last executing test programs: 2.479858005s ago: executing program 4 (id=1028): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea00000007110930000000000"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0xc, 0x4, 0x56, 0x5, 0x0, 0x2, 0xa, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff, 0x5, @perf_bp={&(0x7f00000001c0), 0x3}, 0x120a, 0x1, 0x0, 0x0, 0x5, 0xffff9417, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2, 0xffffffffffffffff}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)=r3}, 0x20) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x18, 0x2, 0x2, 0x0, 0x40, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x5, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x1d, 0xfffffffffffffd04, &(0x7f0000000000)="e02742e8680d85ff9782762f86dd3f8a45e2318273ad90cb7ab9d0f477f5b43ac4ed2618bce6808e000000435024e1ff76b534e444fea2834c6c510d6aeb9ab347165756607916af436c42110bb30983c62b09ef27a9d6ff4c24f5d2cfc1067fb20400000044e98c99c307f145fcda96609d6a0a0cd940993f0a0075205286959f60", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1b) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x270}, 0x10c103, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008008}, 0x4800) 2.466369736s ago: executing program 4 (id=1029): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8822c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80)={[{@orlov}, {@norecovery}, {@inlinecrypt}, {@resuid}]}, 0x8, 0x617, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) (fail_nth: 1) 2.156809074s ago: executing program 4 (id=1032): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x300, &(0x7f0000000000)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x102, 0x0) 2.140126205s ago: executing program 4 (id=1035): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a78", 0x18, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.071751009s ago: executing program 2 (id=1038): unshare(0x22020600) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r1, 0x407, 0x176) vmsplice(r2, 0x0, 0x0, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 1.842093303s ago: executing program 2 (id=1042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xfffffe20, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f00000000c0)=0x2, 0x4) 1.598778597s ago: executing program 2 (id=1043): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (fail_nth: 6) 1.294838764s ago: executing program 2 (id=1047): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0xb440, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 1.249336717s ago: executing program 2 (id=1050): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) eventfd2(0x0, 0x1) r3 = socket(0x11, 0x800000003, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x7}, 0x200, 0x0, 0xfffffffe, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000d40)={0x1050, r6, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1010, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "90ee9134889cdf814d8135604959894418bad2988026454582e94576e9f78c3638076dcf5c07f7026811f6995f0ffce86461136d0189207a425944f357ab68a1ee678fd97c1923caf5e990bf6890d644b9ecf8b8e6a2ba242ce0aaf2284ed7426408d366de35b512a55ff0e414ce11b09a8ac1fc03a60bb9f49dce96af547ec76ec5f123361b04a7ac33a32ea069f5bee74be6101d5fb2776ae109392ab3d47ac946ddf7185adb8887d010b8f8f1c08a99a76850fc3da6f536f3704b094f9d95fab9cb25c83f6d418e1404508f38e3c75d666277ec797e88c61f9722afffb8f795a1a4aa10e2c3a2a805da3c05f0621a6b55a43b572cae58378909335189870a6c9d2817989c78b7ce0b1a34c6c82870909e48aa236344d8cb9ee81735ae5afd3ffa7d8873a0928744984b6ea30b04bb484698c9fc7ae44fe025e26815d0cb38fd952eb17129f8f484a019d0a510fdb28bbfbafda5e815f6492c6cbb5d55e667c8c918d11af1c4854a27c7fc91b584f457501b1f7b0f0c7878d0a39a3042ba007d695caae9ae7e6a9feb48f221a4f87467a1282dcf3db53124825ea2a869fac10c0dd77bd9378d8ab7a50738853699dda52899182835f106cac4c2d1999721ae90249f2ead591d26c769d76f75b16ee0de43be5012cb6b15b7d421c259e8037cbfb5d28c2d32d342972d9e02c4a84a53601849f6e998c6c86c7b3d78c628dd7c129e368f6e9825a40fc3c8af1856daa091ac0aaa119b0d01ccca64c468440af16920e1f356edc596abb171fc190d83ac2dfdbced251b898d5c6f9ad35761a433d42ae2043e343f6417a209bf0f87a1d818168261fede37aadb84f1cc3e007b8ea11df34399846963777e8cb615e69afe229b6199f76037476e8f9db1f41eecbdfbc51f7826721175896e6903aa2c2a1f6291d75d330928c1c3e3de9f9d8946e6dbf67ba547f208aa1ab442c7327fadb3ae05c6bd1d945cba6a62972f865c78fde6798e784ddd479666bba8d7a0aa47bc385120a3d5b91311c4960087c3f478dca5cf67f46c167318485b02c12b4fa6ebc7a5c5f0ebe0aa3e24a166c9b5982214993d0f6251c4214d987c33356a86b376247aef33cd158d5b987f0ed1feb5ecd4595cd1d3e97edc9c16d11bf3fc4c0c6757cc98cd6cd4758cb643d320fcd205194ed1a8cdd0e8be319337ab9fc4b97b108979653a30ec8c76ed20d55b4997910d75412d1afe769506b5f5b9b79466700c2ce9c816a6de5c34016095c2656fe4daf99f24d43a89e77cdfbafd40bcf9da3503948e1cf30bc1f29a6cd67fd3756528b4914248872cfead61dcb383b09a3cd2a596f4208d5ce851d786709f1d18e7767dc7d6e0afe219a6e2325f29e50a51d04e01980a875955bf670955d9195babc52595fb09515423b2fc0c89212cbb68e07ecefd36312147989aa7fdab2b2611b3f99f209f28796b62e42bd9ebff4f75c83c3355379742cbeb115b4ecdcd8c35449ac4a99d8cea3b55c570ee84836d96ca1817ade39f55949470379375db00c8cb1d2a59c60040170db9554698c94625653197c8916696b02aacd0b071c8a1368eaebf08d4d255919b39b5cfedb2233723b980eb3fb50c7862d11aba21fc9e58d92c0ddd1e046c7508e6725cafd0e91b11d8b58d49f0c31644eb798d55a2612cae5fe698cc50326fd894a42be506754d7e3e36f24127bfd6da3152a9f2842b28ddef98d98ea4f6bf60d0643d8586b7170911de60cd40e62987367fe35347d2c74c956e79bf7c99cedf2ed10c0006447a0d56fdf32f137a15e796dbac26ab72a144d7fa74442939cc624cdc6e2f2ad9dabfb8bf5c3e338433d5c47c5b6048784c5b41caaba215dfd931a6ba33ee7814486d96ba677f56a0fbffecc5f8b278fc493c9a7f0b1afa126edcef73f9bec582ec9071e31a45a6aa7f3baf201efc30ec5abea241f9195687e349a7e0061af87c175b099ef2d5e960b12a1b4887cea39ef890808a53d5be92a88e33ec0eb76e0806b0a6c5db49f37af82c4bb9935881d6026ae380825e31aef4aa7c9719510f1d72b527c521c8b9dca85df96a00757c9882c3bf6c50f1b7bdc58ccfea0a3e58f43855c7b7af7f6c012bc1c16527a2f46a9210a935b39a562863084134c0a04c2107cbe1248a6cca3e8c694b0450e0756c6c2e9e99467a5c122776c34a5f5cc1e74447dacb1a01a1128aa3e9bd7c8b48114f57868ea00b214c2b150823a5406a99489a5ddad433fc6a9f413afc944c4923d96e0392c4b9d37953f80b75e7246ee0dcc80b97b63d3b42ab0883ec1f25e5d635e530928243be110d6366880c1d4ba6b496f2f778915c2173f5a4f5aed3a72dc0b11fb33b7fc024b6769b0acd0b3b396811a82e6ef32b522719c5c762eab737d324daff8bdb8a0a87b28191525d9fa73b3401ab12e8f5e2d8a17b2c09e2f246ac2174309af31e4b78e213c857b299b3bb3b43aaab06fd302097a6890c06dcb1ce6562a4d5b3ebe20911341e14f88c107c6ac6377ea45e6d6d4f82cf89620279d067b279f1da9f3a17210e77ea5655c3eaab6591da6d3932ec58c96d3ce388eac534dfb359bff861735a0826420343601b6036e75be1f24ad46295eb77ed1232e6de08d79951cdcb4acd1247fc9b91c431306cf6c1d833e960e9d4b79c92971024b3c27fdce07607a4f7e5f21c49febf96eda58cd0b5c7f2e7d1e0c1e854969701f5619d9a8e70355219afd7e426e8f09a566c8732911fbc24a23b93bc450785760290b4486906992e168dbf85276ca3c84407f5443286094536d3a08d8249f965de75fbc46870d82b7f828146015e09a1b5bf66068354cf75932b9b97fa5091443cc697806999a6be5384b5407b0ee361742a3deec82de40e55cbc87796ce8e7a5fea4996b0525317e9e79c209980742ef72dd342aab74897108b0eec67eed786aa17b682922bffbebc42d4ab95d7c03f8ceb8e33c6c1232234c02fc9376dd571c496ea82b20a56531696568bc40f1afdc7029344648f593496d262277207fef2cfc9b2701dea5a5f243333145e7adb57ff7edd807df201ab8eb5627e655b4e161d7c4598f102f308eff5860253eede325fd036d196f810778d1643242e4ac25e9de83141060a72b5301723b82a26e34d819a47f184abb1a2b203ace46bfea289f8d689380344936cacbfdfbed828fe9058d6ee8c2089e3ced0753055ee2e1fbbc168fae6c6a80a46119ef8a6d334b9a2ed6a348aabbcc0bf841ae69ff8b2e2083c74b61978d3b59790e61d25163d09c37c0afd328b922bf49215f07f13df2c95a228c7c761f5302aabd8e3c0861baa13ca54c3bc80c24b9765464fda8846a526a231c1421fa8cb345753d5275548e93f37fc158ee11f77a5d6e520b98d3de082b041f36de39ea67a430dbcb97d35f2a95761a31faa50d7b3299170169c493f0f36b3d89c78de655cb3b4f865c2c576af4c05d8278b3cd7559ddb6d731485d4bd3b366a879e6143dd89d413dfb6f27bf2ca94aa0974ef6b5c89e7b4b54f3a4a9710007627678c50a987a520f5e32a958f2e85a73f00f52b654d6ea73454702af3f2f6707cfd56dcfd7ea859573ddec97528499a8b0582ccac81a45a3eae58abbb33a1b29e9044ebd74c43a00e0b9c7b270f31b9e8a08218ec6a30749f6f10a3e73978cf65a263beab77145cf1de1d80e154092e4b1b306bc3564670dd10185fe6d961d52d5626809e1b1a86cae96ba81a51e01f8a7003b620001fcb6bf5e4c3492a8192c5e03437618c7306b939026bd8af83839e252b36b60551fa23a754bc9cc10ee4364aaa0f93f5fd3c05ee5d89cbfbc5e69e5e9c019a1de37e30d397373b4537878a31e190edebf46731832f839cc0ce7bce17f796d9afecfc85e6b4e54bbb7d04c8f4ce4f908fbcfc122f2b924a16ed81f41a6937de5ee92386503140b20c731d9941f4fd1b5ad370fb2233a389c428c707750ecd6a13c2cd88a1ff3d675e598aa1967837fcc4a45d856491a52c567b92374a41e69ddbf9280b0dad2573fe996abc2c33efc5ab49ee4cc86da1fbbd2705f0ef86328e20a7694b20fdd841494eeff4f425767c624fed4312c9bb4d500eec80e917e605b902b97f7dcc74e48e07f9985d259a46071d45e1a9ffa83f5428b31d580c29ca777df2199865970e00774ae4945556e28fe812803e526786f185cb64f8954175d945d8c44c93842bfcbc08054629d159eef20ad478bdd76f375ac568a9a88766d30cadf46f64b133ddb33c5e6dbe72d9e76ca579bbd85e3dac5f9caf19cb81792200d3995b6e3bc8fdee8af9d380c5ea93564fe54bc7e08db7e49aa8d618499bf6c8478581f7f0dec02eb06668b9eb573f26a1837a1cf108fb0962fe9001d4c1e4795aacc0af28b62dcca3fac39bea6e43fbee0b36a23d53f8a5d86bb258993c33537e42bdf26193f12ea40346cc83b0367afea729e972008ae4daf577c1d2f821bc8d9b9bbe85eeee03ac7cc4d4ee33495a10c51bf8f3831648f09a1a761205777bbdb4f24ce7e1b8238e568116b7a0ded46ed0361947ec182ec36615ff19ad2800c623999e3841e8c6b2218a79345c8f600fc230f4aed50b1c477809fd49d179b95e00b93b0602f0ca20a69de10a14dad9c5e6f7db3c61b76052628aa475782be18f4dce77741f4b9095e759285f77765e05c1f7e43a378ee38ce896d41ae2ce1286227d830225c43f6ecc8a660635905dfacab40493b0ad3cfcc75dff929b433bac87376067ad8500d157cde092647de08b8ad852f93fa3aec0bd63fa7a495866813f3c76544ac7163f1a5fb074f30fa44ea176607c25bbb9351a111436977204039fa76650d15a1585706dafbe979d7e42f12d41eadb6a803af7beab72ca2c71661d73416bf11d80051dcd093bbd4f65c885229348a509bd137ddcb3a5d848481f8fce0f5b913a0723b88b8c7c7bfc1643d9ed54eb894fd4469c38707eee5f49df8c8ea5d93ddc05b5a59ea44450efbe9b0700617b5a2aa3e878b2c6ab8191cdf35e4c8eea3cd90245e6b8e18604613e62cd9f36fd65a416f58d7d9b9d38bc4f2351557b1037f497e9d311672e09d5d8e6ffdf54f23a7f89a8187412cdda413d52692f66387064ea9b6a86d0d97907e8b56760959d130c22afea234e59b464517ae7f8131bf62d2da8943d29e50da0a74ccd071c040c2e62bf1533a94c6abc5629cf98663e3d536b1f9ed3fc6b75be13877dbc996f4cdabd1316724170a210f72b02a155f718a80d7bfe92a919b5c51b7d9cbfb1946497f5ecb87566456f11cda8857783263ad3adc05a4a6064dc5347f048784010e67615fd9a795e849d388ab1df977342d98cfc510b7027a3c7486f0ffb848128ef85cd9fcf1bb0a9bbccac738d54e742337eb8fa698e6a678a55009e2a77947a026a9d685ae6d18eaf042861fb6cd877e52b57377f07b2f82d99cc11544603501c533b0ff2d15b39a7c233d99f3be557e2049f3045fa7f26a7b407244a446bc7f0d1b64c250efb48045b973684ded5b5e9a4a20a091382c6d013691271cb324aaad9ba163e69580cb32026c9c9500942c84b9d2e497b39dfdcc8b621ded42c16ec7950337d9d6598aeb16a9bbfde2346f44cab14e0f604a5ee839c8103559a959bc669cadff80cf2721c475bb91314fb5c7ad70f4b68e95a5513606e1ee5f4a8e2f409c8d16f81f7d6e056e797afc9116afbfc866a4a37f6221c7a7cdf21824fad5ac7f30fb6e3f1d039af8d823cf07346708aea6dd9576ef821943195219d8d4bf19236d71d3443afd2758f6c39d325b50a"}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1050}, 0x1, 0x0, 0x0, 0x20000080}, 0x4c040) r7 = msgget$private(0x0, 0x3ac) msgrcv(r7, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgsnd(r7, &(0x7f0000000080)={0x2}, 0x8, 0x0) r8 = syz_io_uring_setup(0x2f90, &(0x7f00000002c0)={0x0, 0x4dd8, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r9 = epoll_create(0xaf2) epoll_pwait2(r9, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000080)={0xe000200f}) bind$packet(r3, &(0x7f0000000d00)={0x11, 0x0, r2, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) socket$packet(0x11, 0x3, 0x300) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 1.244908928s ago: executing program 4 (id=1052): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@nodiscard}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, '.'}}, {@smackfsdef={'smackfsdef', 0x3d, '[-]$*'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x581, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0x61, 0x1, 'client1\x00', 0x4, "a4c9e5c526211864", "5462b7827461aea90c91db1ed63339e700cb90063bbc9227f0ca81b96b13257b", 0x5, 0x6}) r2 = msgget$private(0x0, 0x3ac) r3 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) clock_gettime(0x2, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0xff, 0x0, 0x5, 0x116200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xc0}, r3, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r4, r5+10000000}}, 0x0) msgrcv(r2, 0x0, 0x0, 0x1, 0x1000) r6 = open(&(0x7f0000000280)='.