcd: connection closed [ 389.724922][T17952] vhci_hcd: connection closed [ 389.737156][ T6769] vhci_hcd vhci_hcd.3: stop threads [ 389.747172][ T6769] vhci_hcd vhci_hcd.3: release socket [ 389.752624][ T6769] vhci_hcd vhci_hcd.3: disconnect device [ 389.777221][ T6769] vhci_hcd vhci_hcd.3: stop threads [ 389.782530][ T6769] vhci_hcd vhci_hcd.3: release socket [ 389.787954][ T6769] vhci_hcd vhci_hcd.3: disconnect device [ 389.817468][ T6769] vhci_hcd vhci_hcd.3: stop threads [ 389.822908][ T6769] vhci_hcd vhci_hcd.3: release socket [ 389.828415][ T6769] vhci_hcd vhci_hcd.3: disconnect device [ 389.844296][ T6769] vhci_hcd vhci_hcd.3: stop threads [ 389.849642][ T6769] vhci_hcd vhci_hcd.3: release socket [ 389.855086][ T6769] vhci_hcd vhci_hcd.3: disconnect device [ 390.132374][T17991] lo speed is unknown, defaulting to 1000 [ 390.241680][T17991] lo speed is unknown, defaulting to 1000 [ 390.619692][ T3740] usb 3-1: enqueue for inactive port 0 [ 390.639150][ T3740] usb 3-1: enqueue for inactive port 0 [ 390.704267][T18024] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 390.711014][T18024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.718612][T18024] vhci_hcd vhci_hcd.0: Device attached [ 390.728016][T18024] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 390.734666][T18024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.742291][T18024] vhci_hcd vhci_hcd.0: Device attached [ 390.752112][T18024] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 390.758769][T18024] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 390.766498][T18024] vhci_hcd vhci_hcd.0: Device attached [ 390.789025][T18024] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 390.795668][T18024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.803343][T18024] vhci_hcd vhci_hcd.0: Device attached [ 390.809903][T18024] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 390.816700][T18024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.824376][T18024] vhci_hcd vhci_hcd.0: Device attached [ 390.832231][T18024] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21) [ 390.838883][T18024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.846529][T18024] vhci_hcd vhci_hcd.0: Device attached [ 390.852747][T18024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 390.863521][T18024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 390.872377][T18024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 390.882644][T18035] vhci_hcd: connection closed [ 390.882665][T18031] vhci_hcd: connection closed [ 390.882684][T18033] vhci_hcd: connection closed [ 390.890733][T18029] vhci_hcd: connection closed [ 390.892239][T18025] vhci_hcd: connection closed [ 390.898612][T18027] vhci_hcd: connection closed [ 390.906934][ T52] vhci_hcd vhci_hcd.1: stop threads [ 390.917019][ T52] vhci_hcd vhci_hcd.1: release socket [ 390.922476][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 390.928781][ T52] vhci_hcd vhci_hcd.1: stop threads [ 390.934066][ T52] vhci_hcd vhci_hcd.1: release socket [ 390.939571][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 390.946014][ T52] vhci_hcd vhci_hcd.1: stop threads [ 390.951309][ T52] vhci_hcd vhci_hcd.1: release socket [ 390.956750][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 390.962890][ T52] vhci_hcd vhci_hcd.1: stop threads [ 390.968145][ T52] vhci_hcd vhci_hcd.1: release socket [ 390.973594][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 390.979967][ T52] vhci_hcd vhci_hcd.1: stop threads [ 390.985272][ T52] vhci_hcd vhci_hcd.1: release socket [ 390.990728][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 390.996856][ T52] vhci_hcd vhci_hcd.1: stop threads [ 391.002148][ T52] vhci_hcd vhci_hcd.1: release socket [ 391.007579][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 391.093693][ T3740] usb 3-1: enqueue for inactive port 0 [ 391.099411][ T3740] usb 3-1: enqueue for inactive port 0 [ 391.105308][ T3740] usb 3-1: enqueue for inactive port 0 [ 391.141726][ T3841] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 391.179419][ T3740] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 391.558089][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4778'. [ 391.567122][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4778'. [ 391.576128][T18063] netlink: 'syz.1.4778': attribute type 14 has an invalid length. [ 391.802246][T18078] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 391.809002][T18078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 391.817241][T18078] vhci_hcd vhci_hcd.0: Device attached [ 391.837106][T18075] bond1: (slave veth5): Enslaving as an active interface with an up link [ 391.845855][T18078] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 391.852536][T18078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 391.860225][T18078] vhci_hcd vhci_hcd.0: Device attached [ 391.875385][T18078] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(15) [ 391.882115][T18078] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 391.889852][T18078] vhci_hcd vhci_hcd.0: Device attached [ 391.903574][T18078] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 391.910316][T18078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 391.917957][T18078] vhci_hcd vhci_hcd.0: Device attached [ 391.924984][T18078] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 391.931622][T18078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 391.939402][T18078] vhci_hcd vhci_hcd.0: Device attached [ 391.945141][T18070] bond1: (slave veth7): Enslaving as an active interface with an up link [ 391.946595][T18078] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(21) [ 391.960265][T18078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 391.968650][T18078] vhci_hcd vhci_hcd.0: Device attached [ 391.975007][T18078] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 391.983644][T18078] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 391.992897][T18078] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 392.037249][ T29] kauditd_printk_skb: 25447 callbacks suppressed [ 392.037269][ T29] audit: type=1400 audit(1769649858.812:141200): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.045424][T18092] vhci_hcd: connection closed [ 392.065100][ T36] usb 5-1: new low-speed USB device number 8 using vhci_hcd [ 392.079682][T18083] vhci_hcd: connection closed [ 392.080019][T18081] vhci_hcd: connection closed [ 392.082278][T18079] vhci_hcd: connection reset by peer [ 392.095758][T18088] vhci_hcd: connection closed [ 392.095950][T18090] vhci_hcd: connection closed [ 392.110408][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 392.121726][ T3039] audit: audit_lost=2890 audit_rate_limit=0 audit_backlog_limit=64 [ 392.129786][ T3039] audit: backlog limit exceeded [ 392.134028][T11438] audit: audit_backlog=65 > audit_backlog_limit=64 [ 392.141212][T11438] audit: audit_lost=2891 audit_rate_limit=0 audit_backlog_limit=64 [ 392.149254][T11438] audit: backlog limit exceeded [ 392.151601][ T29] audit: type=1400 audit(1769649858.844:141201): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.175411][ T29] audit: type=1400 audit(1769649858.844:141202): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.196745][ T29] audit: type=1400 audit(1769649858.844:141203): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.211754][ T52] vhci_hcd vhci_hcd.2: stop threads [ 392.223339][ T52] vhci_hcd vhci_hcd.2: release socket [ 392.228818][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 392.265048][ T52] vhci_hcd vhci_hcd.2: stop threads [ 392.271022][ T52] vhci_hcd vhci_hcd.2: release socket [ 392.276556][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 392.291008][ T52] vhci_hcd vhci_hcd.2: stop threads [ 392.297166][ T52] vhci_hcd vhci_hcd.2: release socket [ 392.302637][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 392.308879][ T52] vhci_hcd vhci_hcd.2: stop threads [ 392.314355][ T52] vhci_hcd vhci_hcd.2: release socket [ 392.319855][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 392.326718][ T52] vhci_hcd vhci_hcd.2: stop threads [ 392.331957][ T52] vhci_hcd vhci_hcd.2: release socket [ 392.337436][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 392.345096][ T52] vhci_hcd vhci_hcd.2: stop threads [ 392.350373][ T52] vhci_hcd vhci_hcd.2: release socket [ 392.356593][ T52] vhci_hcd vhci_hcd.2: disconnect device [ 392.408559][T18115] lo speed is unknown, defaulting to 1000 [ 392.518041][T18115] lo speed is unknown, defaulting to 1000 [ 393.292702][T18152] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 393.299415][T18152] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 393.307924][T18152] vhci_hcd vhci_hcd.0: Device attached [ 393.320234][T18152] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 393.326980][T18152] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 393.335368][T18152] vhci_hcd vhci_hcd.0: Device attached [ 393.356895][T18152] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 