last executing test programs: 2.086481864s ago: executing program 2 (id=1784): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_config_ext={0x8, 0x3ff}, 0x10ecc8, 0x1224, 0x6, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x200000102fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) open(&(0x7f0000000a40)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r0, 0x0, 0x0) 2.045262595s ago: executing program 2 (id=1785): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) syz_emit_ethernet(0x16, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@llc={0x4, {@snap={0x0, 0x1, "7f", "7252eb", 0xd}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}, 0x44004) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r7}, 0x20) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x20, r8, 0x1, 0x70bd27, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r7, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x96, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000000000008b10d6030011aa0043284d68000016258b0400cca5cab06298c5d9fb4e28ddbef94ae1e650ada62c4b4768c5a381b5c0328024d8153f24983fc18f458101987b219ba5e49a1da833d0fc1df5a2baf02d85f86c4237e41d05d5544f1282cc01899118406a3e2fb5a385f6e84e5ac7031bb59e7c15ac22027a6ce2a9295244fb23fa5506f1b4d6d27fd7d6c5c5d562"], 0x0) 2.044968455s ago: executing program 2 (id=1786): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) clock_gettime(0xffffffe4, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/time_for_children\x00') (fail_nth: 1) 1.758754953s ago: executing program 2 (id=1788): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000004"], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x400}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) 1.708553054s ago: executing program 1 (id=1791): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x30}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000"], 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x14) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x2}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.50918592s ago: executing program 4 (id=1795): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="220000000400000010000000", @ANYRESHEX=0x0], 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="00000000000000009500007b0000000085000000130000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 1.5088425s ago: executing program 4 (id=1796): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000a40)={[{@inode_readahead_blks}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") socket$nl_route(0x10, 0x3, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x1c) 1.443499692s ago: executing program 4 (id=1798): syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0xf}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x8, 0x2, 0x40000000, 0x23, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xeffbfffd, 0x7, 0x1}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x81, 0x8, 0x2, 0xfffff024}, {0x6, 0x0, 0xff, 0x5}]}, 0x10) 1.074920781s ago: executing program 3 (id=1799): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x2000007ff) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.nlink\x00', &(0x7f0000000180)='errors=continue', 0xf, 0x3) 1.032576152s ago: executing program 3 (id=1800): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x26020480) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r3 = creat(&(0x7f0000000140)='./bus\x00', 0x160) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) wait4(r4, 0x0, 0x8, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x84c02, 0x150) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0xffffffe4, 0x5, 0x10000, 0xfffffffffdffffff}) fspick(0xffffffffffffff9c, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000001e0000006163000008000200000000000400050004000400"], 0x40}}, 0x0) 952.289864ms ago: executing program 4 (id=1801): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x5, @loopback, 0x1}, 0x80, &(0x7f0000000180)=[{0x0}, {&(0x7f00000000c0)="25e6", 0x2}], 0x2, 0x0, 0x0, 0x900}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1, 0x1}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4041}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x8000002, @loopback={0xfe80000000000000, 0xac14140c}, 0x0, 0x2}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r3}, &(0x7f00000007c0), &(0x7f0000000800)='%pi6 \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611900000000000095000000000000003e0276a44abb33b366c6caf29b5d0da3dbb1cc94b8af84dfe45c555ed16544ec1b1be30fbccc97e00e1a3e6fc0631615ed5ac24c8be40aecd3d3f871f9f6fd5e4c6dcd218955474f6923f57a208278590f81055f03c60d2edc897698432fb6c351b9e8328f18130ee23bec833619ead92ab809edab6c9c1cebfaf66832963166476cc21bcfe28cb2046656853b95050a63f9bf1784f9badffeff79d776bd6bfe7f5e422ad56908df79"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20048020) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'syztnl2\x00', r4, 0x8000, 0x20, 0xbd, 0x6, {{0xa, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x76, 0x29, 0x0, @broadcast, @local, {[@generic={0x44, 0x11, "24d9811d7a37214d1d1d0c1030ce3c"}]}}}}}) connect(r0, &(0x7f0000000200)=@ll={0x11, 0x1, r5, 0x1, 0x8, 0x6, @remote}, 0x80) 938.173345ms ago: executing program 2 (id=1802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_TTL={0x5, 0x7, 0xe}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x9, 0x4) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x2032, 0xffffffffffffffff, 0x929ca000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2530, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x4, @perf_bp={0x0, 0xb}, 0x100002, 0x4001, 0x1000, 0x6da8c2679630623b, 0x8, 0x6, 0x4, 0x0, 0x0, 0x0, 0x82}, 0x0, 0xf, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000001200)=[{&(0x7f0000000dc0)=""/72, 0x48}, {0x0}], 0x2, 0x40, 0x3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200001, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000680)={@random="5b685c7e778f", @empty, @void, {@can={0xc, {{0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "cff7bd9ff1d09e3d"}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = open(0x0, 0x845c0, 0x11e) fcntl$setlease(r5, 0x400, 0x1) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd3, 0x0, &(0x7f0000000500)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000c80)=[{0x0}], 0x1}}], 0x1, 0x20002005) close(0xffffffffffffffff) socket(0x2b, 0x1, 0x1) 855.703667ms ago: executing program 4 (id=1803): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000004"], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x400}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x3) 811.580808ms ago: executing program 2 (id=1804): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000004"], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x400}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) 778.178229ms ago: executing program 1 (id=1805): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x2, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x4}], 0x0, 0x2942d502, 0x0, 0x0, 0x41100, 0x4a}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 688.572462ms ago: executing program 3 (id=1806): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) getsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) (async) getsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) 688.170511ms ago: executing program 1 (id=1807): r0 = getpgid(0x0) prlimit64(r0, 0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x8, 0x5}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) write(r4, &(0x7f0000000500)="f4b94c5d1fc5c3dda4a4ec7897ec092b3ac236245fdcf172ae0d78ef9da8ae78fb149592ca7567f384039ecaf42852ca29a3c7f0663b900db975db95d05e7fc6d585efff20f5bd", 0x47) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200070000000500040001000000050003"], 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x0) read(r7, &(0x7f0000000300)=""/100, 0x64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRESHEX=r7, @ANYRES32, @ANYRESOCT=r1, @ANYRESOCT=r2], 0x48) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = epoll_create1(0x80000) io_setup(0x2dd8, &(0x7f00000000c0)=0x0) io_submit(r11, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x5, r9, 0x0, 0x0, 0x0, 0x0, 0x3}]) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000140)={0x2016}) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x2004}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x400, r8}, 0x38) 688.028731ms ago: executing program 3 (id=1808): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="220000000400000010000000", @ANYRESHEX=0x0], 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="00000000000000009500007b0000000085000000130000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 687.750642ms ago: executing program 3 (id=1809): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0xd0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000001380)={[{@block_validity}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@orlov}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@inlinecrypt}, {@data_ordered}]}, 0x3, 0x57b, &(0x7f0000001440)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=") open(&(0x7f0000000100)='./file1\x00', 0x440, 0x61) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) socket$unix(0x1, 0x2, 0x0) creat(0x0, 0xdafbe5d6891b6e4) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x88c5}, 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) syz_usb_connect$uac1(0x4, 0xfffffffffffffeca, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, 0xffffffffffffffff, 0xb3c13000) kexec_load(0x4000, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 541.400695ms ago: executing program 1 (id=1811): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000200)}, 0x8a92, 0x4, 0x7, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) gettid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) acct(&(0x7f0000000040)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='raw\n\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/events/xhci-hcd/xhci_portsc_writel/enable\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a80)=@newtfilter={0x4d8, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {0x0, 0x9}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4a8, 0x2, [@TCA_BASIC_EMATCHES={0xec, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0xc}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800}, {{0x3, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4, 0x8, 0x4}, {0x1, 0x0, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x3, 0x0, 0x0, {{0x920b, 0x4, 0x7fff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x401, 0x2, 0x1}, {0xb14, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="2d7179642da3e1", @TCF_META_TYPE_VAR="4cfd", @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xf0, 0x2, 0x7}, {0xd07, 0x1, 0x0, "d2"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe, 0x1, 0x2}, {0x7, 0x2cc, 0x9, 0x1, 0x9, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x99}, {0xe855, 0xd, 0x800, 0x6, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x1}, {0x7fff, 0x2, 0x7ff, 0x3, 0x4, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_BASIC_EMATCHES={0x39c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x288, 0x2, 0x0, 0x1, [@TCF_EM_META={0xac, 0x3, 0x0, 0x0, {{0x11b, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x1, 0x2}, {0x6, 0x3, 0x3}}}, @TCA_EM_META_RVALUE={0x35, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="c04d08", @TCF_META_TYPE_VAR="ac", @TCF_META_TYPE_VAR="2fd2607c23cbd4ba", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="c4773a", @TCF_META_TYPE_VAR="75968d04c7f7abf4d7", @TCF_META_TYPE_VAR="cd8c81c5f948", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="c62a56a6c0ee79"]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_VAR="f633c78709694043b5d5", @TCF_META_TYPE_VAR='\'', @TCF_META_TYPE_VAR="65ac", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='\x00', @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x2f, 0x3, [@TCF_META_TYPE_VAR="14f51ff7beb33b362add", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f18b", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="96c464901bf4", @TCF_META_TYPE_VAR="715c8a122d2891", @TCF_META_TYPE_VAR="20fe2b3b1ae6efe771fb"]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="1f0655f859ed07c8a4d9"]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x6}, {0x4, 0xceba, 0xfff8, 0x4, 0x0, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xe4, 0x2, 0x0, 0x0, {{0x3bee, 0x0, 0x1}, "143eb9d2e030ad05af921867064ba11a18c59b69755cddfb878bd7b1d1b300c0d6d985d7d0d2a245512e4171a6d7512d36425409c2c340748fa07be89043fea140d58fbc366c825c81c4663dcfc22e071ad6b56f0c2491a1587442f1c1001b736c593e53204a6f78f1f7a91074a8088f7bc68d693b4b0ca9486bd7ec1ba4f6d3843793af96ea65b9963ac9101f6b4d4020be7a2cfbf86e926b51d5f7f3b0497c849a49e96ed3c2a1b65a6063bcd092c87bdbe129f8f0e5e6ada2f64c5c2a945131bd47c0c75df539e2326e6376fc43abbd9e4b6479"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x1}, {0x4, 0x5, 0x6}}}, @TCF_EM_CONTAINER={0xcc, 0x2, 0x0, 0x0, {{0x40, 0x0, 0x4}, "1d2f8a1decd4f739070229c364267c7216840a1e3c228cc8115e01656a9b51dcbce064b0cc23d2faba8f5c86e0a5e9262d7faf87eef37804abb18b03f803217b0c274af007fd4bcae18d995e16bf6783cbe8b2af79a8bced8af2cc2356776e25be311adde84b45519600ddcf72032c4a3a3c9808ed149ce5a3619b22741d8a6ba2126d65d699d544f7a777bb0881824e736002d9106c9bf8af3f09669275dced853d4e96170641bfc95b1b1a824ce4047c29ec4db576ac2b80baec08ead4"}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x8}, {0x3, 0x1, 0x3}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x6}, {{0x3}, {0x3, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xfcf, 0x3, 0x2}, {0x6, 0x9, 0x0, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x60, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x47, 0x5, "02a4a732ca8097aa2ee92ba1dace1d7ef6e1f1a871d49c6df06f8ab403cc085c61f6c44034601e4d7cc5d94bcf8978de836d86fdf9e5572692cdce2804a627c4cbb8bb"}]}}]}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x14, 0x2, 0x8}, {0x8001, 0x9, 0x2, "53bc4fcacce8cb2199"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0x40}, {0x0, 