\x00', 0x40000, 0x101) r7 = socket$inet_sctp(0x2, 0x1, 0x84) timer_create(0x3, &(0x7f0000000000)={0x0, 0x34, 0x4, @tid=r3}, &(0x7f00000000c0)) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f00000001c0)={0x8, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @loopback}}}, 0x108) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000140)=[{0x0, 0x1, {0x0, 0x1, 0x2}, {0x1, 0xff, 0x4}, 0x1}], 0x20) msgsnd(r2, &(0x7f0000000600)={0x1, "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"}, 0x1008, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f00000004c0)={0x8, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e1d, @empty}}}, 0x108) close_range(r6, 0xffffffffffffffff, 0x0) 879.549549ms ago: executing program 3 (id=1064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000d40)={0x7f, "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"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/32, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002a00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x0, 0xe, 0x0, &(0x7f00000006c0)="0400000000000000252bc89b6f5b", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 551.031648ms ago: executing program 0 (id=1073): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0xd, 0xc, 0x5f, 0x7fffffff, 0xb}) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40) read$usbmon(r2, &(0x7f0000007500)=""/4096, 0x1000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x7, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040805}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000100000000000000000000000000000071d2d71d59e7106249"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0xe, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x4d}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0xffff, 0xf5, &(0x7f0000000540)=""/245, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x4, 0xfffffffa, 0x80}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000680)=[r5], &(0x7f00000006c0)=[{0x0, 0x4, 0x6, 0x6}, {0x4, 0x2, 0x1, 0x7}, {0x1, 0x2, 0x6, 0x7}, {0x2, 0x4, 0x682a, 0x4}, {0x4, 0x4, 0x6, 0x1}, {0x2, 0x1, 0xb, 0x5}, {0x2, 0x7, 0x7, 0xb}, {0x4, 0x2, 0x9, 0x9}], 0x10, 0x400}, 0x94) readv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000100)=""/28, 0x1c}, {0x0}], 0x2) 483.557932ms ago: executing program 0 (id=1075): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x5, 0x690bb, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_config_ext={0x600000000, 0x56c324de}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) eventfd(0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 483.011532ms ago: executing program 0 (id=1077): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$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") mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x10, 0x1, 0x6, 0xc18, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x67, 0x0, 0x40, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@generic={0x83, 0x4, "e07e"}]}}}}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@loopback, @in6=@empty, 0x4e21, 0x4, 0x4e23, 0x2fd8, 0x2, 0x80, 0x80, 0x89, r2, r3}, {0x200, 0x9, 0x5, 0x3, 0x8, 0x5, 0xc9, 0x9}, {0x7, 0x10001, 0x8, 0x7}, 0x3, 0x6e6bba, 0x1, 0x1, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0x2b}, 0x0, @in=@multicast1, 0x0, 0x0, 0x1, 0xf, 0xb9, 0x3f, 0xf298}}, 0xe8) name_to_handle_at(r1, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x3f) socket$inet(0xa, 0x801, 0x84) rename(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)='./file3\x00') sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[], 0x308}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 437.165755ms ago: executing program 3 (id=1079): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 433.786985ms ago: executing program 1 (id=1080): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061107a000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pi6 \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r2, &(0x7f00000003c0)="8fc00cd1587a330e6ddc3b777de325c1ab22056f0cb9e1a0f4623f4dee4b4b1728d36bf878e0d9934d00e59863ee92af95fd79839a6a916d169960b6f779b7d433f0d7793d4358b47e8e21d0b507821b32a867422be4fd42f68f1c06f4c9e9f006ce41b0c5d5084a8eb43ab7329af588df30a7851eb217719f7cb7a190aa98ada69ba1dd9c7c403eb019ab618feafab8829cc12c7ebdfc4612e651b7400bc5baffab6984cb52c23aebb465b22ad4af965badf0d96634cab93e548a052dc4257d266fd29c0bbd7058219afd2c1a25ca454080bb840ddb84d9e594bd9a"}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x1, 0x5) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000100)={0x8, 0x3, 0x200, 0x0, 0x3, 0x1}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r3, r0, 0x0, r0}, 0x10) 417.255086ms ago: executing program 3 (id=1081): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xc81, 0x400, 0x43a1bd77, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 381.741848ms ago: executing program 0 (id=1082): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x1100, 0x2}], 0x37) 381.506348ms ago: executing program 3 (id=1083): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") brk(0x7) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xcf, &(0x7f0000000300)=""/207, 0x0, 0x21, '\x00', 0x0, @netfilter}, 0x94) (rerun: 32) 378.611388ms ago: executing program 1 (id=1084): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000740)="5e000d001b71ecab36c7f263c06bddc65b99fb63499dd5c8ef68ff53e24127f1a538594685e48943f26ed6e8d84b02464cc13dd7cc64d3a5a334a763ca", 0x3d, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (fail_nth: 6) 378.366208ms ago: executing program 2 (id=1085): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) r1 = epoll_create1(0x80000) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x2000007, 0x0, 0x0, 0x83}) r2 = syz_open_pts(r0, 0x400) r3 = dup3(r2, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x80000001}) ioctl$TCSETS(r3, 0x5402, &(0x7f00000000c0)={0x10, 0x75, 0x200, 0xfffffc01, 0xe, "0f1a91080d09a83d179ba1507ff85a111d5a52"}) 332.364571ms ago: executing program 0 (id=1086): gettid() timer_create(0x1, 0x0, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) semctl$GETZCNT(0x0, 0x4, 0xf, 0x0) 148.059892ms ago: executing program 1 (id=1087): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x5, 0x690bb, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_config_ext={0x600000000, 0x56c324de}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) eventfd(0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 132.381293ms ago: executing program 0 (id=1088): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="7bc12ec92e7f1996347188025d8b895c25e170a3262ba64d1cea6bba16", 0x1d}], 0x1) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) acct(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_delete(0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2112c92, &(0x7f00000004c0)=ANY=[], 0x81, 0xa63, &(0x7f0000000840)="$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") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000004740)=""/4096, 0x1000}], 0x0, 0x1000004f}, 0x20) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r1 = semget$private(0x0, 0x6, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x7, 0x7fff, 0x0, 'queue0\x00', 0xa}) semtimedop(r1, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$GETZCNT(r1, 0x4, 0xf, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1) 132.080332ms ago: executing program 3 (id=1089): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea00000007110930000000000"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0xc, 0x4, 0x56, 0x5, 0x0, 0x2, 0xa, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff, 0x5, @perf_bp={&(0x7f00000001c0), 0x3}, 0x120a, 0x1, 0x0, 0x0, 0x5, 0xffff9417, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2, 0xffffffffffffffff}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)=r3}, 0x20) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x18, 0x2, 0x2, 0x0, 0x40, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x5, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x1d, 0xfffffffffffffd04, &(0x7f0000000000)="e02742e8680d85ff9782762f86dd3f8a45e2318273ad90cb7ab9d0f477f5b43ac4ed2618bce6808e000000435024e1ff76b534e444fea2834c6c510d6aeb9ab347165756607916af436c42110bb30983c62b09ef27a9d6ff4c24f5d2cfc1067fb20400000044e98c99c307f145fcda96609d6a0a0cd940993f0a0075205286959f60", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1b) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x270}, 0x10c103, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008008}, 0x4800) 131.678872ms ago: executing program 4 (id=1090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000d40)={0x7f, "c2cc8352ee644f972817e1ce0e0487e41238910f1a4c785753e42ca60c31662a70bdf5e19e2500cdfb19c981551c5f2491ef37b87bf2c4c85c36d02224daf66bd4ff5ee6018393aef969c47d7bc5f2266ded78aa73f4c2ed5cbd33d8688441365c06657d4a57887b8641dc6add757d6ea81c83337ef01df3ef1d8848a1657110786af81bfdc62a298ef967d89da9c869392ac4db60aeb6bcbebb6bb74d57d844c812667e642057e341f333b9c465332ff8f53f2272f8f77d873347a03bb578bfb8c64b55d577e00c17e76f8879bb2f6fd358b76e6bf1119b28a9df87adac668ddc3001ac88e0dc4ca6bd76e990450f3ff5f6237b61c29a2b057ed09b3c840a46781a90e6c20b673019dd3f4c53a2ec02ba38a093f863a2d66941ca2f9810496a888d10d7d6b645c94a1dddb253d7a611ed9d8903e928cb4685c90cdf4afa82ce91398ac613624aeed5b4e61a62ee804759076c4c9bdaf642e81952ceaf8e66de22b17c6e07ab712dbf488ef7755b931564bea01e1ebd2649f989570530276b77decc525870e94146cf2062bb1acc13300e6929894e08fb61951bb9a02829187768e9f511cdc6a8732722ed84be042fc17e0d1a37cb0ef1fce7dac85707c61c9230d83833b0ba0609cd11cde2dc737e8d978b2e98fc76e7e7e259343d949bc1acd24b574bf0a56b5dd2163a8e9b7fca8eda837be77302837c65640aeb6044a39b"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/32, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002a00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x0, 0xe, 0x0, &(0x7f00000006c0)="0400000000000000252bc89b6f5b", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 97.913004ms ago: executing program 3 (id=1091): unshare(0x22020600) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r1, 0x407, 0x176) vmsplice(r2, &(0x7f0000000480), 0x0, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 97.486794ms ago: executing program 1 (id=1092): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200ac"], 0x20}}, 0x0) 54.446997ms ago: executing program 1 (id=1093): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020400) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc4}) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) readv(r3, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={[{@noblock_validity}, {@errors_continue}, {@sysvgroups}, {@data_journal}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@noinit_itable}, {@norecovery}], [{@measure}]}, 0x2, 0x5cc, &(0x7f0000000b80)="$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") r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000019240)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {0x10}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x5c0, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8, 0x1}, {0x9, 0x2, 0x2}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200410d1}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@bridge_delneigh={0x38, 0x1d, 0x100, 0x70bd2a, 0x65dfdbff, {0x7, 0x0, 0x0, r7, 0x10, 0x6, 0xb}, [@NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 0s ago: executing program 1 (id=1094): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000040)={0x1, '('}, 0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @in={0x2, 0x4e22, @empty}, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6}, 0xf92, 0x0, 0x0, 0x0, 0xfffb, 0x0, 0x6, 0x4, 0x1}) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x3fffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=ANY=[@ANYBLOB="300000006800010003001000fcdbdf2500000000000000000c000200010000001500000004000400060003"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) futex(&(0x7f000000cffc), 0x4, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) pread64(0xffffffffffffffff, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaedf, 0x80, 0x2, 0x1f5}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x12, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)={0x4000, 0xa4, 0x2}, &(0x7f0000000100)='./file1\x00', 0x18, 0x0, 0x12345, {0x0, r5}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', 0x0, 0x4000) kernel console output (not intermixed with test programs): avc: denied { search } for pid=3235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.955811][ T29] audit: type=1400 audit(1770490485.371:65): avc: denied { search } for pid=3235 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.979234][ T29] audit: type=1400 audit(1770490485.371:66): avc: denied { read open } for pid=3236 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 26.638798][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 26.638815][ T29] audit: type=1400 audit(1770490492.121:70): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.667997][ T29] audit: type=1400 audit(1770490492.151:71): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.668713][ T3300] cgroup: Unknown subsys name 'net' [ 26.695826][ T29] audit: type=1400 audit(1770490492.181:72): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.810479][ T3300] cgroup: Unknown subsys name 'cpuset' [ 26.816601][ T3300] cgroup: Unknown subsys name 'rlimit' [ 26.937459][ T29] audit: type=1400 audit(1770490492.421:73): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.962109][ T29] audit: type=1400 audit(1770490492.421:74): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.975321][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.982602][ T29] audit: type=1400 audit(1770490492.421:75): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.011647][ T29] audit: type=1400 audit(1770490492.421:76): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.032177][ T29] audit: type=1400 audit(1770490492.431:77): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.035409][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.057068][ T29] audit: type=1400 audit(1770490492.431:78): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.094507][ T29] audit: type=1400 audit(1770490492.451:79): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.128205][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 28.204112][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.211205][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.218530][ T3318] bridge_slave_0: entered allmulticast mode [ 28.225156][ T3318] bridge_slave_0: entered promiscuous mode [ 