393.363552][T18152] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 393.371217][T18152] vhci_hcd vhci_hcd.0: Device attached [ 393.389102][T18152] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 393.395860][T18152] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 393.403423][T18152] vhci_hcd vhci_hcd.0: Device attached [ 393.427507][T18152] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 393.434170][T18152] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 393.441799][T18152] vhci_hcd vhci_hcd.0: Device attached [ 393.461851][T18152] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(21) [ 393.468520][T18152] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 393.476151][T18152] vhci_hcd vhci_hcd.0: Device attached [ 393.486822][T18168] lo speed is unknown, defaulting to 1000 [ 393.513917][T18152] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 393.531215][T18152] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 393.541759][ T3398] usb 9-1: new low-speed USB device number 5 using vhci_hcd [ 393.562704][T18152] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 393.586075][T18169] vhci_hcd: connection closed [ 393.586090][T18165] vhci_hcd: connection closed [ 393.591286][T14730] vhci_hcd vhci_hcd.4: stop threads [ 393.601365][T14730] vhci_hcd vhci_hcd.4: release socket [ 393.606859][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 393.613199][T18162] vhci_hcd: connection closed [ 393.613392][T18153] vhci_hcd: connection reset by peer [ 393.614292][T18159] vhci_hcd: connection closed [ 393.623589][T18155] vhci_hcd: connection closed [ 393.635077][T18168] lo speed is unknown, defaulting to 1000 [ 393.646126][T14730] vhci_hcd vhci_hcd.4: stop threads [ 393.651492][T14730] vhci_hcd vhci_hcd.4: release socket [ 393.656949][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 393.692672][T14730] vhci_hcd vhci_hcd.4: stop threads [ 393.698037][T14730] vhci_hcd vhci_hcd.4: release socket [ 393.703466][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 393.709316][T14730] vhci_hcd vhci_hcd.4: stop threads [ 393.714634][T14730] vhci_hcd vhci_hcd.4: release socket [ 393.720061][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 393.726415][T14730] vhci_hcd vhci_hcd.4: stop threads [ 393.731662][T14730] vhci_hcd vhci_hcd.4: release socket [ 393.737136][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 393.743080][T14730] vhci_hcd vhci_hcd.4: stop threads [ 393.748393][T14730] vhci_hcd vhci_hcd.4: release socket [ 393.753969][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 394.062349][T18185] netlink: 'syz.2.4818': attribute type 13 has an invalid length. [ 394.265750][ T3841] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 394.272006][T17534] Bluetooth: hci0: command 0x1003 tx timeout [ 394.503881][ T1035] usb 7-1: enqueue for inactive port 0 [ 394.512698][ T1035] usb 7-1: enqueue for inactive port 0 [ 394.579153][T18210] lo speed is unknown, defaulting to 1000 [ 394.589646][ T1035] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 394.642880][T18210] lo speed is unknown, defaulting to 1000 [ 394.891406][T18216] netlink: 'syz.1.4829': attribute type 20 has an invalid length. [ 395.456522][T18246] lo speed is unknown, defaulting to 1000 [ 395.489914][T18251] tc_dump_action: action bad kind [ 395.723700][T18246] lo speed is unknown, defaulting to 1000 [ 395.756623][T18257] netlink: 'syz.3.4844': attribute type 1 has an invalid length. [ 396.424848][T18287] netlink: 'syz.3.4856': attribute type 1 has an invalid length. [ 396.809345][ T29] kauditd_printk_skb: 20855 callbacks suppressed [ 396.809366][ T29] audit: type=1400 audit(1769649863.830:158735): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.874198][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 396.875916][ T36] usb 5-1: enqueue for inactive port 0 [ 396.881282][ T3039] audit: audit_lost=4000 audit_rate_limit=0 audit_backlog_limit=64 [ 396.894394][ T3039] audit: backlog limit exceeded [ 396.905265][T12167] audit: audit_backlog=65 > audit_backlog_limit=64 [ 396.911925][T12167] audit: audit_lost=4001 audit_rate_limit=0 audit_backlog_limit=64 [ 396.915347][ T29] audit: type=1400 audit(1769649863.862:158736): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.920021][T12167] audit: backlog limit exceeded [ 396.941540][ T36] usb 5-1: enqueue for inactive port 0 [ 396.952528][ T29] audit: type=1400 audit(1769649863.862:158737): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.974578][ T29] audit: type=1400 audit(1769649863.862:158738): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 397.007023][ T36] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 397.015350][T18302] lo speed is unknown, defaulting to 1000 [ 397.178341][T18315] sctp: [Deprecated]: syz.3.4864 (pid 18315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.178341][T18315] Use struct sctp_sack_info instead [ 397.249523][T18302] lo speed is unknown, defaulting to 1000 [ 397.262457][T18317] lo speed is unknown, defaulting to 1000 [ 397.315350][T18326] netlink: 'syz.6.4869': attribute type 1 has an invalid length. [ 397.572801][T18317] lo speed is unknown, defaulting to 1000 [ 397.935992][T18352] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 397.942713][T18352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.951039][T18352] vhci_hcd vhci_hcd.0: Device attached [ 397.962280][T18352] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(12) [ 397.968943][T18352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.977129][T18352] vhci_hcd vhci_hcd.0: Device attached [ 397.987074][T18352] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14) [ 397.993784][T18352] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 398.002184][T18352] vhci_hcd vhci_hcd.0: Device attached [ 398.034220][T18352] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(16) [ 398.040902][T18352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 398.048536][T18352] vhci_hcd vhci_hcd.0: Device attached [ 398.072417][T18352] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(18) [ 398.079118][T18352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 398.086750][T18352] vhci_hcd vhci_hcd.0: Device attached [ 398.132934][T18372] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(20) [ 398.139613][T18372] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 398.147258][T18372] vhci_hcd vhci_hcd.0: Device attached [ 398.190589][ T1035] usb 13-1: new low-speed USB device number 4 using vhci_hcd [ 398.225386][T18352] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 398.249317][T18379] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 398.261886][T18352] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 398.262496][T18375] netlink: 'syz.1.4883': attribute type 1 has an invalid length. [ 398.276776][T18373] vhci_hcd: connection closed [ 398.278223][T18365] vhci_hcd: connection closed [ 398.278532][ T31] vhci_hcd vhci_hcd.6: stop threads [ 398.283597][T18357] vhci_hcd: connection closed [ 398.289233][ T31] vhci_hcd vhci_hcd.6: release socket [ 398.297198][T18355] vhci_hcd: connection closed [ 398.297702][ T31] vhci_hcd vhci_hcd.6: disconnect device [ 398.297725][T18359] vhci_hcd: connection closed [ 398.303223][T18353] vhci_hcd: connection reset by peer [ 398.344847][ T31] vhci_hcd vhci_hcd.6: stop threads [ 398.350291][ T31] vhci_hcd vhci_hcd.6: release socket [ 398.355780][ T31] vhci_hcd vhci_hcd.6: disconnect device [ 398.382998][ T3398] usb 9-1: enqueue for inactive port 0 [ 398.393842][ T3398] usb 9-1: enqueue for inactive port 0 [ 398.400967][ T31] vhci_hcd vhci_hcd.6: stop threads [ 398.406232][ T31] vhci_hcd vhci_hcd.6: release socket [ 398.411727][ T31] vhci_hcd vhci_hcd.6: disconnect device [ 398.430581][ T31] vhci_hcd vhci_hcd.6: stop threads [ 398.435887][ T31] vhci_hcd vhci_hcd.6: release socket [ 398.441366][ T31] vhci_hcd vhci_hcd.6: disconnect device [ 398.453565][ T31] vhci_hcd vhci_hcd.6: stop threads [ 398.459631][ T31] vhci_hcd vhci_hcd.6: release socket [ 398.465150][ T31] vhci_hcd vhci_hcd.6: disconnect device [ 398.481203][ T31] vhci_hcd vhci_hcd.6: stop threads [ 398.487452][ T31] vhci_hcd vhci_hcd.6: release socket [ 398.492948][ T31] vhci_hcd vhci_hcd.6: disconnect device [ 398.499125][ T3398] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 398.627550][T18393] lo speed is unknown, defaulting to 1000 [ 398.669897][T18393] lo speed is unknown, defaulting to 1000 [ 399.030066][T18409] netlink: 'syz.4.4896': attribute type 1 has an invalid length. [ 399.707777][T18440] lo speed is unknown, defaulting to 1000 [ 399.753556][T18440] lo speed is unknown, defaulting to 1000 [ 399.844307][T18445] netlink: 'syz.6.4909': attribute type 1 has an invalid length. [ 400.014569][T18451] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 400.285177][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4921'. [ 400.422919][T18485] lo speed is