0x5, 0x5}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x4, 0x2, 0xfff}, {0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x8}, {0x2, 0x2, 0x3}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x14, 0x1, 0x4}, {0x1, 0x7, 0xe4, 0x0, 0x0, 0x1}}}]}]}, @TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffea, 0x4}}]}}]}, 0x4d8}}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=ANY=[@ANYBLOB="3c0000006800010003001000fdffff7f00000000000000003c000500", @ANYRES32=r4, @ANYBLOB="14000c800600010000030081000000fe8f628ecdbd00686cdba08be46e9596a8687df3a9aa9be8055f6bf618c659e6caad00000000000000000089392eab91875c8995fd3f91a96f34408a5146f167169685b072bc550920bf64e76fb6db53018bdf6dfc5ba0eea801c4bb801304195e49a6"], 0x3c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001340)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x5}}, 0x24d1, 0x9, 0x6, 0x8, 0x88, 0xffffffe7, 0x4}, &(0x7f0000001400)=0x9c) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001440)={r8, 0x474}, 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracefs/events/xhci-hcd/xhci_portsc_writel/enable\x00', 0x0, 0x4a) read(r9, &(0x7f00000002c0)=""/4096, 0x1000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}}, 0x0) 435.780529ms ago: executing program 0 (id=1813): r0 = getpgid(0x0) prlimit64(r0, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x8, 0x5}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0xfffffdaf}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) write(r2, &(0x7f0000000500)="f4b94c5d1fc5c3dda4a4ec7897ec092b3ac236245fdcf172ae0d78ef9da8ae78fb149592", 0x24) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x0) read(r3, &(0x7f0000000300)=""/100, 0x64) 232.677344ms ago: executing program 0 (id=1814): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_TTL={0x5, 0x7, 0xe}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x9, 0x4) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x2032, 0xffffffffffffffff, 0x929ca000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2530, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x4, @perf_bp={0x0, 0xb}, 0x100002, 0x4001, 0x1000, 0x6da8c2679630623b, 0x8, 0x6, 0x4, 0x0, 0x0, 0x0, 0x82}, 0x0, 0xf, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000001200)=[{&(0x7f0000000dc0)=""/72, 0x48}, {0x0}], 0x2, 0x40, 0x3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200001, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000680)={@random="5b685c7e778f", @empty, @void, {@can={0xc, {{0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "cff7bd9ff1d09e3d"}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = open(0x0, 0x845c0, 0x11e) fcntl$setlease(r5, 0x400, 0x1) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd3, 0x0, &(0x7f0000000500)) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000c80)=[{0x0}], 0x1}}], 0x1, 0x20002005) close(0xffffffffffffffff) socket(0x2b, 0x1, 0x1) 223.258674ms ago: executing program 1 (id=1815): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x30}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000000400000008"], 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x2}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 188.362285ms ago: executing program 1 (id=1816): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000004"], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x400}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x3) pipe(0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) 159.291376ms ago: executing program 0 (id=1817): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) readv(r0, &(0x7f0000000900)=[{&(0x7f0000000800)=""/57, 0x39}], 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0453a1810141fa2a1f00010000000000000e002e000f00c5e2743c16d80000", 0x2e}], 0x1}, 0x20000010) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000300)={{r1, &(0x7f0000000140)='\x00', 0x4040, &(0x7f0000000180)={@align=0x8, {0x4, 0x4f2f, 0x7, 0x2}}, 0xffff, &(0x7f0000000200), &(0x7f0000000240)=0x62}, {[0xb, 0x9, 0x577]}, 0x7, 0x2d, &(0x7f0000000280)=""/45}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x110, @none}, 0xe) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x3, 0x5, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) creat(&(0x7f0000000080)='./file0\x00', 0x1) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @remote, @void, {@canfd={0xd, {{0x0, 0x1, 0x1}, 0x9, 0x2, 0x0, 0x0, "d9254923af96b56d38002212dd647b5d5637bbaddead3b4c390e9876d908680cbb40691aed3eea3ba9b2849db95fb4b7f67e5cdffe3c1c75596a6e49b06b735e"}}}}, 0x0) 81.889418ms ago: executing program 0 (id=1818): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x2, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x4}], 0x0, 0x2942d502, 0x0, 0x0, 0x41100, 0x4a}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 81.712338ms ago: executing program 0 (id=1819): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="220000000400000010000000", @ANYRESHEX=0x0], 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="00000000000000009500007b0000000085000000130000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 81.266198ms ago: executing program 0 (id=1820): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) syz_open_dev$loop(0x0, 0x6b, 0x901) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000010900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x40) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x1, 0x0) ptrace$setregs(0xf, 0x0, 0x52a, &(0x7f0000000280)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x20, 0x7, 0x8, 0xe, {{0x5, 0x4, 0x3, 0x1b, 0x14, 0x65, 0x0, 0x8, 0x0, 0x0, @empty, @multicast2}}}}) keyctl$clear(0x3, 0xfffffffffffffffd) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast}}}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1/file0\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") 44.498659ms ago: executing program 3 (id=1821): r0 = getpgid(0x0) prlimit64(r0, 0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x8, 0x5}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) write(r4, &(0x7f0000000500)="f4b94c5d1fc5c3dda4a4ec7897ec092b3ac236245fdcf172ae0d78ef9da8ae78fb149592ca7567f384039ecaf42852ca29a3c7f0663b900db975db95d05e7fc6d585efff20f5bd", 0x47) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200070000000500040001000000050003"], 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/printer.usb0/pnp_string\x00', 0x0, 0x0) read(r7, &(0x7f0000000300)=""/100, 0x64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRESHEX=r7, @ANYRES32, @ANYRESOCT=r1, @ANYRESOCT=r2], 0x48) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = epoll_create1(0x80000) io_setup(0x2dd8, &(0x7f00000000c0)=0x0) io_submit(r11, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x5, r9, 0x0, 0x0, 0x0, 0x0, 0x3}]) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000140)={0x2016}) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x2004}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x400, r8}, 0x38) 0s ago: executing program 4 (id=1822): syz_clone3(&(0x7f0000001e80)={0x1e6102400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x4e) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. [ 31.208637][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 31.208654][ T28] audit: type=1400 audit(1785518662.467:126): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.237847][ T28] audit: type=1400 audit(1785518662.497:127): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.240008][ T3282] cgroup: Unknown subsys name 'net' [ 31.265666][ T28] audit: type=1400 audit(1785518662.527:128): avc: denied { unmount } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.401338][ T3282] cgroup: Unknown subsys name 'cpuset' [ 31.407535][ T3282] cgroup: Unknown subsys name 'rlimit' [ 31.538410][ T28] audit: type=1400 audit(1785518662.797:129): avc: denied { setattr } for pid=3282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.562926][ T28] audit: type=1400 audit(1785518662.797:130): avc: denied { create } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.591266][ T28] audit: type=1400 audit(1785518662.797:131): avc: denied { write } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.611741][ T28] audit: type=1400 audit(1785518662.797:132): avc: denied { read } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.631346][ T3285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 31.632262][ T28] audit: type=1400 audit(1785518662.797:133): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.665599][ T28] audit: type=1400 audit(1785518662.797:134): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.681954][ T3282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.689217][ T28] audit: type=1400 audit(1785518662.827:135): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.071771][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.079169][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.086608][ T3294] bridge_slave_0: entered allmulticast mode [ 33.093645][ T3294] bridge_slave_0: entered promiscuous mode [ 33.107531][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.114717][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.121848][ T3296] bridge_slave_0: entered allmulticast mode [ 33.128295][ T3296] bridge_slave_0: entered promiscuous mode [ 33.141670][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.148865][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.156315][ T3294] bridge_slave_1: entered allmulticast mode [ 33.162870][ T3294] bridge_slave_1: entered promiscuous mode [ 33.173767][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.180881][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.188041][ T3296] bridge_slave_1: entered allmulticast mode [ 33.194541][ T3296] bridge_slave_1: entered promiscuous mode [ 33.239124][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.249431][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.261977][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.283734][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.324046][ T3294] team0: Port device team_slave_0 added [ 33.337101][ T3296] team0: Port device team_slave_0 added [ 33.347945][ T3294] team0: Port device team_slave_1 added [ 33.365756][ T3296] team0: Port device team_slave_1 added [ 33.380344][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.387518][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.394652][ T3301] bridge_slave_0: entered allmulticast mode [ 33.401253][ T3301] bridge_slave_0: entered promiscuous mode [ 33.414991][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.422122][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.429346][ T3299] bridge_slave_0: entered allmulticast mode [ 33.435764][ T3299] bridge_slave_0: entered promiscuous mode [ 33.442513][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.449479][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.475455][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.486316][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.493482][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.500878][ T3301] bridge_slave_1: entered allmulticast mode [ 33.507285][ T3301] bridge_slave_1: entered promiscuous mode [ 33.523747][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.530842][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.537960][ T3299] bridge_slave_1: entered allmulticast mode [ 33.544434][ T3299] bridge_slave_1: entered promiscuous mode [ 33.551149][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.558123][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.584042][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.607121][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.614162][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.640128][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.661603][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.675103][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.682264][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.689436][ T3300] bridge_slave_0: entered allmulticast mode [ 33.696105][ T3300] bridge_slave_0: entered promiscuous mode [ 33.702980][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.709968][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.736005][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.750808][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.761227][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.770512][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.777864][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.785111][ T3300] bridge_slave_1: entered allmulticast mode [ 33.791676][ T3300] bridge_slave_1: entered promiscuous mode [ 33.809392][ T3294] hsr_slave_0: entered promiscuous mode [ 33.815521][ T3294] hsr_slave_1: entered promiscuous mode [ 33.826855][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.847361][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.875887][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.885794][ T3299] team0: Port device team_slave_0 added [ 33.903730][ T3296] hsr_slave_0: entered promiscuous mode [ 33.909800][ T3296] hsr_slave_1: entered promiscuous mode [ 33.916090][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 33.921917][ T3296] Cannot create hsr debugfs directory [ 33.932650][ T3299] team0: Port device team_slave_1 added [ 33.943811][ T3301] team0: Port device team_slave_0 added [ 33.964127][ T3301] team0: Port device team_slave_1 added [ 33.977989][ T3300] team0: Port device team_slave_0 added [ 33.984791][ T3300] team0: Port device team_slave_1 added [ 