28.233873][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.241016][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.248348][ T3318] bridge_slave_1: entered allmulticast mode [ 28.255048][ T3318] bridge_slave_1: entered promiscuous mode [ 28.277946][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.295026][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.315420][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.354819][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 28.368217][ T3318] team0: Port device team_slave_0 added [ 28.387044][ T3318] team0: Port device team_slave_1 added [ 28.394598][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 28.435589][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.442605][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.468709][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.487897][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.495004][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.502207][ T3314] bridge_slave_0: entered allmulticast mode [ 28.508551][ T3314] bridge_slave_0: entered promiscuous mode [ 28.515279][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.522284][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.548285][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.563303][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 28.578131][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.585493][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.592638][ T3314] bridge_slave_1: entered allmulticast mode [ 28.598838][ T3314] bridge_slave_1: entered promiscuous mode [ 28.627120][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.641109][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.652485][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.659622][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.666790][ T3311] bridge_slave_0: entered allmulticast mode [ 28.673294][ T3311] bridge_slave_0: entered promiscuous mode [ 28.695172][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.702271][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.709525][ T3311] bridge_slave_1: entered allmulticast mode [ 28.715927][ T3311] bridge_slave_1: entered promiscuous mode [ 28.750937][ T3318] hsr_slave_0: entered promiscuous mode [ 28.756916][ T3318] hsr_slave_1: entered promiscuous mode [ 28.763641][ T3314] team0: Port device team_slave_0 added [ 28.771771][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.778832][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.786039][ T3312] bridge_slave_0: entered allmulticast mode [ 28.792792][ T3312] bridge_slave_0: entered promiscuous mode [ 28.800635][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.809797][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.816865][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.824117][ T3312] bridge_slave_1: entered allmulticast mode [ 28.830486][ T3312] bridge_slave_1: entered promiscuous mode [ 28.841773][ T3314] team0: Port device team_slave_1 added [ 28.855975][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.866106][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.890262][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.907354][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.914576][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.921691][ T3321] bridge_slave_0: entered allmulticast mode [ 28.928173][ T3321] bridge_slave_0: entered promiscuous mode [ 28.938776][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.945953][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.953103][ T3321] bridge_slave_1: entered allmulticast mode [ 28.959306][ T3321] bridge_slave_1: entered promiscuous mode [ 28.977842][ T3311] team0: Port device team_slave_0 added [ 28.987831][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.994911][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.020912][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.036598][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.043594][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.069512][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.081604][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.093957][ T3311] team0: Port device team_slave_1 added [ 29.102912][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.115318][ T3312] team0: Port device team_slave_0 added [ 29.138613][ T3312] team0: Port device team_slave_1 added [ 29.151979][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.159168][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.185343][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.216842][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.223829][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.249852][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.266613][ T3321] team0: Port device team_slave_0 added [ 29.272583][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.279538][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.305592][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.330543][ T3321] team0: Port device team_slave_1 added [ 29.340845][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.347799][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.374435][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.398939][ T3314] hsr_slave_0: entered promiscuous mode [ 29.404970][ T3314] hsr_slave_1: entered promiscuous mode [ 29.411087][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 29.416809][ T3314] Cannot create hsr debugfs directory [ 29.424671][ T3311] hsr_slave_0: entered promiscuous mode [ 29.430671][ T3311] hsr_slave_1: entered promiscuous mode [ 29.436548][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 29.442312][ T3311] Cannot create hsr debugfs directory [ 29.456329][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.463343][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.489433][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.500911][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.508081][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.534161][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.606311][ T3312] hsr_slave_0: entered promiscuous mode [ 29.612319][ T3312] hsr_slave_1: entered promiscuous mode [ 29.618148][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 29.623921][ T3312] Cannot create hsr debugfs directory [ 29.631651][ T3321] hsr_slave_0: entered promiscuous mode [ 29.637763][ T3321] hsr_slave_1: entered promiscuous mode [ 29.643836][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 29.649648][ T3321] Cannot create hsr debugfs directory [ 29.671583][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.696602][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.709601][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.738172][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.825838][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.835421][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.852810][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.861567][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.878099][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.891392][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.900422][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.909296][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.948324][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.957587][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.966734][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.975792][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.993858][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.032715][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.049058][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.058524][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.067582][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.076277][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.092382][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.099501][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.116150][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.123351][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.150598][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.174422][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.183694][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.195099][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.211082][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.219727][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.226819][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.242537][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.249646][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.274845][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.284169][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.296035][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.303231][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.320637][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.327778][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.337789][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.345078][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.354471][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.361682][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.379909][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.428747][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.468629][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.502638][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.509827][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.539508][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.553392][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.560484][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.589345][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.603288][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.627908][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.726216][ T3312] veth0_vlan: entered promiscuous mode [ 30.760277][ T3312] veth1_vlan: entered promiscuous mode [ 30.773883][ T3318] veth0_vlan: entered promiscuous mode [ 30.802906][ T3311] veth0_vlan: entered promiscuous mode [ 30.812165][ T3318] veth1_vlan: entered promiscuous mode [ 30.825379][ T3311] veth1_vlan: entered promiscuous mode [ 30.832881][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.841482][ T3312] veth0_macvtap: entered promiscuous mode [ 30.855988][ T3312] veth1_macvtap: entered promiscuous mode [ 30.863327][ T3314] veth0_vlan: entered promiscuous mode [ 30.879892][ T3318] veth0_macvtap: entered promiscuous mode [ 30.886914][ T3314] veth1_vlan: entered promiscuous mode [ 30.894675][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.903463][ T3318] veth1_macvtap: entered promiscuous mode [ 30.913813][ T3311] veth0_macvtap: entered promiscuous mode [ 30.934380][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.946090][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.954999][ T3311] veth1_macvtap: entered promiscuous mode [ 30.967270][ T3314] veth0_macvtap: entered promiscuous mode [ 30.977483][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.988567][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.014195][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.022173][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.043777][ T3314] veth1_macvtap: entered promiscuous mode [ 31.054149][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.080441][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.090857][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.110989][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.124877][ T3321] veth0_vlan: entered promiscuous mode [ 31.134333][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.151657][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.168010][ T3321] veth1_vlan: entered promiscuous mode [ 31.195169][ T3321] veth0_macvtap: entered promiscuous mode [ 31.202707][ T3321] veth1_macvtap: entered promiscuous mode [ 31.214097][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.239343][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.249737][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.262361][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.324669][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.361025][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.448261][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.507756][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.579616][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.646906][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.686154][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 31.686168][ T29] audit: type=1400 audit(1770490497.171:114): avc: denied { write } for pid=3512 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 31.732210][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.777529][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.801085][ T3513] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12'. [ 31.812751][ T3515] loop0: detected capacity change from 0 to 512 [ 31.836217][ T3515] EXT4-fs: Ignoring removed orlov option [ 31.842145][ T3515] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.856404][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.870418][ T29] audit: type=1400 audit(1770490497.231:115): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.894651][ T29] audit: type=1400 audit(1770490497.231:116): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.918848][ T29] audit: type=1400 audit(1770490497.231:117): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.944477][ T29] audit: type=1400 audit(1770490497.261:118): avc: denied { create } for pid=3512 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.964402][ T29] audit: type=1400 audit(1770490497.291:119): avc: denied { write } for pid=3512 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.984462][ T29] audit: type=1400 audit(1770490497.291:120): avc: denied { nlmsg_write } for pid=3512 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.004814][ T29] audit: type=1400 audit(1770490497.291:121): avc: denied { nlmsg_read } for pid=3512 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.025238][ T29] audit: type=1400 audit(1770490497.311:122): avc: denied { open } for pid=3516 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.044556][ T29] audit: type=1400 audit(1770490497.311:123): avc: denied { kernel } for pid=3516 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.102865][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.172735][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.187980][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.197669][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.208050][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.228996][ T3523] loop4: detected capacity change from 0 to 1024 [ 32.244514][ T3527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.264148][ T3523] ======================================================= [ 32.264148][ T3523] WARNING: The mand mount option has been deprecated and [ 32.264148][ T3523] and is ignored by this kernel. Remove the mand [ 32.264148][ T3523] option from the mount to silence this warning. [ 32.264148][ T3523] ======================================================= [ 32.309933][ T3527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.348503][ T3531] Illegal XDP return value 2262280206 on prog (id 4) dev syz_tun, expect packet loss! [ 32.360032][ T3523] EXT4-fs: Ignoring removed orlov option [ 32.365740][ T3523] EXT4-fs: Ignoring removed bh option [ 32.411993][ T3515] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.13: corrupted in-inode xattr: e_value size too large [ 32.457646][ T3515] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.13: couldn't read orphan inode 15 (err -117) [ 32.476346][ T3523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.539481][ T3515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.740696][ T3515] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.13: Logical block already allocated [ 32.773102][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.815779][ T3543] loop2: detected capacity change from 0 to 512 [ 32.864457][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.928635][ T3543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.958311][ T3547] loop1: detected capacity change from 0 to 512 [ 32.990067][ T3543] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.031898][ T3547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.076024][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.121281][ T3547] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.25'. [ 33.343765][ T3567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.396720][ T3567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.497272][ T3574] loop3: detected capacity change from 0 to 512 [ 33.548040][ T3574] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 33.591893][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.117164][ T3578] ------------[ cut here ]------------ [ 34.122684][ T3578] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0) [ 34.140942][ T3578] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.3.30/3578 [ 34.151917][ T3578] Modules linked in: [ 34.155955][ T3578] CPU: 1 UID: 0 PID: 3578 Comm: syz.3.30 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.165683][ T3578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 34.175884][ T3578] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 34.182187][ T3578] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 34.202024][ T3578] RSP: 0018:ffffc90001a43388 EFLAGS: 00010246 [ 34.208193][ T3578] RAX: ffff88811b946d90 RBX: 0000000000000000 RCX: 0000000004000000 [ 34.216225][ T3578] RDX: ffffffff867f0c86 RSI: ffffffff867c5870 RDI: ffffffff86fb99b0 [ 34.224239][ T3578] RBP: ffff88811bd49ae0 R08: 0000000000000000 R09: 0000000004000000 [ 34.232242][ T3578] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811bd49aa0 [ 34.240248][ T3578] R13: 0000000000000000 R14: ffff88811bd49aec R15: ffff88811bd49ad8 [ 34.248231][ T3578] FS: 00007fe0e2f756c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 34.257247][ T3578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.263854][ T3578] CR2: 000000110c2ee047 CR3: 000000011bc46000 CR4: 00000000003506f0 [ 34.271884][ T3578] Call Trace: [ 34.275185][ T3578] [ 34.278161][ T3578] reg_set_min_max+0x21c/0x260 [ 34.283088][ T3578] check_cond_jmp_op+0x1367/0x1a80 [ 34.288235][ T3578] do_check+0x440c/0x9060 [ 34.292647][ T3578] do_check_common+0xd0f/0x1630 [ 34.297580][ T3578] bpf_check+0x2f6d/0xc7e0 [ 34.302090][ T3578] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 34.308144][ T3578] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 34.313864][ T3578] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 34.319931][ T3578] ? __rcu_read_unlock+0x4e/0x70 [ 34.324891][ T3578] ? __perf_event_task_sched_in+0xa65/0xad0 [ 34.330903][ T3578] ? __perf_event_task_sched_out+0x192/0x710 [ 34.336940][ T3578] ? __rcu_read_unlock+0x4e/0x70 [ 34.341961][ T3578] ? __perf_event_task_sched_in+0xa65/0xad0 [ 34.347897][ T3578] ? pcpu_next_fit_region+0x198/0x380 [ 34.353357][ T3578] ? __perf_event_task_sched_out+0x192/0x710 [ 34.359403][ T3578] ? __schedule+0x82d/0xc90 [ 34.363970][ T3578] ? pcpu_alloc_noprof+0xb08/0x1010 [ 34.369332][ T3578] ? should_fail_ex+0x30/0x280 [ 34.374213][ T3578] ? __kmalloc_noprof+0x2a3/0x580 [ 34.379388][ T3578] ? security_bpf_prog_load+0x60/0x140 [ 34.384994][ T3578] ? selinux_bpf_prog_load+0xac/0xd0 [ 34.390398][ T3578] ? security_bpf_prog_load+0x9e/0x140 [ 34.395966][ T3578] bpf_prog_load+0xf76/0x1140 [ 34.400922][ T3578] ? security_bpf+0x2b/0x90 [ 34.405455][ T3578] __sys_bpf+0x469/0x7b0 [ 34.409940][ T3578] __x64_sys_bpf+0x41/0x50 [ 34.414457][ T3578] x64_sys_call+0x28e1/0x3000 [ 34.419217][ T3578] do_syscall_64+0xc0/0x2a0 [ 34.423851][ T3578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.429877][ T3578] RIP: 0033:0x7fe0e455aeb9 [ 34.434331][ T3578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.454123][ T3578] RSP: 002b:00007fe0e2f75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 34.462604][ T3578] RAX: ffffffffffffffda RBX: 00007fe0e47d6180 RCX: 00007fe0e455aeb9 [ 34.470724][ T3578] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 34.478891][ T3578] RBP: 00007fe0e45c8c1f R08: 0000000000000000 R09: 0000000000000000 [ 34.487294][ T3578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.495451][ T3578] R13: 00007fe0e47d6218 R14: 00007fe0e47d6180 R15: 00007ffeeb189708 [ 34.503526][ T3578] [ 34.506559][ T3578] ---[ end trace 0000000000000000 ]--- [ 34.591281][ T3578] syz.3.30 (3578) used greatest stack depth: 10008 bytes left [ 34.928961][ T3592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.982415][ T3592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.111937][ T3595] usb usb8: usbfs: process 3595 (syz.2.34) did not claim interface 0 before use [ 35.201084][ T3599] loop2: detected capacity change from 0 to 512 [ 35.212167][ T3599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.228896][ T3599] EXT4-fs (loop2): shut down requested (1) [ 35.235677][ T3599] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 35.247282][ T3599] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 35.278291][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.530829][ T3611] usb usb8: usbfs: process 3611 (syz.2.45) did not claim interface 0 before use [ 35.576616][ T3618] loop4: detected capacity change from 0 to 256 [ 35.730966][ T3623] loop1: detected capacity change from 0 to 2048 [ 35.742416][ T3625] loop0: detected capacity change from 0 to 512 [ 35.749201][ T3625] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 35.759655][ T3623] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 35.860337][ T3604] IPVS: starting estimator thread 0... [ 35.911827][ T3633] syz.3.50 uses obsolete (PF_INET,SOCK_PACKET) [ 36.136657][ T3629] IPVS: using max 2784 ests per chain, 139200 per kthread [ 36.387806][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.395032][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.446846][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.459665][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.500761][ T3644] syzkaller0: entered promiscuous mode [ 36.506298][ T3644] syzkaller0: entered allmulticast mode [ 36.515832][ T31] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.527014][ T31] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.537418][ T31] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.548545][ T31] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.636330][ T3651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 36.643699][ T3651] IPv6: NLM_F_CREATE should be set when creating new route [ 36.698114][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 36.698131][ T29] audit: type=1400 audit(1770490502.181:183): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.750522][ T3656] loop0: detected capacity change from 0 to 512 [ 36.768244][ T29] audit: type=1400 audit(1770490502.251:184): avc: denied { read write } for pid=3658 comm="syz.4.58" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.791715][ T29] audit: type=1400 audit(1770490502.251:185): avc: denied { open } for pid=3658 comm="syz.4.58" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.820476][ T3656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.834037][ T29] audit: type=1400 audit(1770490502.251:186): avc: denied { ioctl } for pid=3658 comm="syz.4.58" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.860254][ T3656] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.57'. [ 36.866035][ C1] hrtimer: interrupt took 53618 ns [ 36.907781][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.498296][ T3611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 38.531963][ T29] audit: type=1400 audit(1770490504.021:187): avc: denied { create } for pid=3678 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.599633][ T3679] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.617734][ T29] audit: type=1400 audit(1770490504.051:188): avc: denied { create } for pid=3678 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 38.637295][ T29] audit: type=1400 audit(1770490504.081:189): avc: denied { tracepoint } for pid=3678 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.656915][ T29] audit: type=1400 audit(1770490504.081:190): avc: denied { perfmon } for pid=3678 comm="syz.2.63" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.677561][ T29] audit: type=1400 audit(1770490504.081:191): avc: denied { bpf } for pid=3678 comm="syz.2.63" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.707992][ T3691] netlink: 44 bytes leftover after parsing attributes in process `syz.4.68'. [ 38.744937][ T3679] netlink: 'syz.2.63': attribute type 10 has an invalid length. [ 38.767046][ T3699] loop4: detected capacity change from 0 to 512 [ 38.774128][ T3698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 38.800010][ T29] audit: type=1400 audit(1770490504.231:192): avc: denied { map } for pid=3688 comm="syz.1.67" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.829637][ T3699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.862189][ T3703] netlink: 'syz.3.73': attribute type 10 has an invalid length. [ 38.898354][ T3703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.911685][ T3703] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 38.921601][ T3709] netlink: 128 bytes leftover after parsing attributes in process `syz.0.74'. [ 38.930754][ T3709] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 38.950026][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.960272][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.971425][ T3712] bond0: (slave batadv0): Releasing backup interface [ 38.982687][ T3699] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.71'. [ 38.994466][ T3711] tipc: Started in network mode [ 38.999628][ T3711] tipc: Node identity 4a63c2aea7a5, cluster identity 4711 [ 39.007228][ T3711] tipc: Enabled bearer , priority 0 [ 39.014817][ T3711] syzkaller0: entered promiscuous mode [ 39.020564][ T3711] syzkaller0: entered allmulticast mode [ 39.033774][ T3711] tipc: Resetting bearer [ 39.041011][ T3710] tipc: Resetting bearer [ 39.051796][ T3710] tipc: Disabling bearer [ 39.068501][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.162776][ T3727] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.170180][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.218455][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.228019][ T3727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.260308][ T3729] netlink: 128 bytes leftover after parsing attributes in process `syz.2.81'. [ 39.269422][ T31] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.279531][ T31] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.294043][ T31] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.310190][ T3733] netlink: 44 bytes leftover after parsing attributes in process `syz.2.82'. [ 39.323672][ T31] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.540333][ T3750] Zero length message leads to an empty skb [ 39.550738][ T3750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.559401][ T3750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.672541][ T3756] loop1: detected capacity change from 0 to 1024 [ 39.695526][ T3756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.735784][ T3756] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 39.759710][ T3756] System zones: 0-1, 3-36 [ 39.771214][ T3756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.799643][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.812795][ T3760] netlink: 128 bytes leftover after parsing attributes in process `syz.2.91'. [ 39.821795][ T3760] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 39.972747][ T3769] syz_tun: entered allmulticast mode [ 40.063744][ T3775] loop2: detected capacity change from 0 to 8192 [ 40.151730][ T3785] loop4: detected capacity change from 0 to 1024 [ 40.161597][ T3785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.169659][ T3785] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 40.177960][ T3785] System zones: 0-1, 3-36 [ 40.183462][ T3785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.207335][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.239321][ T3789] tipc: Started in network mode [ 40.244409][ T3789] tipc: Node identity 9a5c9d34f6f8, cluster identity 4711 [ 40.251635][ T3789] tipc: Enabled bearer , priority 0 [ 40.258760][ T3789] syzkaller0: entered promiscuous mode [ 40.264376][ T3789] syzkaller0: entered allmulticast mode [ 40.273830][ T3789] tipc: Resetting bearer [ 40.280562][ T3788] tipc: Resetting bearer [ 40.287413][ T3788] tipc: Disabling bearer [ 40.314529][ T3792] bridge_slave_0 (unregistering): left allmulticast mode [ 40.322896][ T3792] bridge_slave_0 (unregistering): left promiscuous mode [ 40.330629][ T3792] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.028463][ T3816] loop0: detected capacity change from 0 to 1024 [ 41.044337][ T3816] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.062324][ T3816] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 41.070545][ T3816] System zones: 0-1, 3-36 [ 41.075836][ T3816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.121364][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.453900][ T3838] netlink: 'syz.3.122': attribute type 10 has an invalid length. [ 41.616506][ T3848] syz_tun: entered allmulticast mode [ 41.699062][ T3852] syzkaller0: entered promiscuous mode [ 41.704695][ T3852] syzkaller0: entered allmulticast mode [ 41.728990][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 41.729079][ T29] audit: type=1400 audit(1770490507.211:231): avc: denied { cpu } for pid=3851 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 41.784290][ T3856] netlink: 'syz.4.129': attribute type 11 has an invalid length. [ 41.792135][ T3856] netlink: 168 bytes leftover after parsing attributes in process `syz.4.129'. [ 41.978712][ T3873] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 41.985354][ T3873] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 41.992856][ T3873] vhci_hcd vhci_hcd.0: Device attached [ 42.001298][ T3874] vhci_hcd: connection closed [ 42.001509][ T31] vhci_hcd vhci_hcd.1: stop threads [ 42.011520][ T31] vhci_hcd vhci_hcd.1: release socket [ 42.016934][ T31] vhci_hcd vhci_hcd.1: disconnect device [ 42.051564][ T3880] loop0: detected capacity change from 0 to 512 [ 42.052899][ T29] audit: type=1400 audit(1770490507.541:232): avc: denied { create } for pid=3878 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 42.061936][ T3880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.090437][ T29] audit: type=1400 audit(1770490507.581:233): avc: denied { write } for pid=3878 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 42.129018][ T29] audit: type=1400 audit(1770490507.581:234): avc: denied { ioctl } for pid=3878 comm="syz.3.139" path="socket:[6029]" dev="sockfs" ino=6029 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 42.134575][ T3880] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.153713][ T29] audit: type=1404 audit(1770490507.581:235): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 42.177743][ T29] audit: type=1400 audit(1770490507.601:236): avc: denied { ioctl } for pid=3878 comm="syz.3.139" path="socket:[6172]" dev="sockfs" ino=6172 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 42.202293][ T29] audit: type=1400 audit(1770490507.611:237): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 42.227104][ T29] audit: type=1400 audit(1770490507.621:238): avc: denied { mount } for pid=3877 comm="syz.0.138" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0 [ 42.248708][ T29] audit: type=1400 audit(1770490507.701:239): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 42.273380][ T29] audit: type=1400 audit(1770490507.701:240): avc: denied { create } for pid=3886 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 42.305761][ T3880] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.138'. [ 42.449976][ T3915] netlink: 168 bytes leftover after parsing attributes in process `syz.2.154'. [ 42.575842][ T3940] netlink: 168 bytes leftover after parsing attributes in process `syz.1.166'. [ 42.950183][ T3982] netlink: 168 bytes leftover after parsing attributes in process `syz.1.185'. [ 43.187259][ T4004] netlink: 168 bytes leftover after parsing attributes in process `syz.1.196'. [ 43.255606][ T4008] netlink: 'syz.0.198': attribute type 11 has an invalid length. [ 43.263425][ T4008] netlink: 168 bytes leftover after parsing attributes in process `syz.0.198'. [ 43.460049][ T4036] netlink: 168 bytes leftover after parsing attributes in process `syz.4.210'. [ 43.524942][ T4045] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 43.562277][ T4043] syzkaller0: entered promiscuous mode [ 43.567856][ T4043] syzkaller0: entered allmulticast mode [ 43.696979][ T4059] syzkaller0: entered promiscuous mode [ 43.702589][ T4059] syzkaller0: entered allmulticast mode [ 43.789529][ T4064] syzkaller0: entered promiscuous mode [ 43.795175][ T4064] syzkaller0: entered allmulticast mode [ 43.864217][ T4069] netlink: 'syz.0.226': attribute type 10 has an invalid length. [ 43.922542][ T4080] netlink: 168 bytes leftover after parsing attributes in process `syz.4.230'. [ 43.932601][ T4078] netlink: 'syz.2.227': attribute type 10 has an invalid length. [ 43.968615][ T4078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.980513][ T4078] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 43.989252][ T4091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.996760][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.019474][ T4091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.026938][ T4091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.058158][ T4091] bond0: (slave batadv0): Releasing backup interface [ 44.084772][ T4099] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 44.084772][ T4099] The task syz.4.237 (4099) triggered the difference, watch for misbehavior. [ 44.301489][ T4112] syzkaller0: entered promiscuous mode [ 44.307134][ T4112] syzkaller0: entered allmulticast mode [ 44.330056][ T4116] netlink: 'syz.1.246': attribute type 11 has an invalid length. [ 44.338175][ T4116] netlink: 168 bytes leftover after parsing attributes in process `syz.1.246'. [ 44.692407][ T4140] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 44.787340][ T4146] netlink: 'syz.2.258': attribute type 10 has an invalid length. [ 44.800225][ T4148] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 44.825945][ T4152] netlink: 'syz.0.261': attribute type 11 has an invalid length. [ 44.833881][ T4152] netlink: 168 bytes leftover after parsing attributes in process `syz.0.261'. [ 45.379620][ T4199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4199 comm=syz.3.282 [ 45.680297][ T4225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4225 comm=syz.3.294 [ 45.782187][ T4239] syzkaller0: entered promiscuous mode [ 45.787273][ T4243] netlink: 'syz.0.303': attribute type 10 has an invalid length. [ 45.787735][ T4239] syzkaller0: entered allmulticast mode [ 46.062810][ T4294] netlink: 'syz.2.327': attribute type 11 has an invalid length. [ 46.245602][ T4319] netlink: 'syz.2.338': attribute type 11 has an invalid length. [ 46.471845][ T4346] syzkaller0: entered promiscuous mode [ 46.477381][ T4346] syzkaller0: entered allmulticast mode [ 46.762444][ T29] kauditd_printk_skb: 931 callbacks suppressed [ 46.762462][ T29] audit: type=1400 audit(1770490512.251:1172): avc: denied { prog_load } for pid=4359 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 46.803394][ T29] audit: type=1400 audit(1770490512.281:1173): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.842279][ T29] audit: type=1400 audit(1770490512.331:1174): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.881553][ T29] audit: type=1400 audit(1770490512.371:1175): avc: denied { read write } for pid=4364 comm="syz.4.358" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.918081][ T29] audit: type=1400 audit(1770490512.401:1176): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.942771][ T29] audit: type=1400 audit(1770490512.411:1177): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.967062][ T29] audit: type=1400 audit(1770490512.431:1178): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 47.002757][ T29] audit: type=1400 audit(1770490512.491:1179): avc: denied { execmem } for pid=4368 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 47.050012][ T29] audit: type=1400 audit(1770490512.501:1180): avc: denied { prog_load } for pid=4370 comm="syz.4.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 47.069159][ T29] audit: type=1400 audit(1770490512.511:1181): avc: denied { create } for pid=4368 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 47.144736][ T4387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.152829][ T4387] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 47.166859][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.174349][ T4387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.182347][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.189872][ T4387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.210487][ T4387] bond0: (slave batadv0): Releasing backup interface [ 47.300790][ T4403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.309143][ T4403] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 47.323606][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.331039][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.351313][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.358792][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.370425][ T4403] bond0: (slave batadv0): Releasing backup interface [ 47.385882][ T4407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4407 comm=syz.2.378 [ 47.765520][ T4435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4435 comm=syz.4.390 [ 48.155480][ T4463] __nla_validate_parse: 14 callbacks suppressed [ 48.155496][ T4463] netlink: 168 bytes leftover after parsing attributes in process `syz.4.399'. [ 48.352953][ T4479] netlink: 168 bytes leftover after parsing attributes in process `syz.3.406'. [ 48.603445][ T4509] netlink: 168 bytes leftover after parsing attributes in process `syz.2.419'. [ 48.653112][ T4520] netlink: 168 bytes leftover after parsing attributes in process `syz.4.422'. [ 49.067801][ T4537] netlink: 44 bytes leftover after parsing attributes in process `syz.0.430'. [ 49.106578][ T4541] validate_nla: 5 callbacks suppressed [ 49.106596][ T4541] netlink: 'syz.0.431': attribute type 11 has an invalid length. [ 49.119998][ T4541] netlink: 168 bytes leftover after parsing attributes in process `syz.0.431'. [ 49.531723][ T4575] netlink: 'syz.1.446': attribute type 11 has an invalid length. [ 49.539536][ T4575] netlink: 168 bytes leftover after parsing attributes in process `syz.1.446'. [ 49.715365][ T4597] netlink: 'syz.3.454': attribute type 11 has an invalid length. [ 49.723190][ T4597] netlink: 168 bytes leftover after parsing attributes in process `syz.3.454'. [ 49.825505][ T4599] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.832768][ T4599] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.908466][ T4611] netlink: 'syz.3.459': attribute type 11 has an invalid length. [ 49.916345][ T4611] netlink: 168 bytes leftover after parsing attributes in process `syz.3.459'. [ 50.008475][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.051122][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.069140][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.092899][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.236745][ T4637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4637 comm=syz.2.470 [ 50.732562][ T4690] capability: warning: `syz.3.494' uses 32-bit capabilities (legacy support in use) [ 50.778633][ T4694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.496'. [ 50.800491][ T4694] ip6tnl1: entered promiscuous mode [ 50.838364][ T4697] netlink: 'syz.3.497': attribute type 23 has an invalid length. [ 50.846244][ T4697] netlink: 'syz.3.497': attribute type 30 has an invalid length. [ 50.954065][ T4706] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 51.260052][ T4731] netlink: 'syz.4.511': attribute type 11 has an invalid length. [ 51.797389][ T29] kauditd_printk_skb: 908 callbacks suppressed [ 51.797473][ T29] audit: type=1400 audit(1770490517.281:2090): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.828452][ T29] audit: type=1400 audit(1770490517.291:2091): avc: denied { read write } for pid=4782 comm="syz.3.533" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.852734][ T29] audit: type=1400 audit(1770490517.291:2092): avc: denied { prog_load } for pid=4782 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 51.944211][ T29] audit: type=1400 audit(1770490517.431:2093): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.975856][ T29] audit: type=1400 audit(1770490517.461:2094): avc: denied { name_bind } for pid=4785 comm="syz.0.534" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 52.000389][ T29] audit: type=1400 audit(1770490517.461:2095): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 52.024716][ T29] audit: type=1400 audit(1770490517.481:2096): avc: denied { map_create } for pid=4785 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 52.043874][ T29] audit: type=1400 audit(1770490517.481:2097): avc: denied { prog_load } for pid=4785 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 52.062927][ T29] audit: type=1400 audit(1770490517.481:2098): avc: denied { name_bind } for pid=4785 comm="syz.0.534" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 52.084762][ T29] audit: type=1400 audit(1770490517.491:2099): avc: denied { create } for pid=4787 comm="syz.3.