unknown, defaulting to 1000 [ 400.602311][T18485] lo speed is unknown, defaulting to 1000 [ 400.675724][T18498] syzkaller0: entered promiscuous mode [ 400.681442][T18498] syzkaller0: entered allmulticast mode [ 401.141077][T18520] netlink: 'syz.6.4940': attribute type 2 has an invalid length. [ 401.149759][T18520] netlink: 'syz.6.4940': attribute type 8 has an invalid length. [ 401.157873][T18520] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4940'. [ 401.188543][T18524] lo speed is unknown, defaulting to 1000 [ 401.245290][T18524] lo speed is unknown, defaulting to 1000 [ 401.369142][T18536] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 401.375752][T18536] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 401.384205][T18536] vhci_hcd vhci_hcd.0: Device attached [ 401.404730][T18539] vhci_hcd: connection closed [ 401.404982][ T31] vhci_hcd vhci_hcd.4: stop threads [ 401.415820][ T31] vhci_hcd vhci_hcd.4: release socket [ 401.421318][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 401.459545][T18543] lo speed is unknown, defaulting to 1000 [ 401.586289][ T29] kauditd_printk_skb: 19128 callbacks suppressed [ 401.586308][ T29] audit: type=1400 audit(1769649868.838:177480): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.614156][ T29] audit: type=1400 audit(1769649868.838:177481): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.635552][ T29] audit: type=1400 audit(1769649868.838:177482): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.635941][T18543] lo speed is unknown, defaulting to 1000 [ 401.656826][ T29] audit: type=1400 audit(1769649868.838:177483): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.656866][ T29] audit: type=1400 audit(1769649868.838:177484): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.656895][ T29] audit: type=1400 audit(1769649868.838:177485): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.656945][ T29] audit: type=1400 audit(1769649868.838:177486): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.656978][ T29] audit: type=1400 audit(1769649868.838:177487): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.755973][ T29] audit: type=1400 audit(1769649868.911:177488): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.794516][ T29] audit: type=1400 audit(1769649868.911:177489): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 402.495308][T18573] netlink: 'syz.1.4959': attribute type 8 has an invalid length. [ 402.773566][T18591] FAULT_INJECTION: forcing a failure. [ 402.773566][T18591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.786756][T18591] CPU: 0 UID: 0 PID: 18591 Comm: syz.3.4966 Not tainted syzkaller #0 PREEMPT(voluntary) [ 402.786785][T18591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.786798][T18591] Call Trace: [ 402.786835][T18591] [ 402.786844][T18591] __dump_stack+0x1d/0x30 [ 402.786877][T18591] dump_stack_lvl+0x95/0xd0 [ 402.786958][T18591] dump_stack+0x15/0x1b [ 402.786987][T18591] should_fail_ex+0x263/0x280 [ 402.787028][T18591] should_fail+0xb/0x20 [ 402.787118][T18591] should_fail_usercopy+0x1a/0x20 [ 402.787229][T18591] strncpy_from_user+0x27/0x250 [ 402.787263][T18591] getname_flags+0xad/0x3b0 [ 402.787290][T18591] __x64_sys_mkdirat+0x40/0x60 [ 402.787310][T18591] x64_sys_call+0x30c/0x3000 [ 402.787347][T18591] do_syscall_64+0xc0/0x2a0 [ 402.787380][T18591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.787403][T18591] RIP: 0033:0x7ff82be9aeb9 [ 402.787420][T18591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.787455][T18591] RSP: 002b:00007ff82a8f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 402.787482][T18591] RAX: ffffffffffffffda RBX: 00007ff82c115fa0 RCX: 00007ff82be9aeb9 [ 402.787501][T18591] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 402.787519][T18591] RBP: 00007ff82a8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 402.787585][T18591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.787599][T18591] R13: 00007ff82c116038 R14: 00007ff82c115fa0 R15: 00007fff62198d28 [ 402.787621][T18591] [ 403.039264][ T1035] usb 13-1: enqueue for inactive port 0 [ 403.058687][ T1035] usb 13-1: enqueue for inactive port 0 [ 403.101570][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4976'. [ 403.154536][ T1035] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 403.429556][T18640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4990'. [ 403.542772][T18655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4996'. [ 403.724441][T18674] netlink: 'syz.6.5004': attribute type 5 has an invalid length. [ 403.797527][T18678] syzkaller0: entered promiscuous mode [ 403.803219][T18678] syzkaller0: entered allmulticast mode [ 403.894793][T18682] syzkaller0: entered promiscuous mode [ 403.900406][T18682] syzkaller0: entered allmulticast mode [ 404.080608][T18696] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5013'. [ 404.100351][T18696] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5013'. [ 404.478547][T18741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5034'. [ 404.511363][T18741] bridge2: entered promiscuous mode [ 404.558109][T18751] tun0: tun_chr_ioctl cmd 1074025675 [ 404.563540][T18751] tun0: persist enabled [ 404.614150][T18751] tun0: tun_chr_ioctl cmd 1074025675 [ 404.619512][T18751] tun0: persist enabled [ 404.630847][T18756] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 404.703259][T18765] lo speed is unknown, defaulting to 1000 [ 404.852611][T18765] lo speed is unknown, defaulting to 1000 [ 404.963523][T18796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5057'. [ 404.998315][T18796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5057'. [ 405.108921][T18797] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1002 sclass=netlink_tcpdiag_socket pid=18797 comm=syz.3.5054 [ 405.112833][T18803] netlink: 'syz.1.5060': attribute type 10 has an invalid length. [ 405.495006][T18825] netlink: 'syz.2.5069': attribute type 4 has an invalid length. [ 405.504792][T18825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=18825 comm=syz.2.5069 [ 405.654923][T18840] FAULT_INJECTION: forcing a failure. [ 405.654923][T18840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.668285][T18840] CPU: 1 UID: 0 PID: 18840 Comm: syz.6.5077 Not tainted syzkaller #0 PREEMPT(voluntary) [ 405.668350][T18840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.668368][T18840] Call Trace: [ 405.668376][T18840] [ 405.668386][T18840] __dump_stack+0x1d/0x30 [ 405.668419][T18840] dump_stack_lvl+0x95/0xd0 [ 405.668515][T18840] dump_stack+0x15/0x1b [ 405.668541][T18840] should_fail_ex+0x263/0x280 [ 405.668656][T18840] should_fail+0xb/0x20 [ 405.668707][T18840] should_fail_usercopy+0x1a/0x20 [ 405.668748][T18840] _copy_from_user+0x1c/0xb0 [ 405.668774][T18840] kstrtouint_from_user+0x69/0xf0 [ 405.668817][T18840] proc_fail_nth_write+0x50/0x160 [ 405.668903][T18840] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 405.668940][T18840] vfs_write+0x269/0x9f0 [ 405.668962][T18840] ? __rcu_read_unlock+0x4e/0x70 [ 405.669007][T18840] ? __fget_files+0x184/0x1c0 [ 405.669037][T18840] ? mutex_lock+0x57/0x90 [ 405.669075][T18840] ksys_write+0xdc/0x1a0 [ 405.669095][T18840] __x64_sys_write+0x40/0x50 [ 405.669117][T18840] x64_sys_call+0x2847/0x3000 [ 405.669170][T18840] do_syscall_64+0xc0/0x2a0 [ 405.669201][T18840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.669299][T18840] RIP: 0033:0x7f7fa512b78e [ 405.669322][T18840] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 405.669417][T18840] RSP: 002b:00007f7fa3bc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.669446][T18840] RAX: ffffffffffffffda RBX: 00007f7fa3bc76c0 RCX: 00007f7fa512b78e [ 405.669503][T18840] RDX: 0000000000000001 RSI: 00007f7fa3bc70a0 RDI: 0000000000000003 [ 405.669522][T18840] RBP: 00007f7fa3bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 405.669540][T18840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.669558][T18840] R13: 00007f7fa53e6038 R14: 00007f7fa53e5fa0 R15: 00007ffd949ec148 [ 405.669583][T18840] [ 405.947713][T18850] bond2 (unregistering): Released all slaves [ 406.086783][T18875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.160766][T18874] lo speed is unknown, defaulting to 1000 [ 406.242914][T18874] lo speed is unknown, defaulting to 1000 [ 406.360969][ T29] kauditd_printk_skb: 20321 callbacks suppressed [ 406.360988][ T29] audit: type=1400 audit(1770174161.843:190426): avc: denied { read write } for pid=12167 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 406.392770][ T29] audit: type=1400 audit(1770174161.843:190427): avc: denied { read write } for pid=18887 comm="syz.1.5096" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 406.399307][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 406.417204][ T29] audit: type=1400 audit(1770174161.843:190428): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 406.423881][ T3039] audit: audit_lost=6593 audit_rate_limit=0 audit_backlog_limit=64 [ 406.423904][ T3039] audit: backlog limit exceeded [ 406.459850][ T29] audit: type=1400 audit(1770174161.843:190429): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 406.472330][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 406.482812][ T29] audit: type=1400 audit(1770174161.843:190430): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 406.487707][ T3039] audit: audit_lost=6594 audit_rate_limit=0 audit_backlog_limit=64 [ 406.766988][T18914] xt_limit: Overflow, try lower: 0/0 [ 407.072403][T18936] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5119'. [ 407.686320][T18983] netlink: 'syz.1.5139': attribute type 1 has an invalid length. [ 407.811486][T18983] bond2: entered promiscuous mode [ 407.827010][T18983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 407.841835][T18988] FAULT_INJECTION: forcing a failure. [ 407.841835][T18988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.855619][T18988] CPU: 0 UID: 0 PID: 18988 Comm: syz.4.5140 Not tainted syzkaller #0 PREEMPT(voluntary) [ 407.855652][T18988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 407.855667][T18988] Call Trace: [ 407.855674][T18988] [ 407.855684][T18988] __dump_stack+0x1d/0x30 [ 407.855757][T18988] dump_stack_lvl+0x95/0xd0 [ 407.855784][T18988] dump_stack+0x15/0x1b [ 407.855809][T18988] should_fail_ex+0x263/0x280 [ 407.855847][T18988] should_fail+0xb/0x20 [ 407.855917][T18988] should_fail_usercopy+0x1a/0x20 [ 407.855957][T18988] _copy_to_user+0x20/0xa0 [ 407.855983][T18988] simple_read_from_buffer+0xb5/0x130 [ 407.856074][T18988] proc_fail_nth_read+0x10e/0x150 [ 407.856160][T18988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 407.856194][T18988] vfs_read+0x1ab/0x7f0 [ 407.856217][T18988] ? __rcu_read_unlock+0x4e/0x70 [ 407.856257][T18988] ? __rcu_read_unlock+0x4e/0x70 [ 407.856318][T18988] ? __fget_files+0x184/0x1c0 [ 407.856349][T18988] ? mutex_lock+0x57/0x90 [ 407.856381][T18988] ksys_read+0xdc/0x1a0 [ 407.856436][T18988] __x64_sys_read+0x40/0x50 [ 407.856461][T18988] x64_sys_call+0x2889/0x3000 [ 407.856495][T18988] do_syscall_64+0xc0/0x2a0 [ 407.856571][T18988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.856673][T18988] RIP: 0033:0x7ff7d426b78e [ 407.856742][T18988] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 407.856810][T18988] RSP: 002b:00007ff7d2d06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 407.856832][T18988] RAX: ffffffffffffffda RBX: 00007ff7d2d076c0 RCX: 00007ff7d426b78e [ 407.856847][T18988] RDX: 000000000000000f RSI: 00007ff7d2d070a0 RDI: 0000000000000003 [ 407.856873][T18988] RBP: 00007ff7d2d07090 R08: 0000000000000000 R09: 0000000000000000 [ 407.856892][T18988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.856910][T18988] R13: 00007ff7d4526038 R14: 00007ff7d4525fa0 R15: 00007ffc985f96f8 [ 407.856933][T18988] [ 407.876616][T18985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.070054][T18985] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 408.080669][T18985] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 408.127807][T18992] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18992 comm=syz.6.5141 [ 408.149477][T18985] bond2: (slave wireguard0): making interface the new active one [ 408.157365][T18985] wireguard0: entered promiscuous mode [ 408.187222][T18985] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 408.203145][T18983] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 408.224051][T18983] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 408.238821][T18995] bridge2: entered promiscuous mode [ 408.244308][T18995] bridge2: entered allmulticast mode [ 408.369250][T19004] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 408.375915][T19004] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.383663][T19004] vhci_hcd vhci_hcd.0: Device attached [ 408.435003][T19010] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(13) [ 408.441759][T19010] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.449378][T19010] vhci_hcd vhci_hcd.0: Device attached [ 408.496502][T19004] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(16) [ 408.503176][T19004] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 408.511568][T19004] vhci_hcd vhci_hcd.0: Device attached [ 408.553230][T19022] veth0_vlan: entered allmulticast mode [ 408.564486][T19004] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(15) [ 408.571175][T19004] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.579538][T19004] vhci_hcd vhci_hcd.0: Device attached [ 408.606186][T19004] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(19) [ 408.612865][T19004] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.620555][T19004] vhci_hcd vhci_hcd.0: Device attached [ 408.626198][ T3398] usb 13-1: new low-speed USB device number 5 using vhci_hcd [ 408.635877][T19022] veth0_vlan: left promiscuous mode [ 408.649385][T19004] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(21) [ 408.656069][T19004] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.661963][T19022] veth0_vlan: entered promiscuous mode [ 408.665320][T19004] vhci_hcd vhci_hcd.0: Device attached [ 408.689980][T19004] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 408.708466][T19004] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 408.737130][T19004] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 408.747151][T19031] vhci_hcd: connection closed [ 408.747340][T19011] vhci_hcd: connection closed [ 408.747770][T19023] vhci_hcd: connection closed [ 408.752571][T19006] vhci_hcd: connection reset by peer [ 408.767122][ T6773] vhci_hcd vhci_hcd.6: stop threads [ 408.772404][ T6773] vhci_hcd vhci_hcd.6: release socket [ 408.777870][ T6773] vhci_hcd vhci_hcd.6: disconnect device [ 408.784124][T19017] vhci_hcd: connection closed [ 408.784267][T19028] vhci_hcd: connection closed [ 408.793661][ T6773] vhci_hcd vhci_hcd.6: stop threads [ 408.803822][ T6773] vhci_hcd vhci_hcd.6: release socket [ 408.809244][ T6773] vhci_hcd vhci_hcd.6: disconnect device [ 408.829085][ T6773] vhci_hcd vhci_hcd.6: stop threads [ 408.834418][ T6773] vhci_hcd vhci_hcd.6: release socket [ 408.839827][ T6773] vhci_hcd vhci_hcd.6: disconnect device [ 408.866550][ T6773] vhci_hcd vhci_hcd.6: stop threads [ 408.871962][ T6773] vhci_hcd vhci_hcd.6: release socket [ 408.877386][ T6773] vhci_hcd vhci_hcd.6: disconnect device [ 408.912183][ T6773] vhci_hcd vhci_hcd.6: stop threads [ 408.918316][ T6773] vhci_hcd vhci_hcd.6: release socket [ 408.923755][ T6773] vhci_hcd vhci_hcd.6: disconnect device [ 408.937700][ T6773] vhci_hcd vhci_hcd.6: stop threads [ 408.942996][ T6773] vhci_hcd vhci_hcd.6: release socket [ 408.949288][ T6773] vhci_hcd vhci_hcd.6: disconnect device [ 409.151407][T19053] netlink: 'syz.1.5163': attribute type 3 has an invalid length. [ 409.159300][T19053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5163'. [ 409.273964][T19060] lo speed is unknown, defaulting to 1000 [ 409.441281][T19060] lo speed is unknown, defaulting to 1000 [ 410.189187][T19091] FAULT_INJECTION: forcing a failure. [ 410.189187][T19091] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 410.202572][T19091] CPU: 0 UID: 0 PID: 19091 Comm: syz.1.5176 Not tainted syzkaller #0 PREEMPT(voluntary) [ 410.202604][T19091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.202620][T19091] Call Trace: [ 410.202663][T19091] [ 410.202672][T19091] __dump_stack+0x1d/0x30 [ 410.202751][T19091] dump_stack_lvl+0x95/0xd0 [ 410.202777][T19091] dump_stack+0x15/0x1b [ 410.202832][T19091] should_fail_ex+0x263/0x280 [ 410.202971][T19091] should_fail_alloc_page+0xf2/0x100 [ 410.203026][T19091] __alloc_frozen_pages_noprof+0x108/0x350 [ 410.203065][T19091] alloc_pages_mpol+0xb3/0x260 [ 410.203102][T19091] folio_alloc_mpol_noprof+0x39/0x80 [ 410.203209][T19091] shmem_get_folio_gfp+0x3da/0xd60 [ 410.203248][T19091] shmem_write_begin+0xfc/0x1f0 [ 410.203283][T19091] generic_perform_write+0x183/0x490 [ 410.203392][T19091] shmem_file_write_iter+0xc5/0xf0 [ 410.203432][T19091] do_iter_readv_writev+0x4fd/0x5a0 [ 410.203495][T19091] vfs_writev+0x2e1/0x900 [ 410.203533][T19091] do_writev+0xe9/0x210 [ 410.203564][T19091] __x64_sys_writev+0x45/0x50 [ 410.203589][T19091] x64_sys_call+0x1ba5/0x3000 [ 410.203667][T19091] do_syscall_64+0xc0/0x2a0 [ 410.203703][T19091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.203758][T19091] RIP: 0033:0x7f3bb544aeb9 [ 410.203782][T19091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.203805][T19091] RSP: 002b:00007f3bb3ea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 410.203829][T19091] RAX: ffffffffffffffda RBX: 00007f3bb56c5fa0 RCX: 00007f3bb544aeb9 [ 410.203845][T19091] RDX: 0000000000000021 RSI: 0000200000000a40 RDI: 0000000000000004 [ 410.203905][T19091] RBP: 00007f3bb3ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 410.203921][T19091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.203936][T19091] R13: 00007f3bb56c6038 R14: 00007f3bb56c5fa0 R15: 00007ffedf86ce38 [ 410.203984][T19091] [ 