last executing test programs: 5.29068251s ago: executing program 4 (id=1397): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x4000040) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x2, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x1) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r6, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) (fail_nth: 6) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 4.398364614s ago: executing program 2 (id=1411): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) unshare(0x6a040000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fd007c05e8fe55a10a0015000200142603600e12080005007f370401a8000700200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket(0x10, 0x3, 0x0) setresgid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20, 0x24040805}}], 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x2140802, &(0x7f0000000300)={[{@gid}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x30, 0x63, 0x31, 0x7, 0x39, 0x30, 0x65], 0x2d, [0x39, 0x30, 0x37, 0x66], 0x2d, [0x39, 0x32, 0x66, 0x64], 0x2d, [0x37, 0x33, 0x63, 0x62], 0x2d, [0x32, 0x61, 0x61, 0x61, 0x64, 0x0, 0x61, 0x8]}}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role}, {@audit}]}) syz_usb_connect$uac1(0x1, 0xc3, 0x0, &(0x7f0000000500)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x0, 0x5, 0x9, 0x8, 0x9}, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='(()}^+&(\x00') r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x20) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x2, 0x0, 0x17, 0xc, "0c74da334aa6639c14970281a41e6028776c11a8685556e0ab3a461f1a9ffc5ea40dee28856e178b6e23d297b2c2dd90a12d57dd83e9bbc9ae0930afd98e944d", "825f7d8108b14c2f4796e1c66c8d3778be0bc31735f76e78c98a0f362314ea6c", [0x1, 0x7]}) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000,\x00'/42]) 3.714763804s ago: executing program 2 (id=1425): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'cpu'}, {0x2d, 'io'}]}, 0x9) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x3b4a468, &(0x7f0000007400)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES8, @ANYRESHEX, @ANYBLOB="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", @ANYRESDEC, @ANYRES32, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x914, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x52ef, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42442, 0x1c1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x800080, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x100000, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 3.669703965s ago: executing program 2 (id=1426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004900)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000050) 3.631218505s ago: executing program 2 (id=1427): unshare(0x20060400) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) 3.534576177s ago: executing program 2 (id=1428): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000cc0)={{r2, &(0x7f0000000400)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x101082, &(0x7f0000000440)={@align=0x71cf8e2f, {0x480e, 0x8, 0x10000, 0x8000000000000001}}, 0x0, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x3}, 0x5, &(0x7f0000000c00)=[{0x3, 0xffff, &(0x7f0000000580)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', &(0x7f00000005c0)="7e3570ad0f0b0448b38495c42ae38aa1893262ab9133a765b4f8d1ecc43337ace88a0543b127118f4a8bb59591d2c6069ed636843b1f7dc2a614269c96e3f8d416090749c581cf6dc51d08214ba4902f7d697f2ffaf56dd313d496204de8e5618f9598890159", 0x66, 0x20}, {0x2, 0x48, &(0x7f0000000640)='*[\xbc\x00', &(0x7f0000000700)="bedfa4b5c1c3e287a23d2e689f7e55f4241c0eb51439e4e9b4fe106c8e34a98ab05129569a91101f909c02938562e17c4bb970deef5cff174e7c389f694f53f29c186297602a8e057711daff4f67fc6a8a01b6b317742c3db8f221312b011508d465e4719f0a8aa8bf04361e18d0d7c7c79a93dfd1924c", 0x77}, {0x3, 0x1, &(0x7f0000000800)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', &(0x7f0000000900)="0f5bf610cae80997ea9ffed36ada88787b50a83d085756a97ff0233044946e62e99d42222a2bcaa686a83836d648b2e3e8f0a8b361b443fd369e5a29801d764c6db9a73a0586d0706d9a521a5f4e6ea8f0c257e0b618baeed3c3aeeaf8531b3e430d8b4000ad10f969111034cc4216a98d16b108a2b8048b186dcf22b7c8b8b6ffcd7062f5fe7436bb8d95c1bcb4a70a21d7d2a34c3753606f90bf7e166e9dc85ffc5593a35ff263f3276be0593d636b07c35394f029a9ae167298f14200733b5f447dd9a7c0d30b83f8d510cd2b074ff0d2d604b1c5a1", 0xd7}, {0x3, 0x40, &(0x7f0000000a00)='\x00', &(0x7f0000000a40)="5471886adbb7d7d34444b2adf97fdf3cc1a2d7c16ffedde4d4995bb48390f4e9c5adbbc31165412da86a4d2be859784d1fd3c0eab0f69fafbe5b78256fc7273ed26b10d690d5cb3430bae6de460dda2c0051720ea8f5d8081edc6c82f1c810306392cff1c58af482dd67b7450ace83f4025f7cfeeaf0f8da526ee9145e7e6ee7a4af731d2f0003c949513d68113c5a851ea6a1069348b47fc39aed28207aaa9f3f0a6505af9dcfc0071636e3c56c3953c3afe1654ce42573a107cc98b90a673405b00c67fcd02d5ef88656edca05c5e9a3121075", 0xd4, 0xa}, {0x3, 0x8, &(0x7f0000000b40)='\xf0\x00', &(0x7f0000000b80)="c58fefe9d6930f046d5043f7e30a8c1d12517dbff1ba0dbf462ac3acce84a59ade056cc8f764e14646325b615b887a13b6b0cbfef43350d1fa1ed2e4e686de0f53233cf446a5b9444d7b5055e2d8208a73012423dc67b07da95070dd3012375082759b5f73f435f005f617e4a1f39be552df3a41468217", 0x77, 0x10}]}) syz_clone3(&(0x7f0000000d40)={0x2000000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {0x22}, &(0x7f0000000240)=""/240, 0xf0, &(0x7f0000000340)=""/113, &(0x7f00000003c0)=[r0, r0, r0, r0, r0], 0x5, {r3}}, 0x58) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r4 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r4, &(0x7f00000008c0)='/', 0x1, 0x0) lseek(r4, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000062000000080000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) sendfile(r4, r4, &(0x7f00000001c0), 0x7fa) 3.30985396s ago: executing program 1 (id=1430): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0, 0x4000}], 0x2, 0x0, 0x0) 3.263601791s ago: executing program 1 (id=1432): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x9, 0x5}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8000, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@bsdgroups}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000700)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf251b00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10040880}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x7}}, {@errors_remount}, {@lazytime}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@orlov}]}, 0x1, 0x60a, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) rmdir(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100d2f2d16eb32902ce2f", @ANYRES32=r10], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) recvmmsg(r6, &(0x7f0000004580)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000400)=""/46, 0x2e}, {&(0x7f0000000440)=""/130, 0x82}], 0x4, &(0x7f0000000540)}, 0x9e5}, {{&(0x7f00000005c0)=@llc, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/113, 0x71}], 0x2, &(0x7f0000003300)=""/24, 0x18}, 0x3}, {{&(0x7f0000003340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/42, 0x2a}, {0x0}], 0x2, &(0x7f0000003540)=""/172, 0xac}, 0xc}, {{&(0x7f0000003600)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003680)=""/178, 0xb2}, {&(0x7f0000000640)=""/126, 0x7e}], 0x2, &(0x7f0000003800)=""/171, 0xab}}, {{&(0x7f00000038c0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003940)=""/16, 0x10}, {&(0x7f0000003980)=""/50, 0x32}, {&(0x7f00000039c0)=""/183, 0xb7}, {&(0x7f0000003a80)=""/117, 0x75}, {0x0}], 0x5}, 0xcc}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003bc0)=""/185, 0xb9}], 0x1}, 0xd5}, {{&(0x7f0000003cc0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003d40)}, {&(0x7f0000003d80)=""/254, 0xfe}], 0x2, &(0x7f0000003ec0)=""/44, 0x2c}, 0x2}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000002040)=""/163, 0xa3}, {&(0x7f0000003fc0)=""/30, 0x1e}, {&(0x7f0000004000)=""/92, 0x5c}, {&(0x7f0000004080)=""/214, 0xd6}, {&(0x7f0000004180)=""/245, 0xf5}, {&(0x7f0000004280)=""/235, 0xeb}, {&(0x7f0000004380)=""/139, 0x8b}], 0x7, &(0x7f00000044c0)=""/159, 0x9f}, 0x6}], 0x8, 0x10220, &(0x7f0000004780)={0x0, 0x3938700}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000000)=0x3, 0x7, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea44000000000000000000000000000000000000000000000000010000000000000009000000000000000a0080ffffffffffffff00000000000001000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) syz_open_procfs(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.095919943s ago: executing program 1 (id=1434): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x800}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES16=r3, @ANYBLOB="090127bd7000ffdbdf250600000008000e003c0000000800010005"], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="0c0100001000010429bd70000300000008000000", @ANYRES32=0x0, @ANYBLOB="0305000000000000e400128009000100766c616e00000000d400028006000100030000000c000200000000000e0000000c000200080000000f000000400004800c0001001a400000080000000c00010004000000a80b00000c00010080000000030000000c000100030000008c9d00000c0001004000000001000000700004800c00010007000000060000000c00010005000000000000000c00010007000000000000000c000100ffffffff810000000c00010006000000040000000c00010006000000030000000c00010084910000000200000c00010009000000000000000c000100040000000000000008000500", @ANYRES32=r4], 0x10c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x7) 3.011721785s ago: executing program 1 (id=1435): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) unshare(0x6a040000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fd007c05e8fe55a10a0015000200142603600e12080005007f370401a8000700200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket(0x10, 0x3, 0x0) setresgid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20, 0x24040805}}], 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x2140802, &(0x7f0000000300)={[{@gid}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x30, 0x63, 0x31, 0x7, 0x39, 0x30, 0x65], 0x2d, [0x39, 0x30, 0x37, 0x66], 0x2d, [0x39, 0x32, 0x66, 0x64], 0x2d, [0x37, 0x33, 0x63, 0x62], 0x2d, [0x32, 0x61, 0x61, 0x61, 0x64, 0x0, 0x61, 0x8]}}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role}, {@audit}]}) syz_usb_connect$uac1(0x1, 0xc3, 0x0, &(0x7f0000000500)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x0, 0x5, 0x9, 0x8, 0x9}, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='(()}^+&(\x00') r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x20) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x2, 0x0, 0x17, 0xc, "0c74da334aa6639c14970281a41e6028776c11a8685556e0ab3a461f1a9ffc5ea40dee28856e178b6e23d297b2c2dd90a12d57dd83e9bbc9ae0930afd98e944d", "825f7d8108b14c2f4796e1c66c8d3778be0bc31735f76e78c98a0f362314ea6c", [0x1, 0x7]}) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000,\x00'/42]) 2.333436515s ago: executing program 1 (id=1444): socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x30140, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r4}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)='$-', 0x2}], 0x1) 2.275889326s ago: executing program 1 (id=1446): fsmount(0xffffffffffffffff, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be"], 0x0) tee(r3, 0xffffffffffffffff, 0x9, 0xa) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x8, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r6, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="23890c", 0x3}], 0x1}}], 0x1, 0x4040040) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/21, 0x15}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 1.410507009s ago: executing program 0 (id=1454): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) unshare(0x6a040000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fd007c05e8fe55a10a0015000200142603600e12080005007f370401a8000700200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket(0x10, 0x3, 0x0) setresgid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20, 0x24040805}}], 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x2140802, &(0x7f0000000300)={[{@gid}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x30, 0x63, 0x31, 0x7, 0x39, 0x30, 0x65], 0x2d, [0x39, 0x30, 0x37, 0x66], 0x2d, [0x39, 0x32, 0x66, 0x64], 0x2d, [0x37, 0x33, 0x63, 0x62], 0x2d, [0x32, 0x61, 0x61, 0x61, 0x64, 0x0, 0x61, 0x8]}}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role}, {@audit}]}) syz_usb_connect$uac1(0x1, 0xc3, 0x0, &(0x7f0000000500)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x0, 0x5, 0x9, 0x8, 0x9}, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='(()}^+&(\x00') r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x20) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x2, 0x0, 0x17, 0xc, "0c74da334aa6639c14970281a41e6028776c11a8685556e0ab3a461f1a9ffc5ea40dee28856e178b6e23d297b2c2dd90a12d57dd83e9bbc9ae0930afd98e944d", "825f7d8108b14c2f4796e1c66c8d3778be0bc31735f76e78c98a0f362314ea6c", [0x1, 0x7]}) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000,\x00'/42]) 787.797888ms ago: executing program 3 (id=1455): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) r1 = request_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141b42, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x3}, 0x0, &(0x7f00000002c0)={0x101, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x1000000f, 0x80000006}, 0x0, 0x0) (async) splice(r5, 0x0, r4, 0x0, 0x1000, 0x800000000000000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCGETA(r7, 0x5405, &(0x7f00000000c0)) (async) splice(r2, 0x0, r6, 0x0, 0x80, 0x8) (async) write$tun(r3, &(0x7f00000033c0)=ANY=[], 0x107c) (async) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, r1) 769.704798ms ago: executing program 0 (id=1456): r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80010000) 678.36541ms ago: executing program 0 (id=1457): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x9, 0x5}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8000, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@bsdgroups}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000700)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf251b00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10040880}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x7}}, {@errors_remount}, {@lazytime}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@orlov}]}, 0x1, 0x60a, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) rmdir(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100d2f2d16eb32902ce2f", @ANYRES32=r10], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) recvmmsg(r6, &(0x7f0000004580)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000400)=""/46, 0x2e}, {&(0x7f0000000440)=""/130, 0x82}], 0x4, &(0x7f0000000540)}, 0x9e5}, {{&(0x7f00000005c0)=@llc, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/113, 0x71}], 0x2, &(0x7f0000003300)=""/24, 0x18}, 0x3}, {{&(0x7f0000003340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003400)=""/219, 0xdb}], 0x1, &(0x7f0000003540)=""/172, 0xac}, 0xc}, {{&(0x7f0000003600)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003680)=""/178, 0xb2}, {&(0x7f0000000640)=""/126, 0x7e}], 0x2, &(0x7f0000003800)=""/171, 0xab}}, {{&(0x7f00000038c0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003940)=""/16, 0x10}, {&(0x7f0000003980)=""/50, 0x32}, {&(0x7f00000039c0)=""/183, 0xb7}, {&(0x7f0000003a80)=""/117, 0x75}, {0x0}], 0x5}, 0xcc}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003bc0)=""/185, 0xb9}], 0x1}, 0xd5}, {{&(0x7f0000003cc0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003d40)}, {&(0x7f0000003d80)=""/254, 0xfe}], 0x2, &(0x7f0000003ec0)=""/44, 0x2c}, 0x2}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000002040)=""/163, 0xa3}, {&(0x7f0000003fc0)=""/30, 0x1e}, {&(0x7f0000004000)=""/92, 0x5c}, {&(0x7f0000004080)=""/214, 0xd6}, {&(0x7f0000004180)=""/245, 0xf5}, {&(0x7f0000004280)=""/235, 0xeb}, {&(0x7f0000004380)=""/139, 0x8b}], 0x7, &(0x7f00000044c0)=""/159, 0x9f}, 0x6}], 0x8, 0x10220, &(0x7f0000004780)={0x0, 0x3938700}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000000)=0x3, 0x7, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea44000000000000000000000000000000000000000000000000010000000000000009000000000000000a0080ffffffffffffff00000000000001000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) syz_open_procfs(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 678.1192ms ago: executing program 3 (id=1458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_setup(0x2771, &(0x7f0000000000)={0x0, 0x5b2a, 0xe, 0x1, 0x25}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x1418, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) 576.271421ms ago: executing program 3 (id=1459): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername(r1, &(0x7f0000000580)=@phonet, &(0x7f0000000600)=0x80) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r2, 0x0, 0xe8, 