last executing test programs: 6.885620687s ago: executing program 0 (id=2709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[], 0x3c}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c00", 0x2d}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)=ANY=[@ANYBLOB="60000000180001000000000000000000020000000000ff00"], 0x60}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x197}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x85e8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x400}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x100}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x42}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}]]}, 0x84}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) 6.8357398s ago: executing program 0 (id=2710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000033879ed66c645fa30934cc312c59e00ad3600f5742ec06b73ba601c54e6ccbf8e371de49957706b2128aa8a147d17029bc359d0600991fd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)) splice(r2, 0x0, r1, 0x0, 0xf3a, 0x0) 5.976159247s ago: executing program 0 (id=2720): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c8d0}, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x20000000002}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0xffd7, 0x0) 5.644529558s ago: executing program 0 (id=2724): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x20000000002}, 0x18) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0xffd7, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast1, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 5.512110287s ago: executing program 0 (id=2725): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.093424795s ago: executing program 0 (id=2733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000580)=ANY=[@ANYBLOB="764a10eb83e0a42da8a0d831d3e2e7b5b59353aced0f31ea78256b17a2620539798d53e13542b4345bc4f017411a77597dd4442ec0", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf25040000001400060065727370616e30000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000000001000f0e00"}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x90}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) r11 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x88a, &(0x7f00000007c0)={[{@nodioread_nolock}, {@test_dummy_encryption, 0x22}, {@data_ordered}, {@nombcache}, {@grpid}, {@grpid, 0x22}, {@dax_always}, {}, {@noblock_validity}], [{@euid_eq}, {@smackfsdef={'smackfsdef', 0x3d, '}\'\v]\xf3dd\x88\f\x1c\'\x90\xff$\xd2\x92E\xc0\xc3\x00\x00\x00\x00\x0fb\x03Aa\xa9\xc1\x8b\xe9\x93D\x05\xc8-\xec\x8ex\x19\xe1\xc5\x97\xaa\xcc\x00'/68}}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESOCT=0x0, @ANYRESHEX=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000480)='ext4_ext_convert_to_initialized_fastpath\x00', r11, 0x0, 0x1000005}, 0x18) 4.943657395s ago: executing program 4 (id=2736): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x4000, &(0x7f0000000580)={[{@orlov}, {@noload}]}, 0x3, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x20008080) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x3f7, 0x400, 0x70bd29, 0x25dfdbfb, {0x5, 0x5, './bus', './bus'}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008000) sendfile(r3, r0, 0x0, 0x3ffff) shutdown(0xffffffffffffffff, 0x1) sendfile(r3, r0, 0x0, 0x7ffff000) 4.140503847s ago: executing program 1 (id=2745): unshare(0x40060480) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000340)={[{@grpquota}, {@lazytime}, {@stripe={'stripe', 0x3d, 0x1200}}, {@quota}]}, 0x1, 0x7c0, &(0x7f0000000380)="$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") r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x75, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x2, 0x1, 0xc, 0x63f1}}}}]}, 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="01000000000000000000090000000e0001006e657464657673696d0000000f0002"], 0x44}}, 0x840) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r6, r5, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0x10c6, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r8, @ANYBLOB="bf4400000000000000000c000000800005"], 0x2ac}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000b40)={0x2d4, r8, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffc000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc926}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7cdf2669}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x663}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe88}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MEDIA={0x148, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa168}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4048805}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) 4.139949268s ago: executing program 3 (id=2746): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) io_getevents(r1, 0x4, 0x0, &(0x7f00000019c0), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000104fcffffff80000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800a00010069706f69620000000400028008000500", @ANYRES32=r4, @ANYBLOB="84e1129a72cdf348c052fa3f63e8c1643bedb8b72246a01314dbe036c7a829ed3a04bfcda97efe862097787a5602c333f606053d1191778c6cf3f6410f4cb0959630085115df5baf96ad3d6a669938901285e36db8dc1352b238fe768bd311f5f11a9204e4348151bec965851b3f2e3f5b748991"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x658080) capset(&(0x7f0000000200)={0x19980330, r2}, &(0x7f00000004c0)={0x1ff, 0x1, 0x3, 0x7f, 0x7, 0x2}) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x3, 0x3, 0x3, 0x0, 0x0, {0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x10}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x5) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$can_raw(r7, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x10000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) connect$inet(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.040945834s ago: executing program 4 (id=2747): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c000080080023"], 0x1c}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) gettid() gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x29, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x20050800) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x20, 0x127c, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x1f5042, 0x5c, 0x37}, 0x66) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000071108f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x81001) 3.947897111s ago: executing program 3 (id=2748): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffef}, 0x27) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='leases_conflict\x00', r3}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4, @ANYBLOB="42dbaa7bdbdb7b321dfa9a191994b7494f8f60430113abec9309787b42da0a0305cdef702c0dc1338de0f875efdd1af2dbbe1d9084fc8bd271f7c88c9c9c7ccea20b94edd1484c5ac1bb612d9b04f87f5c335602a244f0a4f71792eb44cde1175e37f25b1a345a6f776604942dc922100f07b60562776265ae57e0086e98410432f317c67a8705de64cb6f7e9eb837300a6f1d061900b61141bc8fc7f4ca0e4da65877a2ed1993d8f676d129000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="28400000f2c5c5becded450e8d1556142c8c56c76b747b142356a1dfbdbadce3a03e98d0ba4261fdde94db6b37a959b3921e290fe96b93eebea3cffce2d2f1a144024771b2d93048bc777eb79c4ee49576e7cac6ab97123e43a8749dafcaaed15f2dbb074599ebc3e57915e21069b49e3bd5e1c001a0ed273272d9c20d441cee8e0cc531ccde", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf250300000014000180060005004e2200000800060020000000"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x44000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2, 0x8, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x84, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x99}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x400}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.002269723s ago: executing program 1 (id=2749): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000780)=""/219, 0xdb}], 0x1, 0x3b, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff, 0xfff}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={0x0, 0xfffffffffffffe7f, &(0x7f00000009c0)={&(0x7f0000000640)={0x2c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) 3.001552143s ago: executing program 2 (id=2750): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0xffd7, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x3}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000084}, 0x40044) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0039936da8abb4625380b974"], 0x1, 0x539, &(0x7f00000005c0)="$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") 3.000984673s ago: executing program 3 (id=2751): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c000080080023"], 0x1c}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) gettid() gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x29, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x20050800) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x20, 0x127c, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x1f5042, 0x5c, 0x37}, 0x66) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x81001) 3.000450423s ago: executing program 4 (id=2752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000580)=ANY=[@ANYBLOB="764a10eb83e0a42da8a0d831d3e2e7b5b59353aced0f31ea78256b17a2620539798d53e13542b4345bc4f017411a77597dd4442ec0", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf25040000001400060065727370616e30000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000000001000f0e00"}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x90}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x88a, &(0x7f00000007c0)={[{@nodioread_nolock}, {@test_dummy_encryption, 0x22}, {@data_ordered}, {@nombcache}, {@grpid}, {@grpid, 0x22}, {@dax_always}, {}, {@noblock_validity}], [{@euid_eq}, {@smackfsdef={'smackfsdef', 0x3d, '}\'\v]\xf3dd\x88\f\x1c\'\x90\xff$\xd2\x92E\xc0\xc3\x00\x00\x00\x00\x0fb\x03Aa\xa9\xc1\x8b\xe9\x93D\x05\xc8-\xec\x8ex\x19\xe1\xc5\x97\xaa\xcc\x00'/68}}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) 2.936126707s ago: executing program 1 (id=2753): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 2.392948723s ago: executing program 1 (id=2754): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="240003"], 0x10e0}}, 0x20000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="e7ff333ce8152743578d000001010000ff7f0000cc003f4107b40000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) 2.392343082s ago: executing program 2 (id=2755): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/205, 0xcd}, {0x0}], 0x2}}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="8b000000", @ANYRES16=0x0, @ANYBLOB="20002abd7000ffdbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="0a001a0008021100000000000a00060008021100000100000a00060008021100000000000a00060008021100000100000a001a0008021100000100000a001a00ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a001a00ffffffffffff0000"], 0x88}, 0x1, 0x0, 0x0, 0x4004}, 0x48000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x138, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0xe}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "407b9b019aa59d9b40b507a477a8be9fe9bf43177ed03695"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f35150413a63dce1c0bbced196d79000e4bc7d344fb69ec9"}], @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9f95f298be39b08b1520df674a0864a1d3c5ae6e69106618"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fe93ba23978be2ef0a840bfcaac1367be789ab054af2032e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a903138783a87cf899272b1383e05423480b120bb68a28bc"}]]}, 0x138}, 0x1, 0x0, 0x0, 0x4}, 0xc0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 2.392092463s ago: executing program 3 (id=2756): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x4000, &(0x7f0000000580)={[{@orlov}, {@noload}]}, 0x3, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x20008080) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x3f7, 0x400, 0x70bd29, 0x25dfdbfb, {0x5, 0x5, './bus', './bus'}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008000) sendfile(r3, r0, 0x0, 0x3ffff) shutdown(0xffffffffffffffff, 0x1) sendfile(r3, r0, 0x0, 0x7ffff000) 2.370515014s ago: executing program 2 (id=2757): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fdatasync(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002300)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000129"], 0xffe) write$P9_RVERSION(r0, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r1, @ANYRESOCT=r1], 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r4, 0x2000) 1.698329048s ago: executing program 1 (id=2758): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='dlm_ast\x00', r2, 0x0, 0x100}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file2/file0\x00', &(0x7f0000000680), 0x9a60f340e7e7448d) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file2/file0\x00', 0x80000) 1.696070529s ago: executing program 2 (id=2759): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fdatasync(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r5, &(0x7f0000000000)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f0000000140)="9f", 0x1}], 0x2) 1.695758759s ago: executing program 4 (id=2760): bpf$PROG_LOAD(0x5, 0x0, 0x0) personality(0xfe47fef9f5ff7379) uname(&(0x7f0000000000)=""/8) 914.73184ms ago: executing program 2 (id=2761): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)) 914.41509ms ago: executing program 3 (id=2762): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$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") creat(0x0, 0x133) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 913.89423ms ago: executing program 4 (id=2763): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x133) mount(0x0, 