410.478312][T19095] netlink: 'syz.6.5179': attribute type 9 has an invalid length. [ 410.734433][T19111] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 410.797383][T19118] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5187'. [ 411.019362][T19129] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5190'. [ 411.077776][T19133] netlink: 'syz.6.5194': attribute type 11 has an invalid length. [ 411.085725][T19133] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5194'. [ 411.128568][ T29] kauditd_printk_skb: 14442 callbacks suppressed [ 411.128588][ T29] audit: type=1400 audit(1770174166.859:203282): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 411.171753][ T29] audit: type=1400 audit(1770174166.890:203283): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 411.194107][ T29] audit: type=1400 audit(1770174166.890:203284): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 411.216461][ T29] audit: type=1400 audit(1770174166.890:203285): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 411.237915][ T29] audit: type=1400 audit(1770174166.890:203286): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 411.260018][ T29] audit: type=1400 audit(1770174166.890:203287): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 411.282153][ T29] audit: type=1400 audit(1770174166.890:203288): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 411.303480][ T29] audit: type=1400 audit(1770174166.890:203289): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 411.325624][ T29] audit: type=1400 audit(1770174166.890:203290): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 411.346990][ T29] audit: type=1400 audit(1770174166.890:203291): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 411.398463][T19143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19143 comm=syz.4.5198 [ 412.212457][T19178] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 412.219124][T19178] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 412.227445][T19178] vhci_hcd vhci_hcd.0: Device attached [ 412.243664][T19176] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 412.250381][T19176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 412.257987][T19178] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16) [ 412.264656][T19178] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 412.272330][T19178] vhci_hcd vhci_hcd.0: Device attached [ 412.272472][T19176] vhci_hcd vhci_hcd.0: Device attached [ 412.320965][T19176] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13) [ 412.327617][T19176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 412.335322][T19176] vhci_hcd vhci_hcd.0: Device attached [ 412.371292][T19176] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 412.377954][T19176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 412.385603][T19176] vhci_hcd vhci_hcd.0: Device attached [ 412.416406][T19176] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21) [ 412.423072][T19176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 412.431330][T19176] vhci_hcd vhci_hcd.0: Device attached [ 412.457659][T19176] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 412.465850][ T1035] usb 3-2: new low-speed USB device number 6 using vhci_hcd [ 412.478005][T19176] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 412.499918][T19176] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 412.532276][T19182] vhci_hcd: connection closed [ 412.532293][T19186] vhci_hcd: connection closed [ 412.532680][T19184] vhci_hcd: connection closed [ 412.539460][ T52] vhci_hcd vhci_hcd.1: stop threads [ 412.544392][T19179] vhci_hcd: connection reset by peer [ 412.547472][ T52] vhci_hcd vhci_hcd.1: release socket [ 412.563090][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 412.568888][T19177] vhci_hcd: connection closed [ 412.572384][T19188] vhci_hcd: connection closed [ 412.602728][ T52] vhci_hcd vhci_hcd.1: stop threads [ 412.612788][ T52] vhci_hcd vhci_hcd.1: release socket [ 412.618237][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 412.683295][ T52] vhci_hcd vhci_hcd.1: stop threads [ 412.688657][ T52] vhci_hcd vhci_hcd.1: release socket [ 412.694135][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 412.739890][ T52] vhci_hcd vhci_hcd.1: stop threads [ 412.745195][ T52] vhci_hcd vhci_hcd.1: release socket [ 412.750765][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 412.768148][ T52] vhci_hcd vhci_hcd.1: stop threads [ 412.773418][ T52] vhci_hcd vhci_hcd.1: release socket [ 412.778982][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 412.788240][ T52] vhci_hcd vhci_hcd.1: stop threads [ 412.793509][ T52] vhci_hcd vhci_hcd.1: release socket [ 412.799762][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 412.835734][T19205] FAULT_INJECTION: forcing a failure. [ 412.835734][T19205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.848907][T19205] CPU: 0 UID: 0 PID: 19205 Comm: syz.3.5215 Not tainted syzkaller #0 PREEMPT(voluntary) [ 412.848936][T19205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.848950][T19205] Call Trace: [ 412.848958][T19205] [ 412.848975][T19205] __dump_stack+0x1d/0x30 [ 412.849009][T19205] dump_stack_lvl+0x95/0xd0 [ 412.849061][T19205] dump_stack+0x15/0x1b [ 412.849090][T19205] should_fail_ex+0x263/0x280 [ 412.849166][T19205] should_fail+0xb/0x20 [ 412.849203][T19205] should_fail_usercopy+0x1a/0x20 [ 412.849312][T19205] _copy_from_user+0x1c/0xb0 [ 412.849340][T19205] kstrtouint_from_user+0x69/0xf0 [ 412.849483][T19205] proc_fail_nth_write+0x50/0x160 [ 412.849531][T19205] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 412.849569][T19205] vfs_write+0x269/0x9f0 [ 412.849594][T19205] ? kmem_cache_free+0xdf/0x380 [ 412.849644][T19205] ? fdget+0xcb/0x110 [ 412.849675][T19205] ksys_write+0xdc/0x1a0 [ 412.849714][T19205] __x64_sys_write+0x40/0x50 [ 412.849740][T19205] x64_sys_call+0x2847/0x3000 [ 412.849775][T19205] do_syscall_64+0xc0/0x2a0 [ 412.849858][T19205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.849889][T19205] RIP: 0033:0x7ff82be5b78e [ 412.849910][T19205] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 412.849936][T19205] RSP: 002b:00007ff82a8f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 412.849969][T19205] RAX: ffffffffffffffda RBX: 00007ff82a8f76c0 RCX: 00007ff82be5b78e [ 412.849988][T19205] RDX: 0000000000000001 RSI: 00007ff82a8f70a0 RDI: 0000000000000009 [ 412.850006][T19205] RBP: 00007ff82a8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 412.850024][T19205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.850042][T19205] R13: 00007ff82c116038 R14: 00007ff82c115fa0 R15: 00007fff62198d28 [ 412.850068][T19205] [ 413.280017][T19214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.301480][T19214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.325214][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5221'. [ 413.334209][T19218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5221'. [ 413.360581][T19218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.379586][T19218] bond1: (slave bond0): making interface the new active one [ 413.399872][T19218] bond1: (slave bond0): Enslaving as an active interface with an up link [ 413.473328][ T3398] usb 13-1: enqueue for inactive port 0 [ 413.482295][ T3398] usb 13-1: enqueue for inactive port 0 [ 413.506241][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5224'. [ 413.515280][T19227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5224'. [ 413.558913][ T3398] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 413.697292][T19235] bond2: (slave veth5): Enslaving as an active interface with a down link [ 413.752746][T19235] bond2: (slave veth7): Enslaving as an active interface with a down link [ 413.955990][T19207] FAULT_INJECTION: forcing a failure. [ 413.955990][T19207] name fail_futex, interval 1, probability 0, space 0, times 1 [ 413.968885][T19207] CPU: 1 UID: 0 PID: 19207 Comm: syz.6.5216 Not tainted syzkaller #0 PREEMPT(voluntary) [ 413.968963][T19207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 413.968981][T19207] Call Trace: [ 413.968990][T19207] [ 413.969055][T19207] __dump_stack+0x1d/0x30 [ 413.969099][T19207] dump_stack_lvl+0x95/0xd0 [ 413.969129][T19207] dump_stack+0x15/0x1b [ 413.969152][T19207] should_fail_ex+0x263/0x280 [ 413.969208][T19207] should_fail+0xb/0x20 [ 413.969326][T19207] get_futex_key+0x12f/0xbe0 [ 413.969356][T19207] futex_wake+0x84/0x380 [ 413.969407][T19207] ? perf_lock_task_context+0x260/0x2d0 [ 413.969451][T19207] do_futex+0x323/0x380 [ 413.969592][T19207] mm_release+0xa1/0x190 [ 413.969708][T19207] exit_mm_release+0x25/0x30 [ 413.969745][T19207] exit_mm+0x37/0x180 [ 413.969775][T19207] do_exit+0x3fa/0x1590 [ 413.969844][T19207] do_group_exit+0xfe/0x140 [ 413.969866][T19207] ? get_signal+0xe47/0xf60 [ 413.969914][T19207] get_signal+0xe4f/0xf60 [ 413.969941][T19207] ? do_recvmmsg+0x505/0x560 [ 413.969964][T19207] arch_do_signal_or_restart+0x96/0x450 [ 