0x8e, &(0x7f0000000100)="435f376fd4ee3981096f901773442dd21424933b64eb03a9f4522dee34d81b7d1da2568a1f24a3179549acafb234cd0268c31c59010832e4bf2c71619e915037d8c09c1961a03b38a86edfb669d1cad191f31cf5bb927ce2ec1711cac269e0fe577e88c0dd3ae0eb3aaadfb20dc51ad924a2aa761add805f45d7edc3745daec067da16669b4eac712e199e65364bb935f01ca819ec5b6744c1b01896f0308c19132f7e80bf63344b77c7ac6c33aea2d65fced907b313af275f7075a37f24d52b27a0f8faa91a3617dda320f05c0a1727db160b5d9aef35b7e2611b1ca3f6f380fb67aa546b00b2cc", &(0x7f00000004c0)=""/142, 0x1, 0x0, 0x1000, 0xca, &(0x7f0000000680)="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", &(0x7f0000001680)="f84164fc267a8ec3671a6fa6fc053591421e2b54e6bc5dabaa33185e9042f25f3651b52057a1543261b3e5834a2b10492636b4204821f3f13331ea252081df9bf065463f221048cc47c34f71b10f4ef18fbd32113bacdb26ce44130b7f3eca3498c2da9cfc488a5ffddd3e7ec89cfa8ffab49bbac99f774cc60548050a5d150b90e6cd560da164833d4732053fab805ba8fcd290e1ca62a70f771f73d280a0b5a722ec0719615d7725c1248849cec674bfc9ff8ea027992a080172f91718532377c33715c1c61184b1a1", 0x2, 0x0, 0x5}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x2000, 0x1) getdents(r3, 0x0, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0x8, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2000000e7201000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 529.013062ms ago: executing program 0 (id=1460): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setlease(r0, 0x400, 0x2) 474.514663ms ago: executing program 3 (id=1461): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa07ae0e00000000000006f3fb00000000e2ff000000000000000000fe8000000000000000000000000008aa4e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="00020000907800041303b503030704020402fe06e2d4c3d9030fa66ded427477214c1f0010c516080a0000000900000005000000"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r1, 0x0, 0x0, 0x8014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000003440), 0xffffffffffffffff) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE7Nmdmfa3XZ3u91CK+znk0z7PDPPvHyfmWd2Zp/ZCaBjDWV/koj+iPglIgYq2doCQ5V/169emPzz6oXJJEqlF/5IyuWuXb0wWRQt5tucZ4bTiPTtJHbXWe/MufMnJ6anp87m+dHZU6+Nzpw7//CJUxPHp45PnR4/fPjQwbHHHh1/pKU4Li4zPYvr2q43z+zZeeSl956dLMXL332cbW9/Pr06jorBltbbzFAMRSm3MLan/Pf+VS/9v2VLRPTm6WTDOm8MLeuKiGx3dZfb/0B0xcLOG4hn3prPfLVOGwjcNNln07YlY7vy/+n85xdwO0q0cehQxSd+dv9bDGt5/bHerjyZ/Z0qx389H354rlI3aXYvO1i5Y+9qMP//64zrW0iWBpZZf39EHJ376/1siLrfQzSRtFwSAGDeF9n1z0P1rv/SmmubrXkfymBE7I+I7RHxv4jYEel8mTsi4s4Vrn9oUX7p9c9PG1e4yBXJrv8ez/u2iqEypYgrmc9tKcffnbxyYnrqQF4nw9Hdm+XHmqzjy6d/frfRtKGq679syNZfXAvm2/H7ht7aeY5NzE6sIuQaVy5FEhvqxZ/M9wRkNbAzIna1sfyszk48+NGeLL1189Lpy8ffxA3oZyp9GPFAZf/PxaL4C0llTY36J0f7YnrqwGhxVCz1/Y+Xn6/Od1ela+Lvay2mvnaDrePKpYhNdY//PP6iGRT9tTN5/uv+ltdx+dd3Gt7TLN3/SRydqy6RH/8bF6otO/57khfL6Z583BsTs7NnxyI+z0fUjB9fWFqRL8pn8Q/vq42/cl+cZue4fz7I59sdEdlBfFdE3B0Re/Ntvyci7o2IfU3i//ap+15tXkNtHv83QBb/sWb7P2Iwqe6vbyPRdfKbzxqtv7Xz36FyajgfU33+62mw3FY3cLX1BwAAALeCtNwHnaQjVc9vF3bEpnT6zMzs/qF4/fSxSl/1YHSnxTddA1Xfh47l3w0X+fFF+YMRsa38pNHGcn5k8sz0lnWKGajYXNX+K+eCNB0ZqUz7rdFDL8DtY0X9aNUPnX3y6Y3fGGBN+b0mdC7tHzqX9g+dS/uHzlWv/V+MuL4OmwKssXY//xc/MADccko176cEOor7f+hc2j90pKU/ic9ft5KdE9r/yf/09iOreWPAzU+UBtqfPRpPmlv5ArtaK1y8/aLlJbdWOIkowkmbxFUnEenCmL/zt0mWx3RXyvS0vqlrn0iXLfPEcrXRvaJ3YvTVqY29eaI3IlpdzsU1q9XiDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//Flvq9A==") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, 0x0) fsopen(0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000200)) syz_clone(0x848080, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) getdents(r6, 0x0, 0x0) unshare(0x2c020400) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000080)={'dummy0\x00', 0xfffe}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000a5d2db10000000000000000000000000000000000000000003c806f7d80912715f8e4a666519cc82f5ced02e54629289e06cf1f3596d185c3328e98d3ecfb9c8b75c04c7f235b1d7828ed55dbbb07432384436319d72ae63a72b31308564b1e216df8dd04e11a3f84ac97c27c13b5b3ec2d88915f127e8735bc2b29c1f8307f080c61170b565a798722850f0efd87a337faa9e77af390f93ba73ae797bd75a6b2ab931d74e1634027358fb3506166f9e8b2268c4e50a61a2c8eb2c8d28342d51693d5c75f46d5be5e9721f13c9d982ca68da13079"], 0x50) 424.249274ms ago: executing program 0 (id=1462): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4810, &(0x7f00000001c0)={[{@nodiscard}], [{@smackfsdef={'smackfsdef', 0x3d, ':#^,'}}]}, 0x2, 0xbde, &(0x7f0000000bc0)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000180)=ANY=[], 0x835, 0x3) 413.722703ms ago: executing program 2 (id=1463): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, 0x0, 0x8040) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x20) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x2, 0x0, 0x17, 0xc, "0c74da334aa6639c14970281a41e6028776c11a8685556e0ab3a461f1a9ffc5ea40dee28856e178b6e23d297b2c2dd90a12d57dd83e9bbc9ae0930afd98e944d", "825f7d8108b14c2f4796e1c66c8d3778be0bc31735f76e78c98a0f362314ea6c", [0x1, 0x7]}) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000,\x00'/43]) 206.690717ms ago: executing program 4 (id=1467): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68190, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c764, 0x5, 0x0, 0x2, 0x6, 0x8001, 0x5, 0x0, 0x8}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="540000000206010200000000000000000000000005000400000000000900020073797a3000000000050001f006000000050005000a0000000c000780080012400000ffff0d000300686173683a6e657400000000"], 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x1000) 205.863207ms ago: executing program 4 (id=1468): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@none, 0x1ff}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118c00000000008510000002000000850000008a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118c00000000008510000002000000850000008a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$can_raw(0x1d, 0x3, 0x1) 205.611307ms ago: executing program 4 (id=1469): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0xffffffff, 0x4, {0x0, 0x0, 0x0, 0x0, 0xd41, 0x1200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x500, 0x40010}, 0x4008054) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 181.179907ms ago: executing program 4 (id=1470): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x9, 0x5}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8000, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@bsdgroups}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000700)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf251b00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10040880}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x7}}, {@errors_remount}, {@lazytime}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@orlov}]}, 0x1, 0x60a, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) rmdir(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100d2f2d16eb32902ce2f", @ANYRES32=r10], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) recvmmsg(r6, &(0x7f0000004580)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000400)=""/46, 0x2e}, {&(0x7f0000000440)=""/130, 0x82}], 0x4, &(0x7f0000000540)}, 0x9e5}, {{&(0x7f00000005c0)=@llc, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/113, 0x71}], 0x2, &(0x7f0000003300)=""/24, 0x18}, 0x3}, {{&(0x7f0000003340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003400)=""/219, 0xdb}], 0x1, &(0x7f0000003540)=""/172, 0xac}, 0xc}, {{&(0x7f0000003600)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003680)=""/178, 0xb2}, {&(0x7f0000000640)=""/126, 0x7e}], 0x2, &(0x7f0000003800)=""/171, 0xab}}, {{&(0x7f00000038c0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003940)=""/16, 0x10}, {&(0x7f0000003980)=""/50, 0x32}, {&(0x7f00000039c0)=""/183, 0xb7}, {&(0x7f0000003a80)=""/117, 0x75}, {0x0}], 0x5}, 0xcc}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003bc0)=""/185, 0xb9}], 0x1}, 0xd5}, {{&(0x7f0000003cc0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003d40)}, {&(0x7f0000003d80)=""/254, 0xfe}], 0x2, &(0x7f0000003ec0)=""/44, 0x2c}, 0x2}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000002040)=""/163, 0xa3}, {&(0x7f0000003fc0)=""/30, 0x1e}, {&(0x7f0000004000)=""/92, 0x5c}, {&(0x7f0000004080)=""/214, 0xd6}, {&(0x7f0000004180)=""/245, 0xf5}, {&(0x7f0000004280)=""/235, 0xeb}, {&(0x7f0000004380)=""/139, 0x8b}], 0x7, &(0x7f00000044c0)=""/159, 0x9f}, 0x6}], 0x8, 0x10220, &(0x7f0000004780)={0x0, 0x3938700}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000000)=0x3, 0x7, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea44000000000000000000000000000000000000000000000000010000000000000009000000000000000a0080ffffffffffffff00000000000001000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) syz_open_procfs(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 0s ago: executing program 4 (id=1471): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x82120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x5}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000ee9e45702c43fccfeb5c32d562db3672393a3bf6aedf1b0bc8364e8442e55d363ee26537a6eef0d99a7f2c76251a1cba639972652fca9aba11d550751eb6c493a8f58580f59ae6aa44a3fa62279a75d7b948aea6a7e8f19723f2e17e178618b258a84ba42c4b3132", @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fdffffff000000000000000085000000360000001800000000008000000000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) close(0xffffffffffffffff) socket$kcm(0x2, 0xf, 0x73) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x400c080) mprotect(&(0x7f0000001000/0x14000)=nil, 0x14000, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x600002, 0x0) fcntl$setflags(r5, 0x2, 0x1) socket(0x10, 0x3, 0x0) r6 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) pidfd_getfd(r5, r5, 0x0) fcntl$addseals(r6, 0x409, 0x3f) io_submit(0x0, 0xffffffffffffff8d, 0x0) lremovexattr(0x0, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000001b00)=""/245, &(0x7f0000000000)=0xf5) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$VT_DISALLOCATE(r3, 0x5608) 0s ago: executing program 4 (id=1473): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="fc0000339c28000014"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000040)='./cgroup/../file0/file0\x00', 0x4) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0xa3010, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r1) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x10) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x82, 0x0) (async) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "f4"}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x110, 0xac7}], 0x10, 0x500}}], 0x2, 0x40058) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)=ANY=[], 0x1a8}, 0x1, 0x0, 0x0, 0x20004000}, 0x44000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f00000004c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) (async) socket$packet(0x11, 0x2, 0x300) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): [ 31.709470][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.723245][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.730331][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.756326][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.767980][ T3306] team0: Port device team_slave_0 added [ 31.773931][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.780967][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.808708][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.822107][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.829244][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.856255][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.875325][ T3304] team0: Port device team_slave_0 added [ 31.881831][ T3306] team0: Port device team_slave_1 added [ 31.896987][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.904149][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.930320][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.946124][ T3304] team0: Port device team_slave_1 added [ 31.964775][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.971794][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.998270][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.041250][ T3296] hsr_slave_0: entered promiscuous mode [ 32.047359][ T3296] hsr_slave_1: entered promiscuous mode [ 32.053571][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.060552][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.086719][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.104035][ T3301] hsr_slave_0: entered promiscuous mode [ 32.110152][ T3301] hsr_slave_1: entered promiscuous mode [ 32.115964][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 32.121869][ T3301] Cannot create hsr debugfs directory [ 32.129814][ T3297] hsr_slave_0: entered promiscuous mode [ 32.136069][ T3297] hsr_slave_1: entered promiscuous mode [ 32.142127][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 32.147884][ T3297] Cannot create hsr debugfs directory [ 32.154224][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.161303][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.187317][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.229038][ T3306] hsr_slave_0: entered promiscuous mode [ 32.235254][ T3306] hsr_slave_1: entered promiscuous mode [ 32.241388][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 32.247139][ T3306] Cannot create hsr debugfs directory [ 32.291270][ T3304] hsr_slave_0: entered promiscuous mode [ 32.297332][ T3304] hsr_slave_1: entered promiscuous mode [ 32.303186][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 32.308963][ T3304] Cannot create hsr debugfs directory [ 32.477631][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.486429][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.494167][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.503203][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.510876][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.519600][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.527130][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.535847][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.562363][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.570784][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.582411][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.590993][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.599207][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.608240][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.619830][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.628245][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.655337][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.663962][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.671777][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.680616][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.692763][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.701578][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.717982][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.726606][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.741915][ T3297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.750731][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.758813][ T3297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.767965][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.783320][ T3297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.792362][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.799944][ T3297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.808261][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.833290][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.841986][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.850688][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.859242][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.867491][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.876211][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.883701][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.892137][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.916927][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.938149][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.958245][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.970733][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.981686][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.988795][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.001086][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.016868][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.024038][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.035970][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.045414][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.052508][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.071320][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.078529][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.089637][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.096912][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.110816][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.117908][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.130156][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.196900][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.206232][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.225695][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.235164][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.248633][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.255726][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.283107][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.290680][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.306552][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.313670][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.328903][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.336083][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.422910][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.449016][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.477365][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.617332][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.649166][ T3301] veth0_vlan: entered promiscuous mode [ 33.673670][ T3301] veth1_vlan: entered promiscuous mode [ 33.687020][ T3296] veth0_vlan: entered promiscuous mode [ 33.696854][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.720007][ T3296] veth1_vlan: entered promiscuous mode [ 33.727217][ T3306] veth0_vlan: entered promiscuous mode [ 33.752885][ T3306] veth1_vlan: entered promiscuous mode [ 33.770465][ T3301] veth0_macvtap: entered promiscuous mode [ 33.779862][ T3301] veth1_macvtap: entered promiscuous mode [ 33.792714][ T3296] veth0_macvtap: entered promiscuous mode [ 33.808481][ T3296] veth1_macvtap: entered promiscuous mode [ 33.817999][ T3304] veth0_vlan: entered promiscuous mode [ 33.829676][ T3304] veth1_vlan: entered promiscuous mode [ 33.840646][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.854818][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.863044][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.880420][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.888114][ T3306] veth0_macvtap: entered promiscuous mode [ 33.895486][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.904287][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.920848][ T3306] veth1_macvtap: entered promiscuous mode [ 33.927627][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.936437][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.946239][ T3297] veth0_vlan: entered promiscuous mode [ 33.957144][ T3297] veth1_vlan: entered promiscuous mode [ 33.963269][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.972407][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.987795][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.996816][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.017417][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.031939][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 34.032030][ T28] audit: type=1400 audit(1782570244.381:146): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.PJbjdr/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.032746][ T3304] veth0_macvtap: entered promiscuous mode [ 34.042252][ T28] audit: type=1400 audit(1782570244.381:147): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.092142][ T28] audit: type=1400 audit(1782570244.391:148): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.PJbjdr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.117939][ T28] audit: type=1400 audit(1782570244.391:149): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.132254][ T3297] veth0_macvtap: entered promiscuous mode [ 34.141568][ T28] audit: type=1400 audit(1782570244.391:150): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.PJbjdr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.175269][ T28] audit: type=1400 audit(1782570244.391:151): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.PJbjdr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.176682][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.205269][ T3304] veth1_macvtap: entered promiscuous mode [ 34.221684][ T28] audit: type=1400 audit(1782570244.391:152): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.243914][ T28] audit: type=1400 audit(1782570244.441:153): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.268917][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.278619][ T3297] veth1_macvtap: entered promiscuous mode [ 34.278988][ T28] audit: type=1400 audit(1782570244.441:154): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="gadgetfs" ino=3987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.314378][ T28] audit: type=1400 audit(1782570244.661:155): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.319642][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.350187][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.372077][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.381556][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.389561][ T361] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.398584][ T361] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.416587][ T3505] vlan2: entered promiscuous mode [ 34.421808][ T3505] bridge0: entered promiscuous mode [ 34.428473][ T361] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.453375][ T361] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.474501][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.474598][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.474634][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.474682][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.474716][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.474776][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.474863][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.474896][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.834576][ T3519] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.856296][ T3517] netlink: 'syz.1.6': attribute type 13 has an invalid length. [ 35.004525][ T3522] loop2: detected capacity change from 0 to 1024 [ 35.017258][ T3522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.126903][ T3522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.770740][ T3522] syz.2.3 (3522) used greatest stack depth: 10240 bytes left [ 35.934594][ T3521] loop3: detected capacity change from 0 to 256 [ 36.061544][ T3533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'. [ 36.401999][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.437744][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.445175][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.486954][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.497638][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.574468][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.583694][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.595601][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.604582][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.730962][ T3556] FAULT_INJECTION: forcing a failure. [ 36.730962][ T3556] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.744528][ T3556] CPU: 1 UID: 0 PID: 3556 Comm: syz.3.15 Not tainted syzkaller #0 PREEMPT(lazy) [ 36.744556][ T3556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.744611][ T3556] Call Trace: [ 36.744618][ T3556] [ 36.744625][ T3556] __dump_stack+0x1d/0x30 [ 36.744649][ T3556] dump_stack_lvl+0x95/0xd0 [ 36.744671][ T3556] dump_stack+0x15/0x1b [ 36.744690][ T3556] should_fail_ex+0x25e/0x270 [ 36.744711][ T3556] should_fail+0xb/0x20 [ 36.744729][ T3556] should_fail_usercopy+0x1a/0x20 [ 36.744768][ T3556] _copy_to_user+0x20/0xa0 [ 36.744784][ T3556] simple_read_from_buffer+0xb5/0x130 [ 36.744856][ T3556] proc_fail_nth_read+0x10e/0x150 [ 36.744876][ T3556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 36.744892][ T3556] vfs_read+0x18e/0x7c0 [ 36.744994][ T3556] ? __rcu_read_unlock+0x4e/0x70 [ 36.745019][ T3556] ? __fget_files+0x184/0x1c0 [ 36.745042][ T3556] ? mutex_lock+0x57/0x90 [ 36.745065][ T3556] ksys_read+0xdc/0x1a0 [ 36.745109][ T3556] __x64_sys_read+0x40/0x50 [ 36.745184][ T3556] x64_sys_call+0x2886/0x3020 [ 36.745206][ T3556] do_syscall_64+0x136/0x3c0 [ 36.745232][ T3556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.745253][ T3556] RIP: 0033:0x7f0805c3d68e [ 36.745271][ T3556] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 36.745359][ T3556] RSP: 002b:00007f08046d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 36.745376][ T3556] RAX: ffffffffffffffda RBX: 00007f08046d76c0 RCX: 00007f0805c3d68e [ 36.745388][ T3556] RDX: 000000000000000f RSI: 00007f08046d70a0 RDI: 0000000000000003 [ 36.745402][ T3556] RBP: 00007f08046d7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.745466][ T3556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.745477][ T3556] R13: 00007f0805ef6038 R14: 00007f0805ef5fa0 R15: 00007ffeed7cffa8 [ 36.745493][ T3556] [ 36.981705][ T3566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19'. [ 36.993490][ T3566] Zero length message leads to an empty skb [ 37.174697][ T3590] : option downdelay: invalid value (18446744073709547007) [ 37.182528][ T3590] : option downdelay: allowed values 0 - 2147483647 [ 37.190432][ T3590]  (unregistering): Released all slaves [ 37.344269][ T3605] capability: warning: `syz.2.33' uses deprecated v2 capabilities in a way that may be insecure [ 37.350356][ T3603] netlink: 40 bytes leftover after parsing attributes in process `syz.3.32'. [ 37.656596][ T3637] netlink: 'syz.1.45': attribute type 6 has an invalid length. [ 37.736756][ T3644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.48'. [ 38.107711][ T3673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.60'. [ 38.363963][ T3696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.71'. [ 38.528757][ T3724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.82'. [ 38.660272][ T3730] netlink: 32 bytes leftover after parsing attributes in process `syz.3.81'. [ 38.732506][ T3736] bond1: entered allmulticast mode [ 38.743275][ T3736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.759397][ T3736] team0: Port device bond1 added [ 38.844205][ T3748] netlink: 'syz.4.90': attribute type 5 has an invalid length. [ 39.003404][ T3756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.94'. [ 39.088342][ T28] kauditd_printk_skb: 702 callbacks suppressed [ 39.088355][ T28] audit: type=1400 audit(1782570249.441:858): avc: denied { create } for pid=3757 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 39.114303][ T28] audit: type=1400 audit(1782570249.441:859): avc: denied { create } for pid=3757 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 39.135507][ T28] audit: type=1400 audit(1782570249.441:860): avc: denied { create } for pid=3757 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 39.156476][ T28] audit: type=1400 audit(1782570249.491:861): avc: denied { create } for pid=3757 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 39.192965][ T28] audit: type=1400 audit(1782570249.541:862): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 39.220910][ T28] audit: type=1400 audit(1782570249.541:863): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 39.245277][ T28] audit: type=1400 audit(1782570249.571:864): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 39.269680][ T28] audit: type=1400 audit(1782570249.571:865): avc: denied { open } for pid=3762 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 39.289236][ T28] audit: type=1400 audit(1782570249.571:866): avc: denied { prog_load } for pid=3762 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 39.308810][ T28] audit: type=1400 audit(1782570249.571:867): avc: denied { create } for pid=3762 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 39.404922][ T3776] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.418233][ T3776] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.482294][ T3780] gretap0: entered promiscuous mode [ 39.487905][ T3780] macvtap1: entered promiscuous mode [ 39.493426][ T3780] macvtap1: entered allmulticast mode [ 39.499005][ T3780] gretap0: entered allmulticast mode [ 39.552467][ T3782] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.559670][ T3782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.571504][ T3782] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.578681][ T3782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.650410][ T3782] bond1: left allmulticast mode [ 39.809142][ T3810] FAULT_INJECTION: forcing a failure. [ 39.809142][ T3810] name failslab, interval 1, probability 0, space 0, times 1 [ 39.822246][ T3810] CPU: 0 UID: 0 PID: 3810 Comm: syz.3.115 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.822272][ T3810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 39.822357][ T3810] Call Trace: [ 39.822363][ T3810] [ 39.822370][ T3810] __dump_stack+0x1d/0x30 [ 39.822394][ T3810] dump_stack_lvl+0x95/0xd0 [ 39.822412][ T3810] dump_stack+0x15/0x1b [ 39.822451][ T3810] should_fail_ex+0x25e/0x270 [ 39.822472][ T3810] should_failslab+0x8c/0xb0 [ 39.822493][ T3810] __kmalloc_noprof+0xd4/0x4a0 [ 39.822552][ T3810] ? security_prepare_creds+0x52/0x120 [ 39.822576][ T3810] ? security_prepare_creds+0x52/0x120 [ 39.822636][ T3810] ? kmem_cache_alloc_noprof+0x1f1/0x3c0 [ 39.822661][ T3810] security_prepare_creds+0x52/0x120 [ 39.822738][ T3810] prepare_creds+0x385/0x550 [ 39.822808][ T3810] lookup_user_key+0x136/0xd60 [ 39.822912][ T3810] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 39.822998][ T3810] __se_sys_add_key+0x272/0x360 [ 39.823087][ T3810] __x64_sys_add_key+0x67/0x80 [ 39.823115][ T3810] x64_sys_call+0xb39/0x3020 [ 39.823209][ T3810] do_syscall_64+0x136/0x3c0 [ 39.823241][ T3810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.823261][ T3810] RIP: 0033:0x7f0805c7ce59 [ 39.823285][ T3810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.823394][ T3810] RSP: 002b:00007f08046d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 39.823414][ T3810] RAX: ffffffffffffffda RBX: 00007f0805ef5fa0 RCX: 00007f0805c7ce59 [ 39.823477][ T3810] RDX: 00002000000037c0 RSI: 0000200000000240 RDI: 0000200000000200 [ 39.823490][ T3810] RBP: 00007f08046d7090 R08: ffffffffffffffff R09: 0000000000000000 [ 39.823504][ T3810] R10: 0000000000000a29 R11: 0000000000000246 R12: 0000000000000001 [ 39.823520][ T3810] R13: 00007f0805ef6038 R14: 00007f0805ef5fa0 R15: 00007ffeed7cffa8 [ 39.823537][ T3810] [ 39.838365][ T3812] x_tables: duplicate underflow at hook 2 [ 39.947998][ T3819] __nla_validate_parse: 5 callbacks suppressed [ 39.948013][ T3819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 40.075788][ T3825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 40.085946][ T3825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.120'. [ 40.251839][ T3854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 40.268663][ T3854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 40.441168][ T3889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'. [ 40.450990][ T3889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'. [ 40.577790][ T3907] xt_socket: unknown flags 0x48 [ 40.590817][ T3905] FAULT_INJECTION: forcing a failure. [ 40.590817][ T3905] name failslab, interval 1, probability 0, space 0, times 0 [ 40.603834][ T3905] CPU: 1 UID: 0 PID: 3905 Comm: syz.0.153 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.603860][ T3905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 40.603872][ T3905] Call Trace: [ 40.603880][ T3905] [ 40.603889][ T3905] __dump_stack+0x1d/0x30 [ 40.603989][ T3905] dump_stack_lvl+0x95/0xd0 [ 40.604007][ T3905] dump_stack+0x15/0x1b [ 40.604023][ T3905] should_fail_ex+0x25e/0x270 [ 40.604114][ T3905] should_failslab+0x8c/0xb0 [ 40.604133][ T3905] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 40.604152][ T3905] ? do_getname+0x2e/0x1c0 [ 40.604170][ T3905] ? do_getname+0x2e/0x1c0 [ 40.604289][ T3905] ? mutex_lock+0x57/0x90 [ 40.604388][ T3905] do_getname+0x2e/0x1c0 [ 40.604408][ T3905] __se_sys_symlinkat+0x23/0x1b0 [ 40.604427][ T3905] __x64_sys_symlinkat+0x43/0x50 [ 40.604482][ T3905] x64_sys_call+0x2b7d/0x3020 [ 40.604643][ T3905] do_syscall_64+0x136/0x3c0 [ 40.604681][ T3905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.604700][ T3905] RIP: 0033:0x7f20fa0ace59 [ 40.604718][ T3905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.604781][ T3905] RSP: 002b:00007f20f8aff028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 40.604800][ T3905] RAX: ffffffffffffffda RBX: 00007f20fa325fa0 RCX: 00007f20fa0ace59 [ 40.604812][ T3905] RDX: 0000200000000000 RSI: ffffffffffffff9c RDI: 0000200000001040 [ 40.604824][ T3905] RBP: 00007f20f8aff090 R08: 0000000000000000 R09: 0000000000000000 [ 40.604835][ T3905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.604846][ T3905] R13: 00007f20fa326038 R14: 00007f20fa325fa0 R15: 00007ffcad135058 [ 40.604908][ T3905] [ 40.868982][ T3922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'. [ 40.878201][ T3922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'. [ 40.926335][ T3926] syzkaller0: entered promiscuous mode [ 40.932020][ T3926] syzkaller0: entered allmulticast mode [ 41.202168][ T3944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.167'. [ 41.215243][ T3946] syz.0.168 uses obsolete (PF_INET,SOCK_PACKET) [ 43.938288][ T4061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 44.046732][ T4072] FAULT_INJECTION: forcing a failure. [ 44.046732][ T4072] name failslab, interval 1, probability 0, space 0, times 0 [ 44.065501][ T4072] CPU: 0 UID: 0 PID: 4072 Comm: syz.4.217 Not tainted syzkaller #0 PREEMPT(lazy) [ 44.065526][ T4072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 44.065538][ T4072] Call Trace: [ 44.065544][ T4072] [ 44.065553][ T4072] __dump_stack+0x1d/0x30 [ 44.065654][ T4072] dump_stack_lvl+0x95/0xd0 [ 44.065670][ T4072] dump_stack+0x15/0x1b [ 44.065686][ T4072] should_fail_ex+0x25e/0x270 [ 44.065777][ T4072] should_failslab+0x8c/0xb0 [ 44.065799][ T4072] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 44.065818][ T4072] ? security_inode_alloc+0x37/0x100 [ 44.065836][ T4072] ? security_inode_alloc+0x37/0x100 [ 44.065901][ T4072] security_inode_alloc+0x37/0x100 [ 44.065970][ T4072] inode_init_always_gfp+0x495/0x4e0 [ 44.065991][ T4072] alloc_inode+0x58/0x170 [ 44.066080][ T4072] path_from_stashed+0xec/0x330 [ 44.066132][ T4072] open_namespace+0x59/0x140 [ 44.066155][ T4072] pidfd_ioctl+0x1328/0x13f0 [ 44.066174][ T4072] ? selinux_file_ioctl+0x33c/0x3c0 [ 44.066203][ T4072] ? __fget_files+0x184/0x1c0 [ 44.066273][ T4072] ? mutex_lock+0x57/0x90 [ 44.066295][ T4072] ? __pfx_pidfd_ioctl+0x10/0x10 [ 44.066320][ T4072] __se_sys_ioctl+0xce/0x140 [ 44.066340][ T4072] __x64_sys_ioctl+0x43/0x50 [ 44.066471][ T4072] x64_sys_call+0x1563/0x3020 [ 44.066489][ T4072] do_syscall_64+0x136/0x3c0 [ 44.066555][ T4072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.066631][ T4072] RIP: 0033:0x7fab545cce59 [ 44.066645][ T4072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.066659][ T4072] RSP: 002b:00007fab5301f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.066680][ T4072] RAX: ffffffffffffffda RBX: 00007fab54845fa0 RCX: 00007fab545cce59 [ 44.066693][ T4072] RDX: 0000000000000000 RSI: 000000000000ff02 RDI: 0000000000000005 [ 44.066736][ T4072] RBP: 00007fab5301f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.066786][ T4072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.066800][ T4072] R13: 00007fab54846038 R14: 00007fab54845fa0 R15: 00007ffe687f78f8 [ 44.066816][ T4072] [ 44.350694][ T4000] syz.3.187 (4000) used greatest stack depth: 10040 bytes left [ 44.375094][ T28] kauditd_printk_skb: 758 callbacks suppressed [ 44.375108][ T28] audit: type=1400 audit(1782570254.721:1626): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.445067][ T28] audit: type=1400 audit(1782570254.731:1627): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.512082][ T28] audit: type=1400 audit(1782570254.761:1628): avc: denied { open } for pid=4073 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 44.563998][ T28] audit: type=1400 audit(1782570254.771:1629): avc: denied { read write } for pid=4073 comm="syz.2.218" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.611954][ T28] audit: type=1400 audit(1782570254.771:1630): avc: denied { read } for pid=4073 comm="syz.2.218" dev="nsfs" ino=4026532503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 44.660829][ T28] audit: type=1400 audit(1782570254.771:1631): avc: denied { create } for pid=4073 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 44.686991][ T4082] capability: warning: `syz.2.221' uses 32-bit capabilities (legacy support in use) [ 44.694692][ T28] audit: type=1400 audit(1782570254.771:1632): avc: denied { read } for pid=4073 comm="syz.2.218" dev="nsfs" ino=4026532503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 44.730562][ T28] audit: type=1400 audit(1782570254.781:1633): avc: denied { read write } for pid=4073 comm="syz.2.218" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.771841][ T28] audit: type=1400 audit(1782570254.781:1634): avc: denied { open } for pid=4075 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 44.779828][ T4098] IPv6: addrconf: prefix option has invalid lifetime [ 44.796467][ T28] audit: type=1400 audit(1782570254.781:1635): avc: denied { create } for pid=4075 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 44.798051][ T4098] IPv6: addrconf: prefix option has invalid lifetime [ 44.848835][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.942484][ T3943] syz.3.169 (3943) used greatest stack depth: 8304 bytes left [ 45.074004][ T4120] __nla_validate_parse: 11 callbacks suppressed [ 45.074020][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 45.406669][ T4152] netlink: 'syz.3.250': attribute type 21 has an invalid length. [ 45.431097][ T4152] netlink: 'syz.3.250': attribute type 7 has an invalid length. [ 45.463430][ T4147] mmap: syz.2.248 (4147) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.650479][ T4159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'. [ 46.036836][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 46.195920][ T4186] netlink: 'syz.3.260': attribute type 3 has an invalid length. [ 46.502978][ T4205] netlink: 'syz.0.268': attribute type 21 has an invalid length. [ 46.522472][ T4205] netlink: 'syz.0.268': attribute type 7 has an invalid length. [ 46.523234][ T4197] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 46.546139][ T4197] bond1 (unregistering): Released all slaves [ 46.668772][ T4212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 46.885094][ T3506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.885219][ T4103] Bluetooth: hci0: command 0x1003 tx timeout [ 47.117010][ T4246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 47.530143][ T4269] netlink: 200 bytes leftover after parsing attributes in process `syz.1.288'. [ 47.640418][ T4275] netlink: 'syz.4.292': attribute type 21 has an invalid length. [ 47.654504][ T4275] netlink: 'syz.4.292': attribute type 7 has an invalid length. [ 47.793218][ T4277] ip6gre1: entered promiscuous mode [ 47.798588][ T4277] ip6gre1: entered allmulticast mode [ 47.846342][ T4281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 48.356654][ T4312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.306'. [ 48.561072][ T4329] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 48.650880][ T4333] netlink: 200 bytes leftover after parsing attributes in process `syz.3.314'. [ 48.696896][ T4335] netlink: 'syz.0.311': attribute type 21 has an invalid length. [ 48.713198][ T4335] netlink: 'syz.0.311': attribute type 7 has an invalid length. [ 48.745370][ T4348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 48.913518][ T4368] IPVS: set_ctl: invalid protocol: 92 10.1.1.2:20003 [ 48.935137][ T4370] Cannot find set identified by id 0 to match [ 49.197333][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.267607][ T4396] syzkaller0: entered promiscuous mode [ 49.273770][ T4396] syzkaller0: entered allmulticast mode [ 49.416909][ T28] kauditd_printk_skb: 790 callbacks suppressed [ 49.416939][ T28] audit: type=1400 audit(1782570259.771:2426): avc: denied { create } for pid=4399 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 49.455141][ T28] audit: type=1400 audit(1782570259.801:2427): avc: denied { open } for pid=4399 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 49.474583][ T28] audit: type=1400 audit(1782570259.801:2428): avc: denied { prog_load } for pid=4399 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 49.493827][ T28] audit: type=1400 audit(1782570259.801:2429): avc: denied { create } for pid=4399 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 49.514747][ T28] audit: type=1400 audit(1782570259.801:2430): avc: denied { create } for pid=4399 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 49.535636][ T28] audit: type=1400 audit(1782570259.801:2431): avc: denied { create } for pid=4399 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 49.556889][ T28] audit: type=1400 audit(1782570259.801:2432): avc: denied { create } for pid=4399 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 49.577350][ T28] audit: type=1400 audit(1782570259.801:2433): avc: denied { open } for pid=4399 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 49.596894][ T28] audit: type=1400 audit(1782570259.801:2434): avc: denied { open } for pid=4399 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 49.618757][ T28] audit: type=1400 audit(1782570259.951:2435): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 49.802140][ T4420] netlink: 'syz.1.347': attribute type 21 has an invalid length. [ 50.908591][ T4486] validate_nla: 1 callbacks suppressed [ 50.908602][ T4486] netlink: 'syz.4.367': attribute type 21 has an invalid length. [ 50.922408][ T4486] netlink: 'syz.4.367': attribute type 7 has an invalid length. [ 51.205076][ T3506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.261248][ T4511] __nla_validate_parse: 2 callbacks suppressed [ 51.261263][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 51.284828][ T4514] Cannot find add_set index 0 as target [ 51.565953][ T4540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 51.598195][ T4538] FAULT_INJECTION: forcing a failure. [ 51.598195][ T4538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.615322][ T4538] CPU: 0 UID: 0 PID: 4538 Comm: syz.4.387 Not tainted syzkaller #0 PREEMPT(lazy) [ 51.615348][ T4538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 51.615358][ T4538] Call Trace: [ 51.615365][ T4538] [ 51.615373][ T4538] __dump_stack+0x1d/0x30 [ 51.615442][ T4538] dump_stack_lvl+0x95/0xd0 [ 51.615461][ T4538] dump_stack+0x15/0x1b [ 51.615476][ T4538] should_fail_ex+0x25e/0x270 [ 51.615500][ T4538] should_fail+0xb/0x20 [ 51.615522][ T4538] should_fail_usercopy+0x1a/0x20 [ 51.615547][ T4538] _copy_from_user+0x1c/0xb0 [ 51.615638][ T4538] ___sys_recvmsg+0xaa/0x3a0 [ 51.615661][ T4538] ? _parse_integer+0x27/0x40 [ 51.615687][ T4538] do_recvmmsg+0x1e5/0x560 [ 51.615720][ T4538] __x64_sys_recvmmsg+0xe5/0x170 [ 51.615808][ T4538] x64_sys_call+0x80f/0x3020 [ 51.615831][ T4538] do_syscall_64+0x136/0x3c0 [ 51.615906][ T4538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.615924][ T4538] RIP: 0033:0x7fab545cce59 [ 51.615939][ T4538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.615954][ T4538] RSP: 002b:00007fab5301f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 51.615986][ T4538] RAX: ffffffffffffffda RBX: 00007fab54845fa0 RCX: 00007fab545cce59 [ 51.616033][ T4538] RDX: 0000000000000001 RSI: 0000200000004000 RDI: 0000000000000003 [ 51.616046][ T4538] RBP: 00007fab5301f090 R08: 0000000000000000 R09: 0000000000000000 [ 51.616060][ T4538] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 51.616073][ T4538] R13: 00007fab54846038 R14: 00007fab54845fa0 R15: 00007ffe687f78f8 [ 51.616091][ T4538] [ 51.933350][ T4548] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:2 [ 51.946465][ T4548] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 51.963272][ T4548] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 51.972824][ T4549] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 52.128894][ T4557] netlink: 'syz.3.393': attribute type 21 has an invalid length. [ 52.141144][ T4557] netlink: 'syz.3.393': attribute type 7 has an invalid length. [ 52.333798][ T4562] netlink: 36 bytes leftover after parsing attributes in process `syz.0.395'. [ 52.472365][ T4570] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 52.488228][ T4570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.711636][ T40] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.037322][ T4592] netlink: 40 bytes leftover after parsing attributes in process `syz.3.405'. [ 53.159010][ T4601] netlink: 'syz.2.409': attribute type 21 has an invalid length. [ 53.167304][ T4601] netlink: 'syz.2.409': attribute type 7 has an invalid length. [ 53.177521][ T4601] netlink: 128 bytes leftover after parsing attributes in process `syz.2.409'. [ 53.206607][ T4604] netlink: 116 bytes leftover after parsing attributes in process `syz.3.410'. [ 53.316090][ T4619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.416'. [ 53.814232][ T4652] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 53.824668][ T4652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 53.839599][ T4654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.427'. [ 54.206185][ T4672] netlink: 'syz.4.434': attribute type 21 has an invalid length. [ 54.214079][ T4672] netlink: 'syz.4.434': attribute type 7 has an invalid length. [ 54.224019][ T4672] netlink: 128 bytes leftover after parsing attributes in process `syz.4.434'. [ 54.564244][ T28] kauditd_printk_skb: 768 callbacks suppressed [ 54.564299][ T28] audit: type=1400 audit(1782570264.911:3202): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 54.595715][ T28] audit: type=1400 audit(1782570264.921:3203): avc: denied { read } for pid=4676 comm="syz.2.436" dev="nsfs" ino=4026532503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 54.617632][ T28] audit: type=1400 audit(1782570264.921:3204): avc: denied { create } for pid=4676 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 54.638282][ T28] audit: type=1400 audit(1782570264.921:3205): avc: denied { create } for pid=4676 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 54.659018][ T28] audit: type=1400 audit(1782570264.921:3206): avc: denied { prog_load } for pid=4676 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 54.678600][ T28] audit: type=1400 audit(1782570264.921:3207): avc: denied { open } for pid=4676 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 54.698269][ T28] audit: type=1400 audit(1782570264.921:3208): avc: denied { read } for pid=4676 comm="syz.2.436" dev="nsfs" ino=4026532503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 54.719958][ T28] audit: type=1400 audit(1782570264.921:3209): avc: denied { bpf } for pid=4676 comm="syz.2.436" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 54.726541][ T3506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.743154][ T4103] Bluetooth: hci0: command 0x1003 tx timeout [ 54.750135][ T28] audit: type=1400 audit(1782570264.921:3210): avc: denied { map_create } for pid=4676 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 54.789317][ T4683] FAULT_INJECTION: forcing a failure. [ 54.789317][ T4683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.802937][ T4683] CPU: 0 UID: 0 PID: 4683 Comm: syz.1.438 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.802985][ T4683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 54.802996][ T4683] Call Trace: [ 54.803002][ T4683] [ 54.803010][ T4683] __dump_stack+0x1d/0x30 [ 54.803031][ T4683] dump_stack_lvl+0x95/0xd0 [ 54.803090][ T4683] dump_stack+0x15/0x1b [ 54.803109][ T4683] should_fail_ex+0x25e/0x270 [ 54.803136][ T4683] should_fail+0xb/0x20 [ 54.803159][ T4683] should_fail_usercopy+0x1a/0x20 [ 54.803206][ T4683] _copy_from_user+0x1c/0xb0 [ 54.803226][ T4683] memdup_user+0x5e/0xd0 [ 54.803254][ T4683] strndup_user+0x68/0xb0 [ 54.803347][ T4683] __se_sys_mount+0x4d/0x2e0 [ 54.803369][ T4683] ? fput+0x8f/0xc0 [ 54.803392][ T4683] ? ksys_write+0x194/0x1a0 [ 54.803451][ T4683] __x64_sys_mount+0x67/0x80 [ 54.803481][ T4683] x64_sys_call+0x2d61/0x3020 [ 54.803518][ T4683] do_syscall_64+0x136/0x3c0 [ 54.803547][ T4683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.803569][ T4683] RIP: 0033:0x7f2db25cce59 [ 54.803688][ T4683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.803705][ T4683] RSP: 002b:00007f2db101f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.803726][ T4683] RAX: ffffffffffffffda RBX: 00007f2db2845fa0 RCX: 00007f2db25cce59 [ 54.803740][ T4683] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000000000000000 [ 54.803886][ T4683] RBP: 00007f2db101f090 R08: 0000200000000000 R09: 0000000000000000 [ 54.803899][ T4683] R10: 0000000002000090 R11: 0000000000000246 R12: 0000000000000001 [ 54.803913][ T4683] R13: 00007f2db2846038 R14: 00007f2db2845fa0 R15: 00007ffc441aa9c8 [ 54.803932][ T4683] [ 54.803959][ T28] audit: type=1400 audit(1782570264.921:3211): avc: denied { map_create } for pid=4676 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 54.969771][ T4690] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 55.014952][ T4690] bond2 (unregistering): Released all slaves [ 55.087892][ T4710] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 55.094088][ T4710] syzkaller0: linktype set to 1 [ 55.157016][ T4721] netlink: 'syz.2.453': attribute type 21 has an invalid length. [ 55.275463][ T4730] FAULT_INJECTION: forcing a failure. [ 55.275463][ T4730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.288651][ T4730] CPU: 0 UID: 0 PID: 4730 Comm: syz.1.455 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.288753][ T4730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 55.288763][ T4730] Call Trace: [ 55.288770][ T4730] [ 55.288782][ T4730] __dump_stack+0x1d/0x30 [ 55.288803][ T4730] dump_stack_lvl+0x95/0xd0 [ 55.288892][ T4730] dump_stack+0x15/0x1b [ 55.288911][ T4730] should_fail_ex+0x25e/0x270 [ 55.288936][ T4730] should_fail+0xb/0x20 [ 55.288957][ T4730] should_fail_usercopy+0x1a/0x20 [ 55.289035][ T4730] _copy_from_user+0x1c/0xb0 [ 55.289107][ T4730] __sys_connect+0xd0/0x2a0 [ 55.289130][ T4730] __x64_sys_connect+0x3f/0x50 [ 55.289148][ T4730] x64_sys_call+0x2df0/0x3020 [ 55.289220][ T4730] do_syscall_64+0x136/0x3c0 [ 55.289248][ T4730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.289334][ T4730] RIP: 0033:0x7f2db25cce59 [ 55.289428][ T4730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.289446][ T4730] RSP: 002b:00007f2db101f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 55.289527][ T4730] RAX: ffffffffffffffda RBX: 00007f2db2845fa0 RCX: 00007f2db25cce59 [ 55.289552][ T4730] RDX: 000000000000006e RSI: 0000200000000500 RDI: 0000000000000004 [ 55.289566][ T4730] RBP: 00007f2db101f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.289580][ T4730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.289590][ T4730] R13: 00007f2db2846038 R14: 00007f2db2845fa0 R15: 00007ffc441aa9c8 [ 55.289606][ T4730] [ 55.842856][ T4797] syz.4.480 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 55.907273][ T4807] C: renamed from veth1_to_team (while UP) [ 55.914579][ T4807] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 55.988121][ T4821] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 55.991921][ T4816] validate_nla: 2 callbacks suppressed [ 55.991938][ T4816] netlink: 'syz.0.488': attribute type 21 has an invalid length. [ 56.010003][ T4816] netlink: 'syz.0.488': attribute type 7 has an invalid length. [ 56.293462][ T4837] FAULT_INJECTION: forcing a failure. [ 56.293462][ T4837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.306991][ T4837] CPU: 0 UID: 0 PID: 4837 Comm: syz.4.495 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.307021][ T4837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 56.307072][ T4837] Call Trace: [ 56.307078][ T4837] [ 56.307086][ T4837] __dump_stack+0x1d/0x30 [ 56.307110][ T4837] dump_stack_lvl+0x95/0xd0 [ 56.307127][ T4837] dump_stack+0x15/0x1b [ 56.307142][ T4837] should_fail_ex+0x25e/0x270 [ 56.307231][ T4837] should_fail+0xb/0x20 [ 56.307252][ T4837] should_fail_usercopy+0x1a/0x20 [ 56.307284][ T4837] _copy_to_user+0x20/0xa0 [ 56.307304][ T4837] simple_read_from_buffer+0xb5/0x130 [ 56.307395][ T4837] proc_fail_nth_read+0x10e/0x150 [ 56.307415][ T4837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.307481][ T4837] vfs_read+0x18e/0x7c0 [ 56.307509][ T4837] ? __rcu_read_unlock+0x4e/0x70 [ 56.307652][ T4837] ? __fget_files+0x184/0x1c0 [ 56.307685][ T4837] ? mutex_lock+0x57/0x90 [ 56.307710][ T4837] ksys_read+0xdc/0x1a0 [ 56.307729][ T4837] __x64_sys_read+0x40/0x50 [ 56.307746][ T4837] x64_sys_call+0x2886/0x3020 [ 56.307844][ T4837] do_syscall_64+0x136/0x3c0 [ 56.307874][ T4837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.307930][ T4837] RIP: 0033:0x7fab5458d68e [ 56.307944][ T4837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.308016][ T4837] RSP: 002b:00007fab5301efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.308037][ T4837] RAX: ffffffffffffffda RBX: 00007fab5301f6c0 RCX: 00007fab5458d68e [ 56.308049][ T4837] RDX: 000000000000000f RSI: 00007fab5301f0a0 RDI: 0000000000000003 [ 56.308060][ T4837] RBP: 00007fab5301f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.308071][ T4837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.308082][ T4837] R13: 00007fab54846038 R14: 00007fab54845fa0 R15: 00007ffe687f78f8 [ 56.308114][ T4837] [ 56.557627][ T4844] __nla_validate_parse: 11 callbacks suppressed [ 56.557643][ T4844] netlink: 40 bytes leftover after parsing attributes in process `syz.4.497'. [ 56.776412][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.825017][ T4873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.507'. [ 56.825482][ T4873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4873 comm=syz.4.507 [ 57.310597][ T4885] netlink: 40 bytes leftover after parsing attributes in process `syz.3.511'. [ 57.535668][ T4894] FAULT_INJECTION: forcing a failure. [ 57.535668][ T4894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.535695][ T4894] CPU: 0 UID: 0 PID: 4894 Comm: syz.3.513 Not tainted syzkaller #0 PREEMPT(lazy) [ 57.535846][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 57.535856][ T4894] Call Trace: [ 57.535862][ T4894] [ 57.535869][ T4894] __dump_stack+0x1d/0x30 [ 57.535893][ T4894] dump_stack_lvl+0x95/0xd0 [ 57.536015][ T4894] dump_stack+0x15/0x1b [ 57.536034][ T4894] should_fail_ex+0x25e/0x270 [ 57.536060][ T4894] should_fail+0xb/0x20 [ 57.536083][ T4894] should_fail_usercopy+0x1a/0x20 [ 57.536164][ T4894] strncpy_from_user+0x27/0x250 [ 57.536291][ T4894] do_getname+0x59/0x1c0 [ 57.536364][ T4894] getname_flags+0x1d/0x30 [ 57.536386][ T4894] do_sys_openat2+0x6c/0x130 [ 57.536492][ T4894] __x64_sys_openat+0xf2/0x120 [ 57.536521][ T4894] x64_sys_call+0x1e39/0x3020 [ 57.536618][ T4894] do_syscall_64+0x136/0x3c0 [ 57.536644][ T4894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.536665][ T4894] RIP: 0033:0x7f0805c3d68e [ 57.536692][ T4894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 57.536707][ T4894] RSP: 002b:00007f08046d6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.536737][ T4894] RAX: ffffffffffffffda RBX: 00007f08046d76c0 RCX: 00007f0805c3d68e [ 57.536751][ T4894] RDX: 000000000014a002 RSI: 00007f08046d6c00 RDI: ffffffffffffff9c [ 57.536763][ T4894] RBP: 00007f08046d6c00 R08: 0000000000000000 R09: 0000000000000000 [ 57.536798][ T4894] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 57.536809][ T4894] R13: 00007f0805ef6038 R14: 00007f0805ef5fa0 R15: 00007ffeed7cffa8 [ 57.536829][ T4894] [ 57.706283][ T4899] netlink: 14 bytes leftover after parsing attributes in process `syz.3.515'. [ 57.706756][ T4900] netlink: 14 bytes leftover after parsing attributes in process `syz.3.515'. [ 57.778237][ T4899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.793056][ T4899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.806131][ T4899] bond0 (unregistering): Released all slaves [ 57.853071][ T4904] netlink: 'syz.2.516': attribute type 21 has an invalid length. [ 57.861045][ T4904] netlink: 'syz.2.516': attribute type 7 has an invalid length. [ 57.870354][ T4904] netlink: 128 bytes leftover after parsing attributes in process `syz.2.516'. [ 58.403643][ T4914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4914 comm=syz.2.520 [ 58.451980][ T4919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.522'. [ 58.511533][ T4924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.524'. [ 58.520644][ T4924] netlink: 'syz.2.524': attribute type 7 has an invalid length. [ 58.529041][ T4924] netlink: 'syz.2.524': attribute type 8 has an invalid length. [ 58.536764][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 58.701468][ T4941] netlink: 'syz.3.530': attribute type 21 has an invalid length. [ 58.702576][ T4944] netlink: 'syz.2.529': attribute type 12 has an invalid length. [ 58.710022][ T4941] netlink: 'syz.3.530': attribute type 7 has an invalid length. [ 58.730199][ T4941] netlink: 128 bytes leftover after parsing attributes in process `syz.3.530'. [ 58.805071][ T4103] Bluetooth: hci0: command 0x1003 tx timeout [ 58.806505][ T3506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.574674][ T28] kauditd_printk_skb: 696 callbacks suppressed [ 59.574782][ T28] audit: type=1400 audit(1782570269.921:3908): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 59.614502][ T28] audit: type=1400 audit(1782570269.961:3909): avc: denied { map_create } for pid=4962 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 59.635353][ T28] audit: type=1400 audit(1782570269.961:3910): avc: denied { map_create } for pid=4962 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 59.654876][ T28] audit: type=1400 audit(1782570269.961:3911): avc: denied { prog_load } for pid=4962 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 59.680103][ T28] audit: type=1400 audit(1782570269.961:3912): avc: denied { prog_load } for pid=4962 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 59.702715][ T28] audit: type=1400 audit(1782570269.971:3913): avc: denied { open } for pid=4962 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 59.722388][ T28] audit: type=1400 audit(1782570269.971:3914): avc: denied { read write } for pid=4962 comm="syz.3.538" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 59.746658][ T28] audit: type=1400 audit(1782570269.971:3915): avc: denied { prog_load } for pid=4962 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 59.765943][ T28] audit: type=1400 audit(1782570269.971:3916): avc: denied { read } for pid=4962 comm="syz.3.538" dev="nsfs" ino=4026532856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 59.788915][ T28] audit: type=1400 audit(1782570269.971:3917): avc: denied { create } for pid=4962 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 60.130531][ T4974] netlink: 'syz.1.543': attribute type 21 has an invalid length. [ 60.762530][ T5020] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 60.769123][ T5020] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.785220][ T5020] vhci_hcd vhci_hcd.0: Device attached [ 61.025069][ T3383] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 61.107462][ T5040] Cannot find set identified by id 0 to match [ 61.328797][ T5050] vlan2: entered promiscuous mode [ 61.337711][ T5050] bridge0: entered promiscuous mode [ 61.543774][ T5021] vhci_hcd: connection reset by peer [ 61.551057][ T361] vhci_hcd vhci_hcd.0: stop threads [ 61.556731][ T361] vhci_hcd vhci_hcd.0: release socket [ 61.562671][ T361] vhci_hcd vhci_hcd.0: disconnect device [ 61.710610][ T5068] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 61.758205][ T5068] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 61.794596][ T5074] validate_nla: 3 callbacks suppressed [ 61.794610][ T5074] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 61.984813][ T5089] netlink: 'syz.3.586': attribute type 21 has an invalid length. [ 62.024128][ T5092] __nla_validate_parse: 8 callbacks suppressed [ 62.024141][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 62.029385][ T5089] netlink: 'syz.3.586': attribute type 7 has an invalid length. [ 62.038644][ T5084] netlink: 76 bytes leftover after parsing attributes in process `syz.3.586'. [ 62.059294][ T5092] bond0: entered promiscuous mode [ 62.073365][ T5092] bond_slave_0: entered promiscuous mode [ 62.086157][ T5092] bond_slave_1: entered promiscuous mode [ 62.103085][ T5092] batadv0: entered promiscuous mode [ 62.114933][ T5092] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 62.573764][ T5114] macvtap0: entered promiscuous mode [ 62.686352][ T5120] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 62.746175][ T5122] FAULT_INJECTION: forcing a failure. [ 62.746175][ T5122] name failslab, interval 1, probability 0, space 0, times 0 [ 62.780622][ T5122] CPU: 0 UID: 0 PID: 5122 Comm: syz.3.599 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.780646][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 62.780726][ T5122] Call Trace: [ 62.780735][ T5122] [ 62.780743][ T5122] __dump_stack+0x1d/0x30 [ 62.780843][ T5122] dump_stack_lvl+0x95/0xd0 [ 62.780863][ T5122] dump_stack+0x15/0x1b [ 62.780887][ T5122] should_fail_ex+0x25e/0x270 [ 62.780912][ T5122] should_failslab+0x8c/0xb0 [ 62.780998][ T5122] __kvmalloc_node_noprof+0x15b/0x590 [ 62.781030][ T5122] ? alloc_netdev_mqs+0xa7/0xa90 [ 62.781127][ T5122] ? alloc_netdev_mqs+0xa7/0xa90 [ 62.781213][ T5122] ? __pfx_macvlan_setup+0x10/0x10 [ 62.781305][ T5122] alloc_netdev_mqs+0xa7/0xa90 [ 62.781332][ T5122] rtnl_create_link+0x239/0x720 [ 62.781359][ T5122] rtnl_newlink_create+0x175/0x650 [ 62.781376][ T5122] ? security_capable+0x7b/0x90 [ 62.781438][ T5122] ? netlink_ns_capable+0x86/0xa0 [ 62.781527][ T5122] rtnl_newlink+0x1181/0x1400 [ 62.781551][ T5122] ? __siphash_unaligned+0x185/0x2d0 [ 62.781574][ T5122] ? __rcu_read_unlock+0x4e/0x70 [ 62.781615][ T5122] ? avc_has_perm_noaudit+0xa3/0x120 [ 62.781635][ T5122] ? cred_has_capability+0x224/0x2a0 [ 62.781663][ T5122] ? selinux_capable+0x31/0x40 [ 62.781695][ T5122] ? security_capable+0x7b/0x90 [ 62.781714][ T5122] ? ns_capable+0x80/0xb0 [ 62.781741][ T5122] ? __pfx_rtnl_newlink+0x10/0x10 [ 62.781758][ T5122] rtnetlink_rcv_msg+0x64b/0x720 [ 62.781813][ T5122] netlink_rcv_skb+0x11e/0x220 [ 62.781907][ T5122] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.781941][ T5122] rtnetlink_rcv+0x1c/0x30 [ 62.781972][ T5122] netlink_unicast+0x5a7/0x680 [ 62.782106][ T5122] netlink_sendmsg+0x5be/0x6f0 [ 62.782129][ T5122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.782150][ T5122] ____sys_sendmsg+0x532/0x580 [ 62.782179][ T5122] ___sys_sendmsg+0x195/0x1e0 [ 62.782230][ T5122] __x64_sys_sendmsg+0xd4/0x160 [ 62.782253][ T5122] x64_sys_call+0x194c/0x3020 [ 62.782274][ T5122] do_syscall_64+0x136/0x3c0 [ 62.782335][ T5122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.782357][ T5122] RIP: 0033:0x7f0805c7ce59 [ 62.782374][ T5122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.782392][ T5122] RSP: 002b:00007f08046d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.782411][ T5122] RAX: ffffffffffffffda RBX: 00007f0805ef5fa0 RCX: 00007f0805c7ce59 [ 62.782423][ T5122] RDX: 0000000000040040 RSI: 0000200000000200 RDI: 0000000000000003 [ 62.782495][ T5122] RBP: 00007f08046d7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.782591][ T5122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.782602][ T5122] R13: 00007f0805ef6038 R14: 00007f0805ef5fa0 R15: 00007ffeed7cffa8 [ 62.782618][ T5122] [ 63.180324][ T5139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5139 comm=syz.2.601 [ 63.208630][ T5141] netlink: 'syz.0.606': attribute type 1 has an invalid length. [ 63.238109][ T5141] bond1: entered promiscuous mode [ 63.243549][ T5141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.357993][ T5156] netlink: 'syz.1.608': attribute type 21 has an invalid length. [ 63.414530][ T5160] netlink: 128 bytes leftover after parsing attributes in process `syz.1.608'. [ 63.414591][ T5156] netlink: 'syz.1.608': attribute type 7 has an invalid length. [ 64.163189][ T5203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.627'. [ 64.538537][ T5222] netlink: 'syz.3.634': attribute type 21 has an invalid length. [ 64.546859][ T5222] netlink: 'syz.3.634': attribute type 7 has an invalid length. [ 64.557910][ T5222] netlink: 128 bytes leftover after parsing attributes in process `syz.3.634'. [ 64.588875][ T28] kauditd_printk_skb: 581 callbacks suppressed [ 64.588888][ T28] audit: type=1400 audit(1782570274.941:4497): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 64.629491][ T28] audit: type=1400 audit(1782570274.981:4498): avc: denied { open } for pid=5227 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 64.650181][ T28] audit: type=1400 audit(1782570274.981:4499): avc: denied { create } for pid=5227 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 64.672018][ T28] audit: type=1400 audit(1782570274.981:4500): avc: denied { create } for pid=5227 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 64.692869][ T28] audit: type=1400 audit(1782570274.981:4501): avc: denied { read } for pid=5227 comm="syz.2.636" dev="nsfs" ino=4026532503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 64.714331][ T28] audit: type=1400 audit(1782570274.981:4502): avc: denied { create } for pid=5227 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 64.735316][ T28] audit: type=1400 audit(1782570274.981:4503): avc: denied { open } for pid=5227 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 64.757294][ T28] audit: type=1400 audit(1782570274.981:4504): avc: denied { create } for pid=5227 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 64.780507][ T5235] netlink: 16 bytes leftover after parsing attributes in process `syz.4.639'. [ 64.781358][ T28] audit: type=1400 audit(1782570274.981:4505): avc: denied { append } for pid=5227 comm="syz.2.636" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=0 [ 64.818999][ T28] audit: type=1400 audit(1782570274.981:4506): avc: denied { create } for pid=5227 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 64.897724][ T5241] netlink: 'syz.2.641': attribute type 39 has an invalid length. [ 64.967804][ T5246] netlink: 'syz.1.643': attribute type 12 has an invalid length. [ 64.975853][ T5246] netlink: 148 bytes leftover after parsing attributes in process `syz.1.643'. [ 64.991261][ T5246] netlink: 59 bytes leftover after parsing attributes in process `syz.1.643'. [ 65.268972][ T5259] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 65.543847][ T5282] netlink: 128 bytes leftover after parsing attributes in process `syz.3.655'. [ 65.606058][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 65.968714][ T3079] IPVS: starting estimator thread 0... [ 66.065527][ T5323] IPVS: using max 2304 ests per chain, 115200 per kthread [ 66.086501][ T3383] usb 1-1: enqueue for inactive port 0 [ 66.097309][ T3383] usb 1-1: enqueue for inactive port 0 [ 66.185699][ T3383] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 66.337308][ T5370] FAULT_INJECTION: forcing a failure. [ 66.337308][ T5370] name failslab, interval 1, probability 0, space 0, times 0 [ 66.366391][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.2.690 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.366421][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 66.366434][ T5370] Call Trace: [ 66.366491][ T5370] [ 66.366499][ T5370] __dump_stack+0x1d/0x30 [ 66.366522][ T5370] dump_stack_lvl+0x95/0xd0 [ 66.366542][ T5370] dump_stack+0x15/0x1b [ 66.366562][ T5370] should_fail_ex+0x25e/0x270 [ 66.366650][ T5370] should_failslab+0x8c/0xb0 [ 66.366735][ T5370] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 66.366770][ T5370] ? __alloc_skb+0x2db/0x6f0 [ 66.366808][ T5370] ? __alloc_skb+0x2db/0x6f0 [ 66.366954][ T5370] __alloc_skb+0x2db/0x6f0 [ 66.366984][ T5370] ? __alloc_skb+0x205/0x6f0 [ 66.367036][ T5370] netlink_ack+0xfd/0x530 [ 66.367093][ T5370] netlink_rcv_skb+0x18d/0x220 [ 66.367111][ T5370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.367145][ T5370] rtnetlink_rcv+0x1c/0x30 [ 66.367260][ T5370] netlink_unicast+0x5a7/0x680 [ 66.367332][ T5370] netlink_sendmsg+0x5be/0x6f0 [ 66.367363][ T5370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.367469][ T5370] sock_write_iter+0x2c5/0x2f0 [ 66.367503][ T5370] ? __pfx_sock_write_iter+0x10/0x10 [ 66.367535][ T5370] vfs_write+0x57d/0x990 [ 66.367614][ T5370] ksys_write+0xdc/0x1a0 [ 66.367646][ T5370] __x64_sys_write+0x40/0x50 [ 66.367667][ T5370] x64_sys_call+0x27e1/0x3020 [ 66.367710][ T5370] do_syscall_64+0x136/0x3c0 [ 66.367798][ T5370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.367830][ T5370] RIP: 0033:0x7f34f73cce59 [ 66.367856][ T5370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.367926][ T5370] RSP: 002b:00007f34f5e27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.367952][ T5370] RAX: ffffffffffffffda RBX: 00007f34f7645fa0 RCX: 00007f34f73cce59 [ 66.367973][ T5370] RDX: 0000000000000033 RSI: 0000200000000080 RDI: 0000000000000003 [ 66.368005][ T5370] RBP: 00007f34f5e27090 R08: 0000000000000000 R09: 0000000000000000 [ 66.368070][ T5370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.368089][ T5370] R13: 00007f34f7646038 R14: 00007f34f7645fa0 R15: 00007ffdbc62a768 [ 66.368173][ T5370] [ 66.675661][ T5387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.696'. [ 66.712520][ T5387] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5387 comm=syz.0.696 [ 66.740678][ T40] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.749654][ T40] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.773714][ T40] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.791089][ T40] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.886286][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 67.339015][ T5405] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 67.348405][ T5405] syzkaller1: linktype set to 270 [ 67.456007][ T5411] netlink: 120 bytes leftover after parsing attributes in process `syz.0.706'. [ 67.479396][ T5411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 67.619910][ T5429] validate_nla: 7 callbacks suppressed [ 67.619927][ T5429] netlink: 'syz.2.711': attribute type 21 has an invalid length. [ 67.688401][ T5429] netlink: 'syz.2.711': attribute type 7 has an invalid length. [ 67.766592][ T5435] geneve2: entered promiscuous mode [ 67.798525][ T5435] geneve2: entered allmulticast mode [ 68.235559][ T5497] x_tables: duplicate underflow at hook 2 [ 68.276270][ T5504] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.380640][ T5518] FAULT_INJECTION: forcing a failure. [ 68.380640][ T5518] name failslab, interval 1, probability 0, space 0, times 0 [ 68.417625][ T5518] CPU: 1 UID: 0 PID: 5518 Comm: syz.1.747 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.417650][ T5518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 68.417705][ T5518] Call Trace: [ 68.417713][ T5518] [ 68.417722][ T5518] __dump_stack+0x1d/0x30 [ 68.417819][ T5518] dump_stack_lvl+0x95/0xd0 [ 68.417840][ T5518] dump_stack+0x15/0x1b [ 68.417858][ T5518] should_fail_ex+0x25e/0x270 [ 68.417920][ T5518] should_failslab+0x8c/0xb0 [ 68.418012][ T5518] __kmalloc_node_noprof+0xda/0x4c0 [ 68.418031][ T5518] ? qdisc_alloc+0x65/0x410 [ 68.418055][ T5518] ? qdisc_alloc+0x65/0x410 [ 68.418076][ T5518] qdisc_alloc+0x65/0x410 [ 68.418101][ T5518] ? should_failslab+0x8c/0xb0 [ 68.418224][ T5518] qdisc_create_dflt+0x7f/0x2b0 [ 68.418304][ T5518] taprio_init+0x273/0x5f0 [ 68.418325][ T5518] ? __pfx_taprio_init+0x10/0x10 [ 68.418343][ T5518] qdisc_create+0x57f/0x9c0 [ 68.418364][ T5518] tc_modify_qdisc+0x102a/0x1550 [ 68.418389][ T5518] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 68.418446][ T5518] rtnetlink_rcv_msg+0x6a7/0x720 [ 68.418565][ T5518] netlink_rcv_skb+0x11e/0x220 [ 68.418583][ T5518] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 68.418617][ T5518] rtnetlink_rcv+0x1c/0x30 [ 68.418641][ T5518] netlink_unicast+0x5a7/0x680 [ 68.418723][ T5518] netlink_sendmsg+0x5be/0x6f0 [ 68.418748][ T5518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.418775][ T5518] ____sys_sendmsg+0x532/0x580 [ 68.418855][ T5518] ___sys_sendmsg+0x195/0x1e0 [ 68.418894][ T5518] __x64_sys_sendmsg+0xd4/0x160 [ 68.418992][ T5518] x64_sys_call+0x194c/0x3020 [ 68.419014][ T5518] do_syscall_64+0x136/0x3c0 [ 68.419093][ T5518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.419119][ T5518] RIP: 0033:0x7f2db25cce59 [ 68.419137][ T5518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.419155][ T5518] RSP: 002b:00007f2db101f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.419178][ T5518] RAX: ffffffffffffffda RBX: 00007f2db2845fa0 RCX: 00007f2db25cce59 [ 68.419326][ T5518] RDX: 0000000004040010 RSI: 00002000000012c0 RDI: 0000000000000004 [ 68.419339][ T5518] RBP: 00007f2db101f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.419350][ T5518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.419361][ T5518] R13: 00007f2db2846038 R14: 00007f2db2845fa0 R15: 00007ffc441aa9c8 [ 68.419378][ T5518] [ 68.793483][ T5530] netlink: 'syz.4.752': attribute type 21 has an invalid length. [ 68.801424][ T5530] netlink: 'syz.4.752': attribute type 7 has an invalid length. [ 69.143949][ T5549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5549 comm=syz.2.757 [ 69.418759][ T5575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 69.429283][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 69.438775][ T5574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'. [ 69.452810][ T5575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'. [ 69.559893][ T5592] : option downdelay: invalid value (18446744073709547007) [ 69.567397][ T5592] : option downdelay: allowed values 0 - 2147483647 [ 69.575603][ T5592]  (unregistering): Released all slaves [ 69.610383][ T28] kauditd_printk_skb: 6726 callbacks suppressed [ 69.610393][ T28] audit: type=1400 audit(1782570535.957:11233): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.649145][ T28] audit: type=1400 audit(1782570535.997:11234): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.675835][ T28] audit: type=1400 audit(1782570536.027:11235): avc: denied { allowed } for pid=5596 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 69.710665][ T28] audit: type=1400 audit(1782570536.047:11236): avc: denied { map_create } for pid=5596 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 69.748887][ T28] audit: type=1400 audit(1782570536.057:11237): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.775420][ T28] audit: type=1400 audit(1782570536.087:11238): avc: denied { create } for pid=5602 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 69.776553][ T5607] netlink: 'syz.4.776': attribute type 21 has an invalid length. [ 69.796793][ T28] audit: type=1400 audit(1782570536.097:11239): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.855300][ T5607] netlink: 'syz.4.776': attribute type 7 has an invalid length. [ 69.857101][ T28] audit: type=1400 audit(1782570536.107:11240): avc: denied { execmem } for pid=5604 comm="syz.0.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 69.882517][ T28] audit: type=1400 audit(1782570536.157:11241): avc: denied { open } for pid=5604 comm="syz.0.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 69.908066][ T28] audit: type=1400 audit(1782570536.157:11242): avc: denied { open } for pid=5604 comm="syz.0.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 69.959874][ T5614] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 70.914428][ T5666] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 70.932069][ T5669] netlink: 'syz.3.798': attribute type 21 has an invalid length. [ 70.940226][ T5669] netlink: 'syz.3.798': attribute type 7 has an invalid length. [ 71.134346][ T5693] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 71.154262][ T5693] macvtap1: entered allmulticast mode [ 71.170684][ T5693] bond2: (slave bridge2): making interface the new active one [ 71.179209][ T5693] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 71.414458][ T5734] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 71.565960][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 71.664138][ T5747] netlink: 168 bytes leftover after parsing attributes in process `syz.2.823'. [ 71.674121][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 71.775641][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 71.857908][ T5770] netlink: 'syz.3.835': attribute type 21 has an invalid length. [ 72.090861][ T5776] x_tables: duplicate underflow at hook 2 [ 72.819247][ T5835] FAULT_INJECTION: forcing a failure. [ 72.819247][ T5835] name failslab, interval 1, probability 0, space 0, times 0 [ 72.851878][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz.2.860 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.851948][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 72.851960][ T5835] Call Trace: [ 72.851967][ T5835] [ 72.851974][ T5835] __dump_stack+0x1d/0x30 [ 72.852039][ T5835] dump_stack_lvl+0x95/0xd0 [ 72.852062][ T5835] dump_stack+0x15/0x1b [ 72.852078][ T5835] should_fail_ex+0x25e/0x270 [ 72.852140][ T5835] should_failslab+0x8c/0xb0 [ 72.852213][ T5835] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 72.852235][ T5835] ? skb_clone+0x151/0x1f0 [ 72.852258][ T5835] ? skb_clone+0x151/0x1f0 [ 72.852316][ T5835] skb_clone+0x151/0x1f0 [ 72.852340][ T5835] __netlink_deliver_tap+0x2be/0x510 [ 72.852364][ T5835] netlink_unicast+0x654/0x680 [ 72.852442][ T5835] netlink_sendmsg+0x5be/0x6f0 [ 72.852587][ T5835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.852604][ T5835] ____sys_sendmsg+0x532/0x580 [ 72.852627][ T5835] ___sys_sendmsg+0x195/0x1e0 [ 72.852733][ T5835] __x64_sys_sendmsg+0xd4/0x160 [ 72.852800][ T5835] x64_sys_call+0x194c/0x3020 [ 72.852863][ T5835] do_syscall_64+0x136/0x3c0 [ 72.852892][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.852950][ T5835] RIP: 0033:0x7f34f73cce59 [ 72.852967][ T5835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.852985][ T5835] RSP: 002b:00007f34f5e27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.853007][ T5835] RAX: ffffffffffffffda RBX: 00007f34f7645fa0 RCX: 00007f34f73cce59 [ 72.853022][ T5835] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 72.853086][ T5835] RBP: 00007f34f5e27090 R08: 0000000000000000 R09: 0000000000000000 [ 72.853100][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.853113][ T5835] R13: 00007f34f7646038 R14: 00007f34f7645fa0 R15: 00007ffdbc62a768 [ 72.853133][ T5835] [ 73.156191][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 73.246325][ T5849] validate_nla: 3 callbacks suppressed [ 73.246339][ T5849] netlink: 'syz.1.865': attribute type 12 has an invalid length. [ 73.287040][ T5849] netlink: 'syz.1.865': attribute type 29 has an invalid length. [ 73.326690][ T5849] netlink: 148 bytes leftover after parsing attributes in process `syz.1.865'. [ 73.350365][ T5849] netlink: 59 bytes leftover after parsing attributes in process `syz.1.865'. [ 73.415815][ T5851] pim6reg1: entered promiscuous mode [ 73.421436][ T5851] pim6reg1: entered allmulticast mode [ 73.443795][ T40] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.452868][ T40] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.477651][ T40] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.515157][ T40] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.984314][ T5892] netlink: 'syz.3.879': attribute type 21 has an invalid length. [ 74.005302][ T5892] netlink: 'syz.3.879': attribute type 7 has an invalid length. [ 74.256898][ T5902] sctp: [Deprecated]: syz.2.882 (pid 5902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 74.256898][ T5902] Use struct sctp_sack_info instead [ 74.620774][ T28] kauditd_printk_skb: 903 callbacks suppressed [ 74.620828][ T28] audit: type=1400 audit(1782570540.967:12146): avc: denied { read write } for pid=5907 comm="syz.3.884" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.686545][ T28] audit: type=1400 audit(1782570541.007:12147): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 74.769057][ T28] audit: type=1400 audit(1782570541.017:12148): avc: denied { open } for pid=5907 comm="syz.3.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 74.837119][ T28] audit: type=1400 audit(1782570541.017:12149): avc: denied { create } for pid=5907 comm="syz.3.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 74.877887][ T28] audit: type=1400 audit(1782570541.017:12150): avc: denied { prog_load } for pid=5907 comm="syz.3.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 74.900576][ T5924] xt_TCPMSS: Only works on TCP SYN packets [ 74.921830][ T28] audit: type=1400 audit(1782570541.017:12151): avc: denied { prog_load } for pid=5907 comm="syz.3.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 74.976335][ T5936] audit: audit_backlog=65 > audit_backlog_limit=64 [ 74.983056][ T5936] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 74.991093][ T5936] audit: backlog limit exceeded [ 74.992493][ T28] audit: type=1400 audit(1782570541.017:12152): avc: denied { read } for pid=5907 comm="syz.3.884" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 75.013383][ T5937] netlink: 'syz.3.894': attribute type 21 has an invalid length. [ 75.027890][ T5937] netlink: 'syz.3.894': attribute type 7 has an invalid length. [ 75.443882][ T5960] FAULT_INJECTION: forcing a failure. [ 75.443882][ T5960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.461175][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: syz.0.906 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.461284][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 75.461297][ T5960] Call Trace: [ 75.461305][ T5960] [ 75.461314][ T5960] __dump_stack+0x1d/0x30 [ 75.461338][ T5960] dump_stack_lvl+0x95/0xd0 [ 75.461385][ T5960] dump_stack+0x15/0x1b [ 75.461419][ T5960] should_fail_ex+0x25e/0x270 [ 75.461443][ T5960] should_fail+0xb/0x20 [ 75.461499][ T5960] should_fail_usercopy+0x1a/0x20 [ 75.461525][ T5960] _copy_from_user+0x1c/0xb0 [ 75.461544][ T5960] ip_tunnel_parm_from_user+0x4c/0x260 [ 75.461577][ T5960] ip_tunnel_siocdevprivate+0x45/0xe0 [ 75.461693][ T5960] dev_ifsioc+0x8f5/0xfc0 [ 75.461723][ T5960] dev_ioctl+0x78c/0x960 [ 75.461796][ T5960] sock_ioctl+0x58f/0x610 [ 75.461878][ T5960] ? __pfx_sock_ioctl+0x10/0x10 [ 75.461905][ T5960] __se_sys_ioctl+0xce/0x140 [ 75.462026][ T5960] __x64_sys_ioctl+0x43/0x50 [ 75.462052][ T5960] x64_sys_call+0x1563/0x3020 [ 75.462094][ T5960] do_syscall_64+0x136/0x3c0 [ 75.462119][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.462141][ T5960] RIP: 0033:0x7f20fa0ace59 [ 75.462158][ T5960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.462203][ T5960] RSP: 002b:00007f20f8aff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.462222][ T5960] RAX: ffffffffffffffda RBX: 00007f20fa325fa0 RCX: 00007f20fa0ace59 [ 75.462236][ T5960] RDX: 0000200000000280 RSI: 00000000000089f1 RDI: 0000000000000003 [ 75.462250][ T5960] RBP: 00007f20f8aff090 R08: 0000000000000000 R09: 0000000000000000 [ 75.462263][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.462276][ T5960] R13: 00007f20fa326038 R14: 00007f20fa325fa0 R15: 00007ffcad135058 [ 75.462297][ T5960] [ 75.875483][ T5994] netlink: 316 bytes leftover after parsing attributes in process `syz.1.920'. [ 76.059774][ T6008] netlink: 'syz.4.924': attribute type 21 has an invalid length. [ 76.083266][ T6008] netlink: 'syz.4.924': attribute type 7 has an invalid length. [ 76.272993][ T5996] FAULT_INJECTION: forcing a failure. [ 76.272993][ T5996] name failslab, interval 1, probability 0, space 0, times 0 [ 76.300353][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: syz.2.921 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.300378][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 76.300390][ T5996] Call Trace: [ 76.300397][ T5996] [ 76.300406][ T5996] __dump_stack+0x1d/0x30 [ 76.300509][ T5996] dump_stack_lvl+0x95/0xd0 [ 76.300581][ T5996] dump_stack+0x15/0x1b [ 76.300600][ T5996] should_fail_ex+0x25e/0x270 [ 76.300658][ T5996] should_failslab+0x8c/0xb0 [ 76.300680][ T5996] __kvmalloc_node_noprof+0x15b/0x590 [ 76.300701][ T5996] ? traverse+0x9c/0x3b0 [ 76.300742][ T5996] ? traverse+0x9c/0x3b0 [ 76.300847][ T5996] traverse+0x9c/0x3b0 [ 76.300947][ T5996] seq_read_iter+0x7dc/0x8f0 [ 76.300999][ T5996] seq_read+0x279/0x2c0 [ 76.301099][ T5996] ? __pfx_seq_read+0x10/0x10 [ 76.301124][ T5996] vfs_readv+0x417/0x6d0 [ 76.301146][ T5996] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 76.301240][ T5996] __x64_sys_preadv+0xfd/0x1c0 [ 76.301259][ T5996] x64_sys_call+0x2915/0x3020 [ 76.301278][ T5996] do_syscall_64+0x136/0x3c0 [ 76.301368][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.301401][ T5996] RIP: 0033:0x7f34f73cce59 [ 76.301418][ T5996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.301435][ T5996] RSP: 002b:00007f34f5e27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 76.301457][ T5996] RAX: ffffffffffffffda RBX: 00007f34f7645fa0 RCX: 00007f34f73cce59 [ 76.301470][ T5996] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 76.301483][ T5996] RBP: 00007f34f5e27090 R08: 0000000000000005 R09: 0000000000000000 [ 76.301541][ T5996] R10: 0000000000005fae R11: 0000000000000246 R12: 0000000000000001 [ 76.301552][ T5996] R13: 00007f34f7646038 R14: 00007f34f7645fa0 R15: 00007ffdbc62a768 [ 76.301572][ T5996] [ 76.509884][ T6016] x_tables: duplicate underflow at hook 4 [ 76.689079][ T6037] netlink: 'syz.3.937': attribute type 2 has an invalid length. [ 76.838832][ T6051] FAULT_INJECTION: forcing a failure. [ 76.838832][ T6051] name failslab, interval 1, probability 0, space 0, times 0 [ 76.868089][ T6051] CPU: 1 UID: 0 PID: 6051 Comm: syz.4.944 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.868119][ T6051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 76.868131][ T6051] Call Trace: [ 76.868137][ T6051] [ 76.868145][ T6051] __dump_stack+0x1d/0x30 [ 76.868164][ T6051] dump_stack_lvl+0x95/0xd0 [ 76.868252][ T6051] dump_stack+0x15/0x1b [ 76.868271][ T6051] should_fail_ex+0x25e/0x270 [ 76.868296][ T6051] should_failslab+0x8c/0xb0 [ 76.868341][ T6051] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 76.868386][ T6051] ? alloc_empty_file+0x70/0x1e0 [ 76.868409][ T6051] ? alloc_empty_file+0x70/0x1e0 [ 76.868457][ T6051] alloc_empty_file+0x70/0x1e0 [ 76.868484][ T6051] alloc_file_pseudo+0x92/0x120 [ 76.868508][ T6051] __shmem_file_setup+0x226/0x260 [ 76.868551][ T6051] shmem_file_setup+0x3b/0x50 [ 76.868621][ T6051] memfd_alloc_file+0x4e/0x300 [ 76.868647][ T6051] __se_sys_memfd_create+0x2e1/0x3b0 [ 76.868723][ T6051] __x64_sys_memfd_create+0x31/0x40 [ 76.868751][ T6051] x64_sys_call+0x1f22/0x3020 [ 76.868773][ T6051] do_syscall_64+0x136/0x3c0 [ 76.868861][ T6051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.868942][ T6051] RIP: 0033:0x7fab545cce59 [ 76.869014][ T6051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.869032][ T6051] RSP: 002b:00007fab5301ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 76.869052][ T6051] RAX: ffffffffffffffda RBX: 0000000000000491 RCX: 00007fab545cce59 [ 76.869067][ T6051] RDX: 00007fab5301eee0 RSI: 0000000000000000 RDI: 00007fab5466304f [ 76.869080][ T6051] RBP: 0000200000000f00 R08: 00000000ffffffff R09: 0000000000000000 [ 76.869094][ T6051] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000840 [ 76.869108][ T6051] R13: 00007fab5301eee0 R14: 00007fab5301eea0 R15: 0000200000000100 [ 76.869135][ T6051] [ 77.078881][ T6065] FAULT_INJECTION: forcing a failure. [ 77.078881][ T6065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.093736][ T6065] CPU: 1 UID: 0 PID: 6065 Comm: syz.3.948 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.093822][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 77.093834][ T6065] Call Trace: [ 77.093841][ T6065] [ 77.093849][ T6065] __dump_stack+0x1d/0x30 [ 77.093874][ T6065] dump_stack_lvl+0x95/0xd0 [ 77.093967][ T6065] dump_stack+0x15/0x1b [ 77.093985][ T6065] should_fail_ex+0x25e/0x270 [ 77.094012][ T6065] should_fail+0xb/0x20 [ 77.094034][ T6065] should_fail_usercopy+0x1a/0x20 [ 77.094233][ T6065] _copy_to_user+0x20/0xa0 [ 77.094269][ T6065] simple_read_from_buffer+0xb5/0x130 [ 77.094293][ T6065] proc_fail_nth_read+0x10e/0x150 [ 77.094315][ T6065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.094336][ T6065] vfs_read+0x18e/0x7c0 [ 77.094394][ T6065] ? __rcu_read_unlock+0x4e/0x70 [ 77.094421][ T6065] ? __fget_files+0x184/0x1c0 [ 77.094444][ T6065] ? mutex_lock+0x57/0x90 [ 77.094468][ T6065] ksys_read+0xdc/0x1a0 [ 77.094487][ T6065] __x64_sys_read+0x40/0x50 [ 77.094518][ T6065] x64_sys_call+0x2886/0x3020 [ 77.094541][ T6065] do_syscall_64+0x136/0x3c0 [ 77.094569][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.094606][ T6065] RIP: 0033:0x7f0805c3d68e [ 77.094653][ T6065] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.094740][ T6065] RSP: 002b:00007f08046d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.094761][ T6065] RAX: ffffffffffffffda RBX: 00007f08046d76c0 RCX: 00007f0805c3d68e [ 77.094776][ T6065] RDX: 000000000000000f RSI: 00007f08046d70a0 RDI: 0000000000000004 [ 77.094856][ T6065] RBP: 00007f08046d7090 R08: 0000000000000000 R09: 0000000000000000 [ 77.094869][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.094882][ T6065] R13: 00007f0805ef6038 R14: 00007f0805ef5fa0 R15: 00007ffeed7cffa8 [ 77.094935][ T6065] [ 77.328634][ T6067] netlink: 'syz.4.949': attribute type 21 has an invalid length. [ 77.560647][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 78.358067][ T6131] binfmt_misc: register: failed to install interpreter file ./file0 [ 78.451718][ T6134] validate_nla: 1 callbacks suppressed [ 78.451734][ T6134] netlink: 'syz.2.975': attribute type 21 has an invalid length. [ 78.466044][ T6134] netlink: 'syz.2.975': attribute type 7 has an invalid length. [ 78.477139][ T6137] batman_adv: batadv0: Adding interface: macsec1 [ 78.483641][ T6137] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.509495][ T6137] batman_adv: batadv0: Interface activated: macsec1 [ 78.697328][ T6159] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 78.703979][ T6159] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.712396][ T6159] vhci_hcd vhci_hcd.0: Device attached [ 78.795322][ T6160] vhci_hcd: connection closed [ 78.795579][ T49] vhci_hcd vhci_hcd.4: stop threads [ 78.805775][ T49] vhci_hcd vhci_hcd.4: release socket [ 78.811269][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 79.264833][ T6185] netlink: 'syz.2.996': attribute type 21 has an invalid length. [ 79.273090][ T6185] netlink: 'syz.2.996': attribute type 7 has an invalid length. [ 79.457070][ T6211] netlink: 'syz.4.1005': attribute type 5 has an invalid length. [ 79.529714][ T6217] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 79.547907][ T6221] vlan0: entered promiscuous mode [ 79.570211][ T6221] netlink: 'syz.0.1011': attribute type 29 has an invalid length. [ 79.586656][ T6221] netlink: 'syz.0.1011': attribute type 3 has an invalid length. [ 79.594646][ T6221] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1011'. [ 79.627476][ T28] kauditd_printk_skb: 900 callbacks suppressed [ 79.627491][ T28] audit: type=1400 audit(1782570546.979:13041): avc: denied { create } for pid=6225 comm="syz.0.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 79.663529][ T28] audit: type=1400 audit(1782570547.009:13042): avc: denied { create } for pid=6225 comm="syz.0.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 79.684126][ T28] audit: type=1400 audit(1782570547.009:13043): avc: denied { read write } for pid=6225 comm="syz.0.1012" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.708921][ T28] audit: type=1400 audit(1782570547.009:13044): avc: denied { name_bind } for pid=6225 comm="syz.0.1012" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 79.751503][ T28] audit: type=1400 audit(1782570547.009:13045): avc: denied { create } for pid=6225 comm="syz.0.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 79.779472][ T28] audit: type=1400 audit(1782570547.039:13046): avc: denied { create } for pid=6218 comm="syz.3.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 79.820595][ T6236] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 79.831494][ T28] audit: type=1400 audit(1782570547.039:13047): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.870769][ T28] audit: type=1400 audit(1782570547.059:13048): avc: denied { prog_load } for pid=6227 comm="syz.1.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 79.891505][ T28] audit: type=1400 audit(1782570547.059:13049): avc: denied { read write } for pid=6227 comm="syz.1.1013" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.916769][ T28] audit: type=1400 audit(1782570547.059:13050): avc: denied { bpf } for pid=6227 comm="syz.1.1013" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 80.168774][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'. [ 80.184115][ T6259] bond0: entered promiscuous mode [ 80.189577][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.223579][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.235542][ T6259] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 80.247775][ T6259] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 80.270810][ T6265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.278124][ T6265] IPv6: NLM_F_CREATE should be set when creating new route [ 80.285359][ T6265] IPv6: NLM_F_CREATE should be set when creating new route [ 80.293120][ T6265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.303564][ T6265] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 80.316064][ T6265] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 80.511014][ T6270] netlink: 'syz.0.1027': attribute type 21 has an invalid length. [ 80.519010][ T6270] netlink: 'syz.0.1027': attribute type 7 has an invalid length. [ 80.821982][ T6277] syzkaller0: entered promiscuous mode [ 80.827648][ T6277] syzkaller0: entered allmulticast mode [ 80.876794][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 81.028936][ T6298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1038'. [ 81.248347][ T6325] netlink: 'syz.3.1050': attribute type 21 has an invalid length. [ 81.876429][ T6341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1056'. [ 81.886412][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.893870][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.907028][ T6343] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=6343 comm=syz.3.1057 [ 81.951227][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.958371][ T6341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.965917][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.969242][ T6345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1058'. [ 81.972995][ T6341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.984346][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 81.996978][ T6341] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 82.080835][ T6360] vlan2: entered promiscuous mode [ 82.086552][ T6360] bridge0: entered promiscuous mode [ 82.351657][ T6398] vlan3: entered promiscuous mode [ 82.356942][ T6398] bridge0: entered promiscuous mode [ 82.774941][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 82.851068][ T6447] gretap0: entered promiscuous mode [ 82.856478][ T6447] vlan3: entered promiscuous mode [ 83.009967][ T6456] vlan0: entered promiscuous mode [ 83.023277][ T6456] bridge0: entered promiscuous mode [ 83.132857][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'. [ 83.170618][ T6468] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1108'. [ 84.021755][ T6498] FAULT_INJECTION: forcing a failure. [ 84.021755][ T6498] name failslab, interval 1, probability 0, space 0, times 0 [ 84.034907][ T6498] CPU: 1 UID: 0 PID: 6498 Comm: syz.2.1118 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.034931][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 84.034979][ T6498] Call Trace: [ 84.034988][ T6498] [ 84.034996][ T6498] __dump_stack+0x1d/0x30 [ 84.035020][ T6498] dump_stack_lvl+0x95/0xd0 [ 84.035040][ T6498] dump_stack+0x15/0x1b [ 84.035125][ T6498] should_fail_ex+0x25e/0x270 [ 84.035164][ T6498] should_failslab+0x8c/0xb0 [ 84.035187][ T6498] __kvmalloc_node_noprof+0x15b/0x590 [ 84.035209][ T6498] ? traverse+0x9c/0x3b0 [ 84.035307][ T6498] ? traverse+0x9c/0x3b0 [ 84.035335][ T6498] traverse+0x9c/0x3b0 [ 84.035361][ T6498] seq_read_iter+0x7dc/0x8f0 [ 84.035458][ T6498] seq_read+0x279/0x2c0 [ 84.035530][ T6498] ? __pfx_seq_read+0x10/0x10 [ 84.035557][ T6498] vfs_readv+0x417/0x6d0 [ 84.035578][ T6498] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 84.035652][ T6498] __x64_sys_preadv+0xfd/0x1c0 [ 84.035670][ T6498] x64_sys_call+0x2915/0x3020 [ 84.035716][ T6498] do_syscall_64+0x136/0x3c0 [ 84.035746][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.035847][ T6498] RIP: 0033:0x7f34f73cce59 [ 84.035860][ T6498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.035878][ T6498] RSP: 002b:00007f34f5e27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 84.035899][ T6498] RAX: ffffffffffffffda RBX: 00007f34f7645fa0 RCX: 00007f34f73cce59 [ 84.035966][ T6498] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 84.035977][ T6498] RBP: 00007f34f5e27090 R08: 0000000000000005 R09: 0000000000000000 [ 84.035988][ T6498] R10: 0000000000005fae R11: 0000000000000246 R12: 0000000000000001 [ 84.035998][ T6498] R13: 00007f34f7646038 R14: 00007f34f7645fa0 R15: 00007ffdbc62a768 [ 84.036014][ T6498] [ 84.249815][ T6512] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 84.354217][ T6521] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 84.371772][ T6524] validate_nla: 7 callbacks suppressed [ 84.371786][ T6524] netlink: 'syz.3.1126': attribute type 21 has an invalid length. [ 84.390868][ T6524] netlink: 'syz.3.1126': attribute type 7 has an invalid length. [ 84.635267][ T28] kauditd_printk_skb: 2279 callbacks suppressed [ 84.635283][ T28] audit: type=1400 audit(1782570551.989:15330): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 84.672822][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.673104][ T6546] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.679610][ T3019] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 84.693646][ T3301] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.694193][ T28] audit: type=1400 audit(1782570552.019:15331): avc: denied { prog_load } for pid=6542 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 84.706284][ T3301] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 84.720016][ T3019] audit: backlog limit exceeded [ 84.731997][ T6546] audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64 [ 84.733225][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.799015][ T6550] __nla_validate_parse: 2 callbacks suppressed [ 84.799032][ T6550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1138'. [ 84.882743][ T6553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.890017][ T6553] IPv6: NLM_F_CREATE should be set when creating new route [ 84.920809][ T6553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.995412][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1142'. [ 85.242079][ T6573] syzkaller0: entered promiscuous mode [ 85.259564][ T6573] syzkaller0: entered allmulticast mode [ 85.533032][ T6596] netlink: 'syz.0.1154': attribute type 21 has an invalid length. [ 85.566668][ T6596] netlink: 'syz.0.1154': attribute type 7 has an invalid length. [ 85.774669][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'. [ 85.947692][ T6602] sctp: [Deprecated]: syz.2.1158 (pid 6602) Use of int in max_burst socket option. [ 85.947692][ T6602] Use struct sctp_assoc_value instead [ 86.099048][ T6607] geneve2: entered promiscuous mode [ 86.115141][ T6607] geneve2: entered allmulticast mode [ 86.544910][ T6630] FAULT_INJECTION: forcing a failure. [ 86.544910][ T6630] name failslab, interval 1, probability 0, space 0, times 0 [ 86.591519][ T6630] CPU: 1 UID: 0 PID: 6630 Comm: syz.4.1169 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.591546][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 86.591559][ T6630] Call Trace: [ 86.591566][ T6630] [ 86.591574][ T6630] __dump_stack+0x1d/0x30 [ 86.591598][ T6630] dump_stack_lvl+0x95/0xd0 [ 86.591615][ T6630] dump_stack+0x15/0x1b [ 86.591675][ T6630] should_fail_ex+0x25e/0x270 [ 86.591697][ T6630] should_failslab+0x8c/0xb0 [ 86.591769][ T6630] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 86.591791][ T6630] ? do_getname+0x2e/0x1c0 [ 86.591808][ T6630] ? do_getname+0x2e/0x1c0 [ 86.591907][ T6630] do_getname+0x2e/0x1c0 [ 86.591930][ T6630] __se_sys_renameat2+0x38/0x1c0 [ 86.591968][ T6630] __x64_sys_renameat2+0x67/0x80 [ 86.591992][ T6630] x64_sys_call+0x2a12/0x3020 [ 86.592045][ T6630] do_syscall_64+0x136/0x3c0 [ 86.592071][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.592165][ T6630] RIP: 0033:0x7fab545cce59 [ 86.592179][ T6630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.592193][ T6630] RSP: 002b:00007fab5301f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 86.592213][ T6630] RAX: ffffffffffffffda RBX: 00007fab54845fa0 RCX: 00007fab545cce59 [ 86.592268][ T6630] RDX: ffffffffffffff9c RSI: 0000200000000080 RDI: ffffffffffffff9c [ 86.592281][ T6630] RBP: 00007fab5301f090 R08: 0000000000000002 R09: 0000000000000000 [ 86.592353][ T6630] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 86.592366][ T6630] R13: 00007fab54846038 R14: 00007fab54845fa0 R15: 00007ffe687f78f8 [ 86.592383][ T6630] [ 86.882455][ T6640] netlink: 'syz.4.1172': attribute type 21 has an invalid length. [ 86.922096][ T6640] netlink: 'syz.4.1172': attribute type 7 has an invalid length. [ 87.244952][ T6654] syzkaller0: mtu less than device minimum [ 87.368986][ T6658] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 88.058155][ T6693] netlink: 'syz.3.1192': attribute type 21 has an invalid length. [ 88.091484][ T6693] netlink: 'syz.3.1192': attribute type 7 has an invalid length. [ 88.361162][ T6696] syzkaller0: entered promiscuous mode [ 88.367291][ T6696] syzkaller0: entered allmulticast mode [ 89.050443][ T6732] netlink: 'syz.0.1208': attribute type 21 has an invalid length. [ 89.059425][ T6732] netlink: 'syz.0.1208': attribute type 7 has an invalid length. [ 89.646315][ T28] kauditd_printk_skb: 22887 callbacks suppressed [ 89.646329][ T28] audit: type=1400 audit(1782570558.000:37876): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 89.690074][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 89.691680][ T6752] audit: audit_backlog=65 > audit_backlog_limit=64 [ 89.703349][ T6752] audit: audit_lost=125 audit_rate_limit=0 audit_backlog_limit=64 [ 89.715306][ T3019] audit: audit_lost=126 audit_rate_limit=0 audit_backlog_limit=64 [ 89.717394][ T3306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 89.728133][ T28] audit: type=1400 audit(1782570558.000:37877): avc: denied { prog_load } for pid=6747 comm="syz.0.