last executing test programs: 6.345015129s ago: executing program 4 (id=1428): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x1000, 0x0, 0xffed, 0xa001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) futex(0x0, 0x207, 0x4, 0x0, 0x0, 0x1) splice(r2, 0x0, r5, 0x0, 0x80, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f0000001e80)={0x2020, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) r7 = landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x6}, 0x30, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000200)={0x100, r8}, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x100, r9}, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x47ffffa, 0x105401) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) ioctl$IOC_PR_PREEMPT_ABORT(r10, 0x401870cc, 0x0) landlock_restrict_self(r7, 0x3) landlock_restrict_self(r7, 0x0) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, r6, {0x7, 0x2b, 0x7cc, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) 5.367441177s ago: executing program 4 (id=1432): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000480)={0x7, 0x3ff, 0x962, 0x80000000, 0x4, 0x8}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x800) sendmsg$AUDIT_SET(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x4000000}, 0x24008005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 3.946817222s ago: executing program 4 (id=1440): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000030000000000000000efff000000000000000000"], 0x50) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/mdstat\x00', 0x0, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x30000000}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r2, r3}}, 0x18) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000500)={0x0, 0x5a, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x4000}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0x4) 3.711115694s ago: executing program 4 (id=1443): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x1, 0x4) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e37e1b"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000100)=""/48) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x40000) write$dsp(0xffffffffffffffff, 0x0, 0xfffffe59) 3.391102758s ago: executing program 1 (id=1445): sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000481c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001"], 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0xa, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001400090527bd7000fc045e3d23d7df25", @ANYRES32=r3, @ANYBLOB="08000400640101040800080000010000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0x6c, 0x0, &(0x7f0000000540)=[@acquire_done={0x40106309, 0x2}, @acquire_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000003c0)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r5, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) 3.298801163s ago: executing program 1 (id=1446): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 3.237383316s ago: executing program 1 (id=1447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) r5 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000300)=[{&(0x7f0000007900)=""/4095, 0xfff}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0xa, 0x40, 0x7fff0000}]}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socket$unix(0x1, 0x1, 0x0) r8 = socket(0x25, 0x800, 0x7) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x860, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x140, 0x2, [@TCA_BASIC_ACT={0x13c, 0x3, [@m_connmark={0x138, 0x1, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x1, 0x8001, 0xfffffbff}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x4ca20add, 0x6, 0x5, 0x40}, 0x1}}]}, {0xcd, 0x6, "0942257f03960865d1c7b90e4c85e71d54a6607497aba48266b9955f80a9ff3c293af719dc180d027b23da693745dc53556b7345e006b7b5b648cecdedd96cd281c2ea8349b2127e16afb3f4e8543177bbdc23d6b844d8dbf547ebe2cea7902b13d357208d93feaaaf05c88634d5f10950e5b0480232e13f909724e328899e2fee6248bc3efe7d324ff7af142ddfadb0636b2e4a4a81223422ea57d003d00cef248733cd490e09a804fd51bdf0396d54daf50743696256fb9d2cfa366a29cac0d1c2b530099a406b84"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x6d8, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_SEL={0x274, 0x5, {0x2, 0xc, 0xf, 0x0, 0x1, 0x40, 0x1, 0x3, [{0x8, 0x10000, 0x5, 0x1}, {0x5, 0x6, 0x3, 0x5}, {0x9, 0xeb, 0x9, 0x2}, {0x7ff, 0x1, 0x8001, 0x80000001}, {0x9, 0x2, 0xffffbb01, 0x1}, {0xfff, 0x6, 0xfffffff7, 0x40}, {0x11e, 0x0, 0x1000, 0x2d}, {0x5, 0x80000000, 0x9, 0x5}, {0x5, 0x4, 0x278, 0x5}, {0x3, 0x6, 0x28, 0x3}, {0x3, 0x800, 0xffffffff, 0x2}, {0x86c, 0x8000, 0x8, 0xfff}, {0x95, 0x1000, 0xfffffffc, 0x6}, {0x5, 0x9, 0x180, 0xffff99bb}, {0x80, 0x1, 0x9, 0x2}, {0x3, 0x6, 0x7, 0x10000}, {0xfffffffc, 0x80cd, 0x6, 0xfffffff9}, {0x7ff, 0x8001, 0x4b, 0xf}, {0x1, 0x200, 0x7, 0x8308}, {0x1, 0x81, 0x7, 0x7}, {0x4, 0x18a4, 0x0, 0xff}, {0x9, 0x7, 0x4, 0x7}, {0x6, 0x9, 0x400, 0x7}, {0x4, 0x9, 0x7fff, 0x77}, {0x2, 0x5, 0x8, 0x4}, {0x5, 0xf2a4, 0x2, 0x8}, {0x3, 0x1, 0x8001, 0xf0}, {0x5, 0x32, 0x8e, 0x8}, {0x9, 0x8, 0x8, 0x492b}, {0x1, 0x800, 0x0, 0x7fff}, {0x1, 0x5, 0x5, 0x6}, {0x8, 0x4, 0x10001}, {0x4, 0xeb, 0x4, 0x9}, {0x5, 0x3, 0xfffffff7}, {0x4, 0xbe6e, 0x9, 0xe}, {0xeeb, 0x6172, 0x6, 0x1}, {0xcf3d563, 0xee6c, 0x4, 0x4e8b}, {0x10000, 0x3a7, 0x1, 0x3}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_POLICE={0x450, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xffffffffdffffffe, 0xaee, 0x200000, 0x7, {0x7, 0x0, 0x0, 0xffff, 0xdf2e, 0x1}, {0x2, 0x2, 0xd, 0x8d8, 0x2, 0x3}, 0xffff, 0x7, 0x80000000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x81, 0x6bdb, 0x5, 0x2, 0xf157, 0xffffff01, 0x7fff, 0x3f0b102e, 0x2, 0x9, 0x0, 0x3, 0x2f9, 0x1ff, 0x5, 0x40, 0x200, 0x9, 0x6, 0x1, 0xffffffff, 0x417, 0x3, 0x8, 0x0, 0x8001, 0x6, 0x0, 0x3, 0x4, 0x9, 0x8, 0x8, 0x8, 0x4, 0x1, 0x9b1, 0xff, 0x6, 0x5090, 0x10001, 0x996, 0xfff, 0x81, 0x9, 0x2, 0x800, 0xfffffff8, 0x5, 0xfff, 0x4118, 0x400, 0x7, 0x3, 0x0, 0x6, 0xb9b, 0x8000, 0x0, 0x4, 0x9, 0x8001, 0xfffffff9, 0x9, 0xe2f, 0x98f, 0x0, 0x7, 0x1e0, 0x4, 0x3, 0x3, 0x200, 0x6, 0xe32, 0x9, 0x83, 0xfff, 0x3, 0xff, 0xd4c, 0x6ec, 0x7, 0x7, 0xe8f1, 0x1, 0x3, 0x5, 0xd, 0x81, 0x8001, 0x8e, 0x3, 0x433d, 0x2, 0x8, 0x4, 0x1ff, 0x5, 0x14, 0x3, 0x3, 0x80000001, 0x9, 0x6, 0x5, 0x0, 0x4, 0x7fffffff, 0xdd, 0x10, 0x2, 0x9, 0x5, 0x7, 0x0, 0x1, 0x8, 0x8, 0x10000, 0x5, 0x0, 0x0, 0x967, 0x8000, 0x8f55, 0xffffffb0, 0xd8, 0x7, 0x1, 0x9, 0x9, 0x3, 0x40, 0x2, 0x7, 0x1f, 0x4, 0x3ff, 0x7f, 0x7, 0x10000, 0x40eb2a5b, 0x2, 0xf, 0xff, 0xa1a6, 0x155f, 0x8000, 0x3, 0x1e, 0xa, 0x9, 0x0, 0x8, 0x26, 0x6, 0xef00, 0x5, 0x4, 0x0, 0x6, 0x1, 0x9, 0x0, 0xab, 0x2, 0x3116019b, 0x4, 0x10000, 0x7, 0x1, 0x80, 0xb, 0x800, 0x2, 0x2, 0x0, 0x8c, 0x1, 0x7, 0x4, 0x7710, 0xb2, 0x446, 0x4, 0x7ff, 0xffffff5f, 0x5, 0x574, 0x9, 0xffff, 0x80, 0x0, 0x5, 0x5, 0x7ff, 0xf, 0x2, 0x8001, 0xb2, 0x0, 0x10001, 0x300000, 0xf0000000, 0x1f1f, 0x2, 0x6, 0x3, 0x9, 0xb18f, 0xad50, 0x42, 0x1, 0x9, 0x78821c6f, 0xd, 0x6, 0x3d90eea6, 0x4f5000, 0x9, 0xfffffff6, 0x3, 0xfffffff5, 0x8, 0x26, 0x5, 0x7, 0x5, 0x0, 0x3, 0x7, 0x3, 0xff, 0x9, 0x0, 0x6, 0x200, 0x4, 0x0, 0x4, 0xaa, 0x8, 0x1, 0x2, 0x7f, 0x1, 0x6, 0x0, 0x3ff, 0x7d, 0x1, 0x9, 0x8]}, @TCA_POLICE_RATE64={0xc}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x860}, 0x1, 0x0, 0x0, 0x10}, 0x48880) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3.148195467s ago: executing program 0 (id=1448): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002b40)="f7", 0x1}], 0x1}}], 0x1, 0x40408c1) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000e", 0x46}], 0x1) 3.110786256s ago: executing program 1 (id=1449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x4070bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x4, 0x8, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, 0x0, 0x4) 2.883859743s ago: executing program 1 (id=1451): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000480)={0x7, 0x3ff, 0x962, 0x80000000, 0x4, 0x8}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x800) sendmsg$AUDIT_SET(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x4000000}, 0x24008005) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.478547463s ago: executing program 2 (id=1454): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet(0x2, 0xa, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000009980), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="796112000000000000007e0000000800030053eda353e40c7b5ddb0f38dfa4d4dd279953ca689b22aec440fdf63dee5da280ed44873b80d51f15e4ce06ac10b47877ce42e5f00ec3975b3b6ff04beb190333e7b00bddc5b72294f6a65e6322a52f1e6dd7df841fb6064c6c5feebbd5f35534e6a6aaf8fb3ce340db8263264eb6d7da58000000000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0800570000100000050018010e0000000800a00009000000"], 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r7, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="2a0000f128000000", 0x8}], 0x1}}], 0x1, 0x20000054) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000004c0)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x1000, @mcast2, 0x7}], 0x4c) setxattr$incfs_id(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) splice(r9, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x1) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0xd, 0x3, 0x6, 0x10000007, 0x64, 0x2, 0x8000, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x6, 0x6, 0x9, 0x4, 0x6, 0xa2d8, 0x9, 0x8, 0x8, 0x4, 0xffffff7f, 0x383, 0x8001, 0x4]}) 2.275187107s ago: executing program 2 (id=1455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a6d0000000008000540000000020900020073797a310000000008000a40fffffffc08000c4080000e45140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8]}) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYBLOB="01002dbd7000000000001b000000180001801400020064756d6d793000"/38], 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$FE_SET_PROPERTY(r2, 0x40086f52, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x19}, {0x29, '\x00', @buffer={"d767bacaafe9683f87a3cf4e4e18de4aef4f219460433cae3f75b05dbd913a6c", 0x20}, 0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) listns(&(0x7f0000000040)={0x20, 0x0, 0x5, 0x40000000}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r7], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2.219755546s ago: executing program 0 (id=1456): sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000481c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@deltfilter={0x2c, 0x2d, 0x204, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0xffff, 0x9}, {0xf, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xf6}}]}, 0x2c}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0xa, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001400090527bd7000fc045e3d23d7df25", @ANYRES32=r2, @ANYBLOB="08000400640101040800080000010000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x6c, 0x0, &(0x7f0000000540)=[@acquire_done={0x40106309, 0x2}, @acquire_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000003c0)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r4, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) 2.074269538s ago: executing program 2 (id=1457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2.013305558s ago: executing program 0 (id=1458): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000037000100fcff070004000000010000000c"], 0x20}, 0x1, 0x0, 0x0, 0x2400c811}, 0x200080c4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0x591384acc3e00258, 0x6c, &(0x7f0000000400)=""/108}]}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000500)={{{0x4}}, 0xed, 0x2, &(0x7f0000000400)="a6598837779f45f6717f028aa8a0c1475216c1008ca73d9c0045ad23ad4e86b6fbe895a921ba0163fadde8048b23359941f2a1b4aefa8a754d920bc7afed3966dc1f812af41f4ad4501839ea711249ef70ae3ccc5d9a6f7d0a5ad810a4bb1847b97a8f83aa1a9b873faa67e005768faaa20c0e2da41ad3b20f6e023ab1482f972bffb7b7a2884918c9b854f754112e483b2a82a904291a0f7bbce5eb69732324132534ee544b4e2472e2482940b2196e6aa948c31e7c6e18edf17b043714c429d430655fc5f4d886e65b9f0887018445319dbe9b1c5f709d7c0969389f5e7dd6a499330ac6f06aff1249b98e5d"}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000430007012abd7000fcdbdf25027c000018000000140004000000000000000000000000000000000009"], 0x38}}, 0x2004c000) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, 0x0, 0x0, 0x2000000000001a6, 0x0, 0x0, 0x8}) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04300100c9"], 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x1c, 0x0, 0x1, 0x70bd25, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000010040000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x0, 0xe, 0x0, &(0x7f0000000b00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) 1.912288573s ago: executing program 2 (id=1459): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x2, 0x0, 0x64, 0x7}, {0xccac, 0x2, 0x5, 0x64}, {0x3e3a, 0x7a, 0x7, 0x3ff}, {0x5, 0x81, 0x4, 0x6}, {0x3, 0x0, 0xc, 0x5d}, {0x2, 0x2, 0x0, 0x8}, {0x80, 0x0, 0x0, 0xe}]}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) gettid() r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @random="1700000000de", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x11, 0x0, @local, @rand_addr, {[@lsrr={0x83, 0x3, 0x7e}, @rr={0x7, 0x7, 0xcd, [@remote]}, @timestamp_prespec={0x44, 0x34, 0xf0, 0x3, 0x0, [{@rand_addr=0x64010186}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r1 = syz_usb_connect(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff8cc3dd359be5c01f689bab79260ff224caa30a07bcd5c5504906b768ebcd058586c64f07c3d83f823c923fdc357513ba0355da623050510bd0e8b8a793372d72bdec0e01848f649d6b70e0f08076e14cd42539c0bc8637fbdab6d875bc5d51ee8ae7238239106fcf02e6bca413bce382ce05522704b3ca42c0232d9a2dc3d1991e37bd7f59ed05b7c337a85135594d4593e127b6f9f62f0fccad976f05b2388a21d690740c9abc7459ac9a"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x8, 0x200, 0x1b, "3eccd25569e20900"}) close_range(r0, 0xffffffffffffffff, 0x0) 1.807901271s ago: executing program 0 (id=1460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fremovexattr(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="745a75737471642e6272696467653000901c7f7b900ce401363eb33d0000000001fca30f25ed037650c9a96eb60923336a4be733ddaa4063229747be7118c2730600000010451bde6fc772"]) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/mcfilter6\x00') read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0x1e, &(0x7f0000000440)=ANY=[@ANYBLOB="1840ffffffff61a94714000007000a0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000c185000fcffffff18110000", @ANYRES32=r4, @ANYRES8], &(0x7f0000000540)='GPL\x00', 0x0, 0x1e, &(0x7f0000000580)=""/30, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x19, r4, 0x8, &(0x7f0000000640)={0x3, 0x6}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x1, 0x7, 0x80}, 0x10, 0xffffffffffffffff, r4, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=[{0x3, 0x4, 0xe, 0x1}], 0x10, 0x101}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60080, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x39642, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x305201, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x2000b, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) pipe2$9p(&(0x7f0000000280), 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) 1.720146595s ago: executing program 3 (id=1461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x1b]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.595156923s ago: executing program 1 (id=1462): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e37e1b"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/48) socket$inet6(0xa, 0x1, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc0002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x40000) write$dsp(r2, 0x0, 0xfffffe59) 1.439951801s ago: executing program 3 (id=1463): unshare(0x26020480) r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000540)={0x0, 0x5, 0x4, {0xa, @pix_mp={0xe7, 0x5, 0x32314d54, 0x6, 0x1, [{0x4, 0xa919}, {0x3ff, 0x8}, {0x5a3, 0x9}, {0x400005, 0x6}, {0x9, 0x6}, {0x0, 0x6}, {0x0, 0x8000008}, {0x40, 0x5}], 0x4, 0xf6, 0x4, 0x0, 0x5}}, 0xffeffffd}) r1 = fsopen(&(0x7f0000000040)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0x1, 0x2}, 0x50) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r3, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x20) socket$netlink(0x10, 0x3, 0x0) shutdown(r4, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={0x800}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x801, 0x100) syz_open_dev$vbi(&(0x7f0000000240), 0x1, 0x2) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000014001105f4590000000000002b00000100"/30, @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) r6 = openat$sndtimer(0xffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x403c5404, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04050441c90007", @ANYRESHEX], 0x7) 1.22953991s ago: executing program 2 (id=1465): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet(0x2, 0x804, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f00000001c0)={0x2, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000001280), &(0x7f0000002540), 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r5, &(0x7f0000000380)=""/55, 0x37) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000100)={0x0, 0x0, 0x8000, 0xd, 0x3, 0x4, 0x9}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, 0x0) close(r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x8}) fcntl$lock(r8, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x100, 0xdbd}) fcntl$lock(r7, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x3, r0}) socket$inet(0x2, 0x1, 0x0) 633.183059ms ago: executing program 4 (id=1466): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x80) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x80400) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000480)={r4, 