413.970103][T19207] exit_to_user_mode_loop+0x6a/0x6f0 [ 413.970266][T19207] ? __x64_sys_recvmmsg+0xe5/0x170 [ 413.970308][T19207] do_syscall_64+0x1d3/0x2a0 [ 413.970351][T19207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.970381][T19207] RIP: 0033:0x7f7fa516aeb9 [ 413.970403][T19207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.970464][T19207] RSP: 002b:00007f7fa3bc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 413.970485][T19207] RAX: fffffffffffffe00 RBX: 00007f7fa53e5fa0 RCX: 00007f7fa516aeb9 [ 413.970505][T19207] RDX: 0000000000000001 RSI: 0000200000002200 RDI: 0000000000000003 [ 413.970522][T19207] RBP: 00007f7fa3bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 413.970536][T19207] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 413.970553][T19207] R13: 00007f7fa53e6038 R14: 00007f7fa53e5fa0 R15: 00007ffd949ec148 [ 413.970651][T19207] [ 414.302607][T19244] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5231'. [ 414.791562][T19261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5238'. [ 414.980110][T19275] FAULT_INJECTION: forcing a failure. [ 414.980110][T19275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.993312][T19275] CPU: 0 UID: 0 PID: 19275 Comm: syz.3.5242 Not tainted syzkaller #0 PREEMPT(voluntary) [ 414.993341][T19275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.993382][T19275] Call Trace: [ 414.993391][T19275] [ 414.993403][T19275] __dump_stack+0x1d/0x30 [ 414.993432][T19275] dump_stack_lvl+0x95/0xd0 [ 414.993459][T19275] dump_stack+0x15/0x1b [ 414.993488][T19275] should_fail_ex+0x263/0x280 [ 414.993555][T19275] should_fail+0xb/0x20 [ 414.993594][T19275] should_fail_usercopy+0x1a/0x20 [ 414.993637][T19275] strncpy_from_user+0x27/0x250 [ 414.993748][T19275] __se_sys_memfd_create+0x205/0x6c0 [ 414.993794][T19275] __x64_sys_memfd_create+0x31/0x40 [ 414.993918][T19275] x64_sys_call+0x28cb/0x3000 [ 414.993953][T19275] do_syscall_64+0xc0/0x2a0 [ 414.993992][T19275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.994060][T19275] RIP: 0033:0x7ff82be9aeb9 [ 414.994082][T19275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.994108][T19275] RSP: 002b:00007ff82a8f6d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 414.994135][T19275] RAX: ffffffffffffffda RBX: 00000000000005be RCX: 00007ff82be9aeb9 [ 414.994165][T19275] RDX: 00007ff82a8f6ddc RSI: 0000000000000000 RDI: 00007ff82bf07333 [ 414.994184][T19275] RBP: 00002000000005c0 R08: 00000000ffffffff R09: 0000000000000000 [ 414.994203][T19275] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 414.994220][T19275] R13: 00007ff82a8f6ddc R14: 00007ff82a8f6de0 R15: 00007fff62198d28 [ 414.994245][T19275] [ 415.279495][T19282] FAULT_INJECTION: forcing a failure. [ 415.279495][T19282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.292697][T19282] CPU: 1 UID: 0 PID: 19282 Comm: syz.4.5246 Not tainted syzkaller #0 PREEMPT(voluntary) [ 415.292801][T19282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 415.292815][T19282] Call Trace: [ 415.292823][T19282] [ 415.292831][T19282] __dump_stack+0x1d/0x30 [ 415.292892][T19282] dump_stack_lvl+0x95/0xd0 [ 415.292922][T19282] dump_stack+0x15/0x1b [ 415.293014][T19282] should_fail_ex+0x263/0x280 [ 415.293096][T19282] should_fail+0xb/0x20 [ 415.293134][T19282] should_fail_usercopy+0x1a/0x20 [ 415.293258][T19282] _copy_from_user+0x1c/0xb0 [ 415.293290][T19282] kstrtouint_from_user+0x69/0xf0 [ 415.293334][T19282] proc_fail_nth_write+0x50/0x160 [ 415.293370][T19282] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 415.293430][T19282] vfs_write+0x269/0x9f0 [ 415.293455][T19282] ? __rcu_read_unlock+0x4e/0x70 [ 415.293491][T19282] ? __fget_files+0x184/0x1c0 [ 415.293521][T19282] ? mutex_lock+0x57/0x90 [ 415.293553][T19282] ksys_write+0xdc/0x1a0 [ 415.293588][T19282] __x64_sys_write+0x40/0x50 [ 415.293610][T19282] x64_sys_call+0x2847/0x3000 [ 415.293644][T19282] do_syscall_64+0xc0/0x2a0 [ 415.293754][T19282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.293842][T19282] RIP: 0033:0x7ff7d426b78e [ 415.293860][T19282] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 415.293884][T19282] RSP: 002b:00007ff7d2d06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 415.293976][T19282] RAX: ffffffffffffffda RBX: 00007ff7d2d076c0 RCX: 00007ff7d426b78e [ 415.294022][T19282] RDX: 0000000000000001 RSI: 00007ff7d2d070a0 RDI: 0000000000000003 [ 415.294040][T19282] RBP: 00007ff7d2d07090 R08: 0000000000000000 R09: 0000000000000000 [ 415.294057][T19282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.294073][T19282] R13: 00007ff7d4526038 R14: 00007ff7d4525fa0 R15: 00007ffc985f96f8 [ 415.294098][T19282] [ 415.619752][T19292] netlink: 'syz.1.5247': attribute type 11 has an invalid length. [ 415.627780][T19292] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5247'. [ 415.902897][ T29] kauditd_printk_skb: 16325 callbacks suppressed [ 415.902916][ T29] audit: type=1326 audit(1770174171.864:214040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19300 comm="syz.1.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3bb5407c51 code=0x7ffc0000 [ 415.952933][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 415.959523][ T3039] audit: audit_lost=8984 audit_rate_limit=0 audit_backlog_limit=64 [ 415.968256][ T3039] audit: backlog limit exceeded [ 416.003384][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 416.010030][ T3039] audit: audit_lost=8985 audit_rate_limit=0 audit_backlog_limit=64 [ 416.018741][ T3039] audit: backlog limit exceeded [ 416.026071][ T29] audit: type=1400 audit(1770174171.896:214041): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 416.048226][ T29] audit: type=1400 audit(1770174171.896:214042): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 416.069578][ T29] audit: type=1400 audit(1770174171.896:214043): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.141062][T19324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5263'. [ 417.150721][T19324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5263'. [ 417.294605][ T1035] usb 3-2: enqueue for inactive port 1 [ 417.311395][ T1035] usb 3-2: enqueue for inactive port 1 [ 417.398999][ T1035] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 417.453843][T19342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5269'. [ 418.323805][T19362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19362 comm=syz.1.5277 [ 418.362241][T19362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19362 comm=syz.1.5277 [ 418.437750][ T3841] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 418.587344][T19377] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 418.594025][T19377] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 418.601618][T19377] vhci_hcd vhci_hcd.0: Device attached [ 418.638250][T19377] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 418.644938][T19377] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 418.652769][T19377] vhci_hcd vhci_hcd.0: Device attached [ 418.688761][T19385] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 418.695435][T19385] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 418.703125][T19385] vhci_hcd vhci_hcd.0: Device attached [ 418.738051][T19377] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 418.744809][T19377] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 418.752365][T19377] vhci_hcd vhci_hcd.0: Device attached [ 418.787736][T19385] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 418.794429][T19385] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 418.802728][T19385] vhci_hcd vhci_hcd.0: Device attached [ 418.819441][T19377] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(20) [ 418.826176][T19377] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 418.833745][T19377] vhci_hcd vhci_hcd.0: Device attached [ 418.833719][ T3405] usb 7-1: new low-speed USB device number 5 using vhci_hcd [ 418.841359][T19377] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.856509][T19377] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.865657][T19377] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.876151][T19394] vhci_hcd: connection closed [ 418.876391][ T6769] vhci_hcd vhci_hcd.3: stop threads [ 418.886510][ T6769] vhci_hcd vhci_hcd.3: release socket [ 418.891957][ T6769] vhci_hcd vhci_hcd.3: disconnect device [ 418.898844][T19397] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5286'. [ 418.899189][T19392] vhci_hcd: connection closed [ 418.908914][T19383] vhci_hcd: connection closed [ 418.909040][T19388] vhci_hcd: connection closed [ 418.914732][T19378] vhci_hcd: connection reset by peer [ 418.920367][T19386] vhci_hcd: connection closed [ 418.926536][ T6769] vhci_hcd vhci_hcd.3: stop threads [ 418.938461][ T6769] vhci_hcd vhci_hcd.3: release socket [ 418.943901][ T6769] vhci_hcd vhci_hcd.3: disconnect device [ 418.962445][ T6769] vhci_hcd vhci_hcd.3: stop threads [ 418.967798][ T6769] vhci_hcd vhci_hcd.3: release socket [ 418.973332][ T6769] vhci_hcd