0x0, 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 45.920417ms ago: executing program 1 (id=2764): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 45.480847ms ago: executing program 2 (id=2765): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c000080080023"], 0x1c}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x20050800) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x20, 0x127c, &(0x7f0000000580)="$eJzs3T1vW9UfB/BfnLhxnH8e/lAK7UCPYGGymg5MSChCqYRiCVQapBYJyVUcsGLiyLYipUJNO7Ey8hZAjGwg1DeQlYWVLUvFlAG4KLbT2Hloq5LEQnw+i4/O73xz7r25udK9uifeeefrL1ZXWqWVSjtyIyORW49IuylS5GLf64vdz9t3FufL5YWbKd2YvzX3dkpp+urPn3z5/RuP2pMf/zD943hsz3668/j6b9uXti/v/HXr81or1VrpUaOdKuluo9Gu3K1X03KttVpK6cN6tdLazWprrWpzoL5Sb6yvb6bK2vJUcb1ZbbVSZW0z/VqMaDdSu7mZKp9VamupVCqlqWJwovyzhyx9t5tlP0VkWT4uRJZl2UQUYyT+F1MxHQ8i4v/xUrwcF+OVuBSvxmu9Ueex+QAAAAAAAAAAAAAAAAAAAPDfsdtZzT+4/n+yt/5/JmaPrP+/bP0/AAAAAAAAAAAAAAAAAAAAnLqPbt9ZnC+XF26mVIiof7WxtLHU/ezW51eiFvWoxrWYiT+is/q/KyKbyLIb75cXrqWO0YjY6uW3NpZGn+RHI6ox1/l3Ar38WKe219rLz3XzKR7W+/LjUezmC7GXz8VMXIyt/P70hYP89WPzhXjrzb7tL8VMthXRiHosd+Y+yN+fS+m9D8qH8lc6454qd8a/HAAAADglpfTE7OD9b/f+vVQ6qd7NP/X5QDbwfODQ/fVYXBkb7r4T0dq8t1qp16vNwUahv+dCb2zzhMFn2xgfxqT/rJF7rsHfRkSv58/soDR+6DgXD0q5gdI3v0Sc3V7cf3zehy7/zDFxb/Xq5NFSoXd+nsZmjPT35J8jNRETncmHetY97B2BB0dLe5fxF/rJQ7kccc76/rgAAAAAAAAAAAD4Fzn27b/9r3jv9fweL/x+4lgc82bZu0PZUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JsdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBUAAP//o5+4CA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 45.078147ms ago: executing program 3 (id=2766): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x4000, &(0x7f0000000580)={[{@orlov}, {@noload}]}, 0x3, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x20008080) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x3f7, 0x400, 0x70bd29, 0x25dfdbfb, {0x5, 0x5, './bus', './bus'}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008000) sendfile(r3, r0, 0x0, 0x3ffff) sendfile(r3, r0, 0x0, 0x7ffff000) 0s ago: executing program 4 (id=2767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x61, 0x6, @multicast}, 0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000c80)=""/198, 0xc6, 0x8001) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x2) syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f00000004c0)={[{@grpquota}, {@journal_checksum}, {@quota}, {@debug}, {@dioread_lock}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf}}, {@noauto_da_alloc}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000000100000000000000040000000000001000000000000000200000000000000000"], 0x24, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x883053, 0x0, 0xf8, 0x0, &(0x7f00000000c0)) r4 = open(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0xffffffff, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000100"/14], 0x48) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000300)={0x8, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x0, 0x3, 0x1a}, 0x2c) syz_mount_image$iso9660(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x1, 0xd7c, &(0x7f0000000e40)="$eJzs3U1sXOdaB/D/mdjJ1Cmt26ZpWpV2SBqUG0JqO21C1C6u44/UxYkr20Etd3GbNk5l1U2qpkBbWBTpAptb8Q0CdpVAERK0qEIqVwKVHbBggRCVuumG2y0WCygSIuicGX8k9VcS2+Mb/37WeM6cec5539dnPM95z5w5b/hRdu3atep2i4/P/flmVpat59Tglx9+/EF5+9X3szM78nTxaVJP0kg6kuxLOgcGx8fOrLKi15OXk3yWFEl2pXm/Ji+n+M3cvfD4sxR/UpbLxrvGttbu1x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGxFxcBgT09vkdGRs+debCyvGgJ8hefn1veDatTv4gerlpsU5S31+txQ3/vunh8xvLin/L0/e5pr21MNSJ563tu9t/uZBzpqc8uvUKFNceXd914/PzMz9Va7K9Imp4fOjkyMjZzpPz3UGJkYa5w8frznyeeGJxrDI6NDEy9NTA6daQyMD/VPjo03Dg18q9F78uSxxtDRl8bOnT092D86NDfzxE/39fQcbzx/9IWh/vGJsbNPPn90YuC5kdHRkbOnq5jy6TLmRPlC/NmRycbkUP+ZRuPi9MzUsdUqWQb1riWob7Wgvp6+vt7evr7e40+ffPpET0/HN2b03CDfiGj/i5b22pD3cbgVtVb+z2hGcjbn8mIaS/4MZDDjGcuZZZ5vmcv/B58cWrHcxfn/0easR7sX8v/9qfL/3uba9i6X/5epy+b9XMm7eS+v53xmMpOpvNX2Gm3uz+kM5WxGMpGxjORM+qs5jdacRk7meI6nJ9/NcxnORBoZzkhGM5SJvJSJTGaoekUNZDxD6c9kxjKeRg5lIN9KI705mZM5lkaGcjQvZSzncjanM5j+ai0XM1393Y+tUMf5oN61BPWtECT/c/s26q0cbtq1ufwPAGwfp4b65X8A2GbOToz39Mn/ALCtTOr/AwAAAAAAAAAAAAAAAAAAAAAAAAAAwHorUst4kp//99li8ciU9WrA/2UX21lUS9ZSNMfyTf34sRMDw73Dgz09PT29J088vSm1n3dfxiYm+xsDl994862pK1emLjTOXZp+9fKFqTWv4XaXv0nPdn+1a/fe7mdOlg8OvzZ1afrK5ek3zr+2YQUCwCIdqeWrJI9/NFv8RCuX5/C5weHG6M81Ri5dvLwotjY3TMBt5spV9i022s5NLU1uB2AL6kwtv5bk7f+eLfaXOb61D1D7qWpgwHZXb1nVcYci+TRyLADcrJ2pZSzJhfv+sjiQZEfugP59vdwnqBpxbnC4asjM9PlLb6c6hrGjGdV940Jzxz62+L5Ed/Ltsq47jdkIwK3blVr+Kskb99bzRPV5AABwp6unluZ5f7PFwXZXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAO4QRWp5MMlTfztb9Cyaf5vj//cf35TazzP+PwDchI7U8l+t8f97jf+//uR2ALagztTy+63x//uM/w8A28LO1PLd1vj/x4z/v/X3JYz/D8A62JVa/r41/v9Txv8HgG2hnlqa5/3NFk+3uzIAAAAAAAAAAAAAAAAAAAAAAAAAAABwh7grtfwwyRfP/2I1rszicekXjzBz9yrDzZRPH21Nr2VMvs7WWIO1ovxZxwYBAKuqp5Znq6nZor/dlQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2tFpq+eckxeezRYok7yeNNO972l05AGBjFLX8MMmP/+tsmf3zbPdXu3bv7X7mZJId2VHtEhSL48cmJvsbA5ffePOtqStXpi40zl2afvXyham1FlcfGBwfO7MRDVmTnRtc/523XcN6uU+2yOGqwucGh6tKz0yfv/R2ObtW7LjtogDYvuqp5X+rqdmiaHdlAIBN0VnU8mNJXvmfq/P9zo5mn7+j+aindq3lT/cs9E3rrZ2FuX2GueMGD6wwveT+xeHXpi5NX7k8/cb511brhNdb5er5AsDtKYpa/iHJ6Vf2VXm1SNc3j0G34v4jyYnfbrTi0lXGzR3w3lUl9/rF6Zmpo69enrlQxv9Okn/8s0db8bWdZXxrpyKdC/E9ZexHST7/67nYVLG7WrH1hdjeMvZEkvOfXB9bb8XetRDbV8buTzLzu9fH3tWK7VqIPbaxf2UA2FrK/v8vJfnDI1fnc/NK/f+5Pvxk636j+/+dixaqt8rtXK/GA8A2VfaR/6nV/+9cpf//L0k++r9HW3HNvnRX6/ndi/rzm98KAOBmlP3/F8p8/kdX54/lt/r/rW72Qv//e90LffgLrfuN7v/vuqH/X5b70Ho1HgC2qTL/n0rS99LV+c/b15L/5/r9G53/6zfk/7LcfevVeADYpsr8/50kEy9cnT+Hbi35/9CB1vKtxxuV/++6If+X5T68bq0HgO2pzP/fT/LLL16dPy9+K+X/riXy/2Pr1noA2J7K/N+f5Iu/uDp/TH8t+f+R1rcDNvr4/+4b8n9Z7oF1az0AbE9F9hTNzNyZB6up4ZHRIafwAwAAwJ2kGt9nz9zh/uLBFPr/AAAAcKcpsrf1+X9XHmpOXcx0ZjJl+H8AAAC4U1Sf/+9tDueXFA+l0P8HAACAO83+6vv/1XcAqsv/1vNedbmejlp1bKAoVo8ojmRfM2Jfa1SgC62I5vGFomt4ZHTo6MDY6DO9+cnqKgPVNw2WXFtn9fWDw3m4GfVw65pEXdevsV5G9R59pjeH80gz8pHmFQkPHFoisq8Z+Xgz8vEVIo+VkQBwp9u/Sj5eS/4/nCeaEU80rwrY8cgSmbVHZgWArWJ/df5/dQ7Asvl/lYjiqVX6//fPn1JwNK/mcmZyIUeqbxtUZxwsudauRachHFnlaMBCbG+OrHI8YCG2L0dWOSKwEHts07cLAGyk/avk4bXk/yOr9P+7nFIIAFvKlXffe/38zMzUWxs40e42AgDXk6UBAAAAAAAAAAAAAAAAAAAAAAAAAABg/W3G9f9NmDDxozbR7ncmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAO0OR7Fhqfi3ZlaQnyZObX6uN8367K9Bmxdf5Ou/knnbXAwAAAAAAAAAAAAAAAAAAAAAAAAAAAADgTtO6/n8tzfvdzVnpqCUHk7yc5DvtruN6+rrdFWizRdf/L7d5rhXpaG72FJ0Dg+NjZ8rNX439UPvyw48/KG+3Uk65grKE6waXaJWw/FL3VUt1DU5def3ty282Bk9VlTw1OTw6eOb0+LcXAvcWnySNNG9z5ur7Kwf/7reWaPknZUvXVu5wVe7gN8t9aKmlVy53JdMzU31lSZNDL07+wqXpdxY9dX/xcHLgUHLo+pJeK2/LtPDhdK5UWjFb/HpxT/4gL1fbv/xrFNeKchPdW7X/rovTM1NHX708c2GZOnUXZfsvJPW11+mh6v1kSdWrrtZZltpTBZW/9qy8vpUtWmPvMm24r9iXpOum2rBv+TZkDX/3Vo2OLVOjB4rHbnpLP7ZKiUvXc7b4ongu/5bvLRr/o1Zu/4NZy39nGVNFLnqlLBtZa0ZWLe9bcZ3L/leyAb6fV/Iz89u/tuj9v7WtNuf9aFGJm/R/UWWkPTdkpNa7z3LLtOq5pxm1TD0fLA4kHY/c1DvKgZXfUTbs//+Pi0P5z7xv/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDrK5IdS82vJQeTdCe5t3zcSK6tR3m1rmI9VnPL3m9r6e1XfJ2v807uaXc9AAAAAAAAAFgfpwa//PDjD8pb9Xn8jjxRfJrUm5/0dyTpLn6vc2BwfOzMKivqTF5O8tkt1KFcLncvPP6sfLTvFlYEAKxJLbX8RpLi89nib4rmiXGNNO972l05AGBD/H8AAAD//6Ha/OA=") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) kernel console output (not intermixed with test programs): capacity change from 0 to 1024 [ 94.830707][ T5789] EXT4-fs: test_dummy_encryption option not supported [ 94.943456][ T5795] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.516' sets config #1 [ 95.050228][ T5803] loop4: detected capacity change from 0 to 1024 [ 95.057100][ T5803] EXT4-fs: Invalid want_extra_isize 15 [ 95.077977][ T5803] loop4: detected capacity change from 0 to 1768 [ 95.084692][ T5803] iso9660: Unknown parameter 'sessionÐòž¼' [ 96.030348][ T5813] loop0: detected capacity change from 0 to 512 [ 96.251534][ T5813] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 96.271855][ T5832] loop3: detected capacity change from 0 to 1024 [ 96.278864][ T5832] EXT4-fs: Invalid want_extra_isize 15 [ 96.289152][ T5813] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.011651][ T5813] EXT4-fs (loop0): mount failed [ 97.062276][ T5829] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 97.301054][ T5829] SELinux: failed to load policy [ 97.338024][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 97.485100][ T5833] loop2: detected capacity change from 0 to 1024 [ 97.491874][ T5833] EXT4-fs: Invalid want_extra_isize 15 [ 97.643650][ T5833] loop2: detected capacity change from 0 to 1768 [ 97.650553][ T5833] iso9660: Unknown parameter 'sessionÐòž¼' [ 97.658623][ T5841] loop0: detected capacity change from 0 to 2048 [ 97.693483][ T5841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.720839][ T3321] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 97.739979][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.749812][ T5848] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.535' sets config #1 [ 97.946110][ T5858] loop1: detected capacity change from 0 to 1024 [ 97.952815][ T5858] EXT4-fs: Invalid want_extra_isize 15 [ 98.797315][ T5865] loop4: detected capacity change from 0 to 1024 [ 98.804162][ T5865] EXT4-fs: Invalid want_extra_isize 15 [ 98.822325][ T5860] loop4: detected capacity change from 0 to 1768 [ 98.828889][ T5860] iso9660: Unknown parameter 'sessionÐòž¼' [ 98.865098][ T5864] loop2: detected capacity change from 0 to 1024 [ 98.881898][ T5864] EXT4-fs: test_dummy_encryption option not supported [ 98.915835][ T5874] loop3: detected capacity change from 0 to 512 [ 99.010721][ T5874] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 99.021013][ T5874] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 99.036902][ T5874] EXT4-fs (loop3): mount failed [ 99.055862][ T5876] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 99.188952][ T5876] SELinux: failed to load policy [ 99.232298][ T5893] loop4: detected capacity change from 0 to 1024 [ 99.239263][ T5893] EXT4-fs: Invalid want_extra_isize 15 [ 99.444143][ T5892] loop0: detected capacity change from 0 to 2048 [ 99.565220][ T5892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.129907][ T3321] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 100.148344][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.158767][ T5908] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.552' sets config #1 [ 100.231481][ T5910] loop3: detected capacity change from 0 to 1024 [ 100.238422][ T5910] EXT4-fs: Invalid want_extra_isize 15 [ 100.286486][ T5910] loop3: detected capacity change from 0 to 1768 [ 100.294097][ T5910] iso9660: Unknown parameter 'sessionÐòž¼' [ 100.865886][ T5911] loop2: detected capacity change from 0 to 1024 [ 100.872942][ T5911] EXT4-fs: Invalid want_extra_isize 15 [ 101.210449][ T5931] loop3: detected capacity change from 0 to 512 [ 101.251051][ T5936] loop4: detected capacity change from 0 to 1024 [ 101.251083][ T5926] SELinux: policydb magic number 0xc000 does not match expected magic number 0xf97cff8c [ 101.251443][ T5936] EXT4-fs: test_dummy_encryption option not supported [ 101.258239][ T5926] SELinux: failed to load policy [ 101.268851][ T5931] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 101.293266][ T5931] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.405081][ T5945] loop1: detected capacity change from 0 to 1024 [ 101.412153][ T5945] EXT4-fs: Invalid want_extra_isize 15 [ 101.415607][ T5931] EXT4-fs (loop3): mount failed [ 101.434020][ T5934] loop1: detected capacity change from 0 to 1768 [ 101.441334][ T5934] iso9660: Unknown parameter 'sessionÐòž¼' [ 101.508014][ T5950] loop2: detected capacity change from 0 to 1024 [ 101.514978][ T5950] EXT4-fs: Invalid want_extra_isize 15 [ 102.622067][ T5955] loop3: detected capacity change from 0 to 1024 [ 102.629030][ T5955] EXT4-fs: Invalid want_extra_isize 15 [ 102.647487][ T5955] loop3: detected capacity change from 0 to 1768 [ 102.654424][ T5955] iso9660: Unknown parameter 'sessionÐòž¼' [ 102.674858][ T5957] loop1: detected capacity change from 0 to 2048 [ 102.936352][ T5957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.024700][ T5969] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.568' sets config #1 [ 103.035915][ T3316] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 103.066056][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.129927][ T5979] loop2: detected capacity change from 0 to 512 [ 103.142080][ T5979] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 103.152917][ T5979] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.168290][ T5979] EXT4-fs (loop2): mount failed [ 103.326993][ T5988] SELinux: policydb magic number 0xc000 does not match expected magic number 0xf97cff8c [ 103.337337][ T5988] SELinux: failed to load policy [ 103.354275][ T5998] loop1: detected capacity change from 0 to 1024 [ 103.361634][ T5998] EXT4-fs: Invalid want_extra_isize 15 [ 104.150765][ T5999] loop3: detected capacity change from 0 to 1024 [ 104.157954][ T5999] EXT4-fs: Invalid want_extra_isize 15 [ 104.326772][ T5993] loop3: detected capacity change from 0 to 1768 [ 104.347498][ T6007] loop2: detected capacity change from 0 to 2048 [ 104.354407][ T5993] iso9660: Unknown parameter 'sessionÐòž¼' [ 104.371969][ T6007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.196328][ T6014] loop0: detected capacity change from 0 to 1024 [ 105.203336][ T6014] EXT4-fs: Invalid want_extra_isize 15 [ 105.223748][ T6015] loop1: detected capacity change from 0 to 1024 [ 105.230786][ T6015] EXT4-fs: Invalid want_extra_isize 15 [ 105.259598][ T6015] loop1: detected capacity change from 0 to 1768 [ 105.266416][ T6015] iso9660: Unknown parameter 'sessionÐòž¼' [ 105.327233][ T6018] loop4: detected capacity change from 0 to 1024 [ 105.335432][ T6018] EXT4-fs: test_dummy_encryption option not supported [ 105.373080][ T3324] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 