0x8, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x12, 0x8, 0x1, "6ca5f0eac06c8e6665a3f0c2a14023fc2c0fb674556a8dd1edde5c33725224b5e190f5bebede1ffeacfbcd3268944f4f6a8d1258a5d742c51a1f5e52f6ac3509", "a9993f1af9892ffa916fb4d0ebfc1ae32e240072c86570c1fbaf46740e446ecbe3203b33fbf4728532bf032be52fe715b9a7df8b5450b917c1db2a7fa895b8ef", "56f07cce57ea51bb681e4d21dc04f7d2acf8d966a4b21d8de87bf9340280eb5b", [0xf8f9, 0x4]}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="0a00180003037147030300000c0070000500080000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004014}, 0x20000004) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)='*', 0xfdef}], 0x1) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 514.963919ms ago: executing program 4 (id=1467): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x120a) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002280), 0x4500, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002500)={0x0, @multicast2, @broadcast}, &(0x7f0000002540)=0xc) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000025c0), 0x101001, 0x0) r5 = syz_open_dev$audion(&(0x7f00000027c0), 0xc, 0x44600) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000028c0)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000002600)=ANY=[@ANYBLOB="18000000549677dc9fa83671d7745f6606a7fa0805ec57000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000186300000e0000000000000007000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000002780)='syzkaller\x00', 0xfffff354, 0x0, 0x0, 0x41100, 0x41, '\x00', r3, 0x1b, r5, 0x8, &(0x7f0000002800)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000002840)={0x1, 0x10, 0x3, 0x10001}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002880)=[r2, r2, r0, r2, r0], 0x0, 0x10, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x4, &(0x7f0000000100)=ANY=[@ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', r3, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000440)=ANY=[], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e1fcb4b20"], 0xf) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x4, 0x1, 0x1}}, 0x40) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4800521}, 0xc, &(0x7f0000000540)={&(0x7f0000002980)=ANY=[], 0x10c}, 0x1, 0x0, 0x0, 0x2000}, 0x4000800) 363.427067ms ago: executing program 3 (id=1468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a6d0000000008000540000000020900020073797a310000000008000a40fffffffc08000c4080000e45140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8]}) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01002dbd7000000000001b000000180001801400020064756d6d793000"/38], 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$FE_SET_PROPERTY(r2, 0x40086f52, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x19}, {0x29, '\x00', @buffer={"d767bacaafe9683f87a3cf4e4e18de4aef4f219460433cae3f75b05dbd913a6c", 0x20}, 0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) listns(&(0x7f0000000040)={0x20, 0x0, 0x5, 0x40000000}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r7], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 282.647533ms ago: executing program 0 (id=1469): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = dup3(r3, r0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83200000c6010500240012800b00010067656e65766500001400028005000c000200000008000100010000d1"], 0x58}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="18c89a7b11d405c1b829cb65eede87a3a93ead560cb3f639b0ba8c929a6ff524d899045e59225fafc54bb288e42bb010be0f7729b32116a726e8782b761191e7483119106fe31cef099ec26666b2215874952a80a17fdec9bfe8cd241336d2aea33f6474fa3b6530af7c6aff8e2f96a142305d0b7b019c5986b80d1a95364312b654e302c32213372051fdc66404a1a4da2da4bea0f7bf71b3", 0x99}], 0x2, 0x0, 0x0, 0x80}}], 0x1, 0x40) rt_sigtimedwait(&(0x7f0000000540)={[0x6]}, 0x0, &(0x7f0000000600), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x380000000000, 0x0, [0x806f, 0x0, 0x2d5, 0x5, 0x6], [0x9d8, 0x5, 0x1, 0x6, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x3, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x2000000000000005, 0x1, 0x2a9, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0xfffffffff7fffffb, 0x931, 0x5, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xf7fffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7ffffffb, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0xb, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x4000, 0xffffffff, 0x7, 0x406, 0x3, 0x6, 0x2, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x2f) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 182.787619ms ago: executing program 3 (id=1470): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000037000100fcff070004000000010000000c00"], 0x20}, 0x1, 0x0, 0x0, 0x2400c811}, 0x200080c4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0x591384acc3e00258, 0x6c, &(0x7f0000000400)=""/108}]}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000500)={{{0x4}}, 0xed, 0x2, &(0x7f0000000400)="a6598837779f45f6717f028aa8a0c1475216c1008ca73d9c0045ad23ad4e86b6fbe895a921ba0163fadde8048b23359941f2a1b4aefa8a754d920bc7afed3966dc1f812af41f4ad4501839ea711249ef70ae3ccc5d9a6f7d0a5ad810a4bb1847b97a8f83aa1a9b873faa67e005768faaa20c0e2da41ad3b20f6e023ab1482f972bffb7b7a2884918c9b854f754112e483b2a82a904291a0f7bbce5eb69732324132534ee544b4e2472e2482940b2196e6aa948c31e7c6e18edf17b043714c429d430655fc5f4d886e65b9f0887018445319dbe9b1c5f709d7c0969389f5e7dd6a499330ac6f06aff1249b98e5d"}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000430007012abd7000fcdbdf25027c000018000000140004000000000000000000000000000000000009"], 0x38}}, 0x2004c000) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, 0x0, 0x0, 0x2000000000001a6, 0x0, 0x0, 0x8}) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04300100c9"], 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x1c, 0x0, 0x1, 0x70bd25, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000010040000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x0, 0xe, 0x0, &(0x7f0000000b00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) 162.031409ms ago: executing program 0 (id=1471): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r3, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000100)) 7.455332ms ago: executing program 3 (id=1472): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) writev(r0, &(0x7f0000002b00)=[{&(0x7f0000002700)='5', 0x1}, {&(0x7f0000002780), 0xa00}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000000), &(0x7f00000002c0)=ANY=[@ANYBLOB="0406"], 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x158) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_uring_enter(r1, 0x42bb, 0x8d57, 0x52, &(0x7f0000000300)={[0x4]}, 0x8) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0xf5, 0x0, {0x7, 0x1f, 0x0, 0xffffffff97422012, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000021000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffff0000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) 0s ago: executing program 2 (id=1473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fremovexattr(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="745a75737471642e6272696467653000901c7f7b900ce401363eb33d0000000001fca30f25ed037650c9a96eb60923336a4be733ddaa4063229747be7118c2730600000010451bde6fc772"]) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/mcfilter6\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0x1e, &(0x7f0000000440)=ANY=[@ANYBLOB="1840ffffffff61a94714000007000a0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000c185000fcffffff18110000", @ANYRES32=r3, @ANYRES8], &(0x7f0000000540)='GPL\x00', 0x0, 0x1e, &(0x7f0000000580)=""/30, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x19, r3, 0x8, &(0x7f0000000640)={0x3, 0x6}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x1, 0x7, 0x80}, 0x10, 0xffffffffffffffff, r3, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=[{0x3, 0x4, 0xe, 0x1}], 0x10, 0x101}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60080, 0x0) socket$kcm(0x29, 0x5, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x39642, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x305201, 0x0) pipe2$9p(&(0x7f0000000280), 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): n invalid length. [ 138.401097][ T7195] team0: Port device team_slave_0 removed [ 138.586009][ T29] audit: type=1400 audit(1784605877.692:2073): avc: denied { read write } for pid=5608 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 138.632769][ T29] audit: type=1400 audit(1784605877.732:2074): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 138.682748][ T29] audit: type=1400 audit(1784605877.782:2075): avc: denied { allowed } for pid=7203 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 138.801097][ T29] audit: type=1400 audit(1784605877.782:2076): avc: denied { create } for pid=7203 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 138.836521][ T29] audit: type=1400 audit(1784605877.782:2077): avc: denied { execmem } for pid=7203 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 138.873090][ T29] audit: type=1400 audit(1784605877.802:2078): avc: denied { create } for pid=7203 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 138.972427][ T29] audit: type=1400 audit(1784605877.822:2079): avc: denied { read write } for pid=5606 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 139.010193][ T7214] bridge4: entered promiscuous mode [ 139.018538][ T29] audit: type=1400 audit(1784605877.832:2080): avc: denied { create } for pid=7205 comm="syz.1.475" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 139.022505][ T7214] bridge4: entered allmulticast mode [ 139.141953][ T29] audit: type=1400 audit(1784605877.842:2081): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 139.270271][ T7213] can0: slcan on ttyS3. [ 139.505212][ T7217] can0 (unregistered): slcan off ttyS3. [ 140.555205][ T7244] FAULT_INJECTION: forcing a failure. [ 140.555205][ T7244] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 140.613494][ T7244] CPU: 0 UID: 0 PID: 7244 Comm: syz.4.487 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.613513][ T7244] Tainted: [L]=SOFTLOCKUP [ 140.613516][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 140.613522][ T7244] Call Trace: [ 140.613526][ T7244] [ 140.613531][ T7244] dump_stack_lvl+0x100/0x190 [ 140.613547][ T7244] should_fail_ex.cold+0x5/0xa [ 140.613560][ T7244] ? prepare_alloc_pages+0x16d/0x5f0 [ 140.613574][ T7244] should_fail_alloc_page+0xeb/0x140 [ 140.613588][ T7244] prepare_alloc_pages+0x1f0/0x5f0 [ 140.613604][ T7244] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 140.613630][ T7244] ? find_held_lock+0x2b/0x80 [ 140.613646][ T7244] ? is_bpf_text_address+0x8a/0x1a0 [ 140.613659][ T7244] ? is_bpf_text_address+0x8a/0x1a0 [ 140.613671][ T7244] ? bpf_ksym_find+0x128/0x1c0 [ 140.613686][ T7244] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 140.613703][ T7244] ? is_bpf_text_address+0x94/0x1a0 [ 140.613716][ T7244] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 140.613733][ T7244] ? __kernel_text_address+0xd/0x30 [ 140.613744][ T7244] ? unwind_get_return_address+0x59/0xa0 [ 140.613760][ T7244] ? arch_stack_walk+0xa6/0xf0 [ 140.613782][ T7244] ? _kstrtoull+0x13c/0x1f0 [ 140.613798][ T7244] ? __pfx__kstrtoull+0x10/0x10 [ 140.613814][ T7244] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.613826][ T7244] ? policy_nodemask+0xed/0x4f0 [ 140.613840][ T7244] alloc_pages_mpol+0x1fb/0x540 [ 140.613853][ T7244] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 140.613869][ T7244] alloc_pages_noprof+0x1a/0x160 [ 140.613884][ T7244] get_free_pages_noprof+0x10/0xb0 [ 140.613896][ T7244] ? find_held_lock+0x2b/0x80 [ 140.613910][ T7244] vcs_read+0xba/0xc00 [ 140.613924][ T7244] ? get_pid_task+0xfc/0x250 [ 140.613939][ T7244] ? get_pid_task+0xfc/0x250 [ 140.613958][ T7244] ? get_pid_task+0x106/0x250 [ 140.613977][ T7244] ? avc_policy_seqno+0x9/0x20 [ 140.613992][ T7244] ? selinux_file_permission+0x8f/0x6d0 [ 140.614016][ T7244] ? __pfx_vcs_read+0x10/0x10 [ 140.614037][ T7244] ? bpf_lsm_file_permission+0x9/0x10 [ 140.614060][ T7244] ? security_file_permission+0x76/0x210 [ 140.614086][ T7244] ? rw_verify_area+0xce/0x6d0 [ 140.614108][ T7244] ? __pfx_vcs_read+0x10/0x10 [ 140.614131][ T7244] vfs_read+0x1e4/0xb40 [ 140.614151][ T7244] ? __pfx_vfs_read+0x10/0x10 [ 140.614165][ T7244] ? find_held_lock+0x2b/0x80 [ 140.614179][ T7244] ? __fget_files+0x215/0x3d0 [ 140.614188][ T7244] ? __fget_files+0x215/0x3d0 [ 140.614200][ T7244] ? __fget_files+0x21f/0x3d0 [ 140.614212][ T7244] ksys_read+0x12a/0x250 [ 140.614227][ T7244] ? __pfx_ksys_read+0x10/0x10 [ 140.614245][ T7244] do_syscall_64+0x115/0x870 [ 140.614255][ T7244] ? clear_bhb_loop+0x40/0x90 [ 140.614268][ T7244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.614279][ T7244] RIP: 0033:0x7fd95d39de99 [ 140.614289][ T7244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.614299][ T7244] RSP: 002b:00007fd95e2a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.614310][ T7244] RAX: ffffffffffffffda RBX: 00007fd95d625fa0 RCX: 00007fd95d39de99 [ 140.614316][ T7244] RDX: 0000000000001b7d RSI: 0000200000000700 RDI: 0000000000000003 [ 140.614323][ T7244] RBP: 00007fd95e2a8090 R08: 0000000000000000 R09: 0000000000000000 [ 140.614329][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.614335][ T7244] R13: 00007fd95d626038 R14: 00007fd95d625fa0 R15: 00007ffebe3ba678 [ 140.614347][ T7244] [ 141.983332][ T7263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7263 comm=syz.4.493 [ 142.014772][ T7263] netlink: 'syz.4.493': attribute type 1 has an invalid length. [ 142.363035][ T7273] netlink: 'syz.0.496': attribute type 1 has an invalid length. [ 142.620652][ T7282] FAULT_INJECTION: forcing a failure. [ 142.620652][ T7282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.642018][ T7282] CPU: 0 UID: 0 PID: 7282 Comm: syz.2.498 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.642049][ T7282] Tainted: [L]=SOFTLOCKUP [ 142.642054][ T7282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 142.642064][ T7282] Call Trace: [ 142.642070][ T7282] [ 142.642076][ T7282] dump_stack_lvl+0x100/0x190 [ 142.642094][ T7282] should_fail_ex.cold+0x5/0xa [ 142.642108][ T7282] _copy_to_user+0x32/0xd0 [ 142.642123][ T7282] simple_read_from_buffer+0xcb/0x170 [ 142.642143][ T7282] proc_fail_nth_read+0x1af/0x230 [ 142.642159][ T7282] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.642176][ T7282] ? rw_verify_area+0xce/0x6d0 [ 142.642190][ T7282] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.642205][ T7282] vfs_read+0x1e4/0xb40 [ 142.642223][ T7282] ? __pfx_vfs_read+0x10/0x10 [ 142.642238][ T7282] ? __fget_files+0x215/0x3d0 [ 142.642251][ T7282] ? __fget_files+0x21f/0x3d0 [ 142.642265][ T7282] ksys_read+0x12a/0x250 [ 142.642281][ T7282] ? __pfx_ksys_read+0x10/0x10 [ 142.642300][ T7282] do_syscall_64+0x115/0x870 [ 142.642317][ T7282] ? clear_bhb_loop+0x40/0x90 [ 142.642330][ T7282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.642342][ T7282] RIP: 0033:0x7f97cad5e6ce [ 142.642352][ T7282] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.642363][ T7282] RSP: 002b:00007f97cbbd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.642375][ T7282] RAX: ffffffffffffffda RBX: 00007f97cbbd66c0 RCX: 00007f97cad5e6ce [ 142.642382][ T7282] RDX: 000000000000000f RSI: 00007f97cbbd60a0 RDI: 0000000000000004 [ 142.642388][ T7282] RBP: 00007f97cbbd6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.642394][ T7282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.642400][ T7282] R13: 00007f97cb026128 R14: 00007f97cb026090 R15: 00007fffbb6524c8 [ 142.642414][ T7282] [ 143.314510][ T29] kauditd_printk_skb: 4654 callbacks suppressed [ 143.314527][ T29] audit: type=1400 audit(1784605882.422:6736): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 143.376266][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 143.394960][ T5613] audit: audit_backlog=65 > audit_backlog_limit=64 [ 143.402011][ T5271] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 143.410284][ T5613] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 143.418307][ T29] audit: type=1400 audit(1784605882.452:6737): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 143.440182][ T5271] audit: backlog limit exceeded [ 143.445400][ T5613] audit: backlog limit exceeded [ 143.450577][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 143.465244][ T5271] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 144.426451][ T7317] FAULT_INJECTION: forcing a failure. [ 144.426451][ T7317] name failslab, interval 1, probability 0, space 0, times 0 [ 144.514087][ T7317] CPU: 1 UID: 0 PID: 7317 Comm: syz.4.510 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.514115][ T7317] Tainted: [L]=SOFTLOCKUP [ 144.514120][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 144.514135][ T7317] Call Trace: [ 144.514140][ T7317] [ 144.514144][ T7317] dump_stack_lvl+0x100/0x190 [ 144.514162][ T7317] should_fail_ex.cold+0x5/0xa [ 144.514176][ T7317] should_failslab+0xc2/0x120 [ 144.514190][ T7317] kmem_cache_alloc_noprof+0x91/0x6a0 [ 144.514201][ T7317] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 144.514217][ T7317] ? ptlock_alloc+0x1f/0x70 [ 144.514235][ T7317] ptlock_alloc+0x1f/0x70 [ 144.514250][ T7317] pte_alloc_one+0x82/0x3d0 [ 144.514262][ T7317] do_fault+0x86c/0x1750 [ 144.514275][ T7317] ? __pmd_alloc+0x3fb/0x950 [ 144.514290][ T7317] __handle_mm_fault+0x187d/0x2a00 [ 144.514307][ T7317] ? mt_find+0x45e/0x8e0 [ 144.514319][ T7317] ? __pfx___handle_mm_fault+0x10/0x10 [ 144.514334][ T7317] ? __pfx_mt_find+0x10/0x10 [ 144.514352][ T7317] ? find_vma+0xbf/0x140 [ 144.514362][ T7317] ? __pfx_find_vma+0x10/0x10 [ 144.514375][ T7317] handle_mm_fault+0x37b/0xa30 [ 144.514392][ T7317] do_user_addr_fault+0x74c/0x12f0 [ 144.514411][ T7317] exc_page_fault+0x6f/0xd0 [ 