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 52.855827][ T4859] bridge_slave_0: left allmulticast mode [ 52.861682][ T4859] bridge_slave_0: left promiscuous mode [ 52.867391][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.875665][ T4859] bridge_slave_1: left allmulticast mode [ 52.881388][ T4859] bridge_slave_1: left promiscuous mode [ 52.887291][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.896123][ T4859] bond0: (slave bond_slave_0): Releasing backup interface [ 52.913256][ T4859] bond0: (slave bond_slave_1): Releasing backup interface [ 52.922701][ T4859] team0: Port device team_slave_0 removed [ 52.933160][ T4859] team0: Port device team_slave_1 removed [ 52.939393][ T4859] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 52.957113][ T4864] netlink: 'syz.0.568': attribute type 10 has an invalid length. [ 53.287943][ T4883] netlink: 'syz.2.576': attribute type 11 has an invalid length. [ 53.295770][ T4883] __nla_validate_parse: 3 callbacks suppressed [ 53.295786][ T4883] netlink: 168 bytes leftover after parsing attributes in process `syz.2.576'. [ 53.350879][ T4891] netlink: 'syz.2.579': attribute type 10 has an invalid length. [ 53.478566][ T4910] netlink: 168 bytes leftover after parsing attributes in process `syz.2.589'. [ 54.208520][ T4984] validate_nla: 3 callbacks suppressed [ 54.208531][ T4984] netlink: 'syz.2.621': attribute type 11 has an invalid length. [ 54.221869][ T4984] netlink: 168 bytes leftover after parsing attributes in process `syz.2.621'. [ 54.261013][ T4990] FAULT_INJECTION: forcing a failure. [ 54.261013][ T4990] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.278854][ T4990] CPU: 1 UID: 0 PID: 4990 Comm: syz.1.623 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 54.278886][ T4990] Tainted: [W]=WARN [ 54.278894][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 54.278906][ T4990] Call Trace: [ 54.278913][ T4990] [ 54.278922][ T4990] __dump_stack+0x1d/0x30 [ 54.278964][ T4990] dump_stack_lvl+0x95/0xd0 [ 54.278983][ T4990] dump_stack+0x15/0x1b [ 54.279001][ T4990] should_fail_ex+0x263/0x280 [ 54.279091][ T4990] should_fail+0xb/0x20 [ 54.279118][ T4990] should_fail_usercopy+0x1a/0x20 [ 54.279149][ T4990] _copy_from_user+0x1c/0xb0 [ 54.279171][ T4990] ___sys_sendmsg+0xc1/0x1e0 [ 54.279262][ T4990] __x64_sys_sendmsg+0xd4/0x160 [ 54.279411][ T4990] x64_sys_call+0x17ba/0x3000 [ 54.279437][ T4990] do_syscall_64+0xc0/0x2a0 [ 54.279526][ T4990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.279548][ T4990] RIP: 0033:0x7fc1bd05aeb9 [ 54.279565][ T4990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.279583][ T4990] RSP: 002b:00007fc1bbab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.279605][ T4990] RAX: ffffffffffffffda RBX: 00007fc1bd2d5fa0 RCX: 00007fc1bd05aeb9 [ 54.279692][ T4990] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 54.279705][ T4990] RBP: 00007fc1bbab7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.279718][ T4990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.279736][ T4990] R13: 00007fc1bd2d6038 R14: 00007fc1bd2d5fa0 R15: 00007ffe8a136cc8 [ 54.279757][ T4990] [ 54.483910][ T4999] netlink: 52 bytes leftover after parsing attributes in process `syz.2.627'. [ 54.569596][ T5010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.632'. [ 54.586104][ T5018] netlink: 'syz.2.636': attribute type 11 has an invalid length. [ 54.593899][ T5018] netlink: 168 bytes leftover after parsing attributes in process `syz.2.636'. [ 54.663243][ T5030] netlink: 52 bytes leftover after parsing attributes in process `syz.2.641'. [ 54.671628][ T5028] batadv0: entered promiscuous mode [ 54.677421][ T5028] batadv0: entered allmulticast mode [ 54.683766][ T5028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.750504][ T5043] netlink: 'syz.1.647': attribute type 11 has an invalid length. [ 54.758335][ T5043] netlink: 168 bytes leftover after parsing attributes in process `syz.1.647'. [ 54.962921][ T5060] netlink: 52 bytes leftover after parsing attributes in process `syz.1.654'. [ 55.192774][ T5094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 55.285252][ T5101] netlink: 'syz.3.674': attribute type 21 has an invalid length. [ 55.296348][ T5101] netlink: 'syz.3.674': attribute type 4 has an invalid length. [ 55.304158][ T5101] netlink: 'syz.3.674': attribute type 5 has an invalid length. [ 55.313578][ T5101] netlink: 'syz.3.674': attribute type 63 has an invalid length. [ 55.822539][ T5140] FAULT_INJECTION: forcing a failure. [ 55.822539][ T5140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.835843][ T5140] CPU: 0 UID: 0 PID: 5140 Comm: syz.2.690 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 55.835878][ T5140] Tainted: [W]=WARN [ 55.835882][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 55.835911][ T5140] Call Trace: [ 55.835915][ T5140] [ 55.835921][ T5140] __dump_stack+0x1d/0x30 [ 55.835939][ T5140] dump_stack_lvl+0x95/0xd0 [ 55.835952][ T5140] dump_stack+0x15/0x1b [ 55.835963][ T5140] should_fail_ex+0x263/0x280 [ 55.836010][ T5140] should_fail+0xb/0x20 [ 55.836026][ T5140] should_fail_usercopy+0x1a/0x20 [ 55.836110][ T5140] _copy_from_user+0x1c/0xb0 [ 55.836123][ T5140] kstrtouint_from_user+0x69/0xf0 [ 55.836165][ T5140] proc_fail_nth_write+0x50/0x160 [ 55.836320][ T5140] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 55.836336][ T5140] vfs_write+0x269/0x9f0 [ 55.836379][ T5140] ? __rcu_read_unlock+0x4e/0x70 [ 55.836396][ T5140] ? __fget_files+0x184/0x1c0 [ 55.836484][ T5140] ? mutex_lock+0x57/0x90 [ 55.836507][ T5140] ksys_write+0xdc/0x1a0 [ 55.836579][ T5140] __x64_sys_write+0x40/0x50 [ 55.836656][ T5140] x64_sys_call+0x2847/0x3000 [ 55.836670][ T5140] do_syscall_64+0xc0/0x2a0 [ 55.836688][ T5140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.836701][ T5140] RIP: 0033:0x7f2bce5eb78e [ 55.836783][ T5140] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 55.836795][ T5140] RSP: 002b:00007f2bcd086fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.836839][ T5140] RAX: ffffffffffffffda RBX: 00007f2bcd0876c0 RCX: 00007f2bce5eb78e [ 55.836854][ T5140] RDX: 0000000000000001 RSI: 00007f2bcd0870a0 RDI: 0000000000000003 [ 55.836867][ T5140] RBP: 00007f2bcd087090 R08: 0000000000000000 R09: 0000000000000000 [ 55.836900][ T5140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.836908][ T5140] R13: 00007f2bce8a6038 R14: 00007f2bce8a5fa0 R15: 00007ffc3a97dbf8 [ 55.836920][ T5140] [ 56.074101][ T5148] FAULT_INJECTION: forcing a failure. [ 56.074101][ T5148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.087202][ T5148] CPU: 1 UID: 0 PID: 5148 Comm: syz.0.694 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 56.087224][ T5148] Tainted: [W]=WARN [ 56.087228][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 56.087242][ T5148] Call Trace: [ 56.087246][ T5148] [ 56.087276][ T5148] __dump_stack+0x1d/0x30 [ 56.087293][ T5148] dump_stack_lvl+0x95/0xd0 [ 56.087306][ T5148] dump_stack+0x15/0x1b [ 56.087397][ T5148] should_fail_ex+0x263/0x280 [ 56.087448][ T5148] should_fail+0xb/0x20 [ 56.087497][ T5148] should_fail_usercopy+0x1a/0x20 [ 56.087516][ T5148] _copy_from_user+0x1c/0xb0 [ 56.087529][ T5148] __se_sys_mount+0x10d/0x2e0 [ 56.087565][ T5148] ? fput+0x8f/0xc0 [ 56.087591][ T5148] ? ksys_write+0x194/0x1a0 [ 56.087612][ T5148] __x64_sys_mount+0x67/0x80 [ 56.087628][ T5148] x64_sys_call+0x2cca/0x3000 [ 56.087710][ T5148] do_syscall_64+0xc0/0x2a0 [ 56.087728][ T5148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.087741][ T5148] RIP: 0033:0x7f48d636aeb9 [ 56.087752][ T5148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.087816][ T5148] RSP: 002b:00007f48d4dbf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.087830][ T5148] RAX: ffffffffffffffda RBX: 00007f48d65e5fa0 RCX: 00007f48d636aeb9 [ 56.087896][ T5148] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 56.087905][ T5148] RBP: 00007f48d4dbf090 R08: 0000200000000e40 R09: 0000000000000000 [ 56.087928][ T5148] R10: 000000000021c004 R11: 0000000000000246 R12: 0000000000000001 [ 56.087936][ T5148] R13: 00007f48d65e6038 R14: 00007f48d65e5fa0 R15: 00007ffd730a6ab8 [ 56.088017][ T5148] [ 56.352593][ T5162] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 56.363174][ T5162] bridge1: entered promiscuous mode [ 56.368480][ T5162] bridge1: entered allmulticast mode [ 56.803762][ T29] kauditd_printk_skb: 1009 callbacks suppressed [ 56.803779][ T29] audit: type=1400 audit(1770490522.291:3109): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.834912][ T29] audit: type=1400 audit(1770490522.301:3110): avc: denied { prog_load } for pid=5221 comm="syz.4.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 56.854078][ T29] audit: type=1400 audit(1770490522.301:3111): avc: denied { prog_load } for pid=5221 comm="syz.4.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 56.873164][ T29] audit: type=1400 audit(1770490522.301:3112): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.897939][ T29] audit: type=1400 audit(1770490522.321:3113): avc: denied { map_create } for pid=5223 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 56.917154][ T29] audit: type=1400 audit(1770490522.321:3114): avc: denied { prog_load } for pid=5223 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 56.936202][ T29] audit: type=1400 audit(1770490522.321:3115): avc: denied { bpf } for pid=5223 comm="syz.4.729" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 56.956858][ T29] audit: type=1400 audit(1770490522.321:3116): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.981062][ T29] audit: type=1400 audit(1770490522.321:3117): avc: denied { prog_load } for pid=5225 comm="syz.4.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 57.000604][ T29] audit: type=1400 audit(1770490522.341:3118): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 57.152901][ T5250] netlink: 'syz.2.741': attribute type 11 has an invalid length. [ 57.211465][ T5260] capability: warning: `syz.2.745' uses deprecated v2 capabilities in a way that may be insecure [ 57.338190][ T5280] netlink: 'syz.0.754': attribute type 11 has an invalid length. [ 57.365268][ T5291] FAULT_INJECTION: forcing a failure. [ 57.365268][ T5291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.378676][ T5291] CPU: 1 UID: 0 PID: 5291 Comm: syz.2.759 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 57.378709][ T5291] Tainted: [W]=WARN [ 57.378715][ T5291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 57.378726][ T5291] Call Trace: [ 57.378732][ T5291] [ 57.378741][ T5291] __dump_stack+0x1d/0x30 [ 57.378781][ T5291] dump_stack_lvl+0x95/0xd0 [ 57.378803][ T5291] dump_stack+0x15/0x1b [ 57.378823][ T5291] should_fail_ex+0x263/0x280 [ 57.378909][ T5291] should_fail+0xb/0x20 [ 57.378935][ T5291] should_fail_usercopy+0x1a/0x20 [ 57.379033][ T5291] _copy_to_user+0x20/0xa0 [ 57.379055][ T5291] simple_read_from_buffer+0xb5/0x130 [ 57.379092][ T5291] proc_fail_nth_read+0x10e/0x150 [ 57.379198][ T5291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.379226][ T5291] vfs_read+0x1ab/0x7f0 [ 57.379245][ T5291] ? __rcu_read_unlock+0x4e/0x70 [ 57.379274][ T5291] ? __fget_files+0x184/0x1c0 [ 57.379348][ T5291] ? mutex_lock+0x57/0x90 [ 57.379435][ T5291] ksys_read+0xdc/0x1a0 [ 57.379456][ T5291] __x64_sys_read+0x40/0x50 [ 57.379473][ T5291] x64_sys_call+0x2889/0x3000 [ 57.379493][ T5291] do_syscall_64+0xc0/0x2a0 [ 57.379584][ T5291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.379612][ T5291] RIP: 0033:0x7f2bce5eb78e [ 57.379630][ T5291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 57.379694][ T5291] RSP: 002b:00007f2bcd086fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.379718][ T5291] RAX: ffffffffffffffda RBX: 00007f2bcd0876c0 RCX: 00007f2bce5eb78e [ 57.379738][ T5291] RDX: 000000000000000f RSI: 00007f2bcd0870a0 RDI: 0000000000000003 [ 57.379752][ T5291] RBP: 00007f2bcd087090 R08: 0000000000000000 R09: 0000000000000000 [ 57.379765][ T5291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.379830][ T5291] R13: 00007f2bce8a6038 R14: 00007f2bce8a5fa0 R15: 00007ffc3a97dbf8 [ 57.379908][ T5291] [ 57.678446][ T5314] bond1: entered promiscuous mode [ 57.711705][ T5322] netlink: 'syz.1.772': attribute type 11 has an invalid length. [ 58.155245][ T5383] FAULT_INJECTION: forcing a failure. [ 58.155245][ T5383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.168444][ T5383] CPU: 1 UID: 0 PID: 5383 Comm: syz.0.798 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 58.168481][ T5383] Tainted: [W]=WARN [ 58.168487][ T5383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 58.168500][ T5383] Call Trace: [ 58.168508][ T5383] [ 58.168517][ T5383] __dump_stack+0x1d/0x30 [ 58.168539][ T5383] dump_stack_lvl+0x95/0xd0 [ 58.168567][ T5383] dump_stack+0x15/0x1b [ 58.168584][ T5383] should_fail_ex+0x263/0x280 [ 58.168679][ T5383] should_fail+0xb/0x20 [ 58.168708][ T5383] should_fail_usercopy+0x1a/0x20 [ 58.168734][ T5383] _copy_to_user+0x20/0xa0 [ 58.168831][ T5383] simple_read_from_buffer+0xb5/0x130 [ 58.168927][ T5383] proc_fail_nth_read+0x10e/0x150 [ 58.169009][ T5383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.169031][ T5383] vfs_read+0x1ab/0x7f0 [ 58.169107][ T5383] ? __rcu_read_unlock+0x4e/0x70 [ 58.169131][ T5383] ? __fget_files+0x184/0x1c0 [ 58.169150][ T5383] ? mutex_lock+0x57/0x90 [ 58.169233][ T5383] ksys_read+0xdc/0x1a0 [ 58.169253][ T5383] __x64_sys_read+0x40/0x50 [ 58.169273][ T5383] x64_sys_call+0x2889/0x3000 [ 58.169300][ T5383] do_syscall_64+0xc0/0x2a0 [ 58.169389][ T5383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.169414][ T5383] RIP: 0033:0x7f48d632b78e [ 58.169432][ T5383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.169451][ T5383] RSP: 002b:00007f48d4dbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.169535][ T5383] RAX: ffffffffffffffda RBX: 00007f48d4dbf6c0 RCX: 00007f48d632b78e [ 58.169548][ T5383] RDX: 000000000000000f RSI: 00007f48d4dbf0a0 RDI: 0000000000000003 [ 58.169560][ T5383] RBP: 00007f48d4dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 58.169571][ T5383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.169583][ T5383] R13: 00007f48d65e6038 R14: 00007f48d65e5fa0 R15: 00007ffd730a6ab8 [ 58.169653][ T5383] [ 58.712227][ T5432] __nla_validate_parse: 16 callbacks suppressed [ 58.712246][ T5432] netlink: 36 bytes leftover after parsing attributes in process `syz.4.820'. [ 58.862993][ T5440] netlink: 1304 bytes leftover after parsing attributes in process `syz.1.823'. [ 59.061939][ T5449] netlink: 168 bytes leftover after parsing attributes in process `syz.2.827'. [ 59.113658][ T5461] netlink: 32 bytes leftover after parsing attributes in process `syz.3.832'. [ 59.122587][ T5461] netlink: 32 bytes leftover after parsing attributes in process `syz.3.832'. [ 59.348419][ T5483] validate_nla: 2 callbacks suppressed [ 59.348507][ T5483] netlink: 'syz.0.841': attribute type 11 has an invalid length. [ 59.361779][ T5483] netlink: 168 bytes leftover after parsing attributes in process `syz.0.841'. [ 59.505294][ T5495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5495 comm=syz.4.847 [ 59.746414][ T5514] netlink: 'syz.1.854': attribute type 11 has an invalid length. [ 59.754323][ T5514] netlink: 168 bytes leftover after parsing attributes in process `syz.1.854'. [ 59.820449][ T5524] netlink: 'syz.1.858': attribute type 7 has an invalid length. [ 59.945569][ T5549] netlink: 'syz.1.868': attribute type 11 has an invalid length. [ 59.953480][ T5549] netlink: 168 bytes leftover after parsing attributes in process `syz.1.868'. [ 60.103238][ T5576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 60.113439][ T5576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.880'. [ 60.699258][ T5622] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 61.006389][ T5632] netlink: 'syz.2.905': attribute type 7 has an invalid length. [ 61.197120][ T5650] FAULT_INJECTION: forcing a failure. [ 61.197120][ T5650] name failslab, interval 1, probability 0, space 0, times 0 [ 61.209879][ T5650] CPU: 1 UID: 0 PID: 5650 Comm: syz.1.912 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 61.209948][ T5650] Tainted: [W]=WARN [ 61.209954][ T5650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 61.209966][ T5650] Call Trace: [ 61.209973][ T5650] [ 61.209980][ T5650] __dump_stack+0x1d/0x30 [ 61.210003][ T5650] dump_stack_lvl+0x95/0xd0 [ 61.210021][ T5650] dump_stack+0x15/0x1b [ 61.210069][ T5650] should_fail_ex+0x263/0x280 [ 61.210098][ T5650] should_failslab+0x8c/0xb0 [ 61.210119][ T5650] kmem_cache_alloc_noprof+0x68/0x490 [ 61.210140][ T5650] ? audit_log_start+0x34c/0x730 [ 61.210247][ T5650] audit_log_start+0x34c/0x730 [ 61.210335][ T5650] ? kstrtouint+0x76/0xc0 [ 61.210359][ T5650] audit_seccomp+0x47/0x100 [ 61.210379][ T5650] ? __seccomp_filter+0x8db/0x1350 [ 61.210400][ T5650] __seccomp_filter+0x8ec/0x1350 [ 61.210420][ T5650] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 61.210443][ T5650] ? vfs_write+0x86e/0x9f0 [ 61.210459][ T5650] ? __rcu_read_unlock+0x4e/0x70 [ 61.210541][ T5650] ? __fget_files+0x184/0x1c0 [ 61.210565][ T5650] __secure_computing+0x81/0x150 [ 61.210584][ T5650] syscall_trace_enter+0xce/0x1e0 [ 61.210630][ T5650] do_syscall_64+0x9a/0x2a0 [ 61.210658][ T5650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.210679][ T5650] RIP: 0033:0x7fc1bd05aeb9 [ 61.210694][ T5650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.210731][ T5650] RSP: 002b:00007fc1bbab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 61.210750][ T5650] RAX: ffffffffffffffda RBX: 00007fc1bd2d5fa0 RCX: 00007fc1bd05aeb9 [ 61.210764][ T5650] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: ffffffffffffffff [ 61.210778][ T5650] RBP: 00007fc1bbab7090 R08: 0000200000000000 R09: 000000000000001c [ 61.210791][ T5650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.210803][ T5650] R13: 00007fc1bd2d6038 R14: 00007fc1bd2d5fa0 R15: 00007ffe8a136cc8 [ 61.210832][ T5650] [ 61.469861][ T5659] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 61.539245][ T5672] netlink: 'syz.0.923': attribute type 29 has an invalid length. [ 61.627210][ T5686] wireguard0: entered promiscuous mode [ 61.632740][ T5686] wireguard0: entered allmulticast mode [ 61.876334][ T29] kauditd_printk_skb: 960 callbacks suppressed [ 61.876351][ T29] audit: type=1400 audit(1770490527.361:4077): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.940533][ T29] audit: type=1400 audit(1770490527.411:4078): avc: denied { map_create } for pid=5696 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 61.959844][ T29] audit: type=1400 audit(1770490527.411:4079): avc: denied { prog_load } for pid=5696 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 61.979543][ T29] audit: type=1400 audit(1770490527.411:4080): avc: denied { prog_load } for pid=5696 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 62.004526][ T29] audit: type=1400 audit(1770490527.431:4081): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 62.041517][ T29] audit: type=1400 audit(1770490527.521:4082): avc: denied { read } for pid=5699 comm="syz.3.933" dev="nsfs" ino=4026532626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 62.063292][ T29] audit: type=1400 audit(1770490527.521:4083): avc: denied { open } for pid=5699 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 62.082582][ T29] audit: type=1400 audit(1770490527.521:4084): avc: denied { open } for pid=5699 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 62.102319][ T29] audit: type=1400 audit(1770490527.521:4085): avc: denied { create } for pid=5699 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 62.135828][ T29] audit: type=1400 audit(1770490527.531:4086): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.118807][ T5729] netlink: 'syz.4.945': attribute type 11 has an invalid length. [ 63.451564][ T5754] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 63.724241][ T5765] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 64.027702][ T5798] __nla_validate_parse: 5 callbacks suppressed [ 64.027719][ T5798] netlink: 160 bytes leftover after parsing attributes in process `syz.2.975'. [ 64.042950][ T5798] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 64.116881][ T5814] FAULT_INJECTION: forcing a failure. [ 64.116881][ T5814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.130166][ T5814] CPU: 0 UID: 0 PID: 5814 Comm: syz.4.981 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.130196][ T5814] Tainted: [W]=WARN [ 64.130202][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 64.130289][ T5814] Call Trace: [ 64.130297][ T5814] [ 64.130304][ T5814] __dump_stack+0x1d/0x30 [ 64.130331][ T5814] dump_stack_lvl+0x95/0xd0 [ 64.130352][ T5814] dump_stack+0x15/0x1b [ 64.130413][ T5814] should_fail_ex+0x263/0x280 [ 64.130451][ T5814] should_fail+0xb/0x20 [ 64.130479][ T5814] should_fail_usercopy+0x1a/0x20 [ 64.130512][ T5814] _copy_from_iter+0xcf/0xea0 [ 64.130601][ T5814] ? __alloc_skb+0x397/0x4b0 [ 64.130631][ T5814] ? __alloc_skb+0x219/0x4b0 [ 64.130660][ T5814] netlink_sendmsg+0x4ae/0x6f0 [ 64.130734][ T5814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.130754][ T5814] ____sys_sendmsg+0x5af/0x600 [ 64.130841][ T5814] ___sys_sendmsg+0x195/0x1e0 [ 64.130870][ T5814] __x64_sys_sendmsg+0xd4/0x160 [ 64.130893][ T5814] x64_sys_call+0x17ba/0x3000 [ 64.130998][ T5814] do_syscall_64+0xc0/0x2a0 [ 64.131028][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.131050][ T5814] RIP: 0033:0x7f65329caeb9 [ 64.131068][ T5814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.131112][ T5814] RSP: 002b:00007f653141f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.131206][ T5814] RAX: ffffffffffffffda RBX: 00007f6532c45fa0 RCX: 00007f65329caeb9 [ 64.131227][ T5814] RDX: 0000000020004004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 64.131313][ T5814] RBP: 00007f653141f090 R08: 0000000000000000 R09: 0000000000000000 [ 64.131347][ T5814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.131359][ T5814] R13: 00007f6532c46038 R14: 00007f6532c45fa0 R15: 00007fff668a4ac8 [ 64.131377][ T5814] [ 64.398203][ T5830] FAULT_INJECTION: forcing a failure. [ 64.398203][ T5830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.411900][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz.2.989 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.412002][ T5830] Tainted: [W]=WARN [ 64.412009][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 64.412021][ T5830] Call Trace: [ 64.412029][ T5830] [ 64.412036][ T5830] __dump_stack+0x1d/0x30 [ 64.412061][ T5830] dump_stack_lvl+0x95/0xd0 [ 64.412155][ T5830] dump_stack+0x15/0x1b [ 64.412173][ T5830] should_fail_ex+0x263/0x280 [ 64.412199][ T5830] should_fail+0xb/0x20 [ 64.412283][ T5830] should_fail_usercopy+0x1a/0x20 [ 64.412312][ T5830] strncpy_from_user+0x27/0x250 [ 64.412355][ T5830] getname_flags+0xad/0x3b0 [ 64.412422][ T5830] user_path_at+0x28/0x130 [ 64.412464][ T5830] __se_sys_mount+0x25b/0x2e0 [ 64.412482][ T5830] ? fput+0x8f/0xc0 [ 64.412543][ T5830] __x64_sys_mount+0x67/0x80 [ 64.412562][ T5830] x64_sys_call+0x2cca/0x3000 [ 64.412582][ T5830] do_syscall_64+0xc0/0x2a0 [ 64.412658][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.412682][ T5830] RIP: 0033:0x7f2bce62aeb9 [ 64.412700][ T5830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.412718][ T5830] RSP: 002b:00007f2bcd087028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 64.412806][ T5830] RAX: ffffffffffffffda RBX: 00007f2bce8a5fa0 RCX: 00007f2bce62aeb9 [ 64.412892][ T5830] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 64.412907][ T5830] RBP: 00007f2bcd087090 R08: 0000200000000340 R09: 0000000000000000 [ 64.412919][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.412931][ T5830] R13: 00007f2bce8a6038 R14: 00007f2bce8a5fa0 R15: 00007ffc3a97dbf8 [ 64.412947][ T5830] [ 64.618670][ T5833] vlan2: entered promiscuous mode [ 64.624371][ T5833] erspan0: entered promiscuous mode [ 64.644467][ T5841] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 64.651015][ T5841] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.659172][ T5841] vhci_hcd vhci_hcd.0: Device attached [ 64.659864][ T5847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.990'. [ 64.673566][ T5847] netlink: 84 bytes leftover after parsing attributes in process `syz.1.990'. [ 64.682927][ T5845] vhci_hcd: connection closed [ 64.683070][ T56] vhci_hcd vhci_hcd.2: stop threads [ 64.693012][ T56] vhci_hcd vhci_hcd.2: release socket [ 64.698419][ T56] vhci_hcd vhci_hcd.2: disconnect device [ 64.789262][ T5863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5863 comm=syz.3.1001 [ 64.845683][ T5872] netlink: 'syz.3.1006': attribute type 11 has an invalid length. [ 64.853571][ T5872] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1006'. [ 64.866012][ T5875] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1007'. [ 64.875215][ T5875] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 65.503099][ T5902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'. [ 65.536478][ T5908] netlink: 'syz.4.1019': attribute type 11 has an invalid length. [ 65.544374][ T5908] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1019'. [ 65.901344][ T5933] FAULT_INJECTION: forcing a failure. [ 65.901344][ T5933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.914448][ T5933] CPU: 0 UID: 0 PID: 5933 Comm: syz.4.1029 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.914491][ T5933] Tainted: [W]=WARN [ 65.914499][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 65.914520][ T5933] Call Trace: [ 65.914528][ T5933] [ 65.914537][ T5933] __dump_stack+0x1d/0x30 [ 65.914586][ T5933] dump_stack_lvl+0x95/0xd0 [ 65.914604][ T5933] dump_stack+0x15/0x1b [ 65.914621][ T5933] should_fail_ex+0x263/0x280 [ 65.914687][ T5933] should_fail+0xb/0x20 [ 65.914712][ T5933] should_fail_usercopy+0x1a/0x20 [ 65.914746][ T5933] _copy_to_user+0x20/0xa0 [ 65.914768][ T5933] simple_read_from_buffer+0xb5/0x130 [ 65.914877][ T5933] proc_fail_nth_read+0x10e/0x150 [ 65.914924][ T5933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.914946][ T5933] vfs_read+0x1ab/0x7f0 [ 65.914962][ T5933] ? __rcu_read_unlock+0x4e/0x70 [ 65.914988][ T5933] ? __fget_files+0x184/0x1c0 [ 65.915056][ T5933] ? mutex_lock+0x57/0x90 [ 65.915077][ T5933] ksys_read+0xdc/0x1a0 [ 65.915094][ T5933] __x64_sys_read+0x40/0x50 [ 65.915112][ T5933] x64_sys_call+0x2889/0x3000 [ 65.915165][ T5933] do_syscall_64+0xc0/0x2a0 [ 65.915191][ T5933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.915225][ T5933] RIP: 0033:0x7f653298b78e [ 65.915243][ T5933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.915287][ T5933] RSP: 002b:00007f653141efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.915310][ T5933] RAX: ffffffffffffffda RBX: 00007f653141f6c0 RCX: 00007f653298b78e [ 65.915324][ T5933] RDX: 000000000000000f RSI: 00007f653141f0a0 RDI: 0000000000000004 [ 65.915336][ T5933] RBP: 00007f653141f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.915348][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.915362][ T5933] R13: 00007f6532c46038 R14: 00007f6532c45fa0 R15: 00007fff668a4ac8 [ 65.915435][ T5933] [ 66.119901][ T5935] netlink: 'syz.3.1030': attribute type 1 has an invalid length. [ 66.128333][ T5935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5935 comm=syz.3.1030 [ 66.142407][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 66.157378][ T5937] netlink: 'syz.2.1031': attribute type 11 has an invalid length. [ 66.165316][ T5937] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1031'. [ 66.209362][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 66.250215][ T5961] FAULT_INJECTION: forcing a failure. [ 66.250215][ T5961] name failslab, interval 1, probability 0, space 0, times 0 [ 66.263507][ T5961] CPU: 0 UID: 0 PID: 5961 Comm: syz.0.1039 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 66.263607][ T5961] Tainted: [W]=WARN [ 66.263613][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 66.263624][ T5961] Call Trace: [ 66.263659][ T5961] [ 66.263667][ T5961] __dump_stack+0x1d/0x30 [ 66.263694][ T5961] dump_stack_lvl+0x95/0xd0 [ 66.263719][ T5961] dump_stack+0x15/0x1b [ 66.263741][ T5961] should_fail_ex+0x263/0x280 [ 66.263801][ T5961] should_failslab+0x8c/0xb0 [ 66.263848][ T5961] __kmalloc_noprof+0xb8/0x580 [ 66.263885][ T5961] ? sock_kmalloc+0x85/0xc0 [ 66.263906][ T5961] ? terminate_walk+0x1e6/0x210 [ 66.263933][ T5961] ? path_openat+0x1d94/0x23c0 [ 66.264007][ T5961] sock_kmalloc+0x85/0xc0 [ 66.264029][ T5961] ____sys_sendmsg+0xf9/0x600 [ 66.264053][ T5961] ___sys_sendmsg+0x195/0x1e0 [ 66.264085][ T5961] __x64_sys_sendmsg+0xd4/0x160 [ 66.264114][ T5961] x64_sys_call+0x17ba/0x3000 [ 66.264136][ T5961] do_syscall_64+0xc0/0x2a0 [ 66.264161][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.264231][ T5961] RIP: 0033:0x7f48d636aeb9 [ 66.264249][ T5961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.264270][ T5961] RSP: 002b:00007f48d4dbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.264294][ T5961] RAX: ffffffffffffffda RBX: 00007f48d65e5fa0 RCX: 00007f48d636aeb9 [ 66.264341][ T5961] RDX: 0000000020004000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 66.264353][ T5961] RBP: 00007f48d4dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 66.264364][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.264378][ T5961] R13: 00007f48d65e6038 R14: 00007f48d65e5fa0 R15: 00007ffd730a6ab8 [ 66.264398][ T5961] [ 66.492692][ T5967] FAULT_INJECTION: forcing a failure. [ 66.492692][ T5967] name failslab, interval 1, probability 0, space 0, times 0 [ 66.505419][ T5967] CPU: 0 UID: 0 PID: 5967 Comm: syz.0.1041 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 66.505452][ T5967] Tainted: [W]=WARN [ 66.505458][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 66.505503][ T5967] Call Trace: [ 66.505511][ T5967] [ 66.505518][ T5967] __dump_stack+0x1d/0x30 [ 66.505545][ T5967] dump_stack_lvl+0x95/0xd0 [ 66.505575][ T5967] dump_stack+0x15/0x1b [ 66.505642][ T5967] should_fail_ex+0x263/0x280 [ 66.505672][ T5967] should_failslab+0x8c/0xb0 [ 66.505697][ T5967] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 66.505785][ T5967] ? __alloc_skb+0x2f0/0x4b0 [ 66.505816][ T5967] __alloc_skb+0x2f0/0x4b0 [ 66.505843][ T5967] ? __alloc_skb+0x219/0x4b0 [ 66.505918][ T5967] netlink_alloc_large_skb+0xbf/0xf0 [ 66.506073][ T5967] netlink_sendmsg+0x40c/0x6f0 [ 66.506095][ T5967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.506117][ T5967] ____sys_sendmsg+0x5af/0x600 [ 66.506138][ T5967] ___sys_sendmsg+0x195/0x1e0 [ 66.506231][ T5967] __sys_sendmmsg+0x185/0x320 [ 66.506258][ T5967] __x64_sys_sendmmsg+0x57/0x70 [ 66.506280][ T5967] x64_sys_call+0x1e28/0x3000 [ 66.506332][ T5967] do_syscall_64+0xc0/0x2a0 [ 66.506423][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.506447][ T5967] RIP: 0033:0x7f48d636aeb9 [ 66.506465][ T5967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.506483][ T5967] RSP: 002b:00007f48d4dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 66.506502][ T5967] RAX: ffffffffffffffda RBX: 00007f48d65e5fa0 RCX: 00007f48d636aeb9 [ 66.506514][ T5967] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 66.506547][ T5967] RBP: 00007f48d4dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 66.506561][ T5967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.506573][ T5967] R13: 00007f48d65e6038 R14: 00007f48d65e5fa0 R15: 00007ffd730a6ab8 [ 66.506592][ T5967] [ 66.717848][ T5971] FAULT_INJECTION: forcing a failure. [ 66.717848][ T5971] name failslab, interval 1, probability 0, space 0, times 0 [ 66.731253][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: syz.2.1043 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 66.731355][ T5971] Tainted: [W]=WARN [ 66.731359][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 66.731419][ T5971] Call Trace: [ 66.731424][ T5971] [ 66.731430][ T5971] __dump_stack+0x1d/0x30 [ 66.731446][ T5971] dump_stack_lvl+0x95/0xd0 [ 66.731459][ T5971] dump_stack+0x15/0x1b [ 66.731482][ T5971] should_fail_ex+0x263/0x280 [ 66.731550][ T5971] should_failslab+0x8c/0xb0 [ 66.731564][ T5971] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 66.731636][ T5971] ? sidtab_sid2str_get+0xa0/0x130 [ 66.731665][ T5971] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 66.731686][ T5971] kmemdup_noprof+0x2b/0x70 [ 66.731750][ T5971] sidtab_sid2str_get+0xa0/0x130 [ 66.731776][ T5971] security_sid_to_context_core+0x1eb/0x2e0 [ 66.731801][ T5971] security_sid_to_context+0x27/0x40 [ 66.731872][ T5971] avc_audit_post_callback+0x10f/0x520 [ 66.731890][ T5971] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 66.731908][ T5971] common_lsm_audit+0x1ba/0x230 [ 66.731990][ T5971] ? _parse_integer_limit+0x170/0x190 [ 66.732006][ T5971] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 66.732024][ T5971] slow_avc_audit+0x14c/0x190 [ 66.732069][ T5971] avc_has_perm+0x144/0x190 [ 66.732088][ T5971] selinux_bpf+0xa2/0xc0 [ 66.732101][ T5971] security_bpf+0x4e/0x90 [ 66.732164][ T5971] __sys_bpf+0x1c3/0x7b0 [ 66.732189][ T5971] __x64_sys_bpf+0x41/0x50 [ 66.732204][ T5971] x64_sys_call+0x28e1/0x3000 [ 66.732219][ T5971] do_syscall_64+0xc0/0x2a0 [ 66.732337][ T5971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.732350][ T5971] RIP: 0033:0x7f2bce62aeb9 [ 66.732361][ T5971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.732392][ T5971] RSP: 002b:00007f2bcd087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 66.732406][ T5971] RAX: ffffffffffffffda RBX: 00007f2bce8a5fa0 RCX: 00007f2bce62aeb9 [ 66.732414][ T5971] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 66.732423][ T5971] RBP: 00007f2bcd087090 R08: 0000000000000000 R09: 0000000000000000 [ 66.732430][ T5971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.732438][ T5971] R13: 00007f2bce8a6038 R14: 00007f2bce8a5fa0 R15: 00007ffc3a97dbf8 [ 66.732458][ T5971] [ 66.994664][ T29] kauditd_printk_skb: 541 callbacks suppressed [ 66.994748][ T29] audit: type=1400 audit(1770490532.461:4628): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 67.025324][ T29] audit: type=1400 audit(1770490532.471:4629): avc: denied { create } for pid=5974 comm="syz.3.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 67.044987][ T29] audit: type=1400 audit(1770490532.471:4630): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 67.069596][ T29] audit: type=1400 audit(1770490532.481:4631): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 67.094974][ T29] audit: type=1400 audit(1770490532.481:4632): avc: denied { read } for pid=5974 comm="syz.3.1045" name="usbmon3" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=0 [ 67.118608][ T29] audit: type=1400 audit(1770490532.481:4633): avc: denied { read append } for pid=5978 comm="syz.2.1047" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 67.123706][ T5988] netlink: 'syz.1.1049': attribute type 11 has an invalid length. [ 67.143585][ T29] audit: type=1400 audit(1770490532.481:4634): avc: denied { create } for pid=5974 comm="syz.3.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 67.171108][ T29] audit: type=1400 audit(1770490532.491:4635): avc: denied { create } for pid=5980 comm="syz.1.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 67.190733][ T29] audit: type=1400 audit(1770490532.491:4636): avc: denied { create } for pid=5980 comm="syz.1.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 67.195224][ T5994] xt_hashlimit: max too large, truncated to 1048576 [ 67.210487][ T29] audit: type=1400 audit(1770490532.491:4637): avc: denied { map_create } for pid=5974 comm="syz.3.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 67.239401][ T5994] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 67.350120][ T6002] netlink: 'syz.2.1050': attribute type 4 has an invalid length. [ 67.361816][ T6002] netlink: 'syz.2.1050': attribute type 4 has an invalid length. [ 67.413278][ T6021] netlink: 'syz.3.1063': attribute type 11 has an invalid length. [ 67.599986][ T6029] netlink: 'syz.0.1065': attribute type 4 has an invalid length. [ 67.629583][ T6029] netlink: 'syz.0.1065': attribute type 4 has an invalid length. [ 67.964764][ T6070] FAULT_INJECTION: forcing a failure. [ 67.964764][ T6070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.978059][ T6070] CPU: 0 UID: 0 PID: 6070 Comm: syz.1.1084 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 67.978195][ T6070] Tainted: [W]=WARN [ 67.978210][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 67.978221][ T6070] Call Trace: [ 67.978228][ T6070] [ 67.978235][ T6070] __dump_stack+0x1d/0x30 [ 67.978257][ T6070] dump_stack_lvl+0x95/0xd0 [ 67.978299][ T6070] dump_stack+0x15/0x1b [ 67.978317][ T6070] should_fail_ex+0x263/0x280 [ 67.978343][ T6070] should_fail+0xb/0x20 [ 67.978374][ T6070] should_fail_usercopy+0x1a/0x20 [ 67.978480][ T6070] _copy_from_iter+0xcf/0xea0 [ 67.978496][ T6070] ? __alloc_skb+0x3be/0x4b0 [ 67.978527][ T6070] ? tcp_chrono_start+0xb9/0x110 [ 67.978564][ T6070] ? tcp_skb_entail+0x1a0/0x390 [ 67.978583][ T6070] ? skb_page_frag_refill+0x16b/0x2f0 [ 67.978602][ T6070] tcp_sendmsg_locked+0x16df/0x2c40 [ 67.978632][ T6070] ? __pfx_tcp_sendmsg+0x10/0x10 [ 67.978714][ T6070] tcp_sendmsg+0x2f/0x50 [ 67.978739][ T6070] inet_sendmsg+0x76/0xd0 [ 67.978759][ T6070] __sys_sendto+0x3f4/0x4d0 [ 67.978825][ T6070] __x64_sys_sendto+0x76/0x90 [ 67.978857][ T6070] x64_sys_call+0x29a7/0x3000 [ 67.978891][ T6070] do_syscall_64+0xc0/0x2a0 [ 67.978949][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.978971][ T6070] RIP: 0033:0x7fc1bd05aeb9 [ 67.978989][ T6070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.979042][ T6070] RSP: 002b:00007fc1bbab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 67.979062][ T6070] RAX: ffffffffffffffda RBX: 00007fc1bd2d5fa0 RCX: 00007fc1bd05aeb9 [ 67.979074][ T6070] RDX: 0000000000000381 RSI: 00002000000004c0 RDI: 0000000000000003 [ 67.979086][ T6070] RBP: 00007fc1bbab7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.979099][ T6070] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 67.979169][ T6070] R13: 00007fc1bd2d6038 R14: 00007fc1bd2d5fa0 R15: 00007ffe8a136cc8 [ 67.979189][ T6070] [ 68.295002][ T31] ================================================================== [ 68.303224][ T31] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 68.311494][ T31] [ 68.313829][ T31] write to 0xffff88812531c908 of 44 bytes by task 6087 on cpu 1: [ 68.321557][ T31] tty_set_termios+0xc0/0x910 [ 68.326254][ T31] set_termios+0x373/0x4f0 [ 68.330689][ T31] tty_mode_ioctl+0x37f/0x5b0 [ 68.335380][ T31] n_tty_ioctl_helper+0x87/0x370 [ 68.340342][ T31] n_tty_ioctl+0x101/0x230 [ 68.344784][ T31] tty_ioctl+0x83e/0xb80 [ 68.349059][ T31] __se_sys_ioctl+0xce/0x140 [ 68.353679][ T31] __x64_sys_ioctl+0x43/0x50 [ 68.358292][ T31] x64_sys_call+0x14b0/0x3000 [ 68.363073][ T31] do_syscall_64+0xc0/0x2a0 [ 68.367599][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.373500][ T31] [ 68.375828][ T31] read to 0xffff88812531c922 of 1 bytes by task 31 on cpu 0: [ 68.383543][ T31] n_tty_lookahead_flow_ctrl+0x1bd/0x300 [ 68.389187][ T31] tty_port_default_lookahead_buf+0x91/0xc0 [ 68.395103][ T31] flush_to_ldisc+0x288/0x340 [ 68.399796][ T31] process_scheduled_works+0x4cd/0x9d0 [ 68.405349][ T31] worker_thread+0x6bc/0x8b0 [ 68.409978][ T31] kthread+0x488/0x510 [ 68.414080][ T31] ret_from_fork+0x148/0x280 [ 68.418697][ T31] ret_from_fork_asm+0x1a/0x30 [ 68.423485][ T31] [ 68.425840][ T31] value changed: 0x13 -> 0x9b [ 68.430529][ T31] [ 68.432864][ T31] Reported by Kernel Concurrency Sanitizer on: [ 68.439023][ T31] CPU: 0 UID: 0 PID: 31 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.450595][ T31] Tainted: [W]=WARN [ 68.454415][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 68.464576][ T31] Workqueue: events_unbound flush_to_ldisc [ 68.470426][ T31] ==================================================================