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.739741][ T6752] audit: backlog limit exceeded [ 89.753573][ T3019] audit: backlog limit exceeded [ 89.775291][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.145793][ T6780] syzkaller0: entered promiscuous mode [ 90.151501][ T6780] syzkaller0: entered allmulticast mode [ 90.164775][ T6782] netlink: 'syz.1.1226': attribute type 21 has an invalid length. [ 90.178170][ T6782] netlink: 'syz.1.1226': attribute type 7 has an invalid length. [ 90.405895][ T6806] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1237'. [ 91.248538][ T6848] netlink: 'syz.2.1253': attribute type 21 has an invalid length. [ 91.267133][ T6848] netlink: 'syz.2.1253': attribute type 7 has an invalid length. [ 91.483516][ T6865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1259'. [ 91.616735][ T6871] netlink: 'syz.1.1262': attribute type 4 has an invalid length. [ 92.151947][ T6923] netlink: 'syz.4.1282': attribute type 21 has an invalid length. [ 92.160194][ T6923] netlink: 'syz.4.1282': attribute type 7 has an invalid length. [ 92.677710][ T6934] futex_wake_op: syz.1.1286 tries to shift op by 32; fix this program [ 92.996425][ T6964] netlink: 'syz.2.1297': attribute type 21 has an invalid length. [ 93.020702][ T6964] netlink: 'syz.2.1297': attribute type 7 has an invalid length. [ 94.059846][ T7004] netlink: 'syz.1.1312': attribute type 21 has an invalid length. [ 94.655145][ T28] kauditd_printk_skb: 33715 callbacks suppressed [ 94.655163][ T28] audit: type=1400 audit(1782570563.000:71410): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 94.702505][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.707332][ T7049] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.710733][ T7046] geneve3: entered promiscuous mode [ 94.721163][ T3019] audit: audit_lost=189 audit_rate_limit=0 audit_backlog_limit=64 [ 94.721206][ T3019] audit: backlog limit exceeded [ 94.721283][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.721296][ T3019] audit: audit_lost=190 audit_rate_limit=0 audit_backlog_limit=64 [ 94.721310][ T3019] audit: backlog limit exceeded [ 94.721416][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.721427][ T3019] audit: audit_lost=191 audit_rate_limit=0 audit_backlog_limit=64 [ 94.728463][ T7046] geneve3: entered allmulticast mode [ 95.211341][ T7075] validate_nla: 1 callbacks suppressed [ 95.211359][ T7075] netlink: 'syz.4.1340': attribute type 21 has an invalid length. [ 95.253531][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 95.277658][ T7075] netlink: 'syz.4.1340': attribute type 7 has an invalid length. [ 95.546249][ T7085] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1344'. [ 95.926357][ T7100] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 96.263552][ T7116] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1356'. [ 96.509628][ T7124] bridge0: port 3(vlan4) entered blocking state [ 96.530434][ T7124] bridge0: port 3(vlan4) entered disabled state [ 96.545261][ T7124] vlan4: entered allmulticast mode [ 96.566395][ T7124] geneve0: entered allmulticast mode [ 96.590613][ T7124] vlan4: entered promiscuous mode [ 96.615634][ T7124] geneve0: entered promiscuous mode [ 97.492403][ T7157] netlink: 'syz.3.1361': attribute type 21 has an invalid length. [ 97.534193][ T7157] netlink: 'syz.3.1361': attribute type 7 has an invalid length. [ 98.245902][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 98.637930][ T7196] FAULT_INJECTION: forcing a failure. [ 98.637930][ T7196] name failslab, interval 1, probability 0, space 0, times 0 [ 98.686107][ T7196] CPU: 1 UID: 0 PID: 7196 Comm: syz.4.1384 Not tainted syzkaller #0 PREEMPT(lazy) [ 98.686136][ T7196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.686195][ T7196] Call Trace: [ 98.686202][ T7196] [ 98.686209][ T7196] __dump_stack+0x1d/0x30 [ 98.686230][ T7196] dump_stack_lvl+0x95/0xd0 [ 98.686250][ T7196] dump_stack+0x15/0x1b [ 98.686266][ T7196] should_fail_ex+0x25e/0x270 [ 98.686504][ T7196] should_failslab+0x8c/0xb0 [ 98.686570][ T7196] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 98.686663][ T7196] ? skb_clone+0x151/0x1f0 [ 98.686711][ T7196] ? skb_clone+0x151/0x1f0 [ 98.686750][ T7196] skb_clone+0x151/0x1f0 [ 98.686773][ T7196] __netlink_deliver_tap+0x2be/0x510 [ 98.686798][ T7196] netlink_unicast+0x654/0x680 [ 98.686892][ T7196] netlink_sendmsg+0x5be/0x6f0 [ 98.686914][ T7196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.686936][ T7196] ____sys_sendmsg+0x532/0x580 [ 98.686964][ T7196] ___sys_sendmsg+0x195/0x1e0 [ 98.687070][ T7196] __x64_sys_sendmsg+0xd4/0x160 [ 98.687093][ T7196] x64_sys_call+0x194c/0x3020 [ 98.687112][ T7196] do_syscall_64+0x136/0x3c0 [ 98.687225][ T7196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.687251][ T7196] RIP: 0033:0x7fab545cce59 [ 98.687268][ T7196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.687283][ T7196] RSP: 002b:00007fab5301f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.687362][ T7196] RAX: ffffffffffffffda RBX: 00007fab54845fa0 RCX: 00007fab545cce59 [ 98.687377][ T7196] RDX: 0000000020008004 RSI: 00002000000002c0 RDI: 0000000000000003 [ 98.687389][ T7196] RBP: 00007fab5301f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.687420][ T7196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.687431][ T7196] R13: 00007fab54846038 R14: 00007fab54845fa0 R15: 00007ffe687f78f8 [ 98.687449][ T7196] [ 99.023702][ T7196] bridge0: port 3(vlan3) entered blocking state [ 99.038491][ T7196] bridge0: port 3(vlan3) entered disabled state [ 99.081381][ T7196] vlan3: entered allmulticast mode [ 99.096377][ T7196] geneve0: entered allmulticast mode [ 99.103844][ T7196] vlan3: entered promiscuous mode [ 99.110292][ T7196] geneve0: entered promiscuous mode [ 99.273488][ T7226] netlink: 'syz.3.1391': attribute type 21 has an invalid length. [ 99.311671][ T7226] netlink: 'syz.3.1391': attribute type 7 has an invalid length. [ 99.537842][ T7239] FAULT_INJECTION: forcing a failure. [ 99.537842][ T7239] name failslab, interval 1, probability 0, space 0, times 0 [ 99.571941][ T7241] xt_CT: No such helper "pptp" [ 99.603298][ T7239] CPU: 0 UID: 0 PID: 7239 Comm: syz.4.1397 Not tainted syzkaller #0 PREEMPT(lazy) [ 99.603322][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 99.603332][ T7239] Call Trace: [ 99.603407][ T7239] [ 99.603415][ T7239] __dump_stack+0x1d/0x30 [ 99.603465][ T7239] dump_stack_lvl+0x95/0xd0 [ 99.603482][ T7239] dump_stack+0x15/0x1b [ 99.603515][ T7239] should_fail_ex+0x25e/0x270 [ 99.603542][ T7239] should_failslab+0x8c/0xb0 [ 99.603564][ T7239] __kmalloc_node_track_caller_noprof+0xd5/0x4c0 [ 99.603625][ T7239] ? scm_fp_dup+0x40/0x1d0 [ 99.603647][ T7239] ? scm_fp_dup+0x40/0x1d0 [ 99.603675][ T7239] kmemdup_noprof+0x2b/0x70 [ 99.603727][ T7239] scm_fp_dup+0x40/0x1d0 [ 99.603753][ T7239] __unix_dgram_recvmsg+0x69e/0x860 [ 99.603777][ T7239] unix_seqpacket_recvmsg+0xac/0xc0 [ 99.603806][ T7239] ? __pfx_unix_seqpacket_recvmsg+0x10/0x10 [ 99.603832][ T7239] sock_recvmsg_nosec+0xc2/0xf0 [ 99.603850][ T7239] ____sys_recvmsg+0x26f/0x280 [ 99.603932][ T7239] ___sys_recvmsg+0x11f/0x3a0 [ 99.603961][ T7239] do_recvmmsg+0x1e5/0x560 [ 99.603990][ T7239] ? fput+0x8f/0xc0 [ 99.604073][ T7239] __x64_sys_recvmmsg+0xe5/0x170 [ 99.604099][ T7239] x64_sys_call+0x80f/0x3020 [ 99.604189][ T7239] do_syscall_64+0x136/0x3c0 [ 99.604274][ T7239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.604296][ T7239] RIP: 0033:0x7fab545cce59 [ 99.604312][ T7239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.604330][ T7239] RSP: 002b:00007fab52fdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 99.604349][ T7239] RAX: ffffffffffffffda RBX: 00007fab54846180 RCX: 00007fab545cce59 [ 99.604445][ T7239] RDX: 04000000000002ba RSI: 0000200000004040 RDI: 0000000000000006 [ 99.604459][ T7239] RBP: 00007fab52fdd090 R08: 0000000000000000 R09: 0000000000000000 [ 99.604472][ T7239] R10: 0000000040000002 R11: 0000000000000246 R12: 0000000000000001 [ 99.604492][ T7239] R13: 00007fab54846218 R14: 00007fab54846180 R15: 00007ffe687f78f8 [ 99.604512][ T7239] [ 99.666303][ T3019] audit_log_start: 21157 callbacks suppressed [ 99.666320][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.669955][ T28] audit: type=1400 audit(1782570567.950:91102): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 99.685957][ T3019] audit: audit_lost=681 audit_rate_limit=0 audit_backlog_limit=64 [ 99.689131][ T28] audit: type=1400 audit(1782570567.960:91103): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 99.702480][ T3019] audit: backlog limit exceeded [ 99.712830][ T28] audit: type=1400 audit(1782570567.960:91104): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 99.740721][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.780783][ T28] audit: type=1400 audit(1782570567.960:91105): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 99.837203][ T3019] audit: audit_lost=682 audit_rate_limit=0 audit_backlog_limit=64 [ 99.848695][ T28] audit: type=1400 audit(1782570567.960:91106): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 100.377991][ T7273] netlink: 'syz.2.1411': attribute type 21 has an invalid length. [ 100.435095][ T7273] netlink: 'syz.2.1411': attribute type 7 has an invalid length. [ 101.762069][ T7331] netlink: 'syz.1.1435': attribute type 21 has an invalid length. [ 101.814888][ T7331] netlink: 'syz.1.1435': attribute type 7 has an invalid length. [ 102.085364][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 102.187489][ T3383] IPVS: starting estimator thread 0... [ 102.276296][ T7342] IPVS: using max 2304 ests per chain, 115200 per kthread [ 102.657768][ T7364] C: renamed from veth1_to_team (while UP) [ 102.670126][ T7364] netlink: 'syz.3.1448': attribute type 3 has an invalid length. [ 102.698102][ T7364] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1448'. [ 102.717725][ T7364] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 102.882055][ T7368] tun0: tun_chr_ioctl cmd 2147767506 [ 103.324175][ T7381] netlink: 'syz.0.1454': attribute type 21 has an invalid length. [ 103.373615][ T7381] netlink: 'syz.0.1454': attribute type 7 has an invalid length. [ 104.510771][ T7421] netlink: 'syz.0.1466': attribute type 21 has an invalid length. [ 104.526196][ T7421] netlink: 'syz.0.1466': attribute type 7 has an invalid length. [ 104.675218][ T28] kauditd_printk_skb: 21623 callbacks suppressed [ 104.675233][ T28] audit: type=1400 audit(1782570573.020:111775): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.709489][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.713945][ T3306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.716927][ T3019] audit: audit_lost=1001 audit_rate_limit=0 audit_backlog_limit=64 [ 104.723389][ T3306] audit: audit_lost=1002 audit_rate_limit=0 audit_backlog_limit=64 [ 104.739592][ T28] audit: type=1400 audit(1782570573.020:111776): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.745076][ T3019] audit: backlog limit exceeded [ 104.761588][ T3306] audit: backlog limit exceeded [ 104.781448][ T7427] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.787952][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.982020][ T7431] ================================================================== [ 104.990265][ T7431] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 104.998002][ T7431] [ 105.000327][ T7431] write to 0xffff888103e10600 of 8 bytes by task 7430 on cpu 0: [ 105.007954][ T7431] mas_wr_store_entry+0x3b95/0x5a90 [ 105.013167][ T7431] mas_store_prealloc+0x421/0x670 [ 105.018197][ T7431] vma_complete+0x3c7/0x850 [ 105.022729][ T7431] __split_vma+0x592/0x640 [ 105.027239][ T7431] vma_modify+0xb29/0xc80 [ 105.031828][ T7431] vma_modify_flags+0x182/0x210 [ 105.036693][ T7431] mprotect_fixup+0x3a2/0x680 [ 105.041381][ T7431] do_mprotect_pkey+0x69e/0x950 [ 105.046322][ T7431] __x64_sys_mprotect+0x48/0x60 [ 105.051183][ T7431] x64_sys_call+0x2768/0x3020 [ 105.055867][ T7431] do_syscall_64+0x136/0x3c0 [ 105.060459][ T7431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.066367][ T7431] [ 105.068685][ T7431] read to 0xffff888103e10600 of 8 bytes by task 7431 on cpu 1: [ 105.076222][ T7431] mtree_range_walk+0x35a/0x480 [ 105.081248][ T7431] mas_walk+0x1ac/0x340 [ 105.085410][ T7431] lock_vma_under_rcu+0xc9/0x210 [ 105.090361][ T7431] do_user_addr_fault+0x237/0x1060 [ 105.095475][ T7431] exc_page_fault+0x62/0xa0 [ 105.101630][ T7431] asm_exc_page_fault+0x26/0x30 [ 105.106479][ T7431] [ 105.108788][ T7431] value changed: 0xffff888104723e0e -> 0xffff888103e10600 [ 105.115880][ T7431] [ 105.118190][ T7431] Reported by Kernel Concurrency Sanitizer on: [ 105.124505][ T7431] CPU: 1 UID: 0 PID: 7431 Comm: syz.4.1473 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.133785][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.143924][ T7431] ================================================================== [ 109.125318][ T56] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 109.685159][ T28] kauditd_printk_skb: 49790 callbacks suppressed [ 109.685213][ T28] audit: type=1400 audit(1782570578.030:161389): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 109.692506][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.695823][ T28] audit: type=1400 audit(1782570578.040:161390): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 109.714833][ T3019] audit: audit_lost=1063 audit_rate_limit=0 audit_backlog_limit=64 [ 109.721271][ T28] audit: type=1400 audit(1782570578.040:161391): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 109.742782][ T3019] audit: backlog limit exceeded [ 109.751153][ T28] audit: type=1400 audit(1782570578.040:161392): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 109.772625][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.777078][ T28] audit: type=1400 audit(1782570578.040:161393): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 109.798613][ T3019] audit: audit_lost=1064 audit_rate_limit=0 audit_backlog_limit=64 [ 114.695122][ T28] kauditd_printk_skb: 51792 callbacks suppressed [ 114.695141][ T28] audit: type=1400 audit(1782570583.050:213185): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 114.701770][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 114.723314][ T28] audit: type=1400 audit(1782570583.050:213186): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 114.730006][ T3019] audit: audit_lost=1065 audit_rate_limit=0 audit_backlog_limit=64 [ 114.752370][ T28] audit: type=1400 audit(1782570583.050:213187): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 114.759420][ T3019] audit: backlog limit exceeded [ 114.780539][ T28] audit: type=1400 audit(1782570583.050:213188): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 114.786701][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 114.812063][ T28] audit: type=1400 audit(1782570583.050:213189): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 114.817730][ T3019] audit: audit_lost=1066 audit_rate_limit=0 audit_backlog_limit=64