144.514427][ T7317] asm_exc_page_fault+0x26/0x30 [ 144.514438][ T7317] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 144.514453][ T7317] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 9d 04 00 66 66 [ 144.514463][ T7317] RSP: 0018:ffffc900034f7bd0 EFLAGS: 00050202 [ 144.514472][ T7317] RAX: 0000000000000001 RBX: 0000200000000300 RCX: 0000000000000004 [ 144.514479][ T7317] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffc900034f7cf0 [ 144.514485][ T7317] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff5200069ef9e [ 144.514491][ T7317] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 144.514496][ T7317] R13: ffffc900034f7cf0 R14: 0000200000000300 R15: 0000000000000084 [ 144.514509][ T7317] _copy_from_user+0x98/0xd0 [ 144.514525][ T7317] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 144.514542][ T7317] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 144.514561][ T7317] do_sock_getsockopt+0x530/0x6e0 [ 144.514574][ T7317] ? __lock_acquire+0x49f/0x1a40 [ 144.514588][ T7317] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 144.514601][ T7317] ? rcu_read_lock_any_held+0x6a/0xa0 [ 144.514621][ T7317] ? find_held_lock+0x2b/0x80 [ 144.514642][ T7317] ? __fget_files+0x21f/0x3d0 [ 144.514656][ T7317] __sys_getsockopt+0x148/0x260 [ 144.514671][ T7317] ? __x64_sys_getsockopt+0xbd/0x160 [ 144.514681][ T7317] __x64_sys_getsockopt+0xbd/0x160 [ 144.514691][ T7317] ? do_syscall_64+0x90/0x870 [ 144.514701][ T7317] ? lockdep_hardirqs_on+0x78/0x100 [ 144.514717][ T7317] do_syscall_64+0x115/0x870 [ 144.514726][ T7317] ? clear_bhb_loop+0x40/0x90 [ 144.514738][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.514748][ T7317] RIP: 0033:0x7fd95d39de99 [ 144.514757][ T7317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.514766][ T7317] RSP: 002b:00007fd95e2a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 144.514775][ T7317] RAX: ffffffffffffffda RBX: 00007fd95d625fa0 RCX: 00007fd95d39de99 [ 144.514782][ T7317] RDX: 0000000000000002 RSI: 0000000000000084 RDI: 0000000000000003 [ 144.514787][ T7317] RBP: 00007fd95e2a8090 R08: 0000200000000300 R09: 0000000000000000 [ 144.514793][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.514799][ T7317] R13: 00007fd95d626038 R14: 00007fd95d625fa0 R15: 00007ffebe3ba678 [ 144.514812][ T7317] [ 145.290915][ T7327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.514'. [ 145.418303][ T7332] bridge5: entered promiscuous mode [ 145.437496][ T7332] bridge5: entered allmulticast mode [ 145.902756][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'. [ 147.168071][ T7363] FAULT_INJECTION: forcing a failure. [ 147.168071][ T7363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.182752][ T7363] CPU: 0 UID: 0 PID: 7363 Comm: syz.0.524 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.182780][ T7363] Tainted: [L]=SOFTLOCKUP [ 147.182786][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 147.182795][ T7363] Call Trace: [ 147.182801][ T7363] [ 147.182808][ T7363] dump_stack_lvl+0x100/0x190 [ 147.182833][ T7363] should_fail_ex.cold+0x5/0xa [ 147.182856][ T7363] _copy_from_iter+0x43a/0x1690 [ 147.182882][ T7363] ? __pfx__copy_from_iter+0x10/0x10 [ 147.182901][ T7363] ? __kasan_kmalloc+0xaa/0xb0 [ 147.182920][ T7363] ? __kvmalloc_node_noprof+0x36d/0x970 [ 147.182937][ T7363] ? file_tty_write.isra.0+0x694/0x890 [ 147.182956][ T7363] ? rcu_is_watching+0x12/0xc0 [ 147.182978][ T7363] ? file_tty_write.isra.0+0x694/0x890 [ 147.182995][ T7363] ? kfree+0x1e5/0x6c0 [ 147.183021][ T7363] file_tty_write.isra.0+0x45b/0x890 [ 147.183043][ T7363] do_iter_readv_writev+0x6f7/0x930 [ 147.183068][ T7363] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 147.183086][ T7363] ? avc_policy_seqno+0x9/0x20 [ 147.183101][ T7363] ? selinux_file_permission+0x8f/0x6d0 [ 147.183129][ T7363] ? bpf_lsm_file_permission+0x9/0x10 [ 147.183154][ T7363] ? security_file_permission+0x76/0x210 [ 147.183182][ T7363] ? rw_verify_area+0xce/0x6d0 [ 147.183206][ T7363] vfs_writev+0x360/0xdd0 [ 147.183237][ T7363] ? __pfx_vfs_writev+0x10/0x10 [ 147.183262][ T7363] ? rcu_read_lock_any_held+0x6a/0xa0 [ 147.183301][ T7363] ? __fget_files+0x21f/0x3d0 [ 147.183325][ T7363] ? do_writev+0x13e/0x340 [ 147.183347][ T7363] do_writev+0x13e/0x340 [ 147.183368][ T7363] ? __pfx_do_writev+0x10/0x10 [ 147.183394][ T7363] do_syscall_64+0x115/0x870 [ 147.183410][ T7363] ? clear_bhb_loop+0x40/0x90 [ 147.183429][ T7363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.183444][ T7363] RIP: 0033:0x7fea1a59de99 [ 147.183458][ T7363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.183474][ T7363] RSP: 002b:00007fea1b4c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 147.183491][ T7363] RAX: ffffffffffffffda RBX: 00007fea1a825fa0 RCX: 00007fea1a59de99 [ 147.183501][ T7363] RDX: 0000000000000002 RSI: 0000200000001580 RDI: 0000000000000003 [ 147.183517][ T7363] RBP: 00007fea1b4c4090 R08: 0000000000000000 R09: 0000000000000000 [ 147.183527][ T7363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.183537][ T7363] R13: 00007fea1a826038 R14: 00007fea1a825fa0 R15: 00007ffc9190d998 [ 147.183560][ T7363] [ 148.324059][ T29] kauditd_printk_skb: 8252 callbacks suppressed [ 148.324076][ T29] audit: type=1400 audit(1784605887.422:14944): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 148.365170][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.375086][ T5271] audit: audit_lost=20 audit_rate_limit=0 audit_backlog_limit=64 [ 148.383064][ T29] audit: type=1400 audit(1784605887.452:14945): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 148.405614][ T5271] audit: backlog limit exceeded [ 148.410775][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.418158][ T5271] audit: audit_lost=21 audit_rate_limit=0 audit_backlog_limit=64 [ 148.426239][ T29] audit: type=1400 audit(1784605887.452:14946): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 148.450950][ T5271] audit: backlog limit exceeded [ 148.462738][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.574922][ T7397] xt_hashlimit: size too large, truncated to 1048576 [ 149.314039][ T7411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.541'. [ 151.590141][ T7449] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 153.334800][ T29] kauditd_printk_skb: 10705 callbacks suppressed [ 153.334825][ T29] audit: type=1400 audit(1784605892.442:25329): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 153.388889][ T7480] trusted_key: encrypted_key: master key parameter 'c0‚:ØHû*N”Ê…™ÐfïeúÂ<‘5Ž•w€èê^n0&À–±š8çÉJÍ' is invalid [ 153.409390][ T29] audit: type=1400 audit(1784605892.442:25330): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 153.440195][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 153.448817][ T5606] audit: audit_backlog=65 > audit_backlog_limit=64 [ 153.457423][ T5271] audit: audit_lost=130 audit_rate_limit=0 audit_backlog_limit=64 [ 153.466599][ T5606] audit: audit_lost=131 audit_rate_limit=0 audit_backlog_limit=64 [ 153.475729][ T5271] audit: backlog limit exceeded [ 153.481288][ T5606] audit: backlog limit exceeded [ 153.487822][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 153.503291][ T29] audit: type=1400 audit(1784605892.442:25331): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 153.932459][ T7495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.571'. [ 153.969815][ T7495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.977265][ T7495] IPv6: NLM_F_CREATE should be set when creating new route [ 154.036515][ T7496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.571'. [ 154.072847][ T7496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.750988][ T7528] bridge2: entered promiscuous mode [ 155.768923][ T7528] bridge2: entered allmulticast mode [ 155.947528][ T7533] trusted_key: encrypted_key: insufficient parameters specified [ 157.039646][ T7556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.590'. [ 157.279628][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 158.074522][ T7579] bridge5: entered promiscuous mode [ 158.108022][ T7579] bridge5: entered allmulticast mode [ 158.347246][ T29] kauditd_printk_skb: 10752 callbacks suppressed [ 158.347263][ T29] audit: type=1400 audit(1784605897.442:34078): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 158.413342][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 158.420955][ T5271] audit: audit_lost=801 audit_rate_limit=0 audit_backlog_limit=64 [ 158.437630][ T5271] audit: backlog limit exceeded [ 158.438182][ T29] audit: type=1400 audit(1784605897.452:34079): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 158.487197][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 158.496352][ T5271] audit: audit_lost=802 audit_rate_limit=0 audit_backlog_limit=64 [ 158.504505][ T29] audit: type=1400 audit(1784605897.452:34080): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 158.553126][ T5271] audit: backlog limit exceeded [ 158.566432][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 158.627901][ T7586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.601'. [ 159.012447][ T7592] FAULT_INJECTION: forcing a failure. [ 159.012447][ T7592] name failslab, interval 1, probability 0, space 0, times 0 [ 159.053023][ T7592] CPU: 0 UID: 0 PID: 7592 Comm: syz.4.604 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.053051][ T7592] Tainted: [L]=SOFTLOCKUP [ 159.053055][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 159.053062][ T7592] Call Trace: [ 159.053066][ T7592] [ 159.053070][ T7592] dump_stack_lvl+0x100/0x190 [ 159.053088][ T7592] should_fail_ex.cold+0x5/0xa [ 159.053103][ T7592] should_failslab+0xc2/0x120 [ 159.053117][ T7592] __kmalloc_noprof+0xfc/0x820 [ 159.053128][ T7592] ? rcu_is_watching+0x12/0xc0 [ 159.053145][ T7592] ? tomoyo_realpath_from_path+0xb6/0x690 [ 159.053166][ T7592] tomoyo_realpath_from_path+0xb6/0x690 [ 159.053186][ T7592] tomoyo_path_number_perm+0x23c/0x580 [ 159.053200][ T7592] ? tomoyo_path_number_perm+0x22e/0x580 [ 159.053216][ T7592] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 159.053243][ T7592] ? find_held_lock+0x2b/0x80 [ 159.053259][ T7592] ? __fget_files+0x215/0x3d0 [ 159.053268][ T7592] ? hook_file_ioctl_common+0x140/0x440 [ 159.053279][ T7592] ? __fget_files+0x215/0x3d0 [ 159.053291][ T7592] ? __fget_files+0x21f/0x3d0 [ 159.053303][ T7592] security_file_ioctl+0xd3/0x230 [ 159.053320][ T7592] __x64_sys_ioctl+0xb7/0x210 [ 159.053341][ T7592] do_syscall_64+0x115/0x870 [ 159.053352][ T7592] ? clear_bhb_loop+0x40/0x90 [ 159.053365][ T7592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.053376][ T7592] RIP: 0033:0x7fd95d39de99 [ 159.053387][ T7592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.053398][ T7592] RSP: 002b:00007fd95e2a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.053409][ T7592] RAX: ffffffffffffffda RBX: 00007fd95d625fa0 RCX: 00007fd95d39de99 [ 159.053416][ T7592] RDX: 00002000000000c0 RSI: 0000000000005600 RDI: 0000000000000003 [ 159.053423][ T7592] RBP: 00007fd95e2a8090 R08: 0000000000000000 R09: 0000000000000000 [ 159.053429][ T7592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.053438][ T7592] R13: 00007fd95d626038 R14: 00007fd95d625fa0 R15: 00007ffebe3ba678 [ 159.053452][ T7592] [ 159.321016][ T7592] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.277486][ T7628] bridge6: entered promiscuous mode [ 160.326505][ T7628] bridge6: entered allmulticast mode [ 163.093280][ T7681] netlink: 'syz.2.634': attribute type 4 has an invalid length. [ 163.192717][ T7682] bridge2: entered promiscuous mode [ 163.212135][ T7682] bridge2: entered allmulticast mode [ 163.354308][ T29] kauditd_printk_skb: 9339 callbacks suppressed [ 163.354328][ T29] audit: type=1400 audit(1784605902.462:43361): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 163.410452][ T29] audit: type=1400 audit(1784605902.462:43362): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 163.476980][ T29] audit: type=1400 audit(1784605902.462:43363): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 163.541122][ T29] audit: type=1400 audit(1784605902.512:43364): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 163.602909][ T5271] audit: audit_backlog=66 > audit_backlog_limit=64 [ 163.616210][ T5271] audit: audit_lost=823 audit_rate_limit=0 audit_backlog_limit=64 [ 163.618440][ T29] audit: type=1400 audit(1784605902.512:43365): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 163.649974][ T7693] audit: audit_backlog=65 > audit_backlog_limit=64 [ 163.672075][ T7693] audit: audit_lost=824 audit_rate_limit=0 audit_backlog_limit=64 [ 163.672286][ T5613] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.600088][ T7715] netlink: 'syz.3.647': attribute type 2 has an invalid length. [ 164.627451][ T7715] netlink: 'syz.3.647': attribute type 2 has an invalid length. [ 164.644332][ T7715] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.647'. [ 165.217788][ T7731] xt_hashlimit: size too large, truncated to 1048576 [ 165.238490][ T7732] bridge_slave_0: left allmulticast mode [ 165.262255][ T7732] bridge_slave_0: left promiscuous mode [ 165.303305][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.882630][ T7740] netlink: 'syz.2.656': attribute type 4 has an invalid length. [ 165.897208][ T7740] netlink: 17 bytes leftover after parsing attributes in process `syz.2.656'. [ 166.012360][ T7741] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 166.052459][ T7732] bridge_slave_1: left allmulticast mode [ 166.067621][ T7732] bridge_slave_1: left promiscuous mode [ 166.078958][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.108094][ T7732] bond0: (slave bond_slave_0): Releasing backup interface [ 166.149394][ T7732] bond0: (slave bond_slave_1): Releasing backup interface [ 166.187785][ T7748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7748 comm=syz.2.656 [ 166.229974][ T7732] team0: Port device team_slave_0 removed [ 166.258371][ T7732] team0: Port device team_slave_1 removed [ 166.276304][ T7732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.298147][ T7732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.309438][ T7732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.317976][ T7732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.335865][ T7732] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 166.460350][ T7742] bond2: (slave geneve2): making interface the new active one [ 166.513882][ T7742] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 166.592042][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 166.616758][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 166.666450][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 166.704156][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 168.333866][ T7812] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 168.364176][ T29] kauditd_printk_skb: 11222 callbacks suppressed [ 168.364194][ T29] audit: type=1400 audit(1784605907.472:52775): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 168.403417][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 168.420225][ T5271] audit: audit_lost=1429 audit_rate_limit=0 audit_backlog_limit=64 [ 168.434047][ T5271] audit: backlog limit exceeded [ 168.439324][ T5607] audit: audit_backlog=65 > audit_backlog_limit=64 [ 168.447655][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 168.454426][ T29] audit: type=1400 audit(1784605907.472:52776): avc: denied { read } for pid=7811 comm="syz.0.681" name="frontend0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 168.463465][ T5607] audit: audit_lost=1430 audit_rate_limit=0 audit_backlog_limit=64 [ 168.494071][ T5271] audit: audit_lost=1431 audit_rate_limit=0 audit_backlog_limit=64 [ 168.502186][ T5271] audit: backlog limit exceeded [ 168.673250][ T7819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.684'. [ 169.722258][ T7857] FAULT_INJECTION: forcing a failure. [ 169.722258][ T7857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.806114][ T7857] CPU: 0 UID: 0 PID: 7857 Comm: syz.1.697 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.806146][ T7857] Tainted: [L]=SOFTLOCKUP [ 169.806152][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 169.806163][ T7857] Call Trace: [ 169.806169][ T7857] [ 169.806176][ T7857] dump_stack_lvl+0x100/0x190 [ 169.806204][ T7857] should_fail_ex.cold+0x5/0xa [ 169.806228][ T7857] _copy_to_user+0x32/0xd0 [ 169.806256][ T7857] simple_read_from_buffer+0xcb/0x170 [ 169.806288][ T7857] proc_fail_nth_read+0x1af/0x230 [ 169.806314][ T7857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.806341][ T7857] ? rw_verify_area+0xce/0x6d0 [ 169.806365][ T7857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.806390][ T7857] vfs_read+0x1e4/0xb40 [ 169.806418][ T7857] ? __pfx_vfs_read+0x10/0x10 [ 169.806443][ T7857] ? __fget_files+0x215/0x3d0 [ 169.806465][ T7857] ? __fget_files+0x21f/0x3d0 [ 169.806489][ T7857] ksys_read+0x12a/0x250 [ 169.806514][ T7857] ? __pfx_ksys_read+0x10/0x10 [ 169.806547][ T7857] do_syscall_64+0x115/0x870 [ 169.806563][ T7857] ? clear_bhb_loop+0x40/0x90 [ 169.806585][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.806604][ T7857] RIP: 0033:0x7f829cf5e6ce [ 169.806619][ T7857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.806636][ T7857] RSP: 002b:00007f829deebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.806660][ T7857] RAX: ffffffffffffffda RBX: 00007f829deec6c0 RCX: 00007f829cf5e6ce [ 169.806672][ T7857] RDX: 000000000000000f RSI: 00007f829deec0a0 RDI: 0000000000000004 [ 169.806682][ T7857] RBP: 00007f829deec090 R08: 0000000000000000 R09: 0000000000000000 [ 169.806692][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.806703][ T7857] R13: 00007f829d226038 R14: 00007f829d225fa0 R15: 00007ffea66d3d28 [ 169.806727][ T7857] [ 170.163132][ T7863] bridge3: entered promiscuous mode [ 170.168447][ T7863] bridge3: entered allmulticast mode [ 170.371318][ T7875] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 171.516333][ T7894] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 171.906286][ T7907] netlink: 830 bytes leftover after parsing attributes in process `syz.4.714'. [ 171.932803][ T7904] Cannot find add_set index 0 as target [ 172.910900][ T7904] ipvlan2: left promiscuous mode [ 172.935721][ T7904] bridge1: left promiscuous mode [ 172.963005][ T7904] bridge2: left promiscuous mode [ 172.991755][ T3313] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.029253][ T3313] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.064559][ T3313] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.107747][ T3313] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.374770][ T29] kauditd_printk_skb: 6665 callbacks suppressed [ 173.374797][ T29] audit: type=1400 audit(1784605912.482:59246): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 173.438421][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 173.439625][ T7948] audit: audit_backlog=65 > audit_backlog_limit=64 [ 173.452985][ T5271] audit: audit_lost=1497 audit_rate_limit=0 audit_backlog_limit=64 [ 173.457024][ T29] audit: type=1400 audit(1784605912.482:59247): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 173.472159][ T5271] audit: backlog limit exceeded [ 173.487224][ T7950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 173.490125][ T7948] audit: audit_lost=1498 audit_rate_limit=0 audit_backlog_limit=64 [ 173.503058][ T7948] audit: backlog limit exceeded [ 173.505219][ T5606] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.792308][ T8006] netlink: 'syz.1.747': attribute type 4 has an invalid length. [ 176.284915][ T8019] netlink: 798 bytes leftover after parsing attributes in process `syz.0.751'. [ 177.782019][ T8051] bridge3: entered promiscuous mode [ 177.789159][ T8051] bridge3: entered allmulticast mode [ 178.076743][ T8058] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8058 comm=syz.1.765 [ 178.158023][ T8056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.190986][ T8056] bridge0: port 3(bond1) entered blocking state [ 178.235778][ T8056] bridge0: port 3(bond1) entered disabled state [ 178.265454][ T8056] bond1: entered allmulticast mode [ 178.299756][ T8056] bond1: entered promiscuous mode [ 178.363358][ T8056] bridge0: port 3(bond1) entered blocking state [ 178.371196][ T8056] bridge0: port 3(bond1) entered forwarding state [ 178.384509][ T29] kauditd_printk_skb: 9594 callbacks suppressed [ 178.384524][ T29] audit: type=1400 audit(1784605917.482:68838): avc: denied { create } for pid=8062 comm="syz.4.