33.990687][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.997736][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.023897][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.067510][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.074542][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.100703][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.111818][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.118874][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.144953][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.169603][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.176616][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.202650][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.219377][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.226410][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.252456][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.264167][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.271220][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.297203][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.331525][ T3299] hsr_slave_0: entered promiscuous mode [ 34.337603][ T3299] hsr_slave_1: entered promiscuous mode [ 34.343454][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 34.349180][ T3299] Cannot create hsr debugfs directory [ 34.397188][ T3301] hsr_slave_0: entered promiscuous mode [ 34.403385][ T3301] hsr_slave_1: entered promiscuous mode [ 34.409276][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 34.415078][ T3301] Cannot create hsr debugfs directory [ 34.444510][ T3300] hsr_slave_0: entered promiscuous mode [ 34.450545][ T3300] hsr_slave_1: entered promiscuous mode [ 34.456489][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 34.462252][ T3300] Cannot create hsr debugfs directory [ 34.563074][ T3294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.571567][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.587491][ T3294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.595648][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.615975][ T3294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.624581][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.641653][ T3294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.650019][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.687359][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.696186][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.704521][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.712800][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.724164][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.732792][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.741126][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.750004][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.773865][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.783209][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.791123][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.799790][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.807435][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.815988][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.823848][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.832698][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.868675][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.877213][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.885546][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.894062][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.907892][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.916709][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.925382][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.934008][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.952013][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.985340][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.997076][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.006285][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.014568][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.023421][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.031234][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.039815][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.047734][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.056413][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.067188][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.074330][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.091714][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.098827][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.123011][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.149558][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.166196][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.173297][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.192076][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.199188][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.217586][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.244578][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.261975][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.269181][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.278701][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.285837][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.297223][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.312267][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.336280][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.348641][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.369288][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.385667][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.397983][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.405109][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.414396][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.421505][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.443589][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.450707][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.461344][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.468492][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.536559][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.617997][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.737369][ T3294] veth0_vlan: entered promiscuous mode [ 35.753840][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.763338][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.777108][ T3294] veth1_vlan: entered promiscuous mode [ 35.812704][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.835606][ T3294] veth0_macvtap: entered promiscuous mode [ 35.863180][ T3294] veth1_macvtap: entered promiscuous mode [ 35.886181][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.904917][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.941844][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.950774][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.962519][ T3300] veth0_vlan: entered promiscuous mode [ 35.975935][ T3300] veth1_vlan: entered promiscuous mode [ 36.000817][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.016557][ T3299] veth0_vlan: entered promiscuous mode [ 36.033460][ T3296] veth0_vlan: entered promiscuous mode [ 36.046508][ T3299] veth1_vlan: entered promiscuous mode [ 36.055237][ T3294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.071160][ T3299] veth0_macvtap: entered promiscuous mode [ 36.078134][ T3301] veth0_vlan: entered promiscuous mode [ 36.091584][ T3300] veth0_macvtap: entered promiscuous mode [ 36.098540][ T3299] veth1_macvtap: entered promiscuous mode [ 36.108291][ T3301] veth1_vlan: entered promiscuous mode [ 36.117134][ T3300] veth1_macvtap: entered promiscuous mode [ 36.126204][ T3296] veth1_vlan: entered promiscuous mode [ 36.144038][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.154271][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.177199][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.191437][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.200508][ T3503] loop0: detected capacity change from 0 to 512 [ 36.211262][ T3503] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.225263][ T3503] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.237468][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.238283][ T3503] EXT4-fs (loop0): 1 truncate cleaned up [ 36.251916][ T3503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.258762][ T3296] veth0_macvtap: entered promiscuous mode [ 36.264734][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 36.264780][ T28] audit: type=1400 audit(1785518667.527:160): avc: denied { mount } for pid=3502 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.294690][ T3301] veth0_macvtap: entered promiscuous mode [ 36.304641][ T28] audit: type=1400 audit(1785518667.567:161): avc: denied { write } for pid=3502 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.308997][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.327897][ T28] audit: type=1400 audit(1785518667.567:162): avc: denied { add_name } for pid=3502 comm="syz.0.1" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.349859][ T3503] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 36.356163][ T28] audit: type=1400 audit(1785518667.567:163): avc: denied { create } for pid=3502 comm="syz.0.1" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.382848][ T28] audit: type=1400 audit(1785518667.567:164): avc: denied { read write } for pid=3502 comm="syz.0.1" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.401067][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.406133][ T28] audit: type=1400 audit(1785518667.567:165): avc: denied { open } for pid=3502 comm="syz.0.1" path="/0/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.425290][ T3296] veth1_macvtap: entered promiscuous mode [ 36.436808][ T28] audit: type=1400 audit(1785518667.607:166): avc: denied { map_create } for pid=3502 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.457256][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.463906][ T28] audit: type=1400 audit(1785518667.607:167): avc: denied { bpf } for pid=3502 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.478813][ T3301] veth1_macvtap: entered promiscuous mode [ 36.490904][ T28] audit: type=1400 audit(1785518667.627:168): avc: denied { create } for pid=3502 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.513483][ T28] audit: type=1400 audit(1785518667.627:169): avc: denied { ioctl } for pid=3502 comm="syz.0.1" path="socket:[4788]" dev="sockfs" ino=4788 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.549574][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.562206][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.585315][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.594177][ T3435] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.614830][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.631623][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.650853][ T3435] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.661173][ T3508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 36.705498][ T3514] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 36.708070][ T3435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.713306][ T3514] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.4'. [ 36.852491][ T3515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 36.890390][ T3527] loop2: detected capacity change from 0 to 512 [ 36.900072][ T3426] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.911758][ T3426] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.949226][ T3527] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3: inode has both inline data and extents flags [ 36.984807][ T3520] mmap: syz.4.5 (3520) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.005952][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.022419][ T3527] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.023184][ T3527] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 37.032419][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 37.032445][ C1] EXT4-fs (loop2): initial error at time 1785518668: ext4_orphan_get:1399: inode 15 [ 37.032472][ C1] EXT4-fs (loop2): last error at time 1785518668: ext4_orphan_get:1399: inode 15 [ 37.075955][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.082183][ T3527] loop2: lost filesystem error report for type 5 error -117 [ 37.088514][ T3527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.130868][ T3426] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.148240][ T3527] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 220 vs 988 free clusters [ 37.152603][ T3426] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.212289][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.221905][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.242664][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.256771][ T3544] loop3: detected capacity change from 0 to 1024 [ 37.264106][ T3544] EXT4-fs: Ignoring removed orlov option [ 37.275777][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.285727][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 37.295276][ T3544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.373204][ T3550] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9'. [ 37.520338][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.627257][ T3553] loop1: detected capacity change from 0 to 512 [ 37.673226][ T3553] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.11: Unrecognised inode hash code 255 [ 37.716355][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.760290][ T3553] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.11: Corrupt directory, running e2fsck is recommended [ 37.845212][ T3553] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 37.867725][ T3553] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.11: corrupted in-inode xattr: e_name out of bounds [ 37.908857][ T3553] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.909231][ T3553] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.11: couldn't read orphan inode 15 (err -117) [ 37.918621][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 37.918658][ C1] EXT4-fs (loop1): initial error at time 1785518669: ext4_iget_extra_inode:5180: inode 15 [ 37.918736][ C1] EXT4-fs (loop1): last error at time 1785518669: ext4_iget_extra_inode:5180: inode 15 [ 37.940344][ T3571] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 37.947865][ T3568] Zero length message leads to an empty skb [ 37.977777][ T3553] loop1: lost filesystem error report for type 5 error -117 [ 37.979485][ T3553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.031448][ T3568] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13'. [ 38.139370][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.615401][ T3571] syz.0.14 (3571) used greatest stack depth: 11024 bytes left [ 38.687316][ T3530] syz.1.2 (3530) used greatest stack depth: 10944 bytes left [ 39.094840][ T3579] loop1: detected capacity change from 0 to 2048 [ 39.123581][ T3579] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=2842c01c, mo2=0002] [ 39.132364][ T3579] System zones: 0-7 [ 39.138855][ T3579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.156324][ T3579] EXT4-fs error (device loop1): ext4_find_extent:904: inode #2: comm syz.1.16: inode has invalid extent depth: 8 [ 39.180302][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.214083][ T3584] loop1: detected capacity change from 0 to 512 [ 39.225328][ T3584] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.17: Unrecognised inode hash code 255 [ 39.236834][ T3584] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.17: Corrupt directory, running e2fsck is recommended [ 39.252342][ T3584] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 39.260875][ T3584] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.17: corrupted in-inode xattr: e_name out of bounds [ 39.274910][ T3584] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.275353][ T3584] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.17: couldn't read orphan inode 15 (err -117) [ 39.284643][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 39.284682][ C0] EXT4-fs (loop1): initial error at time 1785518670: ext4_iget_extra_inode:5180: inode 15 [ 39.284742][ C0] EXT4-fs (loop1): last error at time 1785518670: ext4_iget_extra_inode:5180: inode 15 [ 39.323026][ T3584] loop1: lost filesystem error report for type 5 error -117 [ 39.324073][ T3584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.400153][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.437770][ T3590] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 39.524859][ T3597] se_device not configured yet, cannot port link [ 39.622894][ T3603] Illegal XDP return value 4294967274 on prog (id 1) dev N/A, expect packet loss! [ 40.188646][ T3539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 40.367632][ T3626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 40.449572][ T3626] syz_tun: entered allmulticast mode [ 40.472179][ T3635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23'. [ 40.483349][ T3626] dvmrp8: entered allmulticast mode [ 40.555030][ T3606] syz.2.23 (3606) used greatest stack depth: 10800 bytes left [ 40.651716][ T3625] syz_tun: left allmulticast mode [ 40.835142][ T3645] loop4: detected capacity change from 0 to 512 [ 40.897041][ T3645] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.32: corrupted in-inode xattr: overlapping e_value [ 40.916376][ T3645] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.916788][ T3645] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.32: couldn't read orphan inode 15 (err -117) [ 40.926003][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 40.926021][ C0] EXT4-fs (loop4): initial error at time 1785518672: ext4_iget_extra_inode:5180: inode 15 [ 40.926046][ C0] EXT4-fs (loop4): last error at time 1785518672: ext4_iget_extra_inode:5180: inode 15 [ 40.966032][ T3645] loop4: lost filesystem error report for type 5 error -117 [ 40.967452][ T3645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.070434][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.280273][ T3650] loop2: detected capacity change from 0 to 512 [ 41.305657][ T3650] EXT4-fs: Ignoring removed nobh option [ 41.395165][ T3650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.412843][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 41.422701][ T28] kauditd_printk_skb: 502 callbacks suppressed [ 41.422717][ T28] audit: type=1400 audit(1785518672.667:672): avc: denied { bpf } for pid=3654 comm="syz.4.36" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.451850][ T3664] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 41.466450][ T3650] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.489943][ T28] audit: type=1400 audit(1785518672.747:673): avc: denied { write } for pid=3647 comm="syz.2.34" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.539647][ T28] audit: type=1400 audit(1785518672.787:674): avc: denied { create } for pid=3647 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.564444][ T3650] 9pnet_fd: Insufficient options for proto=fd [ 41.580210][ T28] audit: type=1400 audit(1785518672.797:675): avc: denied { connect } for pid=3647 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.600040][ T28] audit: type=1400 audit(1785518672.797:676): avc: denied { shutdown } for pid=3647 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.619943][ T28] audit: type=1400 audit(1785518672.827:677): avc: denied { mounton } for pid=3647 comm="syz.2.34" path="/3/bus/file0" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.674338][ T28] audit: type=1400 audit(1785518672.937:678): avc: denied { ioctl } for pid=3647 comm="syz.2.34" path="/3/bus/file0" dev="loop2" ino=15 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.104657][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.116081][ T28] audit: type=1400 audit(1785518673.377:679): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 42.153222][ T3671] loop3: detected capacity change from 0 to 512 [ 42.182186][ T3671] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 42.208285][ T3671] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.225077][ T3671] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 42.235860][ T3671] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.251117][ T3671] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 42.258028][ T3671] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #16: comm syz.3.37: inode has both inline data and extents flags [ 42.271313][ T28] audit: type=1400 audit(1785518673.527:680): avc: denied { read } for pid=3669 comm="syz.2.38" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 42.292762][ T3671] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 42.294953][ T3671] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.37: couldn't read orphan inode 16 (err -117) [ 42.304120][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 42.304136][ C1] EXT4-fs (loop3): initial error at time 1785518673: ext4_orphan_get:1399: inode 16 [ 42.304171][ C1] EXT4-fs (loop3): last error at time 1785518673: ext4_orphan_get:1399: inode 16 [ 42.342713][ T3671] loop3: lost filesystem error report for type 5 error -117 [ 42.343393][ T3671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.417155][ T3675] loop0: detected capacity change from 0 to 512 [ 42.432115][ T3675] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.443183][ T3675] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 42.458497][ T3670] loop2: detected capacity change from 0 to 1024 [ 42.463348][ T3675] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 42.468183][ T3670] ======================================================= [ 42.468183][ T3670] WARNING: The mand mount option has been deprecated and [ 42.468183][ T3670] and is ignored by this kernel. Remove the mand [ 42.468183][ T3670] option from the mount to silence this warning. [ 42.468183][ T3670] ======================================================= [ 42.503288][ T3675] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 42.517758][ T3670] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.518722][ T3675] System zones: 0-2, 18-18, 34-34 [ 42.519603][ T3675] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.39: bad orphan inode 15 [ 42.544460][ T3675] loop0: lost filesystem error report for type 5 error -117 [ 42.544621][ T3675] ext4_test_bit(bit=14, block=18) = 1 [ 42.551966][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 42.551986][ C1] EXT4-fs (loop0): initial error at time 1785518673: ext4_orphan_get:1425 [ 42.552011][ C1] EXT4-fs (loop0): last error at time 1785518673: ext4_orphan_get:1425 [ 42.554481][ T3670] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.38: Invalid block bitmap block 0 in block_group 0 [ 42.557932][ T3675] is_bad_inode(inode)=0 [ 42.557943][ T3675] NEXT_ORPHAN(inode)=2264924160 [ 42.557953][ T3675] max_ino=32 [ 42.557962][ T3675] i_nlink=0 [ 42.558107][ T3675] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.39: corrupted inode contents [ 42.558143][ T3675] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.558774][ T3675] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #15: comm syz.0.39: mark_inode_dirty error [ 42.566203][ T3670] loop2: lost filesystem error report for type 5 error -117 [ 42.577411][ T3675] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.584525][ T3670] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.38: Failed to acquire dquot type 0 [ 42.595432][ T3675] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.39: corrupted inode contents [ 42.595465][ T3675] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.595591][ T3675] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.39: mark_inode_dirty error [ 42.595640][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 42.595680][ C0] EXT4-fs (loop2): initial error at time 1785518673: ext4_read_block_bitmap_nowait:483 [ 42.595703][ T3675] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.595813][ T3675] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.39: mark inode dirty (error -117) [ 42.595853][ T3675] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.595967][ T3675] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 42.596109][ C0] [ 42.596130][ C0] EXT4-fs (loop2): last error at time 1785518673: ext4_read_block_bitmap_nowait:483 [ 42.596408][ T3675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.803492][ T3670] loop2: lost filesystem error report for type 5 error -117 [ 42.807300][ T3670] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.38: Freeing blocks not in datazone - block = 0, count = 4096 [ 42.807410][ T3670] loop2: lost filesystem error report for type 5 error -117 [ 42.810579][ T3670] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.38: Invalid inode bitmap blk 0 in block_group 0 [ 42.849634][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 42.849734][ T12] loop2: lost filesystem error report for type 5 error -117 [ 42.850245][ T3670] loop2: lost filesystem error report for type 5 error -117 [ 42.874367][ T3670] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 42.874703][ T3670] loop2: lost filesystem error report for type 5 error -117 [ 42.876495][ T3670] EXT4-fs (loop2): 1 orphan inode deleted [ 42.917288][ T3670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.980817][ T3670] syz.2.38 (3670) used greatest stack depth: 9376 bytes left [ 42.989109][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.180950][ T3656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 44.219362][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.232061][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.408132][ T3704] FAULT_INJECTION: forcing a failure. [ 44.408132][ T3704] name failslab, interval 1, probability 0, space 0, times 1 [ 44.433715][ T3704] CPU: 0 UID: 0 PID: 3704 Comm: syz.0.42 Not tainted syzkaller #0 PREEMPT(lazy) [ 44.433749][ T3704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.433770][ T3704] Call Trace: [ 44.433776][ T3704] [ 44.433785][ T3704] __dump_stack+0x1d/0x30 [ 44.433812][ T3704] dump_stack_lvl+0x95/0xd0 [ 44.433841][ T3704] dump_stack+0x15/0x1b [ 44.433865][ T3704] should_fail_ex+0x25e/0x270 [ 44.433959][ T3704] should_failslab+0x8c/0xb0 [ 44.433986][ T3704] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 44.434062][ T3704] ? security_inode_alloc+0x37/0x100 [ 44.434092][ T3704] ? security_inode_alloc+0x37/0x100 [ 44.434267][ T3704] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 44.434307][ T3704] security_inode_alloc+0x37/0x100 [ 44.434340][ T3704] inode_init_always_gfp+0x495/0x4e0 [ 44.434373][ T3704] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 44.434412][ T3704] alloc_inode+0x58/0x170 [ 44.434453][ T3704] new_inode+0x1d/0xe0 [ 44.434508][ T3704] hugetlbfs_get_inode+0x7b/0x330 [ 44.434567][ T3704] ? mutex_unlock+0x4e/0x90 [ 44.434606][ T3704] hugetlb_file_setup+0x192/0x3d0 [ 44.434633][ T3704] ksys_mmap_pgoff+0x13f/0x310 [ 44.434668][ T3704] x64_sys_call+0x14df/0x3020 [ 44.434738][ T3704] do_syscall_64+0x136/0x3c0 [ 44.434828][ T3704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.434855][ T3704] RIP: 0033:0x7fb22184e019 [ 44.434871][ T3704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.434889][ T3704] RSP: 002b:00007fb220286028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 44.434921][ T3704] RAX: ffffffffffffffda RBX: 00007fb221ad6090 RCX: 00007fb22184e019 [ 44.434936][ T3704] RDX: 0000000002000009 RSI: 0000000000800000 RDI: 0000200000800000 [ 44.434950][ T3704] RBP: 00007fb220286090 R08: ffffffffffffffff R09: 0000000000004000 [ 44.434966][ T3704] R10: 000200000006c832 R11: 0000000000000246 R12: 0000000000000002 [ 44.434979][ T3704] R13: 00007fb221ad6128 R14: 00007fb221ad6090 R15: 00007ffc53fea828 [ 44.435000][ T3704] [ 44.728519][ T3718] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3718 comm=syz.3.54 [ 44.852856][ T3731] futex_wake_op: syz.1.57 tries to shift op by 144; fix this program [ 46.101370][ T3824] futex_wake_op: syz.3.100 tries to shift op by 144; fix this program [ 46.432800][ T28] kauditd_printk_skb: 1002 callbacks suppressed [ 46.432866][ T28] audit: type=1326 audit(1785518677.697:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.1.113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486dc0e019 code=0x7ffc0000 [ 46.489390][ T28] audit: type=1326 audit(1785518677.697:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.1.113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486dc0e019 code=0x7ffc0000 [ 46.535079][ T28] audit: type=1326 audit(1785518677.697:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.1.113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f486dc0e019 code=0x7ffc0000 [ 46.579937][ T28] audit: type=1326 audit(1785518677.697:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.1.113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f486dc0e019 code=0x7ffc0000 [ 46.625564][ T28] audit: type=1400 audit(1785518677.737:1684): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.663496][ T28] audit: type=1400 audit(1785518677.747:1685): avc: denied { create } for pid=3851 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 46.720468][ T28] audit: type=1400 audit(1785518677.747:1686): avc: denied { open } for pid=3851 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 46.779011][ T28] audit: type=1400 audit(1785518677.747:1687): avc: denied { read write } for pid=3851 comm="syz.1.114" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.834553][ T28] audit: type=1400 audit(1785518677.747:1688): avc: denied { read } for pid=3851 comm="syz.1.114" dev="nsfs" ino=4026532881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 46.858739][ T28] audit: type=1400 audit(1785518677.747:1689): avc: denied { create } for pid=3851 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 47.477353][ T3912] futex_wake_op: syz.1.140 tries to shift op by 144; fix this program [ 48.671772][ T4018] futex_wake_op: syz.2.188 tries to shift op by 144; fix this program [ 49.772989][ T4102] futex_wake_op: syz.2.233 tries to shift op by 144; fix this program [ 50.054739][ T4130] futex_wake_op: syz.2.247 tries to shift op by 144; fix this program [ 50.411120][ T4154] futex_wake_op: syz.4.261 tries to shift op by 144; fix this program [ 50.802342][ T4196] futex_wake_op: syz.0.273 tries to shift op by 144; fix this program [ 51.223870][ T4218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.287'. [ 51.468120][ T28] kauditd_printk_skb: 2543 callbacks suppressed [ 51.468146][ T28] audit: type=1400 audit(1785518682.727:4233): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.499643][ T28] audit: type=1400 audit(1785518682.757:4234): avc: denied { mounton } for pid=4240 comm="syz.3.299" path="/62/config" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 51.522723][ T28] audit: type=1400 audit(1785518682.757:4235): avc: denied { create } for pid=4240 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 51.569027][ T28] audit: type=1400 audit(1785518682.767:4236): avc: denied { map_create } for pid=4240 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 51.590173][ T28] audit: type=1400 audit(1785518682.827:4237): avc: denied { read write } for pid=3294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.614977][ T28] audit: type=1400 audit(1785518682.877:4238): avc: denied { create } for pid=4245 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 51.636948][ T28] audit: type=1400 audit(1785518682.897:4239): avc: denied { create } for pid=4245 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 51.659849][ T4246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.300'. [ 51.671788][ T28] audit: type=1400 audit(1785518682.917:4240): avc: denied { create } for pid=4245 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 51.713543][ T28] audit: type=1400 audit(1785518682.917:4241): avc: denied { create } for pid=4245 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 51.754260][ T28] audit: type=1400 audit(1785518682.917:4242): avc: denied { open } for pid=4245 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 51.902560][ T4276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.313'. [ 51.972115][ T4284] futex_wake_op: syz.3.310 tries to shift op by 144; fix this program [ 52.306639][ T4305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.326'. [ 52.791492][ T4329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.337'. [ 52.958354][ T4348] futex_wake_op: syz.2.341 tries to shift op by 144; fix this program [ 53.186260][ T4362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.351'. [ 53.566866][ T4389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.363'. [ 53.799632][ T4415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.375'. [ 54.034222][ T4440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.386'. [ 54.050706][ T4441] futex_wake_op: syz.2.381 tries to shift op by 144; fix this program [ 55.072397][ T4537] futex_wake_op: syz.0.427 tries to shift op by 144; fix this program [ 56.243482][ T4631] futex_wake_op: syz.2.465 tries to shift op by 144; fix this program [ 56.486050][ T28] kauditd_printk_skb: 1405 callbacks suppressed [ 56.486142][ T28] audit: type=1400 audit(1785518687.747:5648): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.527830][ T28] audit: type=1400 audit(1785518687.787:5649): avc: denied { map_create } for pid=4637 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 56.559179][ T28] audit: type=1400 audit(1785518687.787:5650): avc: denied { map_create } for pid=4637 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 56.586077][ T28] audit: type=1400 audit(1785518687.787:5651): avc: denied { map_create } for pid=4637 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 56.605664][ T28] audit: type=1400 audit(1785518687.787:5652): avc: denied { map_create } for pid=4637 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 56.626519][ T28] audit: type=1400 audit(1785518687.787:5653): avc: denied { prog_load } for pid=4637 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 56.646559][ T28] audit: type=1400 audit(1785518687.787:5654): avc: denied { prog_load } for pid=4637 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 56.665815][ T28] audit: type=1400 audit(1785518687.787:5655): avc: denied { create } for pid=4637 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 56.686492][ T28] audit: type=1400 audit(1785518687.787:5656): avc: denied { create } for pid=4637 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 56.723677][ T28] audit: type=1400 audit(1785518687.787:5657): avc: denied { read write } for pid=3294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 57.323710][ T4700] futex_wake_op: syz.2.498 tries to shift op by 144; fix this program [ 58.510073][ T4791] futex_wake_op: syz.0.533 tries to shift op by 144; fix this program [ 59.670888][ T4883] futex_wake_op: syz.0.573 tries to shift op by 144; fix this program [ 60.722439][ T4986] futex_wake_op: syz.0.621 tries to shift op by 144; fix this program [ 61.491403][ T28] kauditd_printk_skb: 1418 callbacks suppressed [ 61.491416][ T28] audit: type=1400 audit(1785518692.747:7076): avc: denied { create } for pid=5050 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 61.537697][ T28] audit: type=1400 audit(1785518692.787:7077): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.575023][ T28] audit: type=1400 audit(1785518692.787:7078): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.606808][ T28] audit: type=1400 audit(1785518692.797:7079): avc: denied { create } for pid=5053 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 61.627558][ T28] audit: type=1400 audit(1785518692.797:7080): avc: denied { create } for pid=5053 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 61.648500][ T28] audit: type=1400 audit(1785518692.797:7081): avc: denied { create } for pid=5053 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 61.668280][ T28] audit: type=1400 audit(1785518692.797:7082): avc: denied { open } for pid=5053 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 61.689059][ T28] audit: type=1400 audit(1785518692.797:7083): avc: denied { open } for pid=5053 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 61.708495][ T28] audit: type=1400 audit(1785518692.827:7084): avc: denied { prog_load } for pid=5055 comm="syz.1.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 61.727670][ T28] audit: type=1400 audit(1785518692.827:7085): avc: denied { read write } for pid=5055 comm="syz.1.653" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 61.913697][ T5090] futex_wake_op: syz.2.661 tries to shift op by 144; fix this program [ 62.917707][ T5183] futex_wake_op: syz.4.707 tries to shift op by 144; fix this program [ 63.974847][ T5285] futex_wake_op: syz.4.749 tries to shift op by 144; fix this program [ 64.601345][ T5331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.775'. [ 64.824594][ T5359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.787'. [ 65.094743][ T5382] futex_wake_op: syz.4.792 tries to shift op by 144; fix this program [ 65.223904][ T5396] netlink: 36 bytes leftover after parsing attributes in process `syz.3.800'. [ 65.602917][ T5422] netlink: 36 bytes leftover after parsing attributes in process `syz.0.812'. [ 65.908492][ T5454] netlink: 36 bytes leftover after parsing attributes in process `syz.3.826'. [ 65.921471][ T5456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=5456 comm=syz.4.827 [ 66.160219][ T5479] futex_wake_op: syz.0.836 tries to shift op by 144; fix this program [ 66.228140][ T5487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5487 comm=syz.1.840 [ 66.243948][ T5485] netlink: 36 bytes leftover after parsing attributes in process `syz.3.839'. [ 66.509124][ T28] kauditd_printk_skb: 1603 callbacks suppressed [ 66.509137][ T28] audit: type=1400 audit(1785518697.767:8689): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 66.540167][ T28] audit: type=1400 audit(1785518697.777:8690): avc: denied { map_create } for pid=5501 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 66.581974][ T28] audit: type=1400 audit(1785518697.847:8691): avc: denied { execmem } for pid=5501 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 66.629542][ T28] audit: type=1400 audit(1785518697.887:8692): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 66.634460][ T5503] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 66.677800][ T28] audit: type=1400 audit(1785518697.887:8693): avc: denied { open } for pid=5501 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 66.697263][ T28] audit: type=1400 audit(1785518697.887:8694): avc: denied { open } for pid=5501 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 66.716818][ T28] audit: type=1400 audit(1785518697.927:8695): avc: denied { create } for pid=5504 comm="syz.3.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 66.737505][ T28] audit: type=1400 audit(1785518697.927:8696): avc: denied { open } for pid=5504 comm="syz.3.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 66.757039][ T28] audit: type=1400 audit(1785518697.927:8697): avc: denied { read write } for pid=5504 comm="syz.3.846" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 66.781257][ T28] audit: type=1400 audit(1785518697.937:8698): avc: denied { read } for pid=5504 comm="syz.3.846" dev="nsfs" ino=4026532677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 66.915905][ T5518] netlink: 36 bytes leftover after parsing attributes in process `syz.0.852'. [ 67.188548][ T5542] futex_wake_op: syz.3.862 tries to shift op by 144; fix this program [ 67.407298][ T5552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.866'. [ 67.795668][ T5585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.878'. [ 68.112541][ T5619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.896'. [ 68.412638][ T5642] futex_wake_op: syz.1.901 tries to shift op by 144; fix this program [ 69.480904][ T5687] futex_wake_op: syz.2.919 tries to shift op by 144; fix this program [ 70.058667][ T5721] __nla_validate_parse: 1 callbacks suppressed [ 70.058765][ T5721] netlink: 36 bytes leftover after parsing attributes in process `syz.1.935'. [ 70.484273][ T5759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.952'. [ 70.599874][ T5773] futex_wake_op: syz.1.953 tries to shift op by 144; fix this program [ 71.039975][ T5805] netlink: 36 bytes leftover after parsing attributes in process `syz.2.970'. [ 71.361144][ T5836] netlink: 36 bytes leftover after parsing attributes in process `syz.4.984'. [ 71.466437][ T5844] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 71.511493][ T28] kauditd_printk_skb: 16116 callbacks suppressed [ 71.511509][ T28] audit: type=1400 audit(1785518702.777:24572): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.546006][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.552651][ T5850] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.560387][ T3296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.561676][ T3018] audit: audit_lost=82 audit_rate_limit=0 audit_backlog_limit=64 [ 71.568445][ T28] audit: type=1400 audit(1785518702.777:24573): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.599462][ T3296] audit: audit_lost=83 audit_rate_limit=0 audit_backlog_limit=64 [ 71.600866][ T3018] audit: backlog limit exceeded [ 71.608496][ T5851] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.618256][ T5853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.717247][ T5867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.996'. [ 71.860784][ T5877] futex_wake_op: syz.4.997 tries to shift op by 144; fix this program [ 72.349704][ T5886] FAULT_INJECTION: forcing a failure. [ 72.349704][ T5886] name failslab, interval 1, probability 0, space 0, times 0 [ 72.363283][ T5886] CPU: 1 UID: 0 PID: 5886 Comm: syz.0.1003 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.363316][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.363402][ T5886] Call Trace: [ 72.363423][ T5886] [ 72.363433][ T5886] __dump_stack+0x1d/0x30 [ 72.363464][ T5886] dump_stack_lvl+0x95/0xd0 [ 72.363508][ T5886] dump_stack+0x15/0x1b [ 72.363533][ T5886] should_fail_ex+0x25e/0x270 [ 72.363572][ T5886] ? rtnl_newlink+0x5c/0x1400 [ 72.363642][ T5886] should_failslab+0x8c/0xb0 [ 72.363673][ T5886] __kmalloc_cache_noprof+0x7b/0x3d0 [ 72.363699][ T5886] ? rtnl_newlink+0x5c/0x1400 [ 72.363807][ T5886] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.363839][ T5886] rtnl_newlink+0x5c/0x1400 [ 72.363880][ T5886] ? __siphash_unaligned+0x185/0x2d0 [ 72.363920][ T5886] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 72.364029][ T5886] ? __rcu_read_unlock+0x4e/0x70 [ 72.364064][ T5886] ? avc_has_perm_noaudit+0xa3/0x120 [ 72.364168][ T5886] ? cred_has_capability+0x224/0x2a0 [ 72.364192][ T5886] ? selinux_capable+0x31/0x40 [ 72.364226][ T5886] ? security_capable+0x7b/0x90 [ 72.364267][ T5886] ? ns_capable+0x80/0xb0 [ 72.364342][ T5886] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.364373][ T5886] rtnetlink_rcv_msg+0x64b/0x720 [ 72.364403][ T5886] netlink_rcv_skb+0x11e/0x220 [ 72.364428][ T5886] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.364494][ T5886] rtnetlink_rcv+0x1c/0x30 [ 72.364523][ T5886] netlink_unicast+0x5a7/0x680 [ 72.364619][ T5886] netlink_sendmsg+0x5be/0x6f0 [ 72.364656][ T5886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.364760][ T5886] ____sys_sendmsg+0x532/0x580 [ 72.364815][ T5886] ___sys_sendmsg+0x195/0x1e0 [ 72.364954][ T5886] __x64_sys_sendmsg+0xd4/0x160 [ 72.365002][ T5886] x64_sys_call+0x194c/0x3020 [ 72.365051][ T5886] do_syscall_64+0x136/0x3c0 [ 72.365081][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.365109][ T5886] RIP: 0033:0x7fb22184e019 [ 72.365160][ T5886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.365184][ T5886] RSP: 002b:00007fb2202a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.365210][ T5886] RAX: ffffffffffffffda RBX: 00007fb221ad5fa0 RCX: 00007fb22184e019 [ 72.365228][ T5886] RDX: 00000000440088c4 RSI: 0000200000000040 RDI: 0000000000000004 [ 72.365280][ T5886] RBP: 00007fb2202a7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.365296][ T5886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.365312][ T5886] R13: 00007fb221ad6038 R14: 00007fb221ad5fa0 R15: 00007ffc53fea828 [ 72.365337][ T5886] [ 72.682176][ T5894] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1007'. [ 72.794893][ T5906] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1008'. [ 72.804996][ T5907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1012'. [ 73.170154][ T5931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1022'. [ 73.209127][ T5934] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1024'. [ 73.889403][ T6004] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 74.987145][ T6074] capability: warning: `syz.1.1083' uses 32-bit capabilities (legacy support in use) [ 75.188800][ T6087] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 75.271594][ T6095] xt_socket: unknown flags 0x48 [ 75.421136][ T6102] futex_wake_op: syz.1.1093 tries to shift op by 144; fix this program [ 76.376117][ T6161] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 76.520642][ T28] kauditd_printk_skb: 29417 callbacks suppressed [ 76.520675][ T28] audit: type=1400 audit(1785518707.777:52925): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.536109][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 76.549621][ T28] audit: type=1400 audit(1785518707.787:52926): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.561965][ T6169] audit: audit_backlog=65 > audit_backlog_limit=64 [ 76.576565][ T28] audit: type=1400 audit(1785518707.787:52927): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.582985][ T3018] audit: audit_lost=440 audit_rate_limit=0 audit_backlog_limit=64 [ 76.604002][ T28] audit: type=1400 audit(1785518707.787:52928): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.613469][ T6169] audit: audit_lost=441 audit_rate_limit=0 audit_backlog_limit=64 [ 76.633163][ T28] audit: type=1400 audit(1785518707.787:52929): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.641325][ T3018] audit: backlog limit exceeded [ 76.878683][ T6174] futex_wake_op: syz.2.1122 tries to shift op by 144; fix this program [ 77.350423][ T6209] sch_tbf: burst 6 is lower than device batadv_slave_0 mtu (1514) ! [ 77.403845][ T6212] syzkaller0: entered promiscuous mode [ 77.429871][ T6212] syzkaller0: entered allmulticast mode [ 77.797302][ T6232] netlink: 'syz.0.1147': attribute type 3 has an invalid length. [ 77.805460][ T6232] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1147'. [ 77.856896][ T6239] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1149'. [ 78.171917][ T6266] futex_wake_op: syz.0.1158 tries to shift op by 144; fix this program [ 78.317165][ T6273] netlink: 'syz.1.1164': attribute type 15 has an invalid length. [ 78.327309][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1164'. [ 78.342933][ T6273] netlink: 'syz.1.1164': attribute type 15 has an invalid length. [ 78.358081][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1164'. [ 78.367718][ T30] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2304 - 0 [ 78.376815][ T30] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2304 - 0 [ 78.390700][ T30] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2304 - 0 [ 78.431009][ T30] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2304 - 0 [ 78.695762][ T6290] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1171'. [ 79.189770][ T6321] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1184'. [ 79.403136][ T6337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1191'. [ 79.427840][ T6337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1191'. [ 79.470154][ T6337] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 79.494661][ T6337] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 79.537040][ T6337] bond1 (unregistering): Released all slaves [ 79.847365][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1206'. [ 80.351434][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1221'. [ 81.073348][ T6443] SET target dimension over the limit! [ 81.152542][ T6446] FAULT_INJECTION: forcing a failure. [ 81.152542][ T6446] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.174568][ T6446] CPU: 0 UID: 0 PID: 6446 Comm: syz.4.1240 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.174611][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.174679][ T6446] Call Trace: [ 81.174687][ T6446] [ 81.174699][ T6446] __dump_stack+0x1d/0x30 [ 81.174729][ T6446] dump_stack_lvl+0x95/0xd0 [ 81.174756][ T6446] dump_stack+0x15/0x1b [ 81.174782][ T6446] should_fail_ex+0x25e/0x270 [ 81.174834][ T6446] should_fail+0xb/0x20 [ 81.174859][ T6446] should_fail_usercopy+0x1a/0x20 [ 81.174896][ T6446] fpu__restore_sig+0x12a/0xad0 [ 81.174928][ T6446] ? x86_task_fpu+0x36/0x60 [ 81.175038][ T6446] __ia32_sys_rt_sigreturn+0x29b/0x350 [ 81.175090][ T6446] x64_sys_call+0x2823/0x3020 [ 81.175122][ T6446] do_syscall_64+0x136/0x3c0 [ 81.175150][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.175220][ T6446] RIP: 0033:0x7f0efa0be017 [ 81.175240][ T6446] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 81.175264][ T6446] RSP: 002b:00007f0ef8b17028 EFLAGS: 00000246 [ 81.175287][ T6446] RAX: 0000000000000013 RBX: 00007f0efa345fa0 RCX: 00007f0efa0be019 [ 81.175313][ T6446] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 81.175331][ T6446] RBP: 00007f0ef8b17090 R08: 0000000000000000 R09: 0000000000000000 [ 81.175354][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.175371][ T6446] R13: 00007f0efa346038 R14: 00007f0efa345fa0 R15: 00007ffe3dcaacf8 [ 81.175392][ T6446] [ 81.522040][ T6456] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 81.534762][ T28] kauditd_printk_skb: 20722 callbacks suppressed [ 81.534779][ T28] audit: type=1400 audit(1785518712.797:73558): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.571944][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.572300][ T6457] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.579030][ T3018] audit: audit_lost=473 audit_rate_limit=0 audit_backlog_limit=64 [ 81.593135][ T28] audit: type=1400 audit(1785518712.827:73559): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.605512][ T6457] audit: audit_lost=474 audit_rate_limit=0 audit_backlog_limit=64 [ 81.614479][ T3018] audit: backlog limit exceeded [ 81.627255][ T28] audit: type=1400 audit(1785518712.827:73560): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.652854][ T6457] audit: backlog limit exceeded [ 81.659427][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 83.045534][ T6534] __nla_validate_parse: 2 callbacks suppressed [ 83.045549][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 83.430489][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 83.462465][ T6559] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6559 comm=syz.0.1290 [ 83.939577][ T6590] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1302'. [ 84.043439][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'. [ 84.080756][ T6597] netlink: 'syz.2.1304': attribute type 2 has an invalid length. [ 84.258581][ T6615] capability: warning: `syz.4.1312' uses deprecated v2 capabilities in a way that may be insecure [ 84.669922][ T6645] FAULT_INJECTION: forcing a failure. [ 84.669922][ T6645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.712922][ T6645] CPU: 1 UID: 0 PID: 6645 Comm: syz.3.1322 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.712957][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.712973][ T6645] Call Trace: [ 84.712983][ T6645] [ 84.712992][ T6645] __dump_stack+0x1d/0x30 [ 84.713015][ T6645] dump_stack_lvl+0x95/0xd0 [ 84.713034][ T6645] dump_stack+0x15/0x1b [ 84.713122][ T6645] should_fail_ex+0x25e/0x270 [ 84.713158][ T6645] should_fail+0xb/0x20 [ 84.713194][ T6645] should_fail_usercopy+0x1a/0x20 [ 84.713320][ T6645] _copy_from_user+0x1c/0xb0 [ 84.713346][ T6645] sk_setsockopt+0x1f4/0x20e0 [ 84.713383][ T6645] udp_lib_setsockopt+0x73/0x470 [ 84.713489][ T6645] udpv6_setsockopt+0x67/0xa0 [ 84.713510][ T6645] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 84.713531][ T6645] sock_common_setsockopt+0x69/0x80 [ 84.713564][ T6645] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 84.713714][ T6645] __sys_setsockopt+0x184/0x200 [ 84.713757][ T6645] __x64_sys_setsockopt+0x64/0x80 [ 84.713938][ T6645] x64_sys_call+0x2327/0x3020 [ 84.713971][ T6645] do_syscall_64+0x136/0x3c0 [ 84.714003][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.714028][ T6645] RIP: 0033:0x7f2e4e0be019 [ 84.714072][ T6645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.714095][ T6645] RSP: 002b:00007f2e4cb17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.714118][ T6645] RAX: ffffffffffffffda RBX: 00007f2e4e345fa0 RCX: 00007f2e4e0be019 [ 84.714133][ T6645] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 84.714148][ T6645] RBP: 00007f2e4cb17090 R08: 0000000000000010 R09: 0000000000000000 [ 84.714172][ T6645] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 84.714266][ T6645] R13: 00007f2e4e346038 R14: 00007f2e4e345fa0 R15: 00007ffe4def68a8 [ 84.714289][ T6645] [ 85.101578][ T6651] futex_wake_op: syz.1.1324 tries to shift op by 144; fix this program [ 85.445013][ T6659] netlink: 'syz.3.1328': attribute type 1 has an invalid length. [ 85.620845][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1328'. [ 85.666110][ T6667] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 86.024354][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 86.302810][ T6694] Cannot find add_set index 0 as target [ 86.450764][ T6702] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 86.466718][ T6702] Cannot find add_set index 0 as target [ 86.540674][ T28] kauditd_printk_skb: 20147 callbacks suppressed [ 86.540692][ T28] audit: type=1400 audit(1785518717.797:92596): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.568770][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 86.579914][ T3018] audit: audit_lost=846 audit_rate_limit=0 audit_backlog_limit=64 [ 86.581887][ T28] audit: type=1400 audit(1785518717.807:92597): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.593037][ T3018] audit: backlog limit exceeded [ 86.627170][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 86.636286][ T28] audit: type=1400 audit(1785518717.807:92598): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.638725][ T3018] audit: audit_lost=847 audit_rate_limit=0 audit_backlog_limit=64 [ 86.686992][ T3018] audit: backlog limit exceeded [ 86.691902][ T28] audit: type=1400 audit(1785518717.807:92599): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.907117][ T6684] FAULT_INJECTION: forcing a failure. [ 86.907117][ T6684] name failslab, interval 1, probability 0, space 0, times 0 [ 86.919967][ T6684] CPU: 0 UID: 0 PID: 6684 Comm: syz.0.1338 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.920000][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.920016][ T6684] Call Trace: [ 86.920025][ T6684] [ 86.920034][ T6684] __dump_stack+0x1d/0x30 [ 86.920059][ T6684] dump_stack_lvl+0x95/0xd0 [ 86.920128][ T6684] dump_stack+0x15/0x1b [ 86.920152][ T6684] should_fail_ex+0x25e/0x270 [ 86.920189][ T6684] should_failslab+0x8c/0xb0 [ 86.920252][ T6684] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 86.920377][ T6684] ? skb_clone+0x151/0x1f0 [ 86.920408][ T6684] ? skb_clone+0x151/0x1f0 [ 86.920450][ T6684] skb_clone+0x151/0x1f0 [ 86.920511][ T6684] __netlink_deliver_tap+0x2be/0x510 [ 86.920541][ T6684] netlink_sendskb+0x126/0x150 [ 86.920562][ T6684] netlink_unicast+0x285/0x680 [ 86.920585][ T6684] netlink_ack+0x4fe/0x530 [ 86.920647][ T6684] netlink_rcv_skb+0x18d/0x220 [ 86.920678][ T6684] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.920740][ T6684] rtnetlink_rcv+0x1c/0x30 [ 86.920760][ T6684] netlink_unicast+0x5a7/0x680 [ 86.920787][ T6684] netlink_sendmsg+0x5be/0x6f0 [ 86.920890][ T6684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.920915][ T6684] ____sys_sendmsg+0x532/0x580 [ 86.920965][ T6684] ___sys_sendmsg+0x195/0x1e0 [ 86.921022][ T6684] __x64_sys_sendmsg+0xd4/0x160 [ 86.921111][ T6684] x64_sys_call+0x194c/0x3020 [ 86.921142][ T6684] do_syscall_64+0x136/0x3c0 [ 86.921202][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.921223][ T6684] RIP: 0033:0x7fb22184e019 [ 86.921240][ T6684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.921266][ T6684] RSP: 002b:00007fb2202a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.921315][ T6684] RAX: ffffffffffffffda RBX: 00007fb221ad5fa0 RCX: 00007fb22184e019 [ 86.921328][ T6684] RDX: 0000000064000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 86.921342][ T6684] RBP: 00007fb2202a7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.921359][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.921375][ T6684] R13: 00007fb221ad6038 R14: 00007fb221ad5fa0 R15: 00007ffc53fea828 [ 86.921400][ T6684] [ 87.198352][ T6696] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 87.321566][ T6722] syz.3.1352(6722): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 87.413829][ T6728] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1354'. [ 87.482667][ T6738] IPv6: addrconf: prefix option has invalid lifetime [ 87.567843][ T6744] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1359'. [ 87.613563][ T6743] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 88.496127][ T6807] futex_wake_op: syz.2.1380 tries to shift op by 144; fix this program [ 88.548973][ T6811] futex_wake_op: syz.1.1385 tries to shift op by 144; fix this program [ 89.841761][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.854621][ T6854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.865719][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.873570][ T6854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.135920][ T6884] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1418'. [ 90.841693][ T6950] Cannot find add_set index 0 as target [ 91.031502][ T6960] serio: Serial port ptm0 [ 91.101180][ T6970] FAULT_INJECTION: forcing a failure. [ 91.101180][ T6970] name failslab, interval 1, probability 0, space 0, times 0 [ 91.153924][ T6970] CPU: 1 UID: 0 PID: 6970 Comm: syz.4.1457 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.153959][ T6970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.153975][ T6970] Call Trace: [ 91.153983][ T6970] [ 91.153993][ T6970] __dump_stack+0x1d/0x30 [ 91.154063][ T6970] dump_stack_lvl+0x95/0xd0 [ 91.154083][ T6970] dump_stack+0x15/0x1b [ 91.154155][ T6970] should_fail_ex+0x25e/0x270 [ 91.154241][ T6970] should_failslab+0x8c/0xb0 [ 91.154264][ T6970] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 91.154321][ T6970] ? __alloc_skb+0x2db/0x6f0 [ 91.154357][ T6970] ? __alloc_skb+0x2db/0x6f0 [ 91.154395][ T6970] __alloc_skb+0x2db/0x6f0 [ 91.154425][ T6970] ? __alloc_skb+0x205/0x6f0 [ 91.154494][ T6970] netlink_alloc_large_skb+0xbf/0xf0 [ 91.154525][ T6970] netlink_sendmsg+0x40c/0x6f0 [ 91.154561][ T6970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.154664][ T6970] sock_write_iter+0x2c5/0x2f0 [ 91.154689][ T6970] do_iter_readv_writev+0x4f6/0x5a0 [ 91.154715][ T6970] vfs_writev+0x2d1/0x8b0 [ 91.154797][ T6970] ? get_pid_task+0x92/0xc0 [ 91.154829][ T6970] do_writev+0xe9/0x210 [ 91.154855][ T6970] __x64_sys_writev+0x45/0x50 [ 91.154881][ T6970] x64_sys_call+0x1c0c/0x3020 [ 91.154919][ T6970] do_syscall_64+0x136/0x3c0 [ 91.154953][ T6970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.155040][ T6970] RIP: 0033:0x7f0efa0be019 [ 91.155055][ T6970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.155073][ T6970] RSP: 002b:00007f0ef8b17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 91.155118][ T6970] RAX: ffffffffffffffda RBX: 00007f0efa345fa0 RCX: 00007f0efa0be019 [ 91.155132][ T6970] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 91.155144][ T6970] RBP: 00007f0ef8b17090 R08: 0000000000000000 R09: 0000000000000000 [ 91.155156][ T6970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.155168][ T6970] R13: 00007f0efa346038 R14: 00007f0efa345fa0 R15: 00007ffe3dcaacf8 [ 91.155194][ T6970] [ 91.199941][ T6971] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 91.550848][ T28] kauditd_printk_skb: 20406 callbacks suppressed [ 91.550879][ T28] audit: type=1400 audit(1785518722.817:113006): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 91.588946][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 91.593972][ T6992] audit: audit_backlog=65 > audit_backlog_limit=64 [ 91.596463][ T28] audit: type=1400 audit(1785518722.817:113007): avc: denied { create } for pid=6981 comm="syz.4.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 91.614098][ T6992] audit: audit_lost=848 audit_rate_limit=0 audit_backlog_limit=64 [ 91.622682][ T3018] audit: audit_lost=849 audit_rate_limit=0 audit_backlog_limit=64 [ 91.635717][ T6992] audit: backlog limit exceeded [ 91.642867][ T28] audit: type=1400 audit(1785518722.817:113008): avc: denied { read write } for pid=6981 comm="syz.4.1462" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 91.656804][ T3018] audit: backlog limit exceeded [ 91.672090][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 92.114330][ T7011] SET target dimension over the limit! [ 92.188266][ T7016] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1476'. [ 92.199153][ T7016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.216775][ T7016] netlink: 'syz.2.1476': attribute type 13 has an invalid length. [ 92.809749][ T7081] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 92.822511][ T7081] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1504'. [ 92.870673][ T7083] Cannot find add_set index 0 as target [ 92.950936][ T7099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1512'. [ 93.114316][ T7111] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1516'. [ 93.334704][ T7123] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 93.416598][ T7129] netlink: 'syz.0.1523': attribute type 2 has an invalid length. [ 93.432369][ T7129] netlink: 'syz.0.1523': attribute type 11 has an invalid length. [ 93.446892][ T7129] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1523'. [ 93.533050][ T7141] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1529'. [ 93.686291][ T7153] Cannot find add_set index 0 as target [ 93.786076][ T7166] netlink: 'syz.2.1540': attribute type 1 has an invalid length. [ 93.800493][ T7166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.809299][ T7166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7166 comm=syz.2.1540 [ 93.875344][ T7174] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1542'. [ 94.266579][ T7201] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1554'. [ 94.311887][ T7205] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 94.448843][ T7218] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 94.490499][ T7211] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 94.513702][ T7222] Cannot find add_set index 0 as target [ 94.779204][ T7228] futex_wake_op: syz.3.1564 tries to shift op by 144; fix this program [ 95.233302][ T7235] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1567'. [ 95.242395][ T7241] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 95.467573][ T7261] SET target dimension over the limit! [ 95.721759][ T7266] syzkaller0: entered promiscuous mode [ 95.727415][ T7266] syzkaller0: entered allmulticast mode [ 95.836248][ T7274] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1582'. [ 95.876691][ T7276] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 95.934584][ T7280] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 96.253264][ T7297] futex_wake_op: syz.4.1589 tries to shift op by 144; fix this program [ 96.472482][ T7313] Cannot find add_set index 0 as target [ 96.567140][ T3018] audit_log_start: 29819 callbacks suppressed [ 96.567214][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.570933][ T28] audit: type=1400 audit(1785518727.817:141671): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.575009][ T3018] audit: audit_lost=1236 audit_rate_limit=0 audit_backlog_limit=64 [ 96.587155][ T28] audit: type=1400 audit(1785518727.817:141672): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.632719][ T28] audit: type=1400 audit(1785518727.817:141673): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.654327][ T28] audit: type=1400 audit(1785518727.817:141674): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.672720][ T3018] audit: backlog limit exceeded [ 96.676334][ T28] audit: type=1400 audit(1785518727.817:141675): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.702883][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.712914][ T3299] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.976575][ T7326] FAULT_INJECTION: forcing a failure. [ 96.976575][ T7326] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 97.034599][ T7326] CPU: 1 UID: 0 PID: 7326 Comm: syz.0.1602 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.034689][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.034744][ T7326] Call Trace: [ 97.034752][ T7326] [ 97.034759][ T7326] __dump_stack+0x1d/0x30 [ 97.034837][ T7326] dump_stack_lvl+0x95/0xd0 [ 97.034864][ T7326] dump_stack+0x15/0x1b [ 97.034888][ T7326] should_fail_ex+0x25e/0x270 [ 97.034991][ T7326] should_fail_alloc_page+0xf2/0x100 [ 97.035015][ T7326] __alloc_frozen_pages_noprof+0x108/0x350 [ 97.035115][ T7326] alloc_pages_mpol+0xa9/0x1d0 [ 97.035154][ T7326] alloc_pages_noprof+0x8f/0x140 [ 97.035247][ T7326] get_free_pages_noprof+0xc/0x40 [ 97.035272][ T7326] __se_sys_mincore+0xda/0x4a0 [ 97.035294][ T7326] __x64_sys_mincore+0x43/0x50 [ 97.035320][ T7326] x64_sys_call+0x29f1/0x3020 [ 97.035500][ T7326] do_syscall_64+0x136/0x3c0 [ 97.035535][ T7326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.035674][ T7326] RIP: 0033:0x7fb22184e019 [ 97.035695][ T7326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.035816][ T7326] RSP: 002b:00007fb2202a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 97.035841][ T7326] RAX: ffffffffffffffda RBX: 00007fb221ad5fa0 RCX: 00007fb22184e019 [ 97.035860][ T7326] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 97.035877][ T7326] RBP: 00007fb2202a7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.035906][ T7326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.035920][ T7326] R13: 00007fb221ad6038 R14: 00007fb221ad5fa0 R15: 00007ffc53fea828 [ 97.035939][ T7326] [ 97.512878][ T7358] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 97.640188][ T7362] Cannot find add_set index 0 as target [ 97.883803][ T7366] netlink: 'syz.3.1615': attribute type 4 has an invalid length. [ 97.976021][ T7365] netlink: 'syz.3.1615': attribute type 4 has an invalid length. [ 98.010014][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.017451][ T7365] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.060364][ T7365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.071374][ T7365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.121933][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.140663][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.180397][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.211539][ T3435] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.398781][ T7384] futex_wake_op: syz.4.1618 tries to shift op by 144; fix this program [ 98.629391][ T7400] Cannot find add_set index 0 as target [ 99.186554][ T7410] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 99.413798][ T7418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=7418 comm=syz.2.1634 [ 99.845701][ T7430] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 99.990807][ T7436] SET target dimension over the limit! [ 100.049992][ T7438] futex_wake_op: syz.0.1640 tries to shift op by 144; fix this program [ 100.771074][ T7462] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 101.175762][ T7476] Cannot find add_set index 0 as target [ 101.571016][ T28] kauditd_printk_skb: 32263 callbacks suppressed [ 101.571035][ T28] audit: type=1400 audit(1785518732.827:171655): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.602844][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.609474][ T3018] audit: audit_lost=1999 audit_rate_limit=0 audit_backlog_limit=64 [ 101.617529][ T3018] audit: backlog limit exceeded [ 101.622821][ T7483] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.624274][ T28] audit: type=1400 audit(1785518732.837:171656): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.629842][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.659261][ T7483] audit: audit_lost=2000 audit_rate_limit=0 audit_backlog_limit=64 [ 101.659396][ T3299] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.667817][ T7483] audit: backlog limit exceeded [ 101.926914][ T7505] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 101.934199][ T7507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7507 comm=syz.2.1668 [ 102.846158][ T7541] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 102.858825][ T7541] bond1 (unregistering): Released all slaves [ 103.140853][ T7563] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 103.217966][ T7570] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1693'. [ 103.234454][ T7571] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1694'. [ 103.643673][ T7596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1705'. [ 103.900846][ T7608] FAULT_INJECTION: forcing a failure. [ 103.900846][ T7608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.930540][ T7608] CPU: 1 UID: 0 PID: 7608 Comm: syz.0.1710 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.930573][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.930589][ T7608] Call Trace: [ 103.930595][ T7608] [ 103.930603][ T7608] __dump_stack+0x1d/0x30 [ 103.930688][ T7608] dump_stack_lvl+0x95/0xd0 [ 103.930801][ T7608] dump_stack+0x15/0x1b [ 103.930875][ T7608] should_fail_ex+0x25e/0x270 [ 103.931049][ T7608] should_fail+0xb/0x20 [ 103.931205][ T7608] should_fail_usercopy+0x1a/0x20 [ 103.931291][ T7608] _copy_to_user+0x20/0xa0 [ 103.931374][ T7608] simple_read_from_buffer+0xb5/0x130 [ 103.931535][ T7608] proc_fail_nth_read+0x10e/0x150 [ 103.931606][ T7608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.931668][ T7608] vfs_read+0x18e/0x7c0 [ 103.931755][ T7608] ? __rcu_read_unlock+0x4e/0x70 [ 103.931853][ T7608] ? __fget_files+0x184/0x1c0 [ 103.931933][ T7608] ? mutex_lock+0x57/0x90 [ 103.932103][ T7608] ksys_read+0xdc/0x1a0 [ 103.932163][ T7608] __x64_sys_read+0x40/0x50 [ 103.932240][ T7608] x64_sys_call+0x2886/0x3020 [ 