105.394473][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.437694][ T6027] loop0: detected capacity change from 0 to 512 [ 105.609400][ T6038] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.591' sets config #1 [ 105.685424][ T6027] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 105.695714][ T6027] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.711040][ T6044] loop3: detected capacity change from 0 to 1024 [ 105.718660][ T6044] EXT4-fs: Invalid want_extra_isize 15 [ 105.752286][ T6027] EXT4-fs (loop0): mount failed [ 106.722291][ T6059] loop1: detected capacity change from 0 to 2048 [ 106.737022][ T6051] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 106.746732][ T6051] SELinux: failed to load policy [ 106.752078][ T6059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.831393][ T6074] loop2: detected capacity change from 0 to 1024 [ 106.831861][ T6074] EXT4-fs: Invalid want_extra_isize 15 [ 106.856581][ T6074] loop2: detected capacity change from 0 to 1768 [ 106.857122][ T6074] iso9660: Unknown parameter 'sessionÐòž¼' [ 106.966499][ T3316] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 107.155824][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.403216][ T6082] loop0: detected capacity change from 0 to 1024 [ 107.410181][ T6082] EXT4-fs: Invalid want_extra_isize 15 [ 107.441360][ T6082] loop0: detected capacity change from 0 to 1768 [ 107.448288][ T6082] iso9660: Unknown parameter 'sessionÐòž¼' [ 107.582884][ T6084] loop1: detected capacity change from 0 to 512 [ 107.625005][ T6084] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 107.783249][ T6084] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.804472][ T6084] EXT4-fs (loop1): mount failed [ 107.995355][ T6093] loop2: detected capacity change from 0 to 1024 [ 108.002437][ T6093] EXT4-fs: Invalid want_extra_isize 15 [ 108.230893][ T6098] loop3: detected capacity change from 0 to 1024 [ 108.256316][ T6098] EXT4-fs: test_dummy_encryption option not supported [ 108.266069][ T6100] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.608' sets config #1 [ 108.579045][ T6109] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 108.589021][ T6109] SELinux: failed to load policy [ 108.786374][ T6119] loop2: detected capacity change from 0 to 2048 [ 108.844877][ T6119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.027525][ T3324] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 109.110861][ T6131] loop1: detected capacity change from 0 to 1024 [ 109.117979][ T6131] EXT4-fs: Invalid want_extra_isize 15 [ 109.147183][ T6131] loop1: detected capacity change from 0 to 1768 [ 109.154251][ T6131] iso9660: Unknown parameter 'sessionÐòž¼' [ 109.218129][ T6130] loop4: detected capacity change from 0 to 512 [ 109.232622][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.405212][ T6130] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 110.002375][ T6130] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 110.024811][ T6130] EXT4-fs (loop4): mount failed [ 110.475519][ T6140] loop0: detected capacity change from 0 to 1024 [ 110.482644][ T6140] EXT4-fs: Invalid want_extra_isize 15 [ 111.049984][ T6139] loop0: detected capacity change from 0 to 1768 [ 111.056607][ T6139] iso9660: Unknown parameter 'sessionÐòž¼' [ 111.065368][ T6141] uprobe: syz.2.620:6141 failed to unregister, leaking uprobe [ 111.228061][ T6161] loop3: detected capacity change from 0 to 1024 [ 111.235143][ T6161] EXT4-fs: test_dummy_encryption option not supported [ 111.245499][ T6165] loop0: detected capacity change from 0 to 2048 [ 111.406720][ T6169] loop4: detected capacity change from 0 to 1024 [ 111.413533][ T6169] EXT4-fs: Invalid want_extra_isize 15 [ 111.451928][ T6166] SELinux: policydb magic number 0xc000 does not match expected magic number 0xf97cff8c [ 111.490762][ T6166] SELinux: failed to load policy [ 111.603229][ T6177] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.633' sets config #1 [ 111.626407][ T6165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.886544][ T3321] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 112.145707][ T6184] loop4: detected capacity change from 0 to 512 [ 112.166881][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.217583][ T6184] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 112.234852][ T6184] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.255254][ T6184] EXT4-fs (loop4): mount failed [ 112.493929][ T6205] loop0: detected capacity change from 0 to 1024 [ 112.501063][ T6205] EXT4-fs: Invalid want_extra_isize 15 [ 112.528794][ T6205] loop0: detected capacity change from 0 to 1768 [ 112.535610][ T6205] iso9660: Unknown parameter 'sessionÐòž¼' [ 112.984123][ T6212] loop2: detected capacity change from 0 to 1024 [ 112.991064][ T6212] EXT4-fs: Invalid want_extra_isize 15 [ 113.020463][ T6212] loop2: detected capacity change from 0 to 1768 [ 113.027313][ T6212] iso9660: Unknown parameter 'sessionÐòž¼' [ 113.066789][ T6207] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 113.118213][ T6207] SELinux: failed to load policy [ 113.351581][ T6218] loop1: detected capacity change from 0 to 2048 [ 113.363162][ T6218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.440281][ T6225] loop0: detected capacity change from 0 to 1024 [ 113.447192][ T6225] EXT4-fs: Invalid want_extra_isize 15 [ 113.627188][ T3316] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 113.790593][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.854584][ T6242] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.650' sets config #1 [ 113.872756][ T6244] loop2: detected capacity change from 0 to 1024 [ 113.879612][ T6244] EXT4-fs: test_dummy_encryption option not supported [ 114.444871][ T6265] loop0: detected capacity change from 0 to 1024 [ 114.453762][ T6261] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 114.464298][ T6265] EXT4-fs: Ignoring removed orlov option [ 114.470166][ T6261] SELinux: failed to load policy [ 114.479248][ T6265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.693783][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.953343][ T6312] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.680' sets config #1 [ 114.963626][ T6292] SELinux: policydb magic number 0xc000 does not match expected magic number 0xf97cff8c [ 114.975866][ T6292] SELinux: failed to load policy [ 114.998189][ T6317] loop1: detected capacity change from 0 to 1024 [ 115.005183][ T6317] EXT4-fs: Invalid want_extra_isize 15 [ 115.187645][ T6327] loop2: detected capacity change from 0 to 1024 [ 115.194828][ T6327] EXT4-fs: test_dummy_encryption option not supported [ 115.921534][ T6350] loop4: detected capacity change from 0 to 512 [ 115.942148][ T6344] bond0 (unregistering): Released all slaves [ 115.943045][ T6350] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 115.958679][ T6350] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.974600][ T6350] EXT4-fs (loop4): mount failed [ 116.059048][ T6359] netlink: 14 bytes leftover after parsing attributes in process `syz.0.691'. [ 116.077629][ T6344] netlink: 68 bytes leftover after parsing attributes in process `syz.0.691'. [ 116.108240][ T6364] loop2: detected capacity change from 0 to 2048 [ 116.207000][ T6367] loop3: detected capacity change from 0 to 1024 [ 116.213825][ T6367] EXT4-fs: Invalid want_extra_isize 15 [ 116.231420][ T6367] loop3: detected capacity change from 0 to 1768 [ 116.238198][ T6367] iso9660: Unknown parameter 'sessionÐòž¼' [ 117.048416][ T6368] loop4: detected capacity change from 0 to 1024 [ 117.055181][ T6368] EXT4-fs: Invalid want_extra_isize 15 [ 117.067746][ T6364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.082325][ T6357] SELinux: policydb magic number 0xc000 does not match expected magic number 0xf97cff8c [ 117.107655][ T3324] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 117.149533][ T6357] SELinux: failed to load policy [ 117.162246][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.259496][ T6391] loop3: detected capacity change from 0 to 512 [ 117.282820][ T6393] loop0: detected capacity change from 0 to 1024 [ 117.289766][ T6393] EXT4-fs: test_dummy_encryption option not supported [ 117.301336][ T6400] loop4: detected capacity change from 0 to 2048 [ 117.309103][ T6391] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 117.319364][ T6391] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.334561][ T6391] EXT4-fs (loop3): mount failed [ 117.342591][ T6403] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.699' sets config #1 [ 117.355780][ T6400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.386376][ T3312] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 117.410880][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.634101][ T6416] loop3: detected capacity change from 0 to 1024 [ 117.640974][ T6416] EXT4-fs: Invalid want_extra_isize 15 [ 117.661034][ T6416] loop3: detected capacity change from 0 to 1768 [ 117.667682][ T6416] iso9660: Unknown parameter 'sessionÐòž¼' [ 118.694974][ T6435] loop1: detected capacity change from 0 to 512 [ 118.740771][ T6435] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 118.752998][ T6435] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.785730][ T6435] EXT4-fs (loop1): mount failed [ 118.853495][ T6451] loop0: detected capacity change from 0 to 1024 [ 118.860629][ T6451] EXT4-fs: Invalid want_extra_isize 15 [ 118.899373][ T6450] loop3: detected capacity change from 0 to 1024 [ 118.906488][ T6450] EXT4-fs: test_dummy_encryption option not supported [ 119.098258][ T6452] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 119.112695][ T6452] SELinux: failed to load policy [ 119.916220][ T29] audit: type=1404 audit(1759829629.017:2459): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 120.080799][ T29] audit: type=1400 audit(1759829629.047:2460): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 120.105126][ T29] audit: type=1400 audit(1759829629.107:2461): avc: denied { map_create } for pid=6465 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.124179][ T29] audit: type=1400 audit(1759829629.107:2462): avc: denied { create } for pid=6465 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 120.143823][ T29] audit: type=1400 audit(1759829629.107:2463): avc: denied { read write } for pid=6465 comm="syz.0.728" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=0 [ 120.168481][ T29] audit: type=1400 audit(1759829629.117:2464): avc: denied { read write } for pid=6465 comm="syz.0.728" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 120.192448][ T29] audit: type=1400 audit(1759829629.127:2465): avc: denied { allowed } for pid=6465 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 120.211685][ T29] audit: type=1400 audit(1759829629.127:2466): avc: denied { map_create } for pid=6465 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.628707][ T6508] netlink: 14 bytes leftover after parsing attributes in process `syz.2.745'. [ 120.681514][ T6516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.745'. [ 120.696869][ T6507] bond1 (unregistering): Released all slaves [ 120.904907][ T6508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.928908][ T6508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.957550][ T6508] bond0 (unregistering): Released all slaves [ 122.312491][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 122.312535][ T29] audit: type=1400 audit(1759830143.395:2702): avc: denied { prog_load } for pid=6576 comm="syz.2.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.337863][ T29] audit: type=1400 audit(1759830143.395:2703): avc: denied { prog_load } for pid=6576 comm="syz.2.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.356882][ T29] audit: type=1400 audit(1759830143.415:2704): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.466375][ T29] audit: type=1400 audit(1759830143.495:2705): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.490702][ T29] audit: type=1400 audit(1759830143.515:2706): avc: denied { prog_load } for pid=6579 comm="syz.4.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.509885][ T29] audit: type=1400 audit(1759830143.515:2707): avc: denied { prog_load } for pid=6579 comm="syz.4.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.529133][ T29] audit: type=1400 audit(1759830143.515:2708): avc: denied { map_create } for pid=6574 comm="syz.0.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.548563][ T29] audit: type=1400 audit(1759830143.515:2710): avc: denied { open } for pid=6579 comm="syz.4.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 122.567882][ T29] audit: type=1400 audit(1759830143.515:2709): avc: denied { prog_load } for pid=6574 comm="syz.0.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.587101][ T29] audit: type=1400 audit(1759830143.515:2711): avc: denied { prog_load } for pid=6579 comm="syz.4.