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 178.436343][ T98] bridge0: port 3(bond1) entered disabled state [ 178.449862][ T29] audit: type=1400 audit(1784605917.512:68839): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 178.506670][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 178.519679][ T8069] audit: audit_backlog=65 > audit_backlog_limit=64 [ 178.537929][ T5271] audit: audit_lost=1501 audit_rate_limit=0 audit_backlog_limit=64 [ 178.551284][ T5613] audit: audit_backlog=65 > audit_backlog_limit=64 [ 178.559708][ T5271] audit: backlog limit exceeded [ 178.564635][ T5613] audit: audit_lost=1502 audit_rate_limit=0 audit_backlog_limit=64 [ 178.579680][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 178.589620][ T29] audit: type=1400 audit(1784605917.532:68840): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 179.121541][ T8080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8080 comm=syz.3.773 [ 179.197872][ T8080] netlink: 'syz.3.773': attribute type 1 has an invalid length. [ 180.618037][ T8107] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.651417][ T8107] block device autoloading is deprecated and will be removed. [ 180.880225][ T8122] FAULT_INJECTION: forcing a failure. [ 180.880225][ T8122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.914374][ T8122] CPU: 1 UID: 0 PID: 8122 Comm: syz.0.785 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.914405][ T8122] Tainted: [L]=SOFTLOCKUP [ 180.914411][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 180.914421][ T8122] Call Trace: [ 180.914427][ T8122] [ 180.914434][ T8122] dump_stack_lvl+0x100/0x190 [ 180.914462][ T8122] should_fail_ex.cold+0x5/0xa [ 180.914485][ T8122] _copy_to_user+0x32/0xd0 [ 180.914509][ T8122] simple_read_from_buffer+0xcb/0x170 [ 180.914540][ T8122] proc_fail_nth_read+0x1af/0x230 [ 180.914566][ T8122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.914593][ T8122] ? rw_verify_area+0xce/0x6d0 [ 180.914616][ T8122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.914641][ T8122] vfs_read+0x1e4/0xb40 [ 180.914668][ T8122] ? __pfx_vfs_read+0x10/0x10 [ 180.914692][ T8122] ? __fget_files+0x215/0x3d0 [ 180.914715][ T8122] ? __fget_files+0x21f/0x3d0 [ 180.914737][ T8122] ksys_read+0x12a/0x250 [ 180.914761][ T8122] ? __pfx_ksys_read+0x10/0x10 [ 180.914789][ T8122] do_syscall_64+0x115/0x870 [ 180.914805][ T8122] ? clear_bhb_loop+0x40/0x90 [ 180.914827][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.914844][ T8122] RIP: 0033:0x7fea1a55e6ce [ 180.914859][ T8122] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.914874][ T8122] RSP: 002b:00007fea1b4c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.914889][ T8122] RAX: ffffffffffffffda RBX: 00007fea1b4c46c0 RCX: 00007fea1a55e6ce [ 180.914898][ T8122] RDX: 000000000000000f RSI: 00007fea1b4c40a0 RDI: 0000000000000004 [ 180.914907][ T8122] RBP: 00007fea1b4c4090 R08: 0000000000000000 R09: 0000000000000000 [ 180.914915][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.914923][ T8122] R13: 00007fea1a826038 R14: 00007fea1a825fa0 R15: 00007ffc9190d998 [ 180.914942][ T8122] [ 181.197561][ T8124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8124 comm=syz.0.786 [ 181.248811][ T8127] netlink: 'syz.0.786': attribute type 1 has an invalid length. [ 181.364183][ T8132] netlink: 'syz.3.787': attribute type 16 has an invalid length. [ 181.394036][ T8132] netlink: 'syz.3.787': attribute type 5 has an invalid length. [ 181.405425][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.419237][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.999025][ T8162] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 183.395007][ T29] kauditd_printk_skb: 8804 callbacks suppressed [ 183.395024][ T29] audit: type=1400 audit(1784605922.502:76686): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 183.474501][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.481086][ T5271] audit: audit_lost=1823 audit_rate_limit=0 audit_backlog_limit=64 [ 183.490461][ T5271] audit: backlog limit exceeded [ 183.495560][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.502180][ T8168] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.508976][ T8168] audit: audit_lost=1824 audit_rate_limit=0 audit_backlog_limit=64 [ 183.519996][ T5271] audit: audit_lost=1825 audit_rate_limit=0 audit_backlog_limit=64 [ 183.528070][ T5271] audit: backlog limit exceeded [ 183.538800][ T8168] audit: backlog limit exceeded [ 183.719965][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 183.761195][ T8177] netlink: 'syz.0.801': attribute type 5 has an invalid length. [ 184.082491][ T8189] trusted_key: encrypted_key: master key parameter 'c0‚:ØHû*N”Ê…™ÐfïeúÂ<‘5Ž•w€èê^n0&À–±š8çÉJÍ' is invalid [ 184.136677][ T8193] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 184.386492][ T8202] trusted_key: encrypted_key: master key parameter 'c0‚:ØHû*N”Ê…™ÐfïeúÂ<‘5Ž•w€èê^n0&À–±š8çÉJÍ' is invalid [ 184.441797][ T8206] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 185.324301][ T8229] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 187.136393][ T8260] netlink: 12752 bytes leftover after parsing attributes in process `syz.1.834'. [ 188.003927][ T8278] FAULT_INJECTION: forcing a failure. [ 188.003927][ T8278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.008106][ T8276] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 188.031924][ T8278] CPU: 0 UID: 0 PID: 8278 Comm: syz.2.839 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.031951][ T8278] Tainted: [L]=SOFTLOCKUP [ 188.031957][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 188.031967][ T8278] Call Trace: [ 188.031972][ T8278] [ 188.031978][ T8278] dump_stack_lvl+0x100/0x190 [ 188.032003][ T8278] should_fail_ex.cold+0x5/0xa [ 188.032022][ T8278] _copy_to_user+0x32/0xd0 [ 188.032043][ T8278] rng_dev_read+0x223/0x910 [ 188.032064][ T8278] ? __pfx_virtio_read+0x10/0x10 [ 188.032086][ T8278] ? __pfx_rng_dev_read+0x10/0x10 [ 188.032098][ T8278] ? avc_policy_seqno+0x9/0x20 [ 188.032111][ T8278] ? bpf_lsm_file_permission+0x9/0x10 [ 188.032126][ T8278] ? security_file_permission+0x76/0x210 [ 188.032142][ T8278] ? rw_verify_area+0xce/0x6d0 [ 188.032157][ T8278] ? __pfx_rng_dev_read+0x10/0x10 [ 188.032170][ T8278] vfs_readv+0x5d8/0x8d0 [ 188.032187][ T8278] ? __pfx_vfs_readv+0x10/0x10 [ 188.032208][ T8278] ? __fget_files+0x21f/0x3d0 [ 188.032222][ T8278] ? do_preadv+0x1ac/0x270 [ 188.032234][ T8278] do_preadv+0x1ac/0x270 [ 188.032249][ T8278] ? __pfx_do_preadv+0x10/0x10 [ 188.032266][ T8278] do_syscall_64+0x115/0x870 [ 188.032275][ T8278] ? clear_bhb_loop+0x40/0x90 [ 188.032289][ T8278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.032299][ T8278] RIP: 0033:0x7f97cad9de99 [ 188.032309][ T8278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.032319][ T8278] RSP: 002b:00007f97cbbf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 188.032331][ T8278] RAX: ffffffffffffffda RBX: 00007f97cb025fa0 RCX: 00007f97cad9de99 [ 188.032337][ T8278] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 188.032344][ T8278] RBP: 00007f97cbbf7090 R08: 0000000000000000 R09: 0000000000000000 [ 188.032350][ T8278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.032356][ T8278] R13: 00007f97cb026038 R14: 00007f97cb025fa0 R15: 00007fffbb6524c8 [ 188.032370][ T8278] [ 188.424039][ T29] kauditd_printk_skb: 7473 callbacks suppressed [ 188.424060][ T29] audit: type=1326 audit(1784605927.522:84160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.1.838" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f829cf9de99 code=0x7ffc0000 [ 188.495100][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.514989][ T5271] audit: audit_lost=1826 audit_rate_limit=0 audit_backlog_limit=64 [ 188.531156][ T8280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.561878][ T5271] audit: backlog limit exceeded [ 188.576086][ T8280] audit: audit_lost=1827 audit_rate_limit=0 audit_backlog_limit=64 [ 188.608567][ T29] audit: type=1326 audit(1784605927.522:84161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.1.838" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829cf9de99 code=0x7ffc0000 [ 188.635683][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.646782][ T5271] audit: audit_lost=1828 audit_rate_limit=0 audit_backlog_limit=64 [ 188.661450][ T5271] audit: backlog limit exceeded [ 188.818057][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.827473][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.484719][ T8296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8296 comm=syz.2.843 [ 189.565595][ T8297] netlink: 'syz.2.843': attribute type 1 has an invalid length. [ 189.699715][ T149] Bluetooth: hci5: Frame reassembly failed (-84) [ 189.708026][ T149] Bluetooth: hci5: Frame reassembly failed (-84) [ 190.315439][ T8312] bridge7: entered promiscuous mode [ 190.327868][ T8312] bridge7: entered allmulticast mode [ 190.348033][ T8312] team0: Port device bridge7 added [ 190.840114][ T8316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.850'. [ 191.022105][ T8320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8320 comm=syz.0.852 [ 191.038372][ T8321] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 191.077042][ T8320] netlink: 'syz.0.852': attribute type 1 has an invalid length. [ 191.775105][ T5610] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 191.782336][ T5619] Bluetooth: hci5: command 0x1003 tx timeout [ 192.299026][ T8347] netlink: 'syz.4.862': attribute type 64 has an invalid length. [ 192.320662][ T8346] bridge8: entered promiscuous mode [ 192.344660][ T8346] bridge8: entered allmulticast mode [ 192.350895][ T8347] netlink: 5 bytes leftover after parsing attributes in process `syz.4.862'. [ 192.708774][ T8359] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 192.930271][ T8366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8366 comm=syz.4.867 [ 192.982371][ T8366] netlink: 'syz.4.867': attribute type 1 has an invalid length. [ 193.424850][ T8374] FAULT_INJECTION: forcing a failure. [ 193.424850][ T8374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.446572][ T29] kauditd_printk_skb: 8387 callbacks suppressed [ 193.446589][ T29] audit: type=1400 audit(1784605932.532:91678): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 193.477070][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.490831][ T5271] audit: audit_lost=2119 audit_rate_limit=0 audit_backlog_limit=64 [ 193.503168][ T5271] audit: backlog limit exceeded [ 193.511364][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.511564][ T8374] CPU: 1 UID: 0 PID: 8374 Comm: syz.4.870 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.511587][ T8374] Tainted: [L]=SOFTLOCKUP [ 193.511594][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 193.511603][ T8374] Call Trace: [ 193.511609][ T8374] [ 193.511615][ T8374] dump_stack_lvl+0x100/0x190 [ 193.511642][ T8374] should_fail_ex.cold+0x5/0xa [ 193.511662][ T8374] _copy_to_user+0x32/0xd0 [ 193.511684][ T8374] simple_read_from_buffer+0xcb/0x170 [ 193.511712][ T8374] proc_fail_nth_read+0x1af/0x230 [ 193.511734][ T8374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.511757][ T8374] ? rw_verify_area+0xce/0x6d0 [ 193.511777][ T8374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.511798][ T8374] vfs_read+0x1e4/0xb40 [ 193.511822][ T8374] ? __pfx_vfs_read+0x10/0x10 [ 193.511842][ T8374] ? __fget_files+0x215/0x3d0 [ 193.511862][ T8374] ? __fget_files+0x21f/0x3d0 [ 193.511882][ T8374] ksys_read+0x12a/0x250 [ 193.511903][ T8374] ? __pfx_ksys_read+0x10/0x10 [ 193.511931][ T8374] do_syscall_64+0x115/0x870 [ 193.511945][ T8374] ? clear_bhb_loop+0x40/0x90 [ 193.511964][ T8374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.511980][ T8374] RIP: 0033:0x7fd95d35e6ce [ 193.511993][ T8374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.512008][ T8374] RSP: 002b:00007fd95e2a7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.512023][ T8374] RAX: ffffffffffffffda RBX: 00007fd95e2a86c0 RCX: 00007fd95d35e6ce [ 193.512034][ T8374] RDX: 000000000000000f RSI: 00007fd95e2a80a0 RDI: 0000000000000004 [ 193.512043][ T8374] RBP: 00007fd95e2a8090 R08: 0000000000000000 R09: 0000000000000000 [ 193.512053][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.512061][ T8374] R13: 00007fd95d626038 R14: 00007fd95d625fa0 R15: 00007ffebe3ba678 [ 193.512083][ T8374] [ 193.512639][ T8378] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.741611][ T8377] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.783619][ T5613] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.792329][ T29] audit: type=1400 audit(1784605932.542:91679): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 193.813739][ T5271] audit: audit_lost=2120 audit_rate_limit=0 audit_backlog_limit=64 [ 194.639004][ T8398] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 194.863686][ T8402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8402 comm=syz.2.879 [ 194.912632][ T8407] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 195.008307][ T8408] bridge4: entered promiscuous mode [ 195.017087][ T8408] bridge4: entered allmulticast mode [ 195.350290][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 195.376433][ T8422] netlink: 'syz.2.885': attribute type 5 has an invalid length. [ 197.077553][ T8444] FAULT_INJECTION: forcing a failure. [ 197.077553][ T8444] name failslab, interval 1, probability 0, space 0, times 0 [ 197.126197][ T8444] CPU: 0 UID: 0 PID: 8444 Comm: syz.0.891 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.126216][ T8444] Tainted: [L]=SOFTLOCKUP [ 197.126220][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 197.126226][ T8444] Call Trace: [ 197.126232][ T8444] [ 197.126237][ T8444] dump_stack_lvl+0x100/0x190 [ 197.126254][ T8444] should_fail_ex.cold+0x5/0xa [ 197.126267][ T8444] should_failslab+0xc2/0x120 [ 197.126284][ T8444] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 197.126305][ T8444] ? sidtab_sid2str_get+0x17a/0x670 [ 197.126340][ T8444] kmemdup_noprof+0x29/0x60 [ 197.126358][ T8444] sidtab_sid2str_get+0x17a/0x670 [ 197.126385][ T8444] security_sid_to_context_core+0x35a/0x6d0 [ 197.126410][ T8444] ? skb_put+0x12a/0x180 [ 197.126435][ T8444] avc_audit_post_callback+0x109/0x910 [ 197.126464][ T8444] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 197.126494][ T8444] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 197.126519][ T8444] ? skb_put+0x138/0x180 [ 197.126542][ T8444] ? audit_log_n_string+0x256/0x550 [ 197.126576][ T8444] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 197.126601][ T8444] common_lsm_audit+0x23f/0x2b0 [ 197.126625][ T8444] ? __pfx_common_lsm_audit+0x10/0x10 [ 197.126646][ T8444] slow_avc_audit+0x186/0x210 [ 197.126658][ T8444] ? __pfx_slow_avc_audit+0x10/0x10 [ 197.126669][ T8444] ? find_held_lock+0x2b/0x80 [ 197.126684][ T8444] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 197.126694][ T8444] ? avc_denied+0x14a/0x190 [ 197.126705][ T8444] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 197.126718][ T8444] avc_has_perm+0x1a6/0x1e0 [ 197.126729][ T8444] ? __pfx_avc_has_perm+0x10/0x10 [ 197.126741][ T8444] ? tomoyo_mount_permission+0x252/0x460 [ 197.126759][ T8444] inode_has_perm+0x166/0x1d0 [ 197.126772][ T8444] selinux_mount+0x362/0x440 [ 197.126789][ T8444] ? __pfx_selinux_mount+0x10/0x10 [ 197.126809][ T8444] security_sb_mount+0x10b/0x270 [ 197.126828][ T8444] path_mount+0x158/0x23d0 [ 197.126852][ T8444] ? __pfx_path_mount+0x10/0x10 [ 197.126871][ T8444] ? lockdep_hardirqs_on+0x78/0x100 [ 197.126902][ T8444] ? putname+0xb1/0x110 [ 197.126920][ T8444] ? kmem_cache_free+0x127/0x6b0 [ 197.126954][ T8444] ? __x64_sys_mount+0x293/0x310 [ 197.126972][ T8444] __x64_sys_mount+0x293/0x310 [ 197.126992][ T8444] ? __pfx___x64_sys_mount+0x10/0x10 [ 197.127017][ T8444] do_syscall_64+0x115/0x870 [ 197.127033][ T8444] ? clear_bhb_loop+0x40/0x90 [ 197.127055][ T8444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.127073][ T8444] RIP: 0033:0x7fea1a59de99 [ 197.127088][ T8444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.127105][ T8444] RSP: 002b:00007fea1b4c4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 197.127122][ T8444] RAX: ffffffffffffffda RBX: 00007fea1a825fa0 RCX: 00007fea1a59de99 [ 197.127134][ T8444] RDX: 00002000000003c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 197.127145][ T8444] RBP: 00007fea1b4c4090 R08: 00002000000004c0 R09: 0000000000000000 [ 197.127155][ T8444] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 197.127165][ T8444] R13: 00007fea1a826038 R14: 00007fea1a825fa0 R15: 00007ffc9190d998 [ 197.127189][ T8444] [ 198.453994][ T29] kauditd_printk_skb: 9885 callbacks suppressed [ 198.454012][ T29] audit: type=1400 audit(1784605937.552:100154): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.541169][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 198.561080][ T5271] audit: audit_lost=2592 audit_rate_limit=0 audit_backlog_limit=64 [ 198.575165][ T8462] audit: audit_backlog=65 > audit_backlog_limit=64 [ 198.587228][ T29] audit: type=1400 audit(1784605937.562:100155): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 198.621295][ T8465] bridge4: entered promiscuous mode [ 198.632427][ T5271] audit: backlog limit exceeded [ 198.649014][ T8462] audit: audit_lost=2593 audit_rate_limit=0 audit_backlog_limit=64 [ 198.657085][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 198.657103][ T5271] audit: audit_lost=2594 audit_rate_limit=0 audit_backlog_limit=64 [ 198.657116][ T5271] audit: backlog limit exceeded [ 198.680954][ T8465] bridge4: entered allmulticast mode [ 200.077953][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 200.090749][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 202.117572][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 202.170712][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 202.174137][ T8514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.187841][ T8514] IPv6: NLM_F_CREATE should be set when creating new route [ 202.195358][ T8517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.470643][ T29] kauditd_printk_skb: 9734 callbacks suppressed [ 203.470659][ T29] audit: type=1400 audit(1784605942.562:109208): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.559026][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 203.584243][ T5271] audit: audit_lost=2822 audit_rate_limit=0 audit_backlog_limit=64 [ 203.612612][ T5271] audit: backlog limit exceeded [ 203.629537][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 203.637804][ T29] audit: type=1400 audit(1784605942.562:109209): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.665508][ T5271] audit: audit_lost=2823 audit_rate_limit=0 audit_backlog_limit=64 [ 203.681089][ T5271] audit: backlog limit exceeded [ 203.696537][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 203.705043][ T29] audit: type=1400 audit(1784605942.562:109210): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 204.316517][ T8544] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 204.330598][ T8545] netlink: 'syz.0.924': attribute type 16 has an invalid length. [ 204.359272][ T8545] netlink: 'syz.0.924': attribute type 17 has an invalid length. [ 204.381195][ T8548] FAULT_INJECTION: forcing a failure. [ 204.381195][ T8548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.413272][ T8548] CPU: 1 UID: 0 PID: 8548 Comm: syz.3.925 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.413301][ T8548] Tainted: [L]=SOFTLOCKUP [ 204.413307][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 204.413318][ T8548] Call Trace: [ 204.413323][ T8548] [ 204.413333][ T8548] dump_stack_lvl+0x100/0x190 [ 204.413360][ T8548] should_fail_ex.cold+0x5/0xa [ 204.413378][ T8548] ? prepare_alloc_pages+0x16d/0x5f0 [ 204.413403][ T8548] should_fail_alloc_page+0xeb/0x140 [ 204.413426][ T8548] prepare_alloc_pages+0x1f0/0x5f0 [ 204.413452][ T8548] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 204.413490][ T8548] ? __update_page_owner_handle+0x390/0x530 [ 204.413518][ T8548] ? __lock_acquire+0x49f/0x1a40 [ 204.413538][ T8548] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 204.413570][ T8548] ? __lock_acquire+0x49f/0x1a40 [ 204.413602][ T8548] ? find_held_lock+0x2b/0x80 [ 204.413625][ T8548] ? is_bpf_text_address+0x8a/0x1a0 [ 204.413647][ T8548] ? is_bpf_text_address+0x8a/0x1a0 [ 204.413668][ T8548] ? bpf_ksym_find+0x128/0x1c0 [ 204.413691][ T8548] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 204.413712][ T8548] ? policy_nodemask+0xed/0x4f0 [ 204.413737][ T8548] alloc_pages_mpol+0x1fb/0x540 [ 204.413760][ T8548] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 204.413789][ T8548] folio_alloc_mpol_noprof+0x36/0x260 [ 204.413816][ T8548] shmem_alloc_folio+0x135/0x160 [ 204.413842][ T8548] shmem_alloc_and_add_folio+0x371/0xd40 [ 204.413875][ T8548] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 204.413902][ T8548] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 204.413933][ T8548] shmem_get_folio_gfp+0x6ad/0x1910 [ 204.413959][ T8548] ? filemap_map_pages+0x112d/0x1fe0 [ 204.413981][ T8548] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 204.414007][ T8548] ? __pfx_filemap_map_pages+0x10/0x10 [ 204.414031][ T8548] ? filemap_map_pages+0x1137/0x1fe0 [ 204.414058][ T8548] shmem_fault+0x1f9/0xa20 [ 204.414082][ T8548] ? __lock_acquire+0x49f/0x1a40 [ 204.414107][ T8548] ? __pfx_shmem_fault+0x10/0x10 [ 204.414134][ T8548] ? __pfx_filemap_map_pages+0x10/0x10 [ 204.414158][ T8548] ? find_held_lock+0x2b/0x80 [ 204.414183][ T8548] __do_fault+0x10b/0x440 [ 204.414203][ T8548] do_fault+0xa99/0x1750 [ 204.414222][ T8548] ? __pmd_alloc+0x3fb/0x950 [ 204.414245][ T8548] __handle_mm_fault+0x187d/0x2a00 [ 204.414272][ T8548] ? mt_find+0x45e/0x8e0 [ 204.414292][ T8548] ? __pfx___handle_mm_fault+0x10/0x10 [ 204.414315][ T8548] ? __pfx_mt_find+0x10/0x10 [ 204.414347][ T8548] ? find_vma+0xbf/0x140 [ 204.414365][ T8548] ? __pfx_find_vma+0x10/0x10 [ 204.414386][ T8548] handle_mm_fault+0x37b/0xa30 [ 204.414416][ T8548] do_user_addr_fault+0x74c/0x12f0 [ 204.414449][ T8548] exc_page_fault+0x6f/0xd0 [ 204.414477][ T8548] asm_exc_page_fault+0x26/0x30 [ 204.414495][ T8548] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 204.414517][ T8548] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 9d 04 00 66 66 [ 204.414532][ T8548] RSP: 0018:ffffc9001011fbd0 EFLAGS: 00050202 [ 204.414544][ T8548] RAX: 0000000000000001 RBX: 0000200000000300 RCX: 0000000000000004 [ 204.414553][ T8548] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffc9001011fcf0 [ 204.414562][ T8548] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52002023f9e [ 204.414571][ T8548] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 204.414579][ T8548] R13: ffffc9001011fcf0 R14: 0000200000000300 R15: 0000000000000084 [ 204.414599][ T8548] _copy_from_user+0x98/0xd0 [ 204.414619][ T8548] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 204.414646][ T8548] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 204.414678][ T8548] do_sock_getsockopt+0x530/0x6e0 [ 204.414700][ T8548] ? __lock_acquire+0x49f/0x1a40 [ 204.414723][ T8548] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 204.414745][ T8548] ? rcu_read_lock_any_held+0x6a/0xa0 [ 204.414776][ T8548] ? find_held_lock+0x2b/0x80 [ 204.414806][ T8548] ? __fget_files+0x21f/0x3d0 [ 204.414828][ T8548] __sys_getsockopt+0x148/0x260 [ 204.414853][ T8548] ? __x64_sys_getsockopt+0xbd/0x160 [ 204.414870][ T8548] __x64_sys_getsockopt+0xbd/0x160 [ 204.414887][ T8548] ? do_syscall_64+0x90/0x870 [ 204.414904][ T8548] ? lockdep_hardirqs_on+0x78/0x100 [ 204.414930][ T8548] do_syscall_64+0x115/0x870 [ 204.414945][ T8548] ? clear_bhb_loop+0x40/0x90 [ 204.414967][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.414984][ T8548] RIP: 0033:0x7f0ef399de99 [ 204.414998][ T8548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.415013][ T8548] RSP: 002b:00007f0ef47fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 204.415028][ T8548] RAX: ffffffffffffffda RBX: 00007f0ef3c25fa0 RCX: 00007f0ef399de99 [ 204.415039][ T8548] RDX: 0000000000000002 RSI: 0000000000000084 RDI: 0000000000000003 [ 204.415049][ T8548] RBP: 00007f0ef47fb090 R08: 0000200000000300 R09: 0000000000000000 [ 204.415060][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.415069][ T8548] R13: 00007f0ef3c26038 R14: 00007f0ef3c25fa0 R15: 00007ffd57110488 [ 204.415093][ T8548] [ 204.919759][ T8545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.927418][ T8545] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.938476][ T8545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.057193][ T8545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.067986][ T8545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.175339][ T8545] veth1_vlan: left promiscuous mode [ 205.192481][ T8545] veth0_vlan: left promiscuous mode [ 205.231746][ T8545] veth0_vlan: entered promiscuous mode [ 205.260495][ T8545] veth1_vlan: entered promiscuous mode [ 205.323424][ T8545] veth1_macvtap: left promiscuous mode [ 205.342465][ T8545] veth0_macvtap: left promiscuous mode [ 205.359612][ T8545] veth0_macvtap: entered promiscuous mode [ 205.371432][ T8545] veth1_macvtap: entered promiscuous mode [ 205.529059][ T8545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.563124][ T8545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.587110][ T8545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.610117][ T8545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.646732][ T8545] bridge1: left allmulticast mode [ 205.738504][ T8545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.772313][ T8545] bridge2: left allmulticast mode [ 205.785060][ T8545] bridge3: left promiscuous mode [ 205.836910][ T8545] bridge3: left allmulticast mode [ 205.882869][ T8545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.913645][ T8545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.937595][ T8545] bridge4: left promiscuous mode [ 205.959574][ T8545] bridge4: left allmulticast mode [ 206.040889][ T149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.100072][ T149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.148510][ T149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.170767][ T149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.225626][ T8577] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 207.489089][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'. [ 207.499133][ T8602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.947'. [ 207.584244][ T8602] geneve2: entered promiscuous mode [ 207.607267][ T8602] geneve2: entered allmulticast mode [ 207.654536][ T3313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.675556][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.711700][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.735692][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.132199][ T8608] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.168604][ T8608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.175897][ T8608] IPv6: NLM_F_CREATE should be set when creating new route [ 208.183114][ T8608] IPv6: NLM_F_CREATE should be set when creating new route [ 208.190320][ T8608] IPv6: NLM_F_CREATE should be set when creating new route [ 208.300027][ T8610] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.949'. [ 208.376364][ T8614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8614 comm=syz.4.951 [ 208.421850][ T8614] netlink: 'syz.4.951': attribute type 1 has an invalid length. [ 208.482023][ T29] kauditd_printk_skb: 7089 callbacks suppressed [ 208.482040][ T29] audit: type=1400 audit(1784605947.582:115242): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.546180][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.552287][ T29] audit: type=1400 audit(1784605947.582:115243): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.574089][ T29] audit: type=1400 audit(1784605947.612:115244): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.596440][ T29] audit: type=1400 audit(1784605947.612:115245): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.600348][ T5271] audit: audit_lost=3177 audit_rate_limit=0 audit_backlog_limit=64 [ 208.617859][ T29] audit: type=1400 audit(1784605947.612:115246): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.617903][ T29] audit: type=1400 audit(1784605947.612:115247): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.617939][ T29] audit: type=1400 audit(1784605947.612:115248): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.690327][ T5271] audit: backlog limit exceeded [ 211.053199][ T8658] bridge2: entered promiscuous mode [ 211.061854][ T8658] bridge2: entered allmulticast mode [ 211.156983][ T8661] FAULT_INJECTION: forcing a failure. [ 211.156983][ T8661] name failslab, interval 1, probability 0, space 0, times 0 [ 211.177812][ T8661] CPU: 1 UID: 0 PID: 8661 Comm: syz.0.967 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.177843][ T8661] Tainted: [L]=SOFTLOCKUP [ 211.177850][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 211.177861][ T8661] Call Trace: [ 211.177868][ T8661] [ 211.177876][ T8661] dump_stack_lvl+0x100/0x190 [ 211.177904][ T8661] should_fail_ex.cold+0x5/0xa [ 211.177929][ T8661] should_failslab+0xc2/0x120 [ 211.177952][ T8661] __kvmalloc_node_noprof+0x116/0x970 [ 211.177976][ T8661] ? file_tty_write.isra.0+0x64e/0x890 [ 211.178000][ T8661] file_tty_write.isra.0+0x64e/0x890 [ 211.178020][ T8661] ? security_file_permission+0x76/0x210 [ 211.178047][ T8661] ? rw_verify_area+0xce/0x6d0 [ 211.178076][ T8661] vfs_write+0x6ac/0x1050 [ 211.178104][ T8661] ? __pfx_tty_write+0x10/0x10 [ 211.178125][ T8661] ? __pfx_vfs_write+0x10/0x10 [ 211.178148][ T8661] ? find_held_lock+0x2b/0x80 [ 211.178191][ T8661] ksys_write+0x12a/0x250 [ 211.178217][ T8661] ? __pfx_ksys_write+0x10/0x10 [ 211.178250][ T8661] do_syscall_64+0x115/0x870 [ 211.178269][ T8661] ? clear_bhb_loop+0x40/0x90 [ 211.178292][ T8661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.178311][ T8661] RIP: 0033:0x7fea1a59de99 [ 211.178328][ T8661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.178346][ T8661] RSP: 002b:00007fea1b4c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 211.178365][ T8661] RAX: ffffffffffffffda RBX: 00007fea1a825fa0 RCX: 00007fea1a59de99 [ 211.178377][ T8661] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 211.178388][ T8661] RBP: 00007fea1b4c4090 R08: 0000000000000000 R09: 0000000000000000 [ 211.178399][ T8661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.178410][ T8661] R13: 00007fea1a826038 R14: 00007fea1a825fa0 R15: 00007ffc9190d998 [ 211.178436][ T8661] [ 212.073411][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 212.169202][ T3313] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.199523][ T3313] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.242758][ T3313] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.258953][ T8683] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.280460][ T3313] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.292880][ T8683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.300157][ T8683] IPv6: NLM_F_CREATE should be set when creating new route [ 212.307440][ T8683] IPv6: NLM_F_CREATE should be set when creating new route [ 212.314697][ T8683] IPv6: NLM_F_CREATE should be set when creating new route [ 212.364681][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'. [ 212.388346][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'. [ 212.389175][ T8683] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.977'. [ 213.053819][ T8701] FAULT_INJECTION: forcing a failure. [ 213.053819][ T8701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.087498][ T8701] CPU: 0 UID: 0 PID: 8701 Comm: syz.3.984 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.087528][ T8701] Tainted: [L]=SOFTLOCKUP [ 213.087539][ T8701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 213.087549][ T8701] Call Trace: [ 213.087556][ T8701] [ 213.087563][ T8701] dump_stack_lvl+0x100/0x190 [ 213.087594][ T8701] should_fail_ex.cold+0x5/0xa [ 213.087620][ T8701] _copy_from_user+0x2e/0xd0 [ 213.087646][ T8701] core_sys_select+0x2d0/0xbb0 [ 213.087682][ T8701] ? __pfx_core_sys_select+0x10/0x10 [ 213.087710][ T8701] ? find_held_lock+0x2b/0x80 [ 213.087740][ T8701] ? get_pid_task+0xfc/0x250 [ 213.087791][ T8701] ? __pfx_set_user_sigmask+0x10/0x10 [ 213.087824][ T8701] ? ktime_get_ts64+0x318/0x420 [ 213.087846][ T8701] ? ktime_get_ts64+0x257/0x420 [ 213.087871][ T8701] do_pselect.constprop.0+0x238/0x270 [ 213.087903][ T8701] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 213.087938][ T8701] ? ksys_write+0x1ac/0x250 [ 213.087970][ T8701] __x64_sys_pselect6+0x149/0x1c0 [ 213.088003][ T8701] do_syscall_64+0x115/0x870 [ 213.088022][ T8701] ? clear_bhb_loop+0x40/0x90 [ 213.088046][ T8701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.088073][ T8701] RIP: 0033:0x7f0ef399de99 [ 213.088090][ T8701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.088109][ T8701] RSP: 002b:00007f0ef47fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 213.088129][ T8701] RAX: ffffffffffffffda RBX: 00007f0ef3c25fa0 RCX: 00007f0ef399de99 [ 213.088142][ T8701] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 213.088154][ T8701] RBP: 00007f0ef47fb090 R08: 0000200000000280 R09: 0000000000000000 [ 213.088166][ T8701] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 213.088177][ T8701] R13: 00007f0ef3c26038 R14: 00007f0ef3c25fa0 R15: 00007ffd57110488 [ 213.088203][ T8701] [ 213.484452][ T29] kauditd_printk_skb: 7915 callbacks suppressed [ 213.484468][ T29] audit: type=1400 audit(1784605952.582:122732): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.530002][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 213.541488][ T5613] audit: audit_backlog=65 > audit_backlog_limit=64 [ 213.558438][ T8705] audit: audit_backlog=65 > audit_backlog_limit=64 [ 213.567650][ T8705] audit: audit_lost=3322 audit_rate_limit=0 audit_backlog_limit=64 [ 213.572388][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 213.577806][ T5271] audit: audit_lost=3323 audit_rate_limit=0 audit_backlog_limit=64 [ 213.594668][ T5613] audit: audit_lost=3324 audit_rate_limit=0 audit_backlog_limit=64 [ 213.602928][ T8705] audit: backlog limit exceeded [ 213.606660][ T8708] audit: audit_backlog=65 > audit_backlog_limit=64 [ 213.612602][ T5613] audit: backlog limit exceeded [ 213.683380][ T8710] FAULT_INJECTION: forcing a failure. [ 213.683380][ T8710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.719389][ T8710] CPU: 0 UID: 0 PID: 8710 Comm: syz.2.987 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.719418][ T8710] Tainted: [L]=SOFTLOCKUP [ 213.719424][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 213.719433][ T8710] Call Trace: [ 213.719439][ T8710] [ 213.719446][ T8710] dump_stack_lvl+0x100/0x190 [ 213.719473][ T8710] should_fail_ex.cold+0x5/0xa [ 213.719494][ T8710] _copy_from_user+0x2e/0xd0 [ 213.719517][ T8710] copy_msghdr_from_user+0x9f/0x4c0 [ 213.719545][ T8710] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 213.719580][ T8710] ___sys_sendmsg+0x106/0x1e0 [ 213.719606][ T8710] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.719629][ T8710] ? __lock_acquire+0x49f/0x1a40 [ 213.719651][ T8710] ? get_pid_task+0x106/0x250 [ 213.719708][ T8710] __sys_sendmsg+0x160/0x210 [ 213.719731][ T8710] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.719763][ T8710] do_syscall_64+0x115/0x870 [ 213.719780][ T8710] ? clear_bhb_loop+0x40/0x90 [ 213.719802][ T8710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.719820][ T8710] RIP: 0033:0x7f97cad9de99 [ 213.719834][ T8710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.719852][ T8710] RSP: 002b:00007f97cbbf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.719869][ T8710] RAX: ffffffffffffffda RBX: 00007f97cb025fa0 RCX: 00007f97cad9de99 [ 213.719880][ T8710] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 213.719891][ T8710] RBP: 00007f97cbbf7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.719901][ T8710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.719911][ T8710] R13: 00007f97cb026038 R14: 00007f97cb025fa0 R15: 00007fffbb6524c8 [ 213.719933][ T8710] [ 215.398089][ T8747] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 215.671539][ T8754] trusted_key: encrypted_key: master key parameter 'c0‚:ØHû*N”Ê…™ÐfïeúÂ<‘5Ž•w€èê^n0&À–±š8çÉJÍ' is invalid [ 215.855837][ T8757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8757 comm=syz.0.1003 [ 215.912225][ T8759] netlink: 'syz.0.1003': attribute type 1 has an invalid length. [ 215.980949][ T7916] IPVS: starting estimator thread 0... [ 216.094130][ T8765] IPVS: using max 72 ests per chain, 172800 per kthread [ 216.113821][ T8766] can0: slcan on ttyS3. [ 216.190188][ T8761] can0 (unregistered): slcan off ttyS3. [ 216.796004][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 216.842331][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 216.851724][ T8789] bridge6: entered promiscuous mode [ 216.857118][ T8789] bridge6: entered allmulticast mode [ 217.069026][ T8796] netlink: 'syz.2.1017': attribute type 1 has an invalid length. [ 217.158700][ T8799] netlink: 'syz.0.1016': attribute type 4 has an invalid length. [ 217.913420][ T8817] __vm_enough_memory: pid: 8817, comm: syz.2.1021, bytes: 4503599627366400 not enough memory for the allocation [ 218.494984][ T29] kauditd_printk_skb: 8356 callbacks suppressed [ 218.495001][ T29] audit: type=1400 audit(1784605957.602:131062): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 218.559321][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 218.580015][ T5271] audit: audit_lost=3334 audit_rate_limit=0 audit_backlog_limit=64 [ 218.596419][ T5608] audit: audit_backlog=65 > audit_backlog_limit=64 [ 218.606410][ T5271] audit: backlog limit exceeded [ 218.617525][ T29] audit: type=1400 audit(1784605957.602:131063): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 218.642185][ T5608] audit: audit_lost=3335 audit_rate_limit=0 audit_backlog_limit=64 [ 218.655991][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 218.665535][ T5608] audit: backlog limit exceeded [ 218.680523][ T5271] audit: audit_lost=3336 audit_rate_limit=0 audit_backlog_limit=64 [ 220.591525][ T8853] netlink: 'syz.2.1035': attribute type 1 has an invalid length. [ 221.784881][ T8871] netlink: 'syz.0.1042': attribute type 2 has an invalid length. [ 221.808824][ T8871] netlink: 'syz.0.1042': attribute type 2 has an invalid length. [ 221.819919][ T8871] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.1042'. [ 221.957748][ T8881] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 221.961019][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 222.418831][ T8908] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1057'. [ 222.485861][ T8911] bridge5: entered promiscuous mode [ 222.505372][ T8911] bridge5: entered allmulticast mode [ 223.504010][ T29] kauditd_printk_skb: 7748 callbacks suppressed [ 223.504025][ T29] audit: type=1400 audit(1784605962.602:138781): avc: denied { create } for pid=8928 comm="syz.1.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 223.579571][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.599020][ T29] audit: type=1400 audit(1784605962.602:138782): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.631874][ T5271] audit: audit_lost=3347 audit_rate_limit=0 audit_backlog_limit=64 [ 223.642331][ T5271] audit: backlog limit exceeded [ 223.649172][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.657279][ T5271] audit: audit_lost=3348 audit_rate_limit=0 audit_backlog_limit=64 [ 223.677874][ T5271] audit: backlog limit exceeded [ 223.678029][ T8931] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.683109][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.228334][ T8944] netlink: 'syz.2.1069': attribute type 2 has an invalid length. [ 224.267572][ T8944] netlink: 'syz.2.1069': attribute type 2 has an invalid length. [ 224.295423][ T8944] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.1069'. [ 224.476372][ T8946] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 225.015605][ T8955] bridge9: entered promiscuous mode [ 225.030737][ T8955] bridge9: entered allmulticast mode [ 227.392169][ T8992] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 228.427451][ T9002] bridge10: entered promiscuous mode [ 228.447165][ T9002] bridge10: entered allmulticast mode [ 228.517514][ T29] kauditd_printk_skb: 8598 callbacks suppressed [ 228.517533][ T29] audit: type=1400 audit(1784605967.622:147329): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 228.582254][ T9007] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.601121][ T9007] audit: audit_lost=3367 audit_rate_limit=0 audit_backlog_limit=64 [ 228.601325][ T5271] audit: audit_backlog=66 > audit_backlog_limit=64 [ 228.622801][ T5271] audit: audit_lost=3368 audit_rate_limit=0 audit_backlog_limit=64 [ 228.632739][ T9007] audit: backlog limit exceeded [ 228.639269][ T5271] audit: backlog limit exceeded [ 228.639295][ T9005] audit: audit_backlog=66 > audit_backlog_limit=64 [ 228.644829][ T5271] audit: audit_backlog=66 > audit_backlog_limit=64 [ 228.673892][ T29] audit: type=1400 audit(1784605967.622:147330): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.327823][ T9022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9022 comm=syz.4.1098 [ 229.345480][ T9022] netlink: 'syz.4.1098': attribute type 1 has an invalid length. [ 229.479395][ T9025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9025 comm=syz.4.1099 [ 229.495495][ T9025] netlink: 'syz.4.1099': attribute type 1 has an invalid length. [ 231.042905][ T9055] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1109'. [ 232.513788][ T9075] syzkaller0: entered promiscuous mode [ 232.555124][ T9075] syzkaller0: entered allmulticast mode [ 232.708098][ T9082] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1120'. [ 233.524448][ T29] kauditd_printk_skb: 10271 callbacks suppressed [ 233.524464][ T29] audit: type=1400 audit(1784605972.632:156695): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 233.572053][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.581161][ T5271] audit: audit_lost=3672 audit_rate_limit=0 audit_backlog_limit=64 [ 233.652270][ T29] audit: type=1400 audit(1784605972.662:156696): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 233.674395][ T5271] audit: backlog limit exceeded [ 233.685821][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.702629][ T5271] audit: audit_lost=3673 audit_rate_limit=0 audit_backlog_limit=64 [ 233.726055][ T5271] audit: backlog limit exceeded [ 233.733900][ T29] audit: type=1400 audit(1784605972.662:156697): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 233.764328][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.147110][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 234.194239][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 235.309573][ T149] Bluetooth: hci5: Frame reassembly failed (-84) [ 235.335550][ T9118] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 236.447013][ T9117] bridge3: entered promiscuous mode [ 236.669989][ T9132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9132 comm=syz.0.1140 [ 236.714442][ T9132] netlink: 'syz.0.1140': attribute type 1 has an invalid length. [ 236.769176][ T9136] netlink: 'syz.4.1142': attribute type 2 has an invalid length. [ 237.374244][ T5619] Bluetooth: hci5: command 0x1003 tx timeout [ 237.382972][ T5610] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 237.808068][ T9164] netlink: 'syz.1.1153': attribute type 2 has an invalid length. [ 238.001365][ T9170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1156'. [ 238.039047][ T9170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1156'. [ 238.534856][ T29] kauditd_printk_skb: 12621 callbacks suppressed [ 238.534874][ T29] audit: type=1400 audit(1784605977.642:168408): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 238.589181][ T9185] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 238.603440][ T29] audit: type=1400 audit(1784605977.642:168409): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 238.629620][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.641501][ T29] audit: type=1400 audit(1784605977.642:168410): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 238.643988][ T5271] audit: audit_lost=3978 audit_rate_limit=0 audit_backlog_limit=64 [ 238.678834][ T29] audit: type=1400 audit(1784605977.642:168411): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 238.702094][ T5271] audit: backlog limit exceeded [ 238.716221][ T29] audit: type=1400 audit(1784605977.642:168412): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 238.717537][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.764064][ T29] audit: type=1400 audit(1784605977.642:168413): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 239.468522][ T9208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1170'. [ 239.517315][ T9208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1170'. [ 240.938216][ T9228] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 241.427078][ T9242] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.454097][ T9242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.461384][ T9242] IPv6: NLM_F_CREATE should be set when creating new route [ 241.468649][ T9242] IPv6: NLM_F_CREATE should be set when creating new route [ 241.475903][ T9242] IPv6: NLM_F_CREATE should be set when creating new route [ 241.482012][ T9244] netlink: 'syz.3.1184': attribute type 2 has an invalid length. [ 241.517581][ T9244] netlink: 'syz.3.1184': attribute type 2 has an invalid length. [ 241.526589][ T9246] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1183'. [ 241.547528][ T9244] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1184'. [ 241.825482][ T9260] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 242.581712][ T9277] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 242.654923][ T9277] bond5: entered promiscuous mode [ 242.660251][ T9281] IPv6: NLM_F_CREATE should be specified when creating new route [ 242.669760][ T9283] netlink: 'syz.1.1198': attribute type 2 has an invalid length. [ 242.677880][ T9277] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.684707][ T9281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.691915][ T9281] IPv6: NLM_F_CREATE should be set when creating new route [ 242.699173][ T9281] IPv6: NLM_F_CREATE should be set when creating new route [ 242.706412][ T9281] IPv6: NLM_F_CREATE should be set when creating new route [ 242.721103][ T9284] netlink: 'syz.1.1198': attribute type 2 has an invalid length. [ 242.733454][ T9284] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1198'. [ 242.768996][ T9285] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1199'. [ 242.909086][ T9291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1202'. [ 242.921144][ T9291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1202'. [ 243.005060][ T9293] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 243.545903][ T29] kauditd_printk_skb: 12591 callbacks suppressed [ 243.545919][ T29] audit: type=1400 audit(1784605982.652:180457): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.574554][ T29] audit: type=1400 audit(1784605982.652:180458): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.600568][ T29] audit: type=1400 audit(1784605982.652:180459): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.605365][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.623226][ T29] audit: type=1400 audit(1784605982.652:180460): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.664279][ T5271] audit: audit_lost=4162 audit_rate_limit=0 audit_backlog_limit=64 [ 243.678166][ T5271] audit: backlog limit exceeded [ 243.705371][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.705875][ T29] audit: type=1400 audit(1784605982.652:180461): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.746953][ T9311] audit: audit_backlog=65 > audit_backlog_limit=64 [ 244.130620][ T9318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1213'. [ 244.180487][ T9318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1213'. [ 244.209382][ T9319] bridge4: entered promiscuous mode [ 244.250935][ T9319] bridge4: entered allmulticast mode [ 244.332556][ T9322] netlink: 'syz.1.1214': attribute type 2 has an invalid length. [ 244.366131][ T9322] netlink: 'syz.1.1214': attribute type 2 has an invalid length. [ 244.391290][ T9322] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1214'. [ 244.601598][ T9327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.608990][ T9327] IPv6: NLM_F_CREATE should be set when creating new route [ 244.616247][ T9327] IPv6: NLM_F_CREATE should be set when creating new route [ 244.623545][ T9327] IPv6: NLM_F_CREATE should be set when creating new route [ 244.652288][ T9328] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1215'. [ 247.055403][ T5619] Bluetooth: hci5: command 0x1003 tx timeout [ 247.062691][ T5610] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 247.305339][ T9376] bridge7: entered promiscuous mode [ 247.321811][ T9376] bridge7: entered allmulticast mode [ 248.543498][ T9385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1234'. [ 248.567431][ T29] kauditd_printk_skb: 9374 callbacks suppressed [ 248.567447][ T29] audit: type=1400 audit(1784605987.642:189574): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.630113][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.651349][ T5609] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.660556][ T5271] audit: audit_lost=4251 audit_rate_limit=0 audit_backlog_limit=64 [ 248.674585][ T5606] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.681344][ T5271] audit: backlog limit exceeded [ 248.681683][ T5609] audit: audit_lost=4252 audit_rate_limit=0 audit_backlog_limit=64 [ 248.686242][ T5606] audit: audit_lost=4253 audit_rate_limit=0 audit_backlog_limit=64 [ 248.686254][ T5606] audit: backlog limit exceeded [ 248.691433][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.733042][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'. [ 248.833839][ T9394] netlink: 'syz.0.1236': attribute type 1 has an invalid length. [ 248.849012][ T9392] bridge11: entered promiscuous mode [ 248.887955][ T9392] bridge11: entered allmulticast mode [ 248.947353][ T9394] bond6: entered promiscuous mode [ 248.983680][ T9394] 8021q: adding VLAN 0 to HW filter on device bond6 [ 249.146965][ T9402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.154238][ T9402] IPv6: NLM_F_CREATE should be set when creating new route [ 249.161449][ T9402] IPv6: NLM_F_CREATE should be set when creating new route [ 249.168712][ T9402] IPv6: NLM_F_CREATE should be set when creating new route [ 249.186205][ T9397] bond6: (slave veth3): making interface the new active one [ 249.215086][ T9397] veth3: entered promiscuous mode [ 249.240308][ T9397] bond6: (slave veth3): Enslaving as an active interface with an up link [ 249.271562][ T9403] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1239'. [ 249.471192][ T9408] netlink: 'syz.4.1242': attribute type 49 has an invalid length. [ 249.492346][ T9408] bond0: (slave bond_slave_0): Releasing backup interface [ 249.588974][ T9408] bond_slave_0: entered promiscuous mode [ 249.588993][ T9408] bond_slave_0: entered allmulticast mode [ 250.122697][ T9421] bridge5: entered promiscuous mode [ 250.160787][ T9421] bridge5: entered allmulticast mode [ 250.259212][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.268099][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.240099][ T9460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.247428][ T9460] IPv6: NLM_F_CREATE should be set when creating new route [ 252.254762][ T9460] IPv6: NLM_F_CREATE should be set when creating new route [ 252.261982][ T9460] IPv6: NLM_F_CREATE should be set when creating new route [ 252.298962][ T9461] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1258'. [ 252.406310][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1259'. [ 252.447829][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1259'. [ 253.578543][ T29] kauditd_printk_skb: 10275 callbacks suppressed [ 253.578559][ T29] audit: type=1400 audit(1784605992.682:199832): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.638609][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.645857][ T9477] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.649391][ T29] audit: type=1400 audit(1784605992.682:199833): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.675892][ T5271] audit: audit_lost=4260 audit_rate_limit=0 audit_backlog_limit=64 [ 253.687326][ T9477] audit: audit_lost=4261 audit_rate_limit=0 audit_backlog_limit=64 [ 253.696022][ T5271] audit: backlog limit exceeded [ 253.701010][ T9477] audit: backlog limit exceeded [ 253.701047][ T29] audit: type=1400 audit(1784605992.682:199834): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.736523][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.848783][ T9478] bridge7: entered promiscuous mode [ 253.903762][ T9478] bridge7: entered allmulticast mode [ 254.244961][ T9483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9483 comm=syz.0.1266 [ 255.006068][ T9493] can0: slcan on ttyS3. [ 255.299889][ T9492] can0 (unregistered): slcan off ttyS3. [ 257.191648][ T9529] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 257.531771][ T9534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9534 comm=syz.0.1280 [ 257.842467][ T9539] bridge5: entered promiscuous mode [ 257.873413][ T9539] bridge5: entered allmulticast mode [ 258.587432][ T29] kauditd_printk_skb: 12104 callbacks suppressed [ 258.587450][ T29] audit: type=1400 audit(1784605997.672:208352): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.601608][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.649277][ T5271] audit: audit_lost=5458 audit_rate_limit=0 audit_backlog_limit=64 [ 258.691786][ T5271] audit: backlog limit exceeded [ 258.703915][ T29] audit: type=1400 audit(1784605997.682:208353): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.789438][ T29] audit: type=1400 audit(1784605997.682:208354): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.861823][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.869327][ T29] audit: type=1400 audit(1784605997.682:208355): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.882026][ T5271] audit: audit_lost=5459 audit_rate_limit=0 audit_backlog_limit=64 [ 258.905692][ T9547] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.942754][ T9564] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 260.500546][ T9573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9573 comm=syz.3.1292 [ 261.071510][ T9581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.078952][ T9581] IPv6: NLM_F_CREATE should be set when creating new route [ 261.086329][ T9581] IPv6: NLM_F_CREATE should be set when creating new route [ 261.093554][ T9581] IPv6: NLM_F_CREATE should be set when creating new route [ 261.416146][ T9584] bridge8: entered promiscuous mode [ 261.435404][ T9584] bridge8: entered allmulticast mode [ 262.549409][ T9609] netlink: 'syz.4.1306': attribute type 2 has an invalid length. [ 262.574821][ T9609] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.1306'. [ 263.594643][ T29] kauditd_printk_skb: 13155 callbacks suppressed [ 263.594660][ T29] audit: type=1400 audit(1784606002.692:216981): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.696687][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.723347][ T5271] audit: audit_lost=6970 audit_rate_limit=0 audit_backlog_limit=64 [ 263.758857][ T29] audit: type=1400 audit(1784606002.702:216982): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.793428][ T5271] audit: backlog limit exceeded [ 263.802845][ T9631] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.824171][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.845687][ T5271] audit: audit_lost=6971 audit_rate_limit=0 audit_backlog_limit=64 [ 263.868736][ T9631] audit: audit_lost=6972 audit_rate_limit=0 audit_backlog_limit=64 [ 263.882053][ T29] audit: type=1400 audit(1784606002.702:216983): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 264.293626][ T9637] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 264.393618][ T9638] bridge9: entered promiscuous mode [ 264.408055][ T9638] bridge9: entered allmulticast mode [ 264.608090][ T9644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.615393][ T9644] IPv6: NLM_F_CREATE should be set when creating new route [ 264.622654][ T9644] IPv6: NLM_F_CREATE should be set when creating new route [ 264.629948][ T9644] IPv6: NLM_F_CREATE should be set when creating new route [ 265.609404][ T9668] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 265.960104][ T9683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.983733][ T9683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.130107][ T9685] FAULT_INJECTION: forcing a failure. [ 266.130107][ T9685] name failslab, interval 1, probability 0, space 0, times 0 [ 266.162698][ T9685] CPU: 1 UID: 0 PID: 9685 Comm: syz.3.1335 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.162731][ T9685] Tainted: [L]=SOFTLOCKUP [ 266.162739][ T9685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 266.162753][ T9685] Call Trace: [ 266.162760][ T9685] [ 266.162767][ T9685] dump_stack_lvl+0x100/0x190 [ 266.162799][ T9685] should_fail_ex.cold+0x5/0xa [ 266.162824][ T9685] should_failslab+0xc2/0x120 [ 266.162848][ T9685] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 266.162870][ T9685] ? __alloc_skb+0x5b7/0x710 [ 266.162891][ T9685] ? __alloc_skb+0x140/0x710 [ 266.162914][ T9685] __alloc_skb+0x140/0x710 [ 266.162931][ T9685] ? __alloc_skb+0x5b7/0x710 [ 266.162950][ T9685] ? __pfx___alloc_skb+0x10/0x10 [ 266.162968][ T9685] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 266.162996][ T9685] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 266.163022][ T9685] ? __pfx_inet_diag_dump+0x10/0x10 [ 266.163048][ T9685] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 266.163079][ T9685] netlink_ack+0x117/0xb80 [ 266.163116][ T9685] netlink_rcv_skb+0x333/0x420 [ 266.163144][ T9685] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 266.163167][ T9685] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.163202][ T9685] ? rcu_is_watching+0x12/0xc0 [ 266.163236][ T9685] netlink_unicast+0x585/0x850 [ 266.163269][ T9685] ? __pfx_netlink_unicast+0x10/0x10 [ 266.163304][ T9685] netlink_sendmsg+0x8b0/0xda0 [ 266.163336][ T9685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.163367][ T9685] ? selinux_socket_sendmsg+0x198/0x2f0 [ 266.163396][ T9685] ____sys_sendmsg+0xa4d/0xbe0 [ 266.163420][ T9685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.163450][ T9685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.163488][ T9685] ___sys_sendmsg+0x190/0x1e0 [ 266.163516][ T9685] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.163541][ T9685] ? __lock_acquire+0x49f/0x1a40 [ 266.163564][ T9685] ? get_pid_task+0x106/0x250 [ 266.163627][ T9685] __sys_sendmsg+0x160/0x210 [ 266.163650][ T9685] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.163685][ T9685] do_syscall_64+0x115/0x870 [ 266.163704][ T9685] ? clear_bhb_loop+0x40/0x90 [ 266.163728][ T9685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.163747][ T9685] RIP: 0033:0x7f0ef399de99 [ 266.163765][ T9685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.163784][ T9685] RSP: 002b:00007f0ef47fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.163805][ T9685] RAX: ffffffffffffffda RBX: 00007f0ef3c25fa0 RCX: 00007f0ef399de99 [ 266.163817][ T9685] RDX: 0000000000048090 RSI: 0000200000000040 RDI: 0000000000000003 [ 266.163829][ T9685] RBP: 00007f0ef47fb090 R08: 0000000000000000 R09: 0000000000000000 [ 266.163841][ T9685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.163852][ T9685] R13: 00007f0ef3c26038 R14: 00007f0ef3c25fa0 R15: 00007ffd57110488 [ 266.163878][ T9685] [ 266.957314][ T9695] bridge10: entered promiscuous mode [ 266.982330][ T9695] bridge10: entered allmulticast mode [ 268.120461][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 268.165894][ T9709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1345'. [ 268.188186][ T9709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1345'. [ 268.382682][ T9717] FAULT_INJECTION: forcing a failure. [ 268.382682][ T9717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.404065][ T9717] CPU: 0 UID: 0 PID: 9717 Comm: syz.2.1348 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.404094][ T9717] Tainted: [L]=SOFTLOCKUP [ 268.404100][ T9717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 268.404111][ T9717] Call Trace: [ 268.404122][ T9717] [ 268.404129][ T9717] dump_stack_lvl+0x100/0x190 [ 268.404157][ T9717] should_fail_ex.cold+0x5/0xa [ 268.404179][ T9717] _copy_from_iter+0x1f4/0x1690 [ 268.404207][ T9717] ? __pfx__copy_from_iter+0x10/0x10 [ 268.404229][ T9717] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 268.404260][ T9717] copy_page_from_iter+0x238/0x300 [ 268.404286][ T9717] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 268.404321][ T9717] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 268.404347][ T9717] ? unwind_get_return_address+0x59/0xa0 [ 268.404375][ T9717] ? arch_stack_walk+0xa6/0xf0 [ 268.404414][ T9717] ? _kstrtoull+0x13c/0x1f0 [ 268.404439][ T9717] ? __pfx__kstrtoull+0x10/0x10 [ 268.404466][ T9717] tun_get_user+0x16d6/0x3c20 [ 268.404500][ T9717] ? __pfx_tun_get_user+0x10/0x10 [ 268.404527][ T9717] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 268.404557][ T9717] ? find_held_lock+0x2b/0x80 [ 268.404582][ T9717] ? tun_get+0x191/0x370 [ 268.404605][ T9717] ? tun_get+0x191/0x370 [ 268.404633][ T9717] tun_chr_write_iter+0xdc/0x200 [ 268.404661][ T9717] vfs_write+0x6ac/0x1050 [ 268.404687][ T9717] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 268.404715][ T9717] ? __pfx_vfs_write+0x10/0x10 [ 268.404738][ T9717] ? find_held_lock+0x2b/0x80 [ 268.404777][ T9717] ksys_write+0x12a/0x250 [ 268.404801][ T9717] ? __pfx_ksys_write+0x10/0x10 [ 268.404833][ T9717] do_syscall_64+0x115/0x870 [ 268.404850][ T9717] ? clear_bhb_loop+0x40/0x90 [ 268.404872][ T9717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.404889][ T9717] RIP: 0033:0x7f97cad5e6ce [ 268.404904][ T9717] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 268.404920][ T9717] RSP: 002b:00007f97cbbf6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.404938][ T9717] RAX: ffffffffffffffda RBX: 00007f97cbbf76c0 RCX: 00007f97cad5e6ce [ 268.404949][ T9717] RDX: 000000000000006e RSI: 0000200000000000 RDI: 00000000000000c8 [ 268.404959][ T9717] RBP: 00007f97cbbf7090 R08: 0000000000000000 R09: 0000000000000000 [ 268.404970][ T9717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.404980][ T9717] R13: 00007f97cb026038 R14: 00007f97cb025fa0 R15: 00007fffbb6524c8 [ 268.405003][ T9717] [ 268.745764][ T29] kauditd_printk_skb: 8963 callbacks suppressed [ 268.745784][ T29] audit: type=1400 audit(1784606007.782:224544): avc: denied { write } for pid=9705 comm="syz.3.1343" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=0 [ 268.789064][ T29] audit: type=1400 audit(1784606007.792:224545): avc: denied { read write } for pid=5613 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 268.858560][ T29] audit: type=1400 audit(1784606007.852:224546): avc: denied { create } for pid=9722 comm="syz.2.1350" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 268.914664][ T29] audit: type=1400 audit(1784606007.932:224547): avc: denied { read write } for pid=5607 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 268.915477][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 268.940160][ T29] audit: type=1400 audit(1784606007.942:224548): avc: denied { read write } for pid=9722 comm="syz.2.1350" name="frontend0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 268.970654][ T29] audit: type=1400 audit(1784606007.942:224549): avc: denied { module_request } for pid=9722 comm="syz.2.1350" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 268.995622][ T29] audit: type=1400 audit(1784606007.952:224550): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 269.023448][ T9729] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.031089][ T9729] audit: audit_lost=7440 audit_rate_limit=0 audit_backlog_limit=64 [ 269.242555][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 269.266497][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 269.466478][ T9741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9741 comm=syz.3.1356 [ 269.509735][ T9741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1356'. [ 269.583421][ T9743] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 269.725983][ T9745] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1357'. [ 269.888082][ T9745] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1357'. [ 270.015209][ T9749] syzkaller0: entered promiscuous mode [ 270.037617][ T9749] syzkaller0: entered allmulticast mode [ 270.455981][ T9765] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 270.752290][ T9769] FAULT_INJECTION: forcing a failure. [ 270.752290][ T9769] name failslab, interval 1, probability 0, space 0, times 0 [ 270.767091][ T9769] CPU: 0 UID: 0 PID: 9769 Comm: syz.3.1364 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.767118][ T9769] Tainted: [L]=SOFTLOCKUP [ 270.767124][ T9769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 270.767134][ T9769] Call Trace: [ 270.767140][ T9769] [ 270.767147][ T9769] dump_stack_lvl+0x100/0x190 [ 270.767174][ T9769] should_fail_ex.cold+0x5/0xa [ 270.767197][ T9769] should_failslab+0xc2/0x120 [ 270.767219][ T9769] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 270.767240][ T9769] ? __alloc_skb+0x140/0x710 [ 270.767261][ T9769] __alloc_skb+0x140/0x710 [ 270.767277][ T9769] ? __alloc_skb+0x5b7/0x710 [ 270.767294][ T9769] ? __pfx___alloc_skb+0x10/0x10 [ 270.767311][ T9769] ? if_nlmsg_size+0x4b/0xd80 [ 270.767337][ T9769] rtmsg_ifinfo_build_skb+0x81/0x260 [ 270.767365][ T9769] rtmsg_ifinfo+0xa4/0x1b0 [ 270.767391][ T9769] netif_state_change+0x17f/0x380 [ 270.767418][ T9769] ? __pfx_netif_state_change+0x10/0x10 [ 270.767442][ T9769] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 270.767467][ T9769] do_setlink.isra.0+0x31ce/0x3e60 [ 270.767492][ T9769] ? rcu_is_watching+0x12/0xc0 [ 270.767519][ T9769] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 270.767542][ T9769] ? __lock_acquire+0x49f/0x1a40 [ 270.767567][ T9769] ? do_raw_spin_lock+0x128/0x260 [ 270.767591][ T9769] ? find_held_lock+0x2b/0x80 [ 270.767616][ T9769] ? debug_mutex_remove_waiter+0xa0/0x320 [ 270.767647][ T9769] ? debug_mutex_remove_waiter+0xa0/0x320 [ 270.767676][ T9769] ? mark_held_locks+0x40/0x70 [ 270.767694][ T9769] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 270.767720][ T9769] ? __mutex_lock+0x82c/0x1bd0 [ 270.767736][ T9769] ? lockdep_hardirqs_on+0x78/0x100 [ 270.767763][ T9769] ? __mutex_lock+0x82c/0x1bd0 [ 270.767779][ T9769] ? __mutex_lock+0x26d/0x1bd0 [ 270.767795][ T9769] ? rtnl_newlink+0x8bb/0x2380 [ 270.767820][ T9769] ? __pfx___mutex_lock+0x10/0x10 [ 270.767837][ T9769] ? rcu_is_watching+0x12/0xc0 [ 270.767860][ T9769] ? cap_capable+0x107/0x430 [ 270.767892][ T9769] rtnl_newlink+0x1b7e/0x2380 [ 270.767912][ T9769] ? __pfx_rtnl_newlink+0x10/0x10 [ 270.767924][ T9769] ? find_held_lock+0x2b/0x80 [ 270.767938][ T9769] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 270.767950][ T9769] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 270.767963][ T9769] ? avc_has_perm_noaudit+0x145/0x3b0 [ 270.767977][ T9769] ? __lock_acquire+0x49f/0x1a40 [ 270.767995][ T9769] ? find_held_lock+0x2b/0x80 [ 270.768009][ T9769] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 270.768021][ T9769] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 270.768034][ T9769] ? __pfx_rtnl_newlink+0x10/0x10 [ 270.768046][ T9769] rtnetlink_rcv_msg+0x95e/0xe90 [ 270.768060][ T9769] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 270.768076][ T9769] ? ref_tracker_free+0x37e/0x6c0 [ 270.768092][ T9769] netlink_rcv_skb+0x159/0x420 [ 270.768109][ T9769] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 270.768124][ T9769] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.768144][ T9769] ? netlink_deliver_tap+0x1ae/0xcc0 [ 270.768162][ T9769] netlink_unicast+0x585/0x850 [ 270.768179][ T9769] ? __pfx_netlink_unicast+0x10/0x10 [ 270.768198][ T9769] netlink_sendmsg+0x8b0/0xda0 [ 270.768216][ T9769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.768233][ T9769] ? selinux_socket_sendmsg+0x198/0x2f0 [ 270.768249][ T9769] ____sys_sendmsg+0xa4d/0xbe0 [ 270.768263][ T9769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.768280][ T9769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.768300][ T9769] ___sys_sendmsg+0x190/0x1e0 [ 