vhci_hcd.3: disconnect device [ 418.979902][ T6769] vhci_hcd vhci_hcd.3: stop threads [ 418.985335][ T6769] vhci_hcd vhci_hcd.3: release socket [ 418.990817][ T6769] vhci_hcd vhci_hcd.3: disconnect device [ 418.997299][ T6769] vhci_hcd vhci_hcd.3: stop threads [ 419.002668][ T6769] vhci_hcd vhci_hcd.3: release socket [ 419.008177][ T6769] vhci_hcd vhci_hcd.3: disconnect device [ 419.017566][ T6769] vhci_hcd vhci_hcd.3: stop threads [ 419.023039][ T6769] vhci_hcd vhci_hcd.3: release socket [ 419.028586][ T6769] vhci_hcd vhci_hcd.3: disconnect device [ 419.361356][T14730] Bluetooth: hci0: Frame reassembly failed (-84) [ 419.927515][T19456] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 419.934253][T19456] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 419.941829][T19456] vhci_hcd vhci_hcd.0: Device attached [ 419.967180][T19456] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 419.973848][T19456] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 419.982239][T19456] vhci_hcd vhci_hcd.0: Device attached [ 420.001493][T19456] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 420.008159][T19456] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 420.016540][T19456] vhci_hcd vhci_hcd.0: Device attached [ 420.043307][T19456] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 420.050056][T19456] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 420.057687][T19456] vhci_hcd vhci_hcd.0: Device attached [ 420.090522][T19456] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 420.097212][T19456] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 420.104863][T19456] vhci_hcd vhci_hcd.0: Device attached [ 420.127162][T19456] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21) [ 420.133926][T19456] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 420.141570][T19456] vhci_hcd vhci_hcd.0: Device attached [ 420.147994][T19456] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 420.158148][T19456] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 420.167382][T19456] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 420.172353][ T1035] usb 3-1: new low-speed USB device number 7 using vhci_hcd [ 420.183063][T19465] vhci_hcd: connection closed [ 420.183073][T19463] vhci_hcd: connection closed [ 420.183397][T19461] vhci_hcd: connection closed [ 420.192751][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 420.194236][T19459] vhci_hcd: connection closed [ 420.197620][ T6769] vhci_hcd vhci_hcd.1: release socket [ 420.203028][T19457] vhci_hcd: connection closed [ 420.207576][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 420.213075][T19467] vhci_hcd: connection closed [ 420.216827][T19458] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 420.236566][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 420.242505][ T6769] vhci_hcd vhci_hcd.1: release socket [ 420.247930][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 420.254463][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 420.259775][ T6769] vhci_hcd vhci_hcd.1: release socket [ 420.265354][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 420.276680][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 420.282020][ T6769] vhci_hcd vhci_hcd.1: release socket [ 420.287492][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 420.293803][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 420.299850][ T6769] vhci_hcd vhci_hcd.1: release socket [ 420.305303][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 420.312423][ T6769] vhci_hcd vhci_hcd.1: stop threads [ 420.317712][ T6769] vhci_hcd vhci_hcd.1: release socket [ 420.323152][ T6769] vhci_hcd vhci_hcd.1: disconnect device [ 420.421927][T19474] IPv6: addrconf: prefix option has invalid lifetime [ 420.684966][ T29] kauditd_printk_skb: 19817 callbacks suppressed [ 420.685030][ T29] audit: type=1400 audit(1770174176.880:230973): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 420.727116][ T29] audit: type=1400 audit(1770174176.880:230974): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 420.747596][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 420.748605][ T29] audit: type=1400 audit(1770174176.880:230975): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 420.756486][ T3039] audit: audit_lost=9949 audit_rate_limit=0 audit_backlog_limit=64 [ 420.776397][ T29] audit: type=1400 audit(1770174176.880:230976): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 420.786370][ T3039] audit: backlog limit exceeded [ 420.805485][ T29] audit: type=1400 audit(1770174176.880:230977): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 420.831628][ T29] audit: type=1400 audit(1770174176.880:230978): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 420.852965][ T29] audit: type=1400 audit(1770174176.880:230979): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 421.228858][ T52] dvmrp0 (unregistering): left allmulticast mode [ 421.243223][ T52] bond0 (unregistering): Released all slaves [ 421.261198][ T52] bond1 (unregistering): Released all slaves [ 421.326504][T17534] Bluetooth: hci0: command 0x1003 tx timeout [ 421.332570][ T3841] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 421.394043][ T52] hsr_slave_0: left promiscuous mode [ 421.400101][ T52] hsr_slave_1: left promiscuous mode [ 421.409833][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.417554][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.879056][T19511] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 421.885747][T19511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 421.893411][T19511] vhci_hcd vhci_hcd.0: Device attached [ 421.912886][T19511] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 421.919593][T19511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 421.927160][T19511] vhci_hcd vhci_hcd.0: Device attached [ 421.933758][T19511] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 421.940466][T19511] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 421.948247][T19511] vhci_hcd vhci_hcd.0: Device attached [ 421.952126][T19512] netlink: 'syz.1.5328': attribute type 10 has an invalid length. [ 421.962460][T19512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5328'. [ 421.975982][T19511] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 421.982651][T19511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 421.990294][T19511] vhci_hcd vhci_hcd.0: Device attached [ 422.020337][T19522] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 422.027087][T19522] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 422.034726][T19522] vhci_hcd vhci_hcd.0: Device attached [ 422.058281][T19511] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(19) [ 422.064969][T19511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 422.072611][T19511] vhci_hcd vhci_hcd.0: Device attached [ 422.078915][T19511] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 422.087466][T19511] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 422.096233][T19511] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 422.105913][T19525] vhci_hcd: connection closed [ 422.106131][T14730] vhci_hcd vhci_hcd.4: stop threads [ 422.116186][T14730] vhci_hcd vhci_hcd.4: release socket [ 422.121639][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 422.127838][T19523] vhci_hcd: connection closed [ 422.127846][T19516] vhci_hcd: connection closed [ 422.128226][T19520] vhci_hcd: connection closed [ 422.137598][T19518] vhci_hcd: connection closed [ 422.143358][T19513] vhci_hcd: connection closed [ 422.143641][T14730] vhci_hcd vhci_hcd.4: stop threads [ 422.158126][T14730] vhci_hcd vhci_hcd.4: release socket [ 422.163577][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 422.170234][ T3740] usb 9-1: new high-speed USB device number 6 using vhci_hcd [ 422.179066][T19514] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 422.179100][T14730] vhci_hcd vhci_hcd.4: stop threads [ 422.179291][T19514] ================================================================== [ 422.185207][T14730] vhci_hcd vhci_hcd.4: release socket [ 422.190286][T19514] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 422.198503][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 422.203839][T19514] [ 422.203851][T19514] write to 0xffffffff86a6bc28 of 8 bytes by task 14730 on cpu 1: [ 422.203873][T19514] data_alloc+0x310/0x390 [ 422.203902][T19514] prb_reserve+0x8d7/0xae0 [ 422.203925][T19514] vprintk_store+0x54a/0x910 [ 422.212523][T14730] vhci_hcd vhci_hcd.4: stop threads [ 422.216512][T19514] vprintk_emit+0x1a4/0x600 [ 422.218859][T14730] vhci_hcd vhci_hcd.4: release socket [ 422.226573][T19514] dev_vprintk_emit+0x242/0x2a0 [ 422.226615][T19514] dev_printk_emit+0x84/0xb0 [ 422.226647][T19514] __dev_printk+0xf3/0x110 [ 422.231050][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 422.235418][T19514] _dev_info+0xa6/0xd0 [ 422.241402][T14730] vhci_hcd vhci_hcd.4: stop threads [ 422.245223][T19514] vhci_shutdown_connection+0x100/0x240 [ 