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.735654][ T6605] bond0 (unregistering): Released all slaves [ 122.778093][ T6605] netlink: 14 bytes leftover after parsing attributes in process `syz.2.785'. [ 122.789362][ T6605] netlink: 68 bytes leftover after parsing attributes in process `syz.2.785'. [ 124.618304][ T6687] netlink: 14 bytes leftover after parsing attributes in process `syz.0.816'. [ 124.667335][ T6683] bond0 (unregistering): Released all slaves [ 124.668069][ T6690] netlink: 68 bytes leftover after parsing attributes in process `syz.0.816'. [ 126.081640][ T6784] bond0 (unregistering): Released all slaves [ 126.101331][ T6788] bond0 (unregistering): Released all slaves [ 126.112696][ T6792] netlink: 14 bytes leftover after parsing attributes in process `syz.0.856'. [ 126.122081][ T6792] netlink: 68 bytes leftover after parsing attributes in process `syz.0.856'. [ 126.145982][ T6795] netlink: 14 bytes leftover after parsing attributes in process `syz.1.859'. [ 126.188554][ T6788] netlink: 68 bytes leftover after parsing attributes in process `syz.1.859'. [ 126.416500][ T6815] syz.0.868 uses obsolete (PF_INET,SOCK_PACKET) [ 126.798095][ T6837] FAULT_INJECTION: forcing a failure. [ 126.798095][ T6837] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.811287][ T6837] CPU: 1 UID: 0 PID: 6837 Comm: syz.1.878 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.811318][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.811338][ T6837] Call Trace: [ 126.811347][ T6837] [ 126.811356][ T6837] __dump_stack+0x1d/0x30 [ 126.811389][ T6837] dump_stack_lvl+0xe8/0x140 [ 126.811415][ T6837] dump_stack+0x15/0x1b [ 126.811432][ T6837] should_fail_ex+0x265/0x280 [ 126.811551][ T6837] should_fail+0xb/0x20 [ 126.811619][ T6837] should_fail_usercopy+0x1a/0x20 [ 126.811645][ T6837] _copy_from_user+0x1c/0xb0 [ 126.811674][ T6837] ___sys_sendmsg+0xc1/0x1d0 [ 126.811788][ T6837] __x64_sys_sendmsg+0xd4/0x160 [ 126.811858][ T6837] x64_sys_call+0x191e/0x3000 [ 126.811881][ T6837] do_syscall_64+0xd2/0x200 [ 126.811902][ T6837] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 126.811934][ T6837] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 126.811978][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.812007][ T6837] RIP: 0033:0x7fd19c04eec9 [ 126.812026][ T6837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.812044][ T6837] RSP: 002b:00007fd19aaaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.812071][ T6837] RAX: ffffffffffffffda RBX: 00007fd19c2a5fa0 RCX: 00007fd19c04eec9 [ 126.812087][ T6837] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000003 [ 126.812134][ T6837] RBP: 00007fd19aaaf090 R08: 0000000000000000 R09: 0000000000000000 [ 126.812145][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.812193][ T6837] R13: 00007fd19c2a6038 R14: 00007fd19c2a5fa0 R15: 00007ffe3e118e18 [ 126.812214][ T6837] [ 127.034996][ T6841] bond0: option min_links: invalid value (18446744073709551608) [ 127.042762][ T6841] bond0: option min_links: allowed values 0 - 2147483647 [ 127.051269][ T6841] bond0 (unregistering): Released all slaves [ 127.322721][ T29] kauditd_printk_skb: 798 callbacks suppressed [ 127.322738][ T29] audit: type=1400 audit(1759830660.425:3510): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 127.357037][ T29] audit: type=1400 audit(1759830660.455:3511): avc: denied { map_create } for pid=6877 comm="syz.2.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.390945][ T29] audit: type=1400 audit(1759830660.475:3512): avc: denied { prog_load } for pid=6877 comm="syz.2.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.409998][ T29] audit: type=1400 audit(1759830660.475:3513): avc: denied { prog_load } for pid=6877 comm="syz.2.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.429093][ T29] audit: type=1400 audit(1759830660.475:3514): avc: denied { bpf } for pid=6877 comm="syz.2.895" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 127.449812][ T29] audit: type=1400 audit(1759830660.475:3515): avc: denied { prog_load } for pid=6877 comm="syz.2.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.468950][ T29] audit: type=1400 audit(1759830660.475:3516): avc: denied { map_create } for pid=6877 comm="syz.2.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.488078][ T29] audit: type=1400 audit(1759830660.475:3517): avc: denied { prog_load } for pid=6877 comm="syz.2.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.507039][ T29] audit: type=1400 audit(1759830660.485:3518): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 127.534280][ T29] audit: type=1400 audit(1759830660.555:3519): avc: denied { map_create } for pid=6855 comm="syz.1.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.918360][ T6906] netlink: 'syz.0.907': attribute type 13 has an invalid length. [ 127.926170][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 128.709768][ T6946] bond0 (unregistering): Released all slaves [ 128.739772][ T6953] netlink: 14 bytes leftover after parsing attributes in process `syz.3.924'. [ 128.773566][ T6946] netlink: 68 bytes leftover after parsing attributes in process `syz.3.924'. [ 129.771841][ T7026] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 132.152395][ T7199] bond0 (unregistering): Released all slaves [ 132.197143][ T7201] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1037'. [ 132.220673][ T7199] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1037'. [ 132.339451][ T29] kauditd_printk_skb: 887 callbacks suppressed [ 132.339495][ T29] audit: type=1400 audit(1759832201.433:4407): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 132.376856][ T29] audit: type=1400 audit(1759832201.473:4408): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 132.435940][ T29] audit: type=1400 audit(1759832201.513:4409): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 132.460271][ T29] audit: type=1400 audit(1759832201.513:4410): avc: denied { map_create } for pid=7208 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.479472][ T29] audit: type=1400 audit(1759832201.513:4411): avc: denied { prog_load } for pid=7208 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.498648][ T29] audit: type=1400 audit(1759832201.513:4412): avc: denied { map_create } for pid=7208 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.517850][ T29] audit: type=1400 audit(1759832201.513:4413): avc: denied { prog_load } for pid=7208 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.537081][ T29] audit: type=1400 audit(1759832201.513:4414): avc: denied { prog_load } for pid=7208 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.556147][ T29] audit: type=1400 audit(1759832201.513:4415): avc: denied { create } for pid=7208 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 132.576681][ T29] audit: type=1400 audit(1759832201.513:4416): avc: denied { create } for pid=7208 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 132.642690][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 132.651805][ T7218] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 132.660103][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 132.669121][ T7218] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 132.677206][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 132.686160][ T7218] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 132.696497][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 132.705432][ T7218] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 132.719887][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 132.728911][ T7218] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 132.746888][ T7218] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 132.766603][ T7218] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 132.780525][ T7218] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 132.788090][ T7218] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 133.693024][ T7268] FAULT_INJECTION: forcing a failure. [ 133.693024][ T7268] name failslab, interval 1, probability 0, space 0, times 0 [ 133.705748][ T7268] CPU: 1 UID: 0 PID: 7268 Comm: syz.2.1063 Not tainted syzkaller #0 PREEMPT(voluntary) [ 133.705848][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.705863][ T7268] Call Trace: [ 133.705870][ T7268] [ 133.705877][ T7268] __dump_stack+0x1d/0x30 [ 133.705907][ T7268] dump_stack_lvl+0xe8/0x140 [ 133.705929][ T7268] dump_stack+0x15/0x1b [ 133.705949][ T7268] should_fail_ex+0x265/0x280 [ 133.706035][ T7268] should_failslab+0x8c/0xb0 [ 133.706061][ T7268] kmem_cache_alloc_noprof+0x50/0x480 [ 133.706086][ T7268] ? getname_flags+0x80/0x3b0 [ 133.706112][ T7268] getname_flags+0x80/0x3b0 [ 133.706198][ T7268] __x64_sys_renameat2+0x5f/0x90 [ 133.706222][ T7268] x64_sys_call+0x3f9/0x3000 [ 133.706246][ T7268] do_syscall_64+0xd2/0x200 [ 133.706274][ T7268] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 133.706383][ T7268] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 133.706428][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.706455][ T7268] RIP: 0033:0x7f59b824eec9 [ 133.706474][ T7268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.706496][ T7268] RSP: 002b:00007f59b6caf038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 133.706521][ T7268] RAX: ffffffffffffffda RBX: 00007f59b84a5fa0 RCX: 00007f59b824eec9 [ 133.706536][ T7268] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffff9c [ 133.706557][ T7268] RBP: 00007f59b6caf090 R08: 0000000000000000 R09: 0000000000000000 [ 133.706572][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.706584][ T7268] R13: 00007f59b84a6038 R14: 00007f59b84a5fa0 R15: 00007fff4461d268 [ 133.706725][ T7268] [ 135.795811][ T7377] __nla_validate_parse: 60 callbacks suppressed [ 135.795829][ T7377] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 136.607643][ T7489] FAULT_INJECTION: forcing a failure. [ 136.607643][ T7489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.620821][ T7489] CPU: 0 UID: 0 PID: 7489 Comm: syz.0.1163 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.620855][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 136.620908][ T7489] Call Trace: [ 136.620914][ T7489] [ 136.620923][ T7489] __dump_stack+0x1d/0x30 [ 136.620949][ T7489] dump_stack_lvl+0xe8/0x140 [ 136.620974][ T7489] dump_stack+0x15/0x1b [ 136.620991][ T7489] should_fail_ex+0x265/0x280 [ 136.621069][ T7489] should_fail+0xb/0x20 [ 136.621108][ T7489] should_fail_usercopy+0x1a/0x20 [ 136.621127][ T7489] _copy_to_user+0x20/0xa0 [ 136.621154][ T7489] simple_read_from_buffer+0xb5/0x130 [ 136.621247][ T7489] proc_fail_nth_read+0x10e/0x150 [ 136.621275][ T7489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 136.621357][ T7489] vfs_read+0x1a5/0x770 [ 136.621460][ T7489] ? __fget_files+0x184/0x1c0 [ 136.621493][ T7489] ? __rcu_read_unlock+0x4f/0x70 [ 136.621524][ T7489] ? __fget_files+0x184/0x1c0 [ 136.621551][ T7489] ksys_read+0xda/0x1a0 [ 136.621651][ T7489] __x64_sys_read+0x40/0x50 [ 136.621676][ T7489] x64_sys_call+0x27c0/0x3000 [ 136.621704][ T7489] do_syscall_64+0xd2/0x200 [ 136.621761][ T7489] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 136.621794][ T7489] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 136.621906][ T7489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.621926][ T7489] RIP: 0033:0x7f83449ad8dc [ 136.621940][ T7489] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 136.621958][ T7489] RSP: 002b:00007f8343417030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 136.621981][ T7489] RAX: ffffffffffffffda RBX: 00007f8344c05fa0 RCX: 00007f83449ad8dc [ 136.622000][ T7489] RDX: 000000000000000f RSI: 00007f83434170a0 RDI: 0000000000000003 [ 136.622011][ T7489] RBP: 00007f8343417090 R08: 0000000000000000 R09: 0000000000000000 [ 136.622021][ T7489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.622070][ T7489] R13: 00007f8344c06038 R14: 00007f8344c05fa0 R15: 00007ffe9a046588 [ 136.622172][ T7489] [ 136.854814][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1165'. [ 137.398652][ T29] kauditd_printk_skb: 1007 callbacks suppressed [ 137.398667][ T29] audit: type=1400 audit(1759833742.497:5424): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 137.429176][ T29] audit: type=1400 audit(1759833742.507:5425): avc: denied { map_create } for pid=7524 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 137.448383][ T29] audit: type=1400 audit(1759833742.507:5426): avc: denied { prog_load } for pid=7524 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 137.467468][ T29] audit: type=1400 audit(1759833742.507:5427): avc: denied { open } for pid=7524 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 137.486756][ T29] audit: type=1400 audit(1759833742.507:5428): avc: denied { prog_load } for pid=7524 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 137.505821][ T29] audit: type=1400 audit(1759833742.517:5429): avc: denied { read write } for pid=7524 comm="syz.2.1179" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 137.529910][ T29] audit: type=1400 audit(1759833742.517:5430): avc: denied { create } for pid=7524 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 137.549439][ T29] audit: type=1400 audit(1759833742.517:5431): avc: denied { create } for pid=7524 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 137.568928][ T29] audit: type=1400 audit(1759833742.517:5432): avc: denied { write } for pid=7524 comm="syz.2.1179" name="icmp6" dev="proc" ino=4026532965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 137.591673][ T29] audit: type=1400 audit(1759833742.517:5433): avc: denied { map_create } for pid=7524 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 138.543593][ T7590] wireguard0: entered promiscuous mode [ 138.549155][ T7590] wireguard0: entered allmulticast mode [ 139.451517][ T7639] bond0 (unregistering): Released all slaves [ 139.495720][ T7641] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1229'. [ 139.506050][ T7639] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1229'. [ 140.223746][ T7668] serio: Serial port ttyS3 [ 141.726472][ T7714] netlink: 'syz.4.1255': attribute type 13 has an invalid length. [ 141.868388][ T7714] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.875704][ T7714] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.973172][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.993181][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.081780][ T3662] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.113845][ T3662] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.140455][ T3662] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.166167][ T3662] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.507622][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 142.507642][ T29] audit: type=1400 audit(1759836051.497:6020): avc: denied { map_create } for pid=7743 comm="syz.4.