270.768316][ T9769] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.768330][ T9769] ? __lock_acquire+0x49f/0x1a40 [ 270.768342][ T9769] ? get_pid_task+0x106/0x250 [ 270.768372][ T9769] __sys_sendmsg+0x160/0x210 [ 270.768384][ T9769] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.768402][ T9769] do_syscall_64+0x115/0x870 [ 270.768412][ T9769] ? clear_bhb_loop+0x40/0x90 [ 270.768424][ T9769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.768435][ T9769] RIP: 0033:0x7f0ef399de99 [ 270.768445][ T9769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.768455][ T9769] RSP: 002b:00007f0ef47da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.768466][ T9769] RAX: ffffffffffffffda RBX: 00007f0ef3c26090 RCX: 00007f0ef399de99 [ 270.768473][ T9769] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 270.768479][ T9769] RBP: 00007f0ef47da090 R08: 0000000000000000 R09: 0000000000000000 [ 270.768485][ T9769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.768491][ T9769] R13: 00007f0ef3c26128 R14: 00007f0ef3c26090 R15: 00007ffd57110488 [ 270.768504][ T9769] [ 270.773454][ T9770] netlink: 'syz.3.1364': attribute type 16 has an invalid length. [ 271.312124][ T9772] netlink: 'syz.1.1365': attribute type 2 has an invalid length. [ 271.327295][ T9772] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1365'. [ 271.470757][ T9770] netlink: 'syz.3.1364': attribute type 17 has an invalid length. [ 271.525266][ T9770] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.532461][ T9770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.547522][ T9770] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.554750][ T9770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.611585][ T9770] bridge1: left promiscuous mode [ 271.620348][ T9770] ip6erspan0: left promiscuous mode [ 271.632438][ T9770] bridge2: left promiscuous mode [ 271.641385][ T9770] bridge2: left allmulticast mode [ 271.649622][ T9770] bridge3: left promiscuous mode [ 271.655972][ T9770] bridge3: left allmulticast mode [ 271.664965][ T9770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.676696][ T9770] bridge4: left promiscuous mode [ 271.681964][ T9770] bridge4: left allmulticast mode [ 271.697375][ T9770] bridge5: left promiscuous mode [ 271.703186][ T9770] bridge5: left allmulticast mode [ 271.712633][ T9770] bridge6: left promiscuous mode [ 271.717955][ T9770] bridge6: left allmulticast mode [ 271.735489][ T9770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.744778][ T9770] bridge7: left promiscuous mode [ 271.749940][ T9770] bridge7: left allmulticast mode [ 271.757556][ T9770] bridge8: left promiscuous mode [ 271.762697][ T9770] bridge8: left allmulticast mode [ 271.774649][ T9770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.783443][ T9770] bridge9: left promiscuous mode [ 271.789146][ T9770] bridge9: left allmulticast mode [ 271.799699][ T9770] bridge10: left promiscuous mode [ 271.805719][ T9770] bridge10: left allmulticast mode [ 271.815397][ T9770] bridge11: left promiscuous mode [ 271.820738][ T9770] bridge11: left allmulticast mode [ 271.961971][ T9780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9780 comm=syz.3.1368 [ 272.012247][ T9780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1368'. [ 273.754470][ T29] kauditd_printk_skb: 8839 callbacks suppressed [ 273.754487][ T29] audit: type=1400 audit(1784606012.862:233306): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 273.834759][ T29] audit: type=1400 audit(1784606012.862:233307): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 273.883402][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.899911][ T5271] audit: audit_lost=7469 audit_rate_limit=0 audit_backlog_limit=64 [ 273.910387][ T9814] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.917061][ T5271] audit: backlog limit exceeded [ 273.922103][ T9814] audit: audit_lost=7470 audit_rate_limit=0 audit_backlog_limit=64 [ 273.930515][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.938293][ T9814] audit: backlog limit exceeded [ 273.949560][ T5613] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.141488][ T9819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.148793][ T9819] IPv6: NLM_F_CREATE should be set when creating new route [ 274.156053][ T9819] IPv6: NLM_F_CREATE should be set when creating new route [ 274.163260][ T9819] IPv6: NLM_F_CREATE should be set when creating new route [ 274.180597][ T9819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.914862][ T9835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9835 comm=syz.2.1390 [ 274.956523][ T9835] __nla_validate_parse: 1 callbacks suppressed [ 274.956541][ T9835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1390'. [ 275.782716][ T9852] IPv6: NLM_F_CREATE should be specified when creating new route [ 275.814956][ T9852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 275.822251][ T9852] IPv6: NLM_F_CREATE should be set when creating new route [ 275.829532][ T9852] IPv6: NLM_F_CREATE should be set when creating new route [ 275.831990][ T9853] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1395'. [ 275.836802][ T9852] IPv6: NLM_F_CREATE should be set when creating new route [ 275.899390][ T9853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 276.213394][ T9860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1398'. [ 276.562569][ T9872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9872 comm=syz.4.1402 [ 276.578792][ T9872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1402'. [ 276.989511][ T9883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1406'. [ 277.005676][ T9883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1406'. [ 277.180082][ T9889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1409'. [ 278.506190][ T9918] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 278.714494][ T9924] netlink: 'syz.1.1423': attribute type 2 has an invalid length. [ 278.739430][ T9924] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1423'. [ 278.765633][ T29] kauditd_printk_skb: 14982 callbacks suppressed [ 278.765647][ T29] audit: type=1400 audit(1784606017.852:247737): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 278.824255][ T29] audit: type=1400 audit(1784606017.872:247738): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 278.824445][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.884223][ T29] audit: type=1400 audit(1784606017.872:247739): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 278.892332][ T9926] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.908319][ T5609] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.926330][ T5271] audit: audit_lost=7656 audit_rate_limit=0 audit_backlog_limit=64 [ 278.936030][ T5607] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.942664][ T5271] audit: backlog limit exceeded [ 278.948234][ T5609] audit: audit_lost=7657 audit_rate_limit=0 audit_backlog_limit=64 [ 280.342715][ T9957] netlink: 'syz.0.1434': attribute type 2 has an invalid length. [ 280.385289][ T9957] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.1434'. [ 280.393649][ T9958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=173 sclass=netlink_route_socket pid=9958 comm=syz.2.1433 [ 280.992795][ T9965] bridge12: entered promiscuous mode [ 281.033044][ T9965] bridge12: entered allmulticast mode [ 281.555548][ T9973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.585467][ T9973] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1439'. [ 281.605959][ T9973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.673016][ T9977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1441'. [ 281.710316][ T9977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1441'. [ 281.748464][ T9980] netlink: 'syz.0.1442': attribute type 4 has an invalid length. [ 282.153620][ T9987] netlink: 'syz.1.1445': attribute type 2 has an invalid length. [ 282.162429][ T9987] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1445'. [ 283.275924][T10012] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 283.368125][T10015] netlink: 'syz.0.1456': attribute type 2 has an invalid length. [ 283.404486][T10015] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.1456'. [ 283.775338][ T29] kauditd_printk_skb: 12559 callbacks suppressed [ 283.775356][ T29] audit: type=1400 audit(1784606022.872:260192): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 283.834431][ T29] audit: type=1400 audit(1784606022.882:260193): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 283.862838][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.878979][ T5271] audit: audit_lost=7694 audit_rate_limit=0 audit_backlog_limit=64 [ 283.881178][ T5608] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.890900][T10025] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.894779][ T29] audit: type=1400 audit(1784606022.882:260194): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 283.906438][ T5271] audit: backlog limit exceeded [ 283.922815][ T5608] audit: audit_lost=7695 audit_rate_limit=0 audit_backlog_limit=64 [ 283.934808][T10025] audit: audit_lost=7696 audit_rate_limit=0 audit_backlog_limit=64 [ 283.946173][T10025] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1461'. [ 283.972810][ T7916] bond_slave_0: entered promiscuous mode [ 283.979597][ T7916] bond_slave_1: entered promiscuous mode [ 284.016046][ T7916] bridge0: entered promiscuous mode [ 285.113406][T10044] netlink: 'syz.4.1467': attribute type 10 has an invalid length. [ 285.124133][T10044] syz_tun: entered promiscuous mode [ 285.175067][T10044] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 285.190008][T10047] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 285.237178][T10049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1469'. [ 285.455764][ T30] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 285.473527][ T30] Tainted: G L syzkaller #0 [ 285.493630][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.514934][ T30] task:kworker/0:0 state:D stack:24792 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 285.528099][ T30] Workqueue: usb_hub_wq hub_event [ 285.539561][ T30] Call Trace: [ 285.545053][ T30] [ 285.551425][ T30] __schedule+0x125c/0x6730 [ 285.561518][ T30] ? __pfx___schedule+0x10/0x10 [ 285.573116][ T30] ? find_held_lock+0x2b/0x80 [ 285.579172][ T30] ? schedule+0x225/0x2c0 [ 285.584510][ T30] schedule+0xdd/0x2c0 [ 285.589488][ T30] usb_kill_urb+0x253/0x320 [ 285.595260][ T30] ? __pfx_usb_kill_urb+0x10/0x10 [ 285.601108][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 285.608133][ T30] usb_start_wait_urb+0x2c3/0x580 [ 285.614576][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 285.621185][ T30] ? trace_kmalloc+0xeb/0x110 [ 285.630937][ T30] ? __asan_memset+0x23/0x50 [ 285.636569][ T30] usb_control_msg+0x328/0x4b0 [ 285.641941][ T30] ? __pfx_usb_control_msg+0x10/0x10 [ 285.648120][ T30] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 285.655303][ T30] hub_port_init+0x642/0x37f0 [ 285.660650][ T30] hub_event+0x2e7d/0x4a60 [ 285.666330][ T30] ? __pfx_hub_event+0x10/0x10 [ 285.673143][ T30] ? debug_object_deactivate+0x2e4/0x3b0 [ 285.679986][ T30] ? rcu_is_watching+0x12/0xc0 [ 285.695613][ T30] process_one_work+0xa23/0x1940 [ 285.706793][ T30] ? __pfx_process_one_work+0x10/0x10 [ 285.724577][ T30] ? __pfx_hub_event+0x10/0x10 [ 285.740484][ T30] worker_thread+0x5ef/0xe50 [ 285.753170][ T30] ? kthread+0x13a/0x450 [ 285.765887][ T30] ? __pfx_worker_thread+0x10/0x10 [ 285.795264][ T30] kthread+0x370/0x450 [ 285.805935][ T30] ? __pfx_kthread+0x10/0x10 [ 285.818238][ T30] ret_from_fork+0x72b/0xd50 [ 285.831780][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 285.846043][ T30] ? __switch_to+0x800/0x10f0 [ 285.852064][ T30] ? __pfx_kthread+0x10/0x10 [ 285.857446][ T30] ret_from_fork_asm+0x1a/0x30 [ 285.863591][ T30] [ 285.876633][ T30] [ 285.876633][ T30] Showing all locks held in the system: [ 285.895252][ T30] 5 locks held by kworker/0:0/9: [ 285.907705][ T30] #0: ffff888020ef5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 285.937882][ T30] #1: ffffc900000e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 285.950736][ T30] #2: ffff88802ccf31d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4a60 [ 285.960857][ T30] #3: ffff88802ccf0568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b25/0x4a60 [ 285.972187][ T30] #4: ffff88802cc47b60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b4e/0x4a60 [ 285.983125][ T30] 1 lock held by khungtaskd/30: [ 285.988988][ T30] #0: ffffffff8ebe6180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 286.000075][ T30] 2 locks held by getty/5362: [ 286.005234][ T30] #0: ffff8880381b90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 286.016293][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 286.026822][ T30] 1 lock held by syz.0.1471/10062: [ 286.032240][ T30] #0: ffff888050e0c460 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 286.041926][ T30] 1 lock held by syz.2.1473/10059: [ 286.048771][ T30] [ 286.051345][ T30] ============================================= [ 286.051345][ T30] [ 286.063115][ T30] NMI backtrace for cpu 1 [ 286.063134][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 286.063158][ T30] Tainted: [L]=SOFTLOCKUP [ 286.063164][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 286.063173][ T30] Call Trace: [ 286.063179][ T30] [ 286.063185][ T30] dump_stack_lvl+0x100/0x190 [ 286.063211][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 286.063234][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.063257][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 286.063283][ T30] sys_info+0x141/0x190 [ 286.063303][ T30] watchdog+0xcb1/0x1030 [ 286.063326][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 286.063351][ T30] ? __pfx_watchdog+0x10/0x10 [ 286.063370][ T30] ? __kthread_parkme+0x18c/0x230 [ 286.063395][ T30] ? kthread+0x13a/0x450 [ 286.063446][ T30] ? __pfx_watchdog+0x10/0x10 [ 286.063464][ T30] kthread+0x370/0x450 [ 286.063488][ T30] ? __pfx_kthread+0x10/0x10 [ 286.063514][ T30] ret_from_fork+0x72b/0xd50 [ 286.063538][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 286.063559][ T30] ? __switch_to+0x800/0x10f0 [ 286.063576][ T30] ? __pfx_kthread+0x10/0x10 [ 286.063603][ T30] ret_from_fork_asm+0x1a/0x30 [ 286.063638][ T30] [ 286.063645][ T30] Sending NMI from CPU 1 to CPUs 0: [ 286.195023][ C0] NMI backtrace for cpu 0 [ 286.195039][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.195058][ C0] Tainted: [L]=SOFTLOCKUP [ 286.195063][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 286.195071][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 286.195096][ C0] Code: e6 8c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 99 11 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 286.195109][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000246 [ 286.195121][ C0] RAX: 00000000004b941d RBX: ffffffff8e891480 RCX: ffffffff8bba02d5 [ 286.195130][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a4784 RDI: ffffffff8c401380 [ 286.195140][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 286.195148][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 286.195157][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 286.195166][ C0] FS: 0000000000000000(0000) GS:ffff888123de6000(0000) knlGS:0000000000000000 [ 286.195180][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.195189][ C0] CR2: 0000200000072030 CR3: 0000000073460000 CR4: 00000000003526f0 [ 286.195198][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 286.195206][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 286.195215][ C0] Call Trace: [ 286.195221][ C0] [ 286.195226][ C0] default_idle+0x9/0x10 [ 286.195240][ C0] default_idle_call+0x6c/0xb0 [ 286.195256][ C0] do_idle+0x3a7/0x5b0 [ 286.195274][ C0] ? __pfx_do_idle+0x10/0x10 [ 286.195290][ C0] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 286.195309][ C0] cpu_startup_entry+0x4f/0x60 [ 286.195326][ C0] rest_init+0x251/0x260 [ 286.195341][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 286.195358][ C0] start_kernel+0x48e/0x490 [ 286.195373][ C0] x86_64_start_reservations+0x24/0x30 [ 286.195388][ C0] x86_64_start_kernel+0x12b/0x130 [ 286.195403][ C0] common_startup_64+0x13e/0x158 [ 286.195427][ C0] [ 286.464848][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 286.471738][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 286.482423][ T30] Tainted: [L]=SOFTLOCKUP [ 286.486734][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 286.496774][ T30] Call Trace: [ 286.500031][ T30] [ 286.502938][ T30] dump_stack_lvl+0x100/0x190 [ 286.507593][ T30] vpanic+0x552/0x970 [ 286.511550][ T30] ? __pfx_vpanic+0x10/0x10 [ 286.516029][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 286.522182][ T30] panic+0xd1/0xe0 [ 286.525875][ T30] ? __pfx_panic+0x10/0x10 [ 286.530278][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 286.536415][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 286.542560][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 286.548687][ T30] ? watchdog.cold+0x1ec/0x234 [ 286.553434][ T30] ? watchdog+0xcc1/0x1030 [ 286.557840][ T30] watchdog.cold+0x1fd/0x234 [ 286.562416][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 286.568205][ T30] ? __pfx_watchdog+0x10/0x10 [ 286.572860][ T30] ? __kthread_parkme+0x18c/0x230 [ 286.577862][ T30] ? kthread+0x13a/0x450 [ 286.582084][ T30] ? __pfx_watchdog+0x10/0x10 [ 286.586732][ T30] kthread+0x370/0x450 [ 286.590794][ T30] ? __pfx_kthread+0x10/0x10 [ 286.595720][ T30] ret_from_fork+0x72b/0xd50 [ 286.600296][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 286.605386][ T30] ? __switch_to+0x800/0x10f0 [ 286.610051][ T30] ? __pfx_kthread+0x10/0x10 [ 286.614621][ T30] ret_from_fork_asm+0x1a/0x30 [ 286.619366][ T30] [ 286.622578][ T30] Kernel Offset: disabled [ 286.626882][ T30] Rebooting in 86400 seconds..