103.932352][ T7608] do_syscall_64+0x136/0x3c0 [ 103.932425][ T7608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.932545][ T7608] RIP: 0033:0x7fb22180e84e [ 103.932588][ T7608] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.932644][ T7608] RSP: 002b:00007fb2202a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.932702][ T7608] RAX: ffffffffffffffda RBX: 00007fb2202a76c0 RCX: 00007fb22180e84e [ 103.932743][ T7608] RDX: 000000000000000f RSI: 00007fb2202a70a0 RDI: 0000000000000003 [ 103.932788][ T7608] RBP: 00007fb2202a7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.932821][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.932886][ T7608] R13: 00007fb221ad6038 R14: 00007fb221ad5fa0 R15: 00007ffc53fea828 [ 103.932931][ T7608] [ 104.362957][ T7634] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 104.413890][ T7636] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 105.200387][ T7655] team0 (unregistering): Port device team_slave_0 removed [ 105.217821][ T7655] team0 (unregistering): Port device team_slave_1 removed [ 105.218985][ T7654] FAULT_INJECTION: forcing a failure. [ 105.218985][ T7654] name failslab, interval 1, probability 0, space 0, times 0 [ 105.250171][ T7654] CPU: 1 UID: 0 PID: 7654 Comm: syz.0.1728 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.250214][ T7654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.250235][ T7654] Call Trace: [ 105.250289][ T7654] [ 105.250299][ T7654] __dump_stack+0x1d/0x30 [ 105.250329][ T7654] dump_stack_lvl+0x95/0xd0 [ 105.250354][ T7654] dump_stack+0x15/0x1b [ 105.250395][ T7654] should_fail_ex+0x25e/0x270 [ 105.250441][ T7654] should_failslab+0x8c/0xb0 [ 105.250463][ T7654] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 105.250487][ T7654] ? security_file_alloc+0x32/0xf0 [ 105.250551][ T7654] ? security_file_alloc+0x32/0xf0 [ 105.250593][ T7654] security_file_alloc+0x32/0xf0 [ 105.250639][ T7654] init_file+0x5b/0x1b0 [ 105.250670][ T7654] alloc_empty_file+0x85/0x1e0 [ 105.250702][ T7654] path_openat+0x54/0x2000 [ 105.250761][ T7654] ? _parse_integer+0x27/0x40 [ 105.250786][ T7654] ? kstrtoull+0x111/0x140 [ 105.250864][ T7654] ? kstrtouint+0x76/0xc0 [ 105.250896][ T7654] do_file_open+0x16c/0x290 [ 105.250982][ T7654] do_sys_openat2+0xa0/0x130 [ 105.251011][ T7654] __x64_sys_openat+0xf2/0x120 [ 105.251040][ T7654] x64_sys_call+0x1e39/0x3020 [ 105.251097][ T7654] do_syscall_64+0x136/0x3c0 [ 105.251128][ T7654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.251164][ T7654] RIP: 0033:0x7fb22184e019 [ 105.251183][ T7654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.251259][ T7654] RSP: 002b:00007fb2202a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.251284][ T7654] RAX: ffffffffffffffda RBX: 00007fb221ad5fa0 RCX: 00007fb22184e019 [ 105.251300][ T7654] RDX: 000000000000275a RSI: 0000200000000240 RDI: ffffffffffffff9c [ 105.251312][ T7654] RBP: 00007fb2202a7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.251324][ T7654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.251347][ T7654] R13: 00007fb221ad6038 R14: 00007fb221ad5fa0 R15: 00007ffc53fea828 [ 105.251432][ T7654] [ 105.520738][ T7662] futex_wake_op: syz.2.1732 tries to shift op by 144; fix this program [ 105.656608][ T7670] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 106.218271][ T7678] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 106.296986][ T7684] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 106.580800][ T28] kauditd_printk_skb: 30469 callbacks suppressed [ 106.580815][ T28] audit: type=1400 audit(1785518737.847:201237): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.616948][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.623787][ T28] audit: type=1400 audit(1785518737.867:201238): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.645261][ T3018] audit: audit_lost=2298 audit_rate_limit=0 audit_backlog_limit=64 [ 106.653349][ T3018] audit: backlog limit exceeded [ 106.658670][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.665343][ T3018] audit: audit_lost=2299 audit_rate_limit=0 audit_backlog_limit=64 [ 106.673390][ T28] audit: type=1400 audit(1785518737.867:201239): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.695044][ T3018] audit: backlog limit exceeded [ 106.700162][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.912606][ T7695] futex_wake_op: syz.0.1745 tries to shift op by 144; fix this program [ 107.230396][ T7718] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 107.250408][ T7721] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 107.320748][ T7725] futex_wake_op: syz.0.1757 tries to shift op by 144; fix this program [ 107.566211][ T7736] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 107.588630][ T7740] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 108.144163][ T7765] futex_wake_op: syz.1.1770 tries to shift op by 144; fix this program [ 108.215791][ T7771] Cannot find add_set index 0 as target [ 108.442785][ T7778] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 108.544639][ T7783] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 108.713238][ T7786] Cannot find add_set index 0 as target [ 108.809000][ T7794] FAULT_INJECTION: forcing a failure. [ 108.809000][ T7794] name failslab, interval 1, probability 0, space 0, times 0 [ 108.821840][ T7794] CPU: 1 UID: 0 PID: 7794 Comm: syz.2.1786 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.821870][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.821884][ T7794] Call Trace: [ 108.821892][ T7794] [ 108.821902][ T7794] __dump_stack+0x1d/0x30 [ 108.821950][ T7794] dump_stack_lvl+0x95/0xd0 [ 108.821969][ T7794] dump_stack+0x15/0x1b [ 108.821990][ T7794] should_fail_ex+0x25e/0x270 [ 108.822025][ T7794] should_failslab+0x8c/0xb0 [ 108.822052][ T7794] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 108.822107][ T7794] ? do_getname+0x2e/0x1c0 [ 108.822200][ T7794] ? do_getname+0x2e/0x1c0 [ 108.822225][ T7794] ? vfs_write+0x848/0x990 [ 108.822242][ T7794] do_getname+0x2e/0x1c0 [ 108.822263][ T7794] getname_flags+0x1d/0x30 [ 108.822355][ T7794] do_sys_openat2+0x6c/0x130 [ 108.822405][ T7794] __x64_sys_openat+0xf2/0x120 [ 108.822443][ T7794] x64_sys_call+0x1e39/0x3020 [ 108.822464][ T7794] do_syscall_64+0x136/0x3c0 [ 108.822527][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.822554][ T7794] RIP: 0033:0x7fd6272ce84e [ 108.822628][ T7794] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 108.822651][ T7794] RSP: 002b:00007fd625d66ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.822671][ T7794] RAX: ffffffffffffffda RBX: 00007fd625d676c0 RCX: 00007fd6272ce84e [ 108.822732][ T7794] RDX: 0000000000000002 RSI: 00007fd625d66f90 RDI: ffffffffffffff9c [ 108.822748][ T7794] RBP: 00007fd625d67090 R08: 0000000000000000 R09: 0000000000000000 [ 108.822760][ T7794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.822772][ T7794] R13: 00007fd627596038 R14: 00007fd627595fa0 R15: 00007ffd89b57298 [ 108.822795][ T7794] [ 109.159169][ T7804] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 109.249558][ T7810] Cannot find add_set index 0 as target [ 109.476574][ T7823] futex_wake_op: syz.0.1797 tries to shift op by 144; fix this program [ 110.071024][ T7834] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 110.176277][ T7838] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 110.182191][ T7850] Cannot find add_set index 0 as target [ 110.315565][ T7857] FAULT_INJECTION: forcing a failure. [ 110.315565][ T7857] name failslab, interval 1, probability 0, space 0, times 0 [ 110.328360][ T7857] CPU: 1 UID: 0 PID: 7857 Comm: syz.0.1812 Not tainted syzkaller #0 PREEMPT(lazy) [ 110.328389][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.328425][ T7857] Call Trace: [ 110.328433][ T7857] [ 110.328503][ T7857] __dump_stack+0x1d/0x30 [ 110.328526][ T7857] dump_stack_lvl+0x95/0xd0 [ 110.328545][ T7857] dump_stack+0x15/0x1b [ 110.328567][ T7857] should_fail_ex+0x25e/0x270 [ 110.328675][ T7857] should_failslab+0x8c/0xb0 [ 110.328696][ T7857] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 110.328718][ T7857] ? dst_alloc+0xbd/0x100 [ 110.328800][ T7857] ? dst_alloc+0xbd/0x100 [ 110.328837][ T7857] dst_alloc+0xbd/0x100 [ 110.328875][ T7857] ip_route_input_rcu+0x1463/0x1b80 [ 110.328912][ T7857] ip_route_input_noref+0x5f/0x90 [ 110.328938][ T7857] ip_rcv_finish_core+0x308/0xb50 [ 110.329048][ T7857] ? nf_nat_ipv4_pre_routing+0xb1/0x210 [ 110.329074][ T7857] ? __pfx_nf_nat_ipv4_pre_routing+0x10/0x10 [ 110.329219][ T7857] ip_rcv_finish+0x100/0x1a0 [ 110.329246][ T7857] ip_rcv+0x62/0x160 [ 110.329281][ T7857] ? __pfx_ip_rcv_finish+0x10/0x10 [ 110.329312][ T7857] ? __pfx_ip_rcv+0x10/0x10 [ 110.329442][ T7857] netif_receive_skb+0x137/0x4c0 [ 110.329468][ T7857] ? tun_rx_batched+0xca/0x430 [ 110.329556][ T7857] tun_rx_batched+0x100/0x430 [ 110.329592][ T7857] tun_get_user+0x1fe2/0x2820 [ 110.329672][ T7857] ? ref_tracker_alloc+0x1eb/0x2f0 [ 110.329710][ T7857] tun_chr_write_iter+0x15a/0x210 [ 110.329768][ T7857] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 110.329795][ T7857] vfs_write+0x57d/0x990 [ 110.329815][ T7857] ksys_write+0xdc/0x1a0 [ 110.329846][ T7857] __x64_sys_write+0x40/0x50 [ 110.329920][ T7857] x64_sys_call+0x27e1/0x3020 [ 110.329944][ T7857] do_syscall_64+0x136/0x3c0 [ 110.330048][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.330076][ T7857] RIP: 0033:0x7fb22180e84e [ 110.330091][ T7857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 110.330108][ T7857] RSP: 002b:00007fb2202a6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.330128][ T7857] RAX: ffffffffffffffda RBX: 00007fb2202a76c0 RCX: 00007fb22180e84e [ 110.330223][ T7857] RDX: 000000000000003a RSI: 00002000000004c0 RDI: 00000000000000c8 [ 110.330240][ T7857] RBP: 00007fb2202a7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.330263][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.330279][ T7857] R13: 00007fb221ad6038 R14: 00007fb221ad5fa0 R15: 00007ffc53fea828 [ 110.330304][ T7857] [ 110.338307][ T7856] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1811'. [ 110.700840][ T7872] netlink: 'syz.0.1817': attribute type 46 has an invalid length. [ 110.764602][ T7877] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 110.859668][ T7886] ================================================================== [ 110.867877][ T7886] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace [ 110.874689][ T7886] [ 110.877031][ T7886] write to 0xffff888104d58c00 of 8 bytes by task 7882 on cpu 0: [ 110.884687][ T7886] mas_wmb_replace+0x22e/0x1770 [ 110.889584][ T7886] mas_wr_store_entry+0x54a7/0x5a90 [ 110.894831][ T7886] mas_store_prealloc+0x421/0x670 [ 110.899880][ T7886] vma_complete+0x3c7/0x850 [ 110.904421][ T7886] __split_vma+0x592/0x640 [ 110.908856][ T7886] vma_modify+0xb29/0xc80 [ 110.913232][ T7886] vma_modify_flags+0x182/0x210 [ 110.918114][ T7886] mprotect_fixup+0x3a2/0x680 [ 110.922805][ T7886] do_mprotect_pkey+0x69e/0x950 [ 110.927678][ T7886] __x64_sys_mprotect+0x48/0x60 [ 110.932562][ T7886] x64_sys_call+0x2768/0x3020 [ 110.937270][ T7886] do_syscall_64+0x136/0x3c0 [ 110.941891][ T7886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.947819][ T7886] [ 110.950162][ T7886] read to 0xffff888104d58c00 of 8 bytes by task 7886 on cpu 1: [ 110.957729][ T7886] mas_walk+0x15c/0x340 [ 110.961915][ T7886] lock_vma_under_rcu+0xc9/0x210 [ 110.966885][ T7886] do_user_addr_fault+0x237/0x1060 [ 110.972033][ T7886] exc_page_fault+0x62/0xa0 [ 110.976563][ T7886] asm_exc_page_fault+0x26/0x30 [ 110.981440][ T7886] [ 110.983812][ T7886] value changed: 0xffff88810006e241 -> 0xffff888104d58c00 [ 110.990972][ T7886] [ 110.993317][ T7886] Reported by Kernel Concurrency Sanitizer on: [ 110.999487][ T7886] CPU: 1 UID: 0 PID: 7886 Comm: syz.4.1822 Not tainted syzkaller #0 PREEMPT(lazy) [ 111.008796][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.018881][ T7886] ================================================================== [ 111.085035][ T7890] futex_wake_op: syz.0.1820 tries to shift op by 144; fix this program [ 111.590644][ T28] kauditd_printk_skb: 35018 callbacks suppressed [ 111.590663][ T28] audit: type=1400 audit(1785518742.847:232920): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 111.606657][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 111.623606][ T28] audit: type=1400 audit(1785518742.857:232921): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 111.646208][ T28] audit: type=1400 audit(1785518742.857:232922): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 111.646214][ T3018] audit: audit_lost=3413 audit_rate_limit=0 audit_backlog_limit=64 [ 111.646236][ T3018] audit: backlog limit exceeded [ 111.647023][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 111.668075][ T28] audit: type=1400 audit(1785518742.857:232923): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 111.700688][ T3018] audit: audit_lost=3414 audit_rate_limit=0 audit_backlog_limit=64 [ 111.711444][ T28] audit: type=1400 audit(1785518742.857:232924): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 116.600709][ T28] kauditd_printk_skb: 47178 callbacks suppressed [ 116.600730][ T28] audit: type=1400 audit(1785518747.857:279844): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 116.615385][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 116.629070][ T28] audit: type=1400 audit(1785518747.867:279845): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 116.635289][ T3018] audit: audit_lost=3501 audit_rate_limit=0 audit_backlog_limit=64 [ 116.656599][ T28] audit: type=1400 audit(1785518747.867:279846): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 116.665092][ T3018] audit: backlog limit exceeded [ 116.685751][ T28] audit: type=1400 audit(1785518747.867:279847): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 116.692289][ T3018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 116.712575][ T28] audit: type=1400 audit(1785518747.867:279848): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 116.720249][ T3018] audit: audit_lost=3502 audit_rate_limit=0 audit_backlog_limit=64