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 142.533033][ T29] audit: type=1400 audit(1759836051.527:6021): avc: denied { prog_load } for pid=7743 comm="syz.4.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 142.533065][ T29] audit: type=1400 audit(1759836051.527:6022): avc: denied { open } for pid=7743 comm="syz.4.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 142.571407][ T29] audit: type=1400 audit(1759836051.527:6023): avc: denied { open } for pid=7743 comm="syz.4.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 142.590651][ T29] audit: type=1400 audit(1759836051.527:6024): avc: denied { prog_load } for pid=7743 comm="syz.4.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 142.609731][ T29] audit: type=1400 audit(1759836051.527:6025): avc: denied { create } for pid=7743 comm="syz.4.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 142.629777][ T29] audit: type=1326 audit(1759836051.527:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.4.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aae2eeec9 code=0x7ffc0000 [ 142.653281][ T29] audit: type=1326 audit(1759836051.527:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.4.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6aae2eeec9 code=0x7ffc0000 [ 142.676722][ T29] audit: type=1400 audit(1759836051.527:6028): avc: denied { prog_load } for pid=7743 comm="syz.4.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 142.695786][ T29] audit: type=1326 audit(1759836051.527:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.4.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aae2eeec9 code=0x7ffc0000 [ 144.076456][ T7808] bond0 (unregistering): Released all slaves [ 144.112879][ T7808] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1288'. [ 144.122740][ T7808] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1288'. [ 144.229473][ T7827] tbf_change: 56 callbacks suppressed [ 144.229491][ T7827] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 144.406795][ T7847] bond0 (unregistering): Released all slaves [ 144.449617][ T7854] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1308'. [ 144.462514][ T7847] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1308'. [ 144.845783][ T7860] can0: slcan on ttyS3. [ 144.910730][ T7860] can0 (unregistered): slcan off ttyS3. [ 146.547843][ T7930] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1341'. [ 146.560448][ T7934] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1341'. [ 146.792251][ T7957] tc_dump_action: action bad kind [ 146.834030][ T7964] FAULT_INJECTION: forcing a failure. [ 146.834030][ T7964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.847147][ T7964] CPU: 1 UID: 0 PID: 7964 Comm: syz.2.1356 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.847196][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.847212][ T7964] Call Trace: [ 146.847220][ T7964] [ 146.847230][ T7964] __dump_stack+0x1d/0x30 [ 146.847255][ T7964] dump_stack_lvl+0xe8/0x140 [ 146.847277][ T7964] dump_stack+0x15/0x1b [ 146.847298][ T7964] should_fail_ex+0x265/0x280 [ 146.847413][ T7964] should_fail+0xb/0x20 [ 146.847451][ T7964] should_fail_usercopy+0x1a/0x20 [ 146.847533][ T7964] _copy_to_user+0x20/0xa0 [ 146.847564][ T7964] simple_read_from_buffer+0xb5/0x130 [ 146.847591][ T7964] proc_fail_nth_read+0x10e/0x150 [ 146.847654][ T7964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.847760][ T7964] vfs_read+0x1a5/0x770 [ 146.847785][ T7964] ? __rcu_read_unlock+0x4f/0x70 [ 146.847809][ T7964] ? __fget_files+0x184/0x1c0 [ 146.847845][ T7964] ksys_read+0xda/0x1a0 [ 146.847872][ T7964] __x64_sys_read+0x40/0x50 [ 146.847893][ T7964] x64_sys_call+0x27c0/0x3000 [ 146.847950][ T7964] do_syscall_64+0xd2/0x200 [ 146.847977][ T7964] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.848011][ T7964] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 146.848117][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.848264][ T7964] RIP: 0033:0x7f59b824d8dc [ 146.848283][ T7964] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 146.848305][ T7964] RSP: 002b:00007f59b6caf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.848325][ T7964] RAX: ffffffffffffffda RBX: 00007f59b84a5fa0 RCX: 00007f59b824d8dc [ 146.848347][ T7964] RDX: 000000000000000f RSI: 00007f59b6caf0a0 RDI: 0000000000000003 [ 146.848359][ T7964] RBP: 00007f59b6caf090 R08: 0000000000000000 R09: 0000000000000000 [ 146.848370][ T7964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.848384][ T7964] R13: 00007f59b84a6038 R14: 00007f59b84a5fa0 R15: 00007fff4461d268 [ 146.848458][ T7964] [ 147.341566][ T7975] bond0 (unregistering): Released all slaves [ 147.370498][ T7985] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1361'. [ 147.401591][ T7986] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1361'. [ 147.486779][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1367'. [ 147.590394][ T29] kauditd_printk_skb: 803 callbacks suppressed [ 147.590413][ T29] audit: type=1400 audit(1759836824.676:6833): avc: denied { map_create } for pid=7967 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 147.615786][ T29] audit: type=1400 audit(1759836824.676:6834): avc: denied { create } for pid=7967 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 147.635501][ T29] audit: type=1400 audit(1759836824.676:6835): avc: denied { read write } for pid=7967 comm="syz.3.1358" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=0 [ 147.790401][ T29] audit: type=1400 audit(1759836824.696:6836): avc: denied { read write } for pid=7967 comm="syz.3.1358" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 147.814670][ T29] audit: type=1400 audit(1759836824.706:6837): avc: denied { allowed } for pid=7967 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 147.834140][ T29] audit: type=1400 audit(1759836824.706:6838): avc: denied { map_create } for pid=7967 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 147.853268][ T29] audit: type=1400 audit(1759836824.756:6839): avc: denied { map_create } for pid=7990 comm="syz.4.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 147.872447][ T29] audit: type=1400 audit(1759836824.756:6840): avc: denied { prog_load } for pid=7990 comm="syz.4.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 147.891613][ T29] audit: type=1400 audit(1759836824.756:6841): avc: denied { prog_load } for pid=7990 comm="syz.4.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 147.910751][ T29] audit: type=1400 audit(1759836824.756:6842): avc: denied { watch watch_reads } for pid=7990 comm="syz.4.1367" path="/275" dev="tmpfs" ino=1533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 148.311010][ T8018] bond0 (unregistering): Released all slaves [ 148.385956][ T8021] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1377'. [ 148.989140][ T8042] FAULT_INJECTION: forcing a failure. [ 148.989140][ T8042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.002362][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.1.1387 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.002441][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.002457][ T8042] Call Trace: [ 149.002465][ T8042] [ 149.002475][ T8042] __dump_stack+0x1d/0x30 [ 149.002497][ T8042] dump_stack_lvl+0xe8/0x140 [ 149.002591][ T8042] dump_stack+0x15/0x1b [ 149.002607][ T8042] should_fail_ex+0x265/0x280 [ 149.002646][ T8042] should_fail+0xb/0x20 [ 149.002784][ T8042] should_fail_usercopy+0x1a/0x20 [ 149.002809][ T8042] _copy_to_user+0x20/0xa0 [ 149.002867][ T8042] simple_read_from_buffer+0xb5/0x130 [ 149.002892][ T8042] proc_fail_nth_read+0x10e/0x150 [ 149.002960][ T8042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.002987][ T8042] vfs_read+0x1a5/0x770 [ 149.003036][ T8042] ? __rcu_read_unlock+0x4f/0x70 [ 149.003067][ T8042] ? __fget_files+0x184/0x1c0 [ 149.003161][ T8042] ksys_read+0xda/0x1a0 [ 149.003190][ T8042] __x64_sys_read+0x40/0x50 [ 149.003217][ T8042] x64_sys_call+0x27c0/0x3000 [ 149.003243][ T8042] do_syscall_64+0xd2/0x200 [ 149.003266][ T8042] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 149.003369][ T8042] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 149.003410][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.003437][ T8042] RIP: 0033:0x7fd19c04d8dc [ 149.003455][ T8042] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 149.003492][ T8042] RSP: 002b:00007fd19aaaf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.003516][ T8042] RAX: ffffffffffffffda RBX: 00007fd19c2a5fa0 RCX: 00007fd19c04d8dc [ 149.003531][ T8042] RDX: 000000000000000f RSI: 00007fd19aaaf0a0 RDI: 0000000000000003 [ 149.003547][ T8042] RBP: 00007fd19aaaf090 R08: 0000000000000000 R09: 0000000000000000 [ 149.003560][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.003572][ T8042] R13: 00007fd19c2a6038 R14: 00007fd19c2a5fa0 R15: 00007ffe3e118e18 [ 149.003588][ T8042] [ 150.677668][ T8110] mmap: syz.0.1410 (8110) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.142958][ T8134] bond0 (unregistering): Released all slaves [ 151.181836][ T8140] __nla_validate_parse: 2 callbacks suppressed [ 151.181856][ T8140] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1422'. [ 151.215420][ T8140] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1422'. [ 151.336202][ T8144] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1424'. [ 151.739297][ T8168] bond0 (unregistering): Released all slaves [ 151.782807][ T8168] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1434'. [ 151.792250][ T8168] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1434'. [ 151.816242][ T8170] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 151.822867][ T8170] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.830512][ T8170] vhci_hcd vhci_hcd.0: Device attached [ 152.060299][ T8189] FAULT_INJECTION: forcing a failure. [ 152.060299][ T8189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.070862][ T4773] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 152.073414][ T8189] CPU: 0 UID: 0 PID: 8189 Comm: syz.1.1441 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.073458][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.073477][ T8189] Call Trace: [ 152.073506][ T8189] [ 152.073515][ T8189] __dump_stack+0x1d/0x30 [ 152.073544][ T8189] dump_stack_lvl+0xe8/0x140 [ 152.073570][ T8189] dump_stack+0x15/0x1b [ 152.073593][ T8189] should_fail_ex+0x265/0x280 [ 152.073632][ T8189] should_fail+0xb/0x20 [ 152.073682][ T8189] should_fail_usercopy+0x1a/0x20 [ 152.073709][ T8189] _copy_to_user+0x20/0xa0 [ 152.073774][ T8189] simple_read_from_buffer+0xb5/0x130 [ 152.073804][ T8189] proc_fail_nth_read+0x10e/0x150 [ 152.073844][ T8189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.073881][ T8189] vfs_read+0x1a5/0x770 [ 152.073942][ T8189] ? __rcu_read_unlock+0x4f/0x70 [ 152.073976][ T8189] ? __fget_files+0x184/0x1c0 [ 152.074011][ T8189] ksys_read+0xda/0x1a0 [ 152.074041][ T8189] __x64_sys_read+0x40/0x50 [ 152.074073][ T8189] x64_sys_call+0x27c0/0x3000 [ 152.074102][ T8189] do_syscall_64+0xd2/0x200 [ 152.074133][ T8189] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 152.074175][ T8189] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 152.074222][ T8189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.074252][ T8189] RIP: 0033:0x7fd19c04d8dc [ 152.074272][ T8189] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 152.074297][ T8189] RSP: 002b:00007fd19aaaf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.074383][ T8189] RAX: ffffffffffffffda RBX: 00007fd19c2a5fa0 RCX: 00007fd19c04d8dc [ 152.074400][ T8189] RDX: 000000000000000f RSI: 00007fd19aaaf0a0 RDI: 0000000000000003 [ 152.074417][ T8189] RBP: 00007fd19aaaf090 R08: 0000000000000000 R09: 0000000000000000 [ 152.074444][ T8189] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 152.074461][ T8189] R13: 00007fd19c2a6038 R14: 00007fd19c2a5fa0 R15: 00007ffe3e118e18 [ 152.074484][ T8189] [ 152.493273][ T8198] SELinux: syz.3.1445 (8198) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 152.532093][ T8171] vhci_hcd: connection reset by peer [ 152.540197][ T3632] vhci_hcd: stop threads [ 152.541407][ T8200] bond0 (unregistering): Released all slaves [ 152.544526][ T3632] vhci_hcd: release socket [ 152.555011][ T3632] vhci_hcd: disconnect device [ 152.570279][ T8205] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1446'. [ 152.583462][ T8205] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1446'. [ 152.613887][ T29] kauditd_printk_skb: 729 callbacks suppressed [ 152.613906][ T29] audit: type=1400 audit(1759837085.718:7572): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 152.668947][ T29] audit: type=1400 audit(1759837085.768:7573): avc: denied { map_create } for pid=8202 comm="syz.4.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 152.698849][ T29] audit: type=1400 audit(1759837085.788:7574): avc: denied { prog_load } for pid=8202 comm="syz.4.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 152.717959][ T29] audit: type=1400 audit(1759837085.788:7575): avc: denied { open } for pid=8202 comm="syz.4.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 152.737211][ T29] audit: type=1400 audit(1759837085.788:7576): avc: denied { open } for pid=8202 comm="syz.4.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 152.756532][ T29] audit: type=1400 audit(1759837085.788:7577): avc: denied { prog_load } for pid=8202 comm="syz.4.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 152.775689][ T29] audit: type=1400 audit(1759837085.788:7578): avc: denied { create } for pid=8202 comm="syz.4.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 152.795334][ T29] audit: type=1326 audit(1759837085.798:7579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.4.