422.249780][T14730] vhci_hcd vhci_hcd.4: release socket [ 422.255119][T19514] event_handler+0x189/0x340 [ 422.255163][T19514] process_scheduled_works+0x4cd/0x9d0 [ 422.260084][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 422.264611][T19514] worker_thread+0x6bc/0x8b0 [ 422.315229][T19514] kthread+0x488/0x510 [ 422.319348][T19514] ret_from_fork+0x148/0x280 [ 422.323987][T19514] ret_from_fork_asm+0x1a/0x30 [ 422.328784][T19514] [ 422.331143][T19514] read to 0xffffffff86a6bc28 of 16 bytes by task 19514 on cpu 0: [ 422.338894][T19514] _prb_read_valid+0x1bc/0x950 [ 422.343710][T19514] desc_update_last_finalized+0x8f/0x170 [ 422.349405][T19514] prb_final_commit+0x10d/0x150 [ 422.354312][T19514] vprintk_store+0x88b/0x910 [ 422.358947][T19514] vprintk_emit+0x1a4/0x600 [ 422.363496][T19514] vprintk_default+0x26/0x30 [ 422.368167][T19514] vprintk+0x1d/0x30 [ 422.372097][T19514] _printk+0x79/0xa0 [ 422.376058][T19514] vhci_tx_loop+0xd58/0xd90 [ 422.380706][T19514] kthread+0x488/0x510 [ 422.384840][T19514] ret_from_fork+0x148/0x280 [ 422.389481][T19514] ret_from_fork_asm+0x1a/0x30 [ 422.394293][T19514] [ 422.396641][T19514] Reported by Kernel Concurrency Sanitizer on: [ 422.402821][T19514] CPU: 0 UID: 0 PID: 19514 Comm: vhci_tx Not tainted syzkaller #0 PREEMPT(voluntary) [ 422.412405][T19514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 422.422500][T19514] ================================================================== [ 422.479965][T14730] vhci_hcd vhci_hcd.4: stop threads [ 422.485330][T14730] vhci_hcd vhci_hcd.4: release socket [ 422.490846][T14730] vhci_hcd vhci_hcd.4: disconnect device [ 422.992031][ T6773] dvmrp0 (unregistering): left allmulticast mode [ 423.004324][ T6773] bond1 (unregistering): (slave bridge1): Removing an active aggregator [ 423.014394][ T6773] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 423.023048][ T6773] bridge1 (unregistering): left promiscuous mode [ 423.029412][ T6773] bridge1 (unregistering): left allmulticast mode [ 423.157542][ T6773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.167073][ T6773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.177124][ T6773] bond0 (unregistering): Released all slaves [ 423.185253][ T6773] bond1 (unregistering): Released all slaves [ 423.194366][ T6773] bond2 (unregistering): Released all slaves [ 423.224908][ T6773] tipc: Left network mode [ 423.275029][ T6773] hsr_slave_0: left promiscuous mode [ 423.281678][ T6773] hsr_slave_1: left promiscuous mode [ 423.355997][T14730] smc: removing ib device syz1 [ 423.521524][ T6773] IPVS: stop unused estimator thread 0... [ 423.587712][ T6773] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.598096][ T6773] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 423.656129][ T6773] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.667242][ T6773] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 423.690167][ T3405] usb 7-1: enqueue for inactive port 0 [ 423.695735][ T3405] usb 7-1: enqueue for inactive port 0 [ 423.732305][ T6773] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.742832][ T6773] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 423.766282][ T3405] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 423.798727][ T6773] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.809759][ T6773] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 423.902154][ T6773] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.959730][ T6773] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.017254][ T6773] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.067367][ T6773] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.444274][ T6773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.458260][ T6773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.469935][ T6773] bond0 (unregistering): Released all slaves [ 424.478725][ T6773] bond1 (unregistering): (slave veth5): Releasing backup interface [ 424.490278][ T6773] bond1 (unregistering): (slave veth7): Releasing backup interface [ 424.499815][ T6773] bond1 (unregistering): Released all slaves [ 424.528297][ T6773] dvmrp0 (unregistering): left allmulticast mode [ 424.541362][ T6773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.552963][ T6773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.563081][ T6773] bond0 (unregistering): Released all slaves [ 424.571530][ T6773] bond1 (unregistering): Released all slaves [ 424.582657][ T6773] bond2 (unregistering): (slave veth5): Releasing active interface [ 424.592704][ T6773] bond2 (unregistering): (slave veth7): Releasing active interface [ 424.602239][ T6773] bond2 (unregistering): Released all slaves [ 424.749031][ T6773] bond1 (unregistering): (slave bond0): Releasing active interface [ 424.759074][ T6773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.768717][ T6773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.778400][ T6773] bond0 (unregistering): Released all slaves [ 424.787268][ T6773] bond1 (unregistering): Released all slaves [ 424.797237][ T6773] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 424.805917][ T6773] wireguard0: left promiscuous mode [ 424.812373][ T6773] bond2 (unregistering): (slave wireguard1): Releasing backup interface [ 424.822180][ T6773] bond2 (unregistering): Released all slaves [ 424.926827][ T6773] hsr_slave_0: left promiscuous mode [ 424.934181][ T6773] hsr_slave_1: left promiscuous mode [ 424.940478][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.947955][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.956034][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.963512][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.973315][ T6773] hsr_slave_0: left promiscuous mode [ 424.979208][ T6773] hsr_slave_1: left promiscuous mode [ 424.984899][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.992410][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.995915][ T1035] usb 3-1: enqueue for inactive port 0 [ 425.005504][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.005540][ T1035] usb 3-1: enqueue for inactive port 0 [ 425.018559][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.027959][ T6773] hsr_slave_0: left promiscuous mode [ 425.033764][ T6773] hsr_slave_1: left promiscuous mode [ 425.046053][ T6773] veth1_macvtap: left promiscuous mode [ 425.051584][ T6773] veth0_macvtap: left promiscuous mode [ 425.057373][ T6773] veth1_vlan: left promiscuous mode [ 425.062700][ T6773] veth0_vlan: left promiscuous mode [ 425.068658][ T6773] veth1_macvtap: left promiscuous mode [ 425.074450][ T1035] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 425.081193][ T6773] veth0_macvtap: left promiscuous mode [ 425.086786][ T6773] veth1_vlan: left promiscuous mode [ 425.092716][ T6773] veth0_vlan: left promiscuous mode [ 425.452273][ T29] kauditd_printk_skb: 29563 callbacks suppressed [ 425.452293][ T29] audit: type=1400 audit(1770174181.885:259127): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 425.485405][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 425.490481][ T29] audit: type=1400 audit(1770174181.885:259128): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 425.491983][ T3039] audit: audit_lost=10422 audit_rate_limit=0 audit_backlog_limit=64 [ 425.492007][ T3039] audit: backlog limit exceeded [ 425.492453][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 425.513348][ T29] audit: type=1400 audit(1770174181.885:259129): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 425.521316][ T3039] audit: audit_lost=10423 audit_rate_limit=0 audit_backlog_limit=64 [ 425.521338][ T3039] audit: backlog limit exceeded [ 425.526194][ T29] audit: type=1400 audit(1770174181.885:259130): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 426.251848][ T6773] IPVS: stop unused estimator thread 0... [ 426.258787][ T6773] IPVS: stop unused estimator thread 0... [ 427.034208][ T3740] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 430.226248][ T29] kauditd_printk_skb: 42032 callbacks suppressed [ 430.226280][ T29] audit: type=1400 audit(1770174186.890:301163): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 430.243030][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 430.256271][ T29] audit: type=1400 audit(1770174186.890:301164): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 430.260646][ T3039] audit: audit_lost=10424 audit_rate_limit=0 audit_backlog_limit=64 [ 430.281749][ T29] audit: type=1400 audit(1770174186.890:301165): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 430.289818][ T3039] audit: backlog limit exceeded [ 430.290605][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 430.311160][ T29] audit: type=1400 audit(1770174186.890:301166): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 430.315969][ T3039] audit: audit_lost=10425 audit_rate_limit=0 audit_backlog_limit=64 [ 430.322506][ T29] audit: type=1400 audit(1770174186.890:301167): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0