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aae2eeec9 code=0x7ffc0000 [ 152.818748][ T29] audit: type=1326 audit(1759837085.798:7580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.4.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aae2eeec9 code=0x7ffc0000 [ 152.842212][ T29] audit: type=1326 audit(1759837085.798:7581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.4.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6aae2eeec9 code=0x7ffc0000 [ 152.867637][ T8213] FAULT_INJECTION: forcing a failure. [ 152.867637][ T8213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.880861][ T8213] CPU: 0 UID: 0 PID: 8213 Comm: syz.2.1449 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.880887][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.880901][ T8213] Call Trace: [ 152.880909][ T8213] [ 152.880918][ T8213] __dump_stack+0x1d/0x30 [ 152.880989][ T8213] dump_stack_lvl+0xe8/0x140 [ 152.881013][ T8213] dump_stack+0x15/0x1b [ 152.881033][ T8213] should_fail_ex+0x265/0x280 [ 152.881091][ T8213] should_fail+0xb/0x20 [ 152.881130][ T8213] should_fail_usercopy+0x1a/0x20 [ 152.881160][ T8213] _copy_to_user+0x20/0xa0 [ 152.881197][ T8213] simple_read_from_buffer+0xb5/0x130 [ 152.881217][ T8213] proc_fail_nth_read+0x10e/0x150 [ 152.881253][ T8213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.881286][ T8213] vfs_read+0x1a5/0x770 [ 152.881327][ T8213] ? __fget_files+0x184/0x1c0 [ 152.881349][ T8213] ? __rcu_read_unlock+0x4f/0x70 [ 152.881380][ T8213] ? __fget_files+0x184/0x1c0 [ 152.881412][ T8213] ksys_read+0xda/0x1a0 [ 152.881482][ T8213] __x64_sys_read+0x40/0x50 [ 152.881507][ T8213] x64_sys_call+0x27c0/0x3000 [ 152.881573][ T8213] do_syscall_64+0xd2/0x200 [ 152.881600][ T8213] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 152.881654][ T8213] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 152.881700][ T8213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.881722][ T8213] RIP: 0033:0x7f59b824d8dc [ 152.881737][ T8213] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 152.881762][ T8213] RSP: 002b:00007f59b6caf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.881805][ T8213] RAX: ffffffffffffffda RBX: 00007f59b84a5fa0 RCX: 00007f59b824d8dc [ 152.881816][ T8213] RDX: 000000000000000f RSI: 00007f59b6caf0a0 RDI: 0000000000000003 [ 152.881832][ T8213] RBP: 00007f59b6caf090 R08: 0000000000000000 R09: 0000000000000000 [ 152.881848][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.881859][ T8213] R13: 00007f59b84a6038 R14: 00007f59b84a5fa0 R15: 00007fff4461d268 [ 152.881876][ T8213] [ 153.547654][ T8238] bond0 (unregistering): Released all slaves [ 153.590806][ T8240] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1458'. [ 153.603775][ T8238] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1458'. [ 154.165791][ T8264] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1466'. [ 154.412778][ T8277] bond0 (unregistering): Released all slaves [ 154.487162][ T8281] bond0 (unregistering): Released all slaves [ 154.579888][ T8294] FAULT_INJECTION: forcing a failure. [ 154.579888][ T8294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.593045][ T8294] CPU: 0 UID: 0 PID: 8294 Comm: syz.4.1477 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.593076][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 154.593091][ T8294] Call Trace: [ 154.593098][ T8294] [ 154.593170][ T8294] __dump_stack+0x1d/0x30 [ 154.593196][ T8294] dump_stack_lvl+0xe8/0x140 [ 154.593220][ T8294] dump_stack+0x15/0x1b [ 154.593239][ T8294] should_fail_ex+0x265/0x280 [ 154.593340][ T8294] should_fail+0xb/0x20 [ 154.593376][ T8294] should_fail_usercopy+0x1a/0x20 [ 154.593402][ T8294] _copy_from_user+0x1c/0xb0 [ 154.593506][ T8294] get_timespec64+0x4c/0x100 [ 154.593573][ T8294] __x64_sys_recvmmsg+0xa3/0x170 [ 154.593679][ T8294] x64_sys_call+0x27aa/0x3000 [ 154.593701][ T8294] do_syscall_64+0xd2/0x200 [ 154.593723][ T8294] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 154.593755][ T8294] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 154.593807][ T8294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.593834][ T8294] RIP: 0033:0x7f6aae2eeec9 [ 154.593852][ T8294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.593875][ T8294] RSP: 002b:00007f6aacd57038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 154.593962][ T8294] RAX: ffffffffffffffda RBX: 00007f6aae545fa0 RCX: 00007f6aae2eeec9 [ 154.593978][ T8294] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 154.593994][ T8294] RBP: 00007f6aacd57090 R08: 0000200000003700 R09: 0000000000000000 [ 154.594006][ T8294] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 154.594019][ T8294] R13: 00007f6aae546038 R14: 00007f6aae545fa0 R15: 00007ffc57a024c8 [ 154.594041][ T8294] [ 154.827238][ T8303] bond0 (unregistering): Released all slaves [ 154.909610][ T8311] netlink: 'syz.0.1483': attribute type 10 has an invalid length. [ 155.030472][ T8320] syz.0.1487 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 155.531380][ T8338] bond0 (unregistering): Released all slaves [ 156.017466][ T8366] bond0 (unregistering): Released all slaves [ 156.263340][ T8396] bond0 (unregistering): Released all slaves [ 156.306663][ T8398] __nla_validate_parse: 11 callbacks suppressed [ 156.306683][ T8398] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1518'. [ 156.322681][ T8398] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1518'. [ 156.454028][ T8412] binfmt_misc: register: failed to install interpreter file ./file2 [ 156.506998][ T8422] bond0 (unregistering): Released all slaves [ 156.538669][ T8422] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1530'. [ 156.548216][ T8422] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1530'. [ 156.992762][ T8452] FAULT_INJECTION: forcing a failure. [ 156.992762][ T8452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.005983][ T8452] CPU: 1 UID: 0 PID: 8452 Comm: syz.0.1541 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.006019][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.006057][ T8452] Call Trace: [ 157.006065][ T8452] [ 157.006075][ T8452] __dump_stack+0x1d/0x30 [ 157.006100][ T8452] dump_stack_lvl+0xe8/0x140 [ 157.006124][ T8452] dump_stack+0x15/0x1b [ 157.006203][ T8452] should_fail_ex+0x265/0x280 [ 157.006245][ T8452] should_fail+0xb/0x20 [ 157.006317][ T8452] should_fail_usercopy+0x1a/0x20 [ 157.006340][ T8452] _copy_to_user+0x20/0xa0 [ 157.006368][ T8452] simple_read_from_buffer+0xb5/0x130 [ 157.006430][ T8452] proc_fail_nth_read+0x10e/0x150 [ 157.006540][ T8452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.006573][ T8452] vfs_read+0x1a5/0x770 [ 157.006593][ T8452] ? __rcu_read_unlock+0x4f/0x70 [ 157.006621][ T8452] ? __fget_files+0x184/0x1c0 [ 157.006698][ T8452] ksys_read+0xda/0x1a0 [ 157.006728][ T8452] __x64_sys_read+0x40/0x50 [ 157.006766][ T8452] x64_sys_call+0x27c0/0x3000 [ 157.006793][ T8452] do_syscall_64+0xd2/0x200 [ 157.006882][ T8452] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 157.006917][ T8452] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 157.006980][ T8452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.007006][ T8452] RIP: 0033:0x7f83449ad8dc [ 157.007022][ T8452] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 157.007044][ T8452] RSP: 002b:00007f8343417030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.007108][ T8452] RAX: ffffffffffffffda RBX: 00007f8344c05fa0 RCX: 00007f83449ad8dc [ 157.007120][ T8452] RDX: 000000000000000f RSI: 00007f83434170a0 RDI: 0000000000000003 [ 157.007131][ T8452] RBP: 00007f8343417090 R08: 0000000000000000 R09: 0000000000000000 [ 157.007145][ T8452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.007160][ T8452] R13: 00007f8344c06038 R14: 00007f8344c05fa0 R15: 00007ffe9a046588 [ 157.007183][ T8452] [ 157.230957][ T8454] bond0 (unregistering): Released all slaves [ 157.253368][ T8454] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1542'. [ 157.262868][ T8454] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1542'. [ 157.394846][ T4773] usb 1-1: enqueue for inactive port 0 [ 157.404024][ T4773] usb 1-1: enqueue for inactive port 0 [ 157.463310][ T8486] bond0 (unregistering): Released all slaves [ 157.491362][ T4773] vhci_hcd: vhci_device speed not set [ 157.509247][ T8492] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1556'. [ 157.532787][ T8486] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1556'. [ 157.576638][ T29] kauditd_printk_skb: 983 callbacks suppressed [ 157.576657][ T29] audit: type=1400 audit(1759838114.740:8565): avc: denied { map_create } for pid=8501 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 157.580431][ T8502] IPv6: sit1: Disabled Multicast RS [ 157.588609][ T29] audit: type=1400 audit(1759838114.740:8566): avc: denied { map_create } for pid=8501 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 157.612650][ T8502] sit1: entered allmulticast mode [ 157.626587][ T29] audit: type=1400 audit(1759838114.740:8567): avc: denied { prog_load } for pid=8501 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 157.650632][ T29] audit: type=1400 audit(1759838114.740:8568): avc: denied { prog_load } for pid=8501 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 157.669780][ T29] audit: type=1400 audit(1759838114.740:8569): avc: denied { map_create } for pid=8501 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 157.669812][ T29] audit: type=1400 audit(1759838114.740:8570): avc: denied { prog_load } for pid=8501 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 157.669840][ T29] audit: type=1400 audit(1759838114.740:8571): avc: denied { prog_load } for pid=8501 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 157.669885][ T29] audit: type=1400 audit(1759838114.740:8572): avc: denied { create } for pid=8501 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 157.744801][ T29] audit: type=1400 audit(1759838114.793:8573): avc: denied { map_create } for pid=8501 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 157.744837][ T29] audit: type=1400 audit(1759838114.793:8574): avc: denied { prog_load } for pid=8501 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 157.862324][ T8519] bond0 (unregistering): Released all slaves [ 157.885854][ T8525] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1574'. [ 157.910650][ T8519] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1574'. [ 157.963665][ T8536] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.970912][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.978260][ T8536] bridge0: entered allmulticast mode [ 157.988312][ T8536] bridge_slave_1: left allmulticast mode [ 157.993987][ T8536] bridge_slave_1: left promiscuous mode [ 157.999809][ T8536] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.014577][ T8536] bridge_slave_0: left allmulticast mode [ 158.020296][ T8536] bridge_slave_0: left promiscuous mode [ 158.026199][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.130502][ T8553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48222 sclass=netlink_route_socket pid=8553 comm=syz.3.1578 [ 158.136617][ T8554] vxcan3: entered promiscuous mode [ 158.148579][ T8554] vxcan3: entered allmulticast mode [ 158.229678][ T8565] bond0 (unregistering): Released all slaves [ 158.270185][ T8572] hsr_slave_0: left promiscuous mode [ 158.277259][ T8572] hsr_slave_1: left promiscuous mode [ 158.304601][ T8575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48222 sclass=netlink_route_socket pid=8575 comm=syz.0.1587 [ 158.354823][ T8581] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8581 comm=syz.3.1590 [ 158.391879][ T8575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8575 comm=syz.0.1587 [ 158.517731][ T8595] bond0 (unregistering): Released all slaves [ 158.616039][ T8611] FAULT_INJECTION: forcing a failure. [ 158.616039][ T8611] name failslab, interval 1, probability 0, space 0, times 0 [ 158.628757][ T8611] CPU: 1 UID: 0 PID: 8611 Comm: syz.2.1604 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.628789][ T8611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.628804][ T8611] Call Trace: [ 158.628812][ T8611] [ 158.628821][ T8611] __dump_stack+0x1d/0x30 [ 158.628847][ T8611] dump_stack_lvl+0xe8/0x140 [ 158.628865][ T8611] dump_stack+0x15/0x1b [ 158.629035][ T8611] should_fail_ex+0x265/0x280 [ 158.629094][ T8611] should_failslab+0x8c/0xb0 [ 158.629126][ T8611] kmem_cache_alloc_noprof+0x50/0x480 [ 158.629159][ T8611] ? audit_log_start+0x342/0x720 [ 158.629248][ T8611] audit_log_start+0x342/0x720 [ 158.629287][ T8611] ? kstrtouint+0x76/0xc0 [ 158.629405][ T8611] audit_seccomp+0x48/0x100 [ 158.629518][ T8611] ? __seccomp_filter+0x82d/0x1250 [ 158.629550][ T8611] __seccomp_filter+0x83e/0x1250 [ 158.629579][ T8611] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 158.629607][ T8611] ? vfs_write+0x7e8/0x960 [ 158.629630][ T8611] ? __rcu_read_unlock+0x4f/0x70 [ 158.629704][ T8611] ? __fget_files+0x184/0x1c0 [ 158.629735][ T8611] __secure_computing+0x82/0x150 [ 158.629759][ T8611] syscall_trace_enter+0xcf/0x1e0 [ 158.629787][ T8611] do_syscall_64+0xac/0x200 [ 158.629835][ T8611] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.629933][ T8611] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.629973][ T8611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.630065][ T8611] RIP: 0033:0x7f59b824eec9 [ 158.630079][ T8611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.630096][ T8611] RSP: 002b:00007f59b6caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 158.630119][ T8611] RAX: ffffffffffffffda RBX: 00007f59b84a5fa0 RCX: 00007f59b824eec9 [ 158.630134][ T8611] RDX: 000000000000007c RSI: 0000000000000084 RDI: ffffffffffffffff [ 158.630194][ T8611] RBP: 00007f59b6caf090 R08: 0000200000000180 R09: 0000000000000000 [ 158.630205][ T8611] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 158.630233][ T8611] R13: 00007f59b84a6038 R14: 00007f59b84a5fa0 R15: 00007fff4461d268 [ 158.630254][ T8611] [ 159.131134][ T8648] bond0 (unregistering): Released all slaves [ 159.282233][ T8676] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8676 comm=syz.3.1629 [ 160.201050][ T8702] bond0 (unregistering): Released all slaves [ 160.316470][ T8718] bond0: Unable to set up delay as MII monitoring is disabled [ 160.344205][ T8718] bond0 (unregistering): Released all slaves [ 162.347467][ T29] kauditd_printk_skb: 1503 callbacks suppressed [ 162.347483][ T29] audit: type=1400 audit(1759838887.740:10076): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 162.357152][ T8886] FAULT_INJECTION: forcing a failure. [ 162.357152][ T8886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.391294][ T8886] CPU: 0 UID: 0 PID: 8886 Comm: syz.4.1717 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.391320][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 162.391374][ T8886] Call Trace: [ 162.391382][ T8886] [ 162.391440][ T8886] __dump_stack+0x1d/0x30 [ 162.391462][ T8886] dump_stack_lvl+0xe8/0x140 [ 162.391486][ T8886] dump_stack+0x15/0x1b [ 162.391552][ T8886] should_fail_ex+0x265/0x280 [ 162.391587][ T8886] should_fail+0xb/0x20 [ 162.391676][ T8886] should_fail_usercopy+0x1a/0x20 [ 162.391701][ T8886] _copy_to_user+0x20/0xa0 [ 162.391732][ T8886] simple_read_from_buffer+0xb5/0x130 [ 162.391754][ T8886] proc_fail_nth_read+0x10e/0x150 [ 162.391781][ T8886] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.391857][ T8886] vfs_read+0x1a5/0x770 [ 162.391883][ T8886] ? __rcu_read_unlock+0x4f/0x70 [ 162.391911][ T8886] ? __fget_files+0x184/0x1c0 [ 162.391948][ T8886] ksys_read+0xda/0x1a0 [ 162.391969][ T8886] __x64_sys_read+0x40/0x50 [ 162.391993][ T8886] x64_sys_call+0x27c0/0x3000 [ 162.392020][ T8886] do_syscall_64+0xd2/0x200 [ 162.392045][ T8886] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.392071][ T8886] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.392129][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.392156][ T8886] RIP: 0033:0x7f6aae2ed8dc [ 162.392171][ T8886] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.392274][ T8886] RSP: 002b:00007f6aacd57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.392298][ T8886] RAX: ffffffffffffffda RBX: 00007f6aae545fa0 RCX: 00007f6aae2ed8dc [ 162.392312][ T8886] RDX: 000000000000000f RSI: 00007f6aacd570a0 RDI: 0000000000000003 [ 162.392324][ T8886] RBP: 00007f6aacd57090 R08: 0000000000000000 R09: 0000000000000000 [ 162.392335][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.392394][ T8886] R13: 00007f6aae546038 R14: 00007f6aae545fa0 R15: 00007ffc57a024c8 [ 162.392417][ T8886] [ 162.424948][ T29] audit: type=1400 audit(1759838887.751:10077): avc: denied { allowed } for pid=8885 comm="syz.4.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 162.613213][ T29] audit: type=1400 audit(1759838887.751:10078): avc: denied { prog_load } for pid=8885 comm="syz.4.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 162.645154][ T29] audit: type=1400 audit(1759838887.908:10079): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 162.669576][ T29] audit: type=1400 audit(1759838887.971:10080): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 162.694189][ T29] audit: type=1400 audit(1759838887.982:10081): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 162.714007][ T8900] __nla_validate_parse: 15 callbacks suppressed [ 162.714107][ T8900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1724'. [ 162.718481][ T29] audit: type=1400 audit(1759838888.024:10082): avc: denied { map_create } for pid=8889 comm="syz.4.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 162.752986][ T29] audit: type=1400 audit(1759838888.024:10083): avc: denied { prog_load } for pid=8889 comm="syz.4.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 162.772145][ T29] audit: type=1400 audit(1759838888.045:10084): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 162.850227][ T8905] bond0 (unregistering): Released all slaves [ 162.883798][ T8911] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1725'. [ 162.920432][ T29] audit: type=1400 audit(1759838888.055:10085): avc: denied { allowed } for pid=8887 comm="syz.2.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 162.921452][ T8905] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1725'. [ 163.014992][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1730'. [ 163.546728][ T8943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1740'. [ 163.572470][ T8945] bond0 (unregistering): Released all slaves [ 163.615077][ T8951] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1742'. [ 163.624751][ T8951] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1742'. [ 164.297306][ T9014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9014 comm=syz.1.1772 [ 164.315016][ T9016] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1764'. [ 164.324239][ T9016] hsr_slave_0: left promiscuous mode [ 164.330331][ T9016] hsr_slave_1: left promiscuous mode [ 165.752172][ T9091] capability: warning: `syz.4.1802' uses deprecated v2 capabilities in a way that may be insecure [ 165.996120][ T9137] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1819'. [ 166.034862][ T9134] bond0 (unregistering): Released all slaves [ 166.052894][ T9137] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1819'. [ 166.806368][ T9205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9205 comm=syz.1.1848 [ 167.049773][ T9225] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.056212][ T9221] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.057680][ T9225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.072619][ T9225] IPv6: NLM_F_CREATE should be set when creating new route [ 167.124759][ T29] kauditd_printk_skb: 1436 callbacks suppressed [ 167.124775][ T29] audit: type=1400 audit(1759839660.753:11522): avc: denied { mounton } for pid=9229 comm=77DEA105FF07 path="/353/bus" dev="tmpfs" ino=1976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 167.171927][ T29] audit: type=1400 audit(1759839660.784:11523): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 167.196338][ T29] audit: type=1400 audit(1759839660.784:11524): avc: denied { prog_load } for pid=9229 comm=77DEA105FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 167.215564][ T29] audit: type=1400 audit(1759839660.784:11525): avc: denied { prog_load } for pid=9229 comm=77DEA105FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 167.215789][ T9238] FAULT_INJECTION: forcing a failure. [ 167.215789][ T9238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.234768][ T29] audit: type=1400 audit(1759839660.795:11526): avc: denied { prog_load } for pid=9222 comm="syz.4.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 167.247816][ T9238] CPU: 0 UID: 0 PID: 9238 Comm: syz.3.1863 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.247906][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 167.247926][ T9238] Call Trace: [ 167.247936][ T9238] [ 167.247948][ T9238] __dump_stack+0x1d/0x30 [ 167.247978][ T9238] dump_stack_lvl+0xe8/0x140 [ 167.248032][ T9238] dump_stack+0x15/0x1b [ 167.248054][ T9238] should_fail_ex+0x265/0x280 [ 167.248100][ T9238] should_fail+0xb/0x20 [ 167.248147][ T9238] should_fail_usercopy+0x1a/0x20 [ 167.248227][ T9238] _copy_from_user+0x1c/0xb0 [ 167.248261][ T9238] ___sys_sendmsg+0xc1/0x1d0 [ 167.248369][ T9238] __x64_sys_sendmsg+0xd4/0x160 [ 167.248411][ T9238] x64_sys_call+0x191e/0x3000 [ 167.248442][ T9238] do_syscall_64+0xd2/0x200 [ 167.248472][ T9238] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 167.248557][ T9238] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 167.248604][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.248639][ T9238] RIP: 0033:0x7f628a8eeec9 [ 167.248661][ T9238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.248760][ T9238] RSP: 002b:00007f628934f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.248786][ T9238] RAX: ffffffffffffffda RBX: 00007f628ab45fa0 RCX: 00007f628a8eeec9 [ 167.248801][ T9238] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000003 [ 167.248818][ T9238] RBP: 00007f628934f090 R08: 0000000000000000 R09: 0000000000000000 [ 167.248835][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.248853][ T9238] R13: 00007f628ab46038 R14: 00007f628ab45fa0 R15: 00007ffff2baeeb8 [ 167.248883][ T9238] [ 167.436958][ T29] audit: type=1400 audit(1759839660.795:11527): avc: denied { map_create } for pid=9233 comm="syz.3.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 167.456209][ T29] audit: type=1400 audit(1759839660.795:11528): avc: denied { prog_load } for pid=9233 comm="syz.3.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 167.475335][ T29] audit: type=1400 audit(1759839660.795:11529): avc: denied { prog_load } for pid=9233 comm="syz.3.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 167.494492][ T29] audit: type=1400 audit(1759839660.795:11530): avc: denied { write } for pid=9233 comm="syz.3.1861" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 167.517456][ T29] audit: type=1400 audit(1759839660.795:11531): avc: denied { create } for pid=9233 comm="syz.3.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 168.433928][ T9290] __nla_validate_parse: 5 callbacks suppressed [ 168.434023][ T9290] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1884'. [ 168.519025][ T9291] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1884'. [ 168.644170][ T9302] gtp0: entered promiscuous mode [ 168.652115][ T9302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9302 comm=syz.3.1888 [ 168.701832][ T9309] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1889'. [ 168.829130][ T9324] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1898'. [ 168.839748][ T9324] 0ªX¹¦À: renamed from caif0 [ 168.864422][ T9324] 0ªX¹¦À: entered allmulticast mode [ 168.869684][ T9324] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 168.886948][ T9329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1900'. [ 168.887531][ T9329] capability: warning: `syz.0.1900' uses 32-bit capabilities (legacy support in use) [ 169.001099][ T9336] bond0 (unregistering): Released all slaves [ 169.040365][ T9342] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1902'. [ 169.049893][ T9342] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1902'. [ 169.221804][ T9357] FAULT_INJECTION: forcing a failure. [ 169.221804][ T9357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.234926][ T9357] CPU: 1 UID: 0 PID: 9357 Comm: syz.4.1910 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.234961][ T9357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 169.234977][ T9357] Call Trace: [ 169.234985][ T9357] [ 169.234993][ T9357] __dump_stack+0x1d/0x30 [ 169.235080][ T9357] dump_stack_lvl+0xe8/0x140 [ 169.235118][ T9357] dump_stack+0x15/0x1b [ 169.235136][ T9357] should_fail_ex+0x265/0x280 [ 169.235168][ T9357] should_fail+0xb/0x20 [ 169.235201][ T9357] should_fail_usercopy+0x1a/0x20 [ 169.235225][ T9357] _copy_from_user+0x1c/0xb0 [ 169.235268][ T9357] __sys_bpf+0x183/0x7c0 [ 169.235315][ T9357] __x64_sys_bpf+0x41/0x50 [ 169.235422][ T9357] x64_sys_call+0x2aee/0x3000 [ 169.235446][ T9357] do_syscall_64+0xd2/0x200 [ 169.235467][ T9357] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 169.235492][ T9357] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 169.235541][ T9357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.235638][ T9357] RIP: 0033:0x7f6aae2eeec9 [ 169.235651][ T9357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.235671][ T9357] RSP: 002b:00007f6aacd57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.235696][ T9357] RAX: ffffffffffffffda RBX: 00007f6aae545fa0 RCX: 00007f6aae2eeec9 [ 169.235718][ T9357] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 169.235734][ T9357] RBP: 00007f6aacd57090 R08: 0000000000000000 R09: 0000000000000000 [ 169.235750][ T9357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.235766][ T9357] R13: 00007f6aae546038 R14: 00007f6aae545fa0 R15: 00007ffc57a024c8 [ 169.235822][ T9357] [ 169.647333][ T9391] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 169.657032][ T9391] block device autoloading is deprecated and will be removed. [ 170.668732][ T9443] FAULT_INJECTION: forcing a failure. [ 170.668732][ T9443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.681909][ T9443] CPU: 0 UID: 0 PID: 9443 Comm: syz.4.1945 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.681945][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 170.681961][ T9443] Call Trace: [ 170.681970][ T9443] [ 170.681979][ T9443] __dump_stack+0x1d/0x30 [ 170.682000][ T9443] dump_stack_lvl+0xe8/0x140 [ 170.682022][ T9443] dump_stack+0x15/0x1b [ 170.682050][ T9443] should_fail_ex+0x265/0x280 [ 170.682105][ T9443] should_fail+0xb/0x20 [ 170.682142][ T9443] should_fail_usercopy+0x1a/0x20 [ 170.682161][ T9443] strncpy_from_user+0x25/0x230 [ 170.682258][ T9443] ? __fget_files+0x184/0x1c0 [ 170.682282][ T9443] __se_sys_add_key+0x86/0x350 [ 170.682449][ T9443] __x64_sys_add_key+0x67/0x80 [ 170.682484][ T9443] x64_sys_call+0x28c8/0x3000 [ 170.682510][ T9443] do_syscall_64+0xd2/0x200 [ 170.682531][ T9443] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 170.682626][ T9443] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 170.682717][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.682814][ T9443] RIP: 0033:0x7f6aae2eeec9 [ 170.682836][ T9443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.682853][ T9443] RSP: 002b:00007f6aacd57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 170.682874][ T9443] RAX: ffffffffffffffda RBX: 00007f6aae545fa0 RCX: 00007f6aae2eeec9 [ 170.682889][ T9443] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 170.682956][ T9443] RBP: 00007f6aacd57090 R08: ffffffffffffffff R09: 0000000000000000 [ 170.682968][ T9443] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 170.682979][ T9443] R13: 00007f6aae546038 R14: 00007f6aae545fa0 R15: 00007ffc57a024c8 [ 170.682999][ T9443] [ 171.171568][ T9493] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 171.627962][ T9522] netlink: 'syz.2.1979': attribute type 1 has an invalid length. [ 171.658184][ T9522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.700923][ T9522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.708438][ T9522] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 171.720861][ T9522] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 171.793160][ T9522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9522 comm=syz.2.1979 [ 171.838311][ T9522] ip6erspan0: entered promiscuous mode [ 171.859130][ T9526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1980'. [ 171.900992][ T29] kauditd_printk_skb: 1327 callbacks suppressed [ 171.901006][ T29] audit: type=1400 audit(1759840177.772:12856): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.943268][ T29] audit: type=1400 audit(1759840177.804:12857): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 171.969015][ T29] audit: type=1400 audit(1759840177.814:12858): avc: denied { prog_load } for pid=9529 comm="syz.2.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 172.053719][ T29] audit: type=1400 audit(1759840177.867:12859): avc: denied { create } for pid=9531 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 172.073519][ T29] audit: type=1400 audit(1759840177.867:12860): avc: denied { prog_load } for pid=9531 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 172.073546][ T29] audit: type=1400 audit(1759840177.867:12861): avc: denied { create } for pid=9531 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 172.073577][ T29] audit: type=1400 audit(1759840177.867:12862): avc: denied { create } for pid=9531 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 172.073607][ T29] audit: type=1400 audit(1759840177.867:12863): avc: denied { create } for pid=9531 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 172.073636][ T29] audit: type=1400 audit(1759840177.867:12864): avc: denied { map_create } for pid=9531 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 172.073660][ T29] audit: type=1400 audit(1759840177.867:12865): avc: denied { prog_load } for pid=9531 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 172.197792][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1996'. [ 172.930240][ T9588] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2008'. [ 173.171995][ T9611] wireguard0: entered promiscuous mode [ 173.177524][ T9611] wireguard0: entered allmulticast mode [ 173.386505][ T9628] __nla_validate_parse: 4 callbacks suppressed [ 173.386545][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2026'. [ 173.418294][ T9628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2026'. [ 173.553529][ T9639] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2031'. [ 173.582457][ T9639] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2031'. [ 174.052825][ T9667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2041'. [ 174.213325][ T9676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2045'. [ 174.331019][ T9686] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2049'. [ 174.340597][ T9686] gretap0: entered promiscuous mode [ 175.649630][ T9778] netlink: ',&#^%': attribute type 10 has an invalid length. [ 176.637543][ T9814] wg2: entered promiscuous mode [ 176.642554][ T9814] wg2: entered allmulticast mode [ 176.667022][ T29] kauditd_printk_skb: 1198 callbacks suppressed [ 176.667041][ T29] audit: type=1400 audit(1759841206.777:14064): avc: denied { prog_load } for pid=9815 comm="syz.2.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.693928][ T29] audit: type=1400 audit(1759841206.777:14065): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.718364][ T29] audit: type=1400 audit(1759841206.777:14066): avc: denied { prog_load } for pid=9817 comm="syz.1.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.737668][ T29] audit: type=1400 audit(1759841206.777:14067): avc: denied { prog_load } for pid=9817 comm="syz.1.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.756921][ T29] audit: type=1400 audit(1759841206.777:14068): avc: denied { create } for pid=9817 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 176.777015][ T29] audit: type=1400 audit(1759841206.777:14069): avc: denied { create } for pid=9817 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 176.797089][ T29] audit: type=1400 audit(1759841206.777:14070): avc: denied { create } for pid=9817 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 176.817157][ T29] audit: type=1400 audit(1759841206.777:14071): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.817213][ T29] audit: type=1400 audit(1759841206.808:14072): avc: denied { prog_load } for pid=9815 comm="syz.2.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 176.817308][ T29] audit: type=1400 audit(1759841206.808:14073): avc: denied { map_create } for pid=9815 comm="syz.2.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 177.098441][ T9840] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2116'. [ 177.180261][ T9850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2121'. [ 177.288494][ T9860] netlink: 28 bytes leftover after parsing attributes in process `,&#^%'. [ 177.312963][ T9864] netlink: 'syz.3.2128': attribute type 4 has an invalid length. [ 177.320925][ T9864] netlink: 'syz.3.2128': attribute type 4 has an invalid length. [ 177.568576][ T9891] netlink: 'syz.3.2138': attribute type 21 has an invalid length. [ 179.008139][ T9965] wg2: left promiscuous mode [ 179.012787][ T9965] wg2: left allmulticast mode [ 179.320736][ T9991] __nla_validate_parse: 3 callbacks suppressed [ 179.320756][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 179.378194][ T9996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2180'. [ 179.421009][ T9997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2179'. [ 179.730521][T10009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2185'. [ 180.548998][T10045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2198'. [ 180.611331][T10049] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2200'. [ 180.817655][T10061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2206'. [ 180.826689][T10061] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2206'. [ 180.835718][T10061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2206'. [ 180.854971][T10061] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2206'. [ 181.687428][ T29] kauditd_printk_skb: 1456 callbacks suppressed [ 181.687478][ T29] audit: type=1400 audit(1759841724.049:15527): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 181.718702][ T29] audit: type=1400 audit(1759841724.049:15528): avc: denied { create } for pid=10097 comm="syz.0.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 181.739547][ T29] audit: type=1400 audit(1759841724.049:15529): avc: denied { map_create } for pid=10097 comm="syz.0.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.759092][ T29] audit: type=1400 audit(1759841724.049:15530): avc: denied { prog_load } for pid=10097 comm="syz.0.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.781476][ T29] audit: type=1400 audit(1759841724.080:15531): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 181.805844][ T29] audit: type=1400 audit(1759841724.122:15532): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 181.830141][ T29] audit: type=1400 audit(1759841724.143:15533): avc: denied { map_create } for pid=10099 comm="syz.0.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.849500][ T29] audit: type=1400 audit(1759841724.143:15534): avc: denied { prog_load } for pid=10099 comm="syz.0.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 181.869963][ T29] audit: type=1400 audit(1759841724.217:15535): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 181.894355][ T29] audit: type=1326 audit(1759841724.238:15536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10101 comm="syz.4.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aae2eeec9 code=0x7ffc0000 [ 183.150117][T10193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10193 comm=syz.3.2263 [ 183.190387][T10192] netlink: 'syz.3.2263': attribute type 7 has an invalid length. [ 183.190387][T10193] netlink: 'syz.3.2263': attribute type 7 has an invalid length. [ 184.516648][T10241] __nla_validate_parse: 8 callbacks suppressed [ 184.516665][T10241] netlink: 28 bytes leftover after parsing attributes in process `,&#^%'. [ 184.531610][T10241] netlink: 32 bytes leftover after parsing attributes in process `,&#^%'. [ 184.540159][T10241] netlink: 28 bytes leftover after parsing attributes in process `,&#^%'. [ 184.934754][T10277] netlink: 28 bytes leftover after parsing attributes in process `,&#^%'. [ 184.943368][T10277] netlink: 32 bytes leftover after parsing attributes in process `,&#^%'. [ 184.952067][T10277] netlink: 28 bytes leftover after parsing attributes in process `,&#^%'. [ 185.098839][T10283] netlink: 'syz.4.2299': attribute type 21 has an invalid length. [ 185.259358][T10302] netlink: 28 bytes leftover after parsing attributes in process `,&#^%'. [ 185.267947][T10302] netlink: 32 bytes leftover after parsing attributes in process `,&#^%'. [ 185.276512][T10302] netlink: 28 bytes leftover after parsing attributes in process `,&#^%'. [ 185.641581][T10325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2317'. [ 186.461012][ T29] kauditd_printk_skb: 1390 callbacks suppressed [ 186.461030][ T29] audit: type=1400 audit(1759841729.056:16927): avc: denied { create } for pid=10386 comm="syz.2.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 186.517643][ T29] audit: type=1400 audit(1759841729.098:16928): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.542055][ T29] audit: type=1400 audit(1759841729.109:16929): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.566365][ T29] audit: type=1400 audit(1759841729.119:16930): avc: denied { read write } for pid=10384 comm="syz.0.2342" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.655630][ T29] audit: type=1400 audit(1759841729.172:16931): avc: denied { create } for pid=10390 comm="syz.1.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 186.675549][ T29] audit: type=1400 audit(1759841729.172:16932): avc: denied { map_create } for pid=10390 comm="syz.1.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 186.695017][ T29] audit: type=1400 audit(1759841729.172:16933): avc: denied { prog_load } for pid=10390 comm="syz.1.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 186.714379][ T29] audit: type=1400 audit(1759841729.172:16934): avc: denied { mount } for pid=10392 comm="syz.4.2347" name="/" dev="configfs" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=0 [ 186.737345][ T29] audit: type=1400 audit(1759841729.172:16935): avc: denied { map_create } for pid=10392 comm="syz.4.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 186.756677][ T29] audit: type=1400 audit(1759841729.172:16936): avc: denied { prog_load } for pid=10392 comm="syz.4.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 186.912953][T10418] netlink: 'syz.0.2358': attribute type 1 has an invalid length. [ 186.944078][T10418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.058456][T10418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.065650][T10418] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address [ 187.117618][T10425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10425 comm=syz.0.2358 [ 187.118343][T10418] bond0: (slave vxcan5): Error -95 calling set_mac_address [ 188.146864][T10503] netlink: 'syz.2.2396': attribute type 21 has an invalid length. [ 188.547615][T10532] netlink: 'syz.4.2409': attribute type 1 has an invalid length. [ 188.564605][T10532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.583731][T10532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.591150][T10532] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 188.602292][T10532] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 188.627749][T10539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10539 comm=syz.4.2409 [ 189.303140][T10581] __nla_validate_parse: 27 callbacks suppressed [ 189.303156][T10581] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2429'. [ 189.610179][T10610] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2441'. [ 189.701534][T10619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2442'. [ 190.262900][T10624] netlink: 'syz.0.2446': attribute type 21 has an invalid length. [ 190.460751][T10636] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2452'. [ 190.643974][T10655] netlink: 'syz.3.2460': attribute type 1 has an invalid length. [ 190.657721][T10655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.674266][T10655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.681616][T10655] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 190.694997][T10655] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 190.716604][T10659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10659 comm=syz.3.2460 [ 190.829628][T10665] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2464'. [ 190.945852][T10680] netlink: 'syz.4.2471': attribute type 21 has an invalid length. [ 190.972649][T10685] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2475'. [ 191.172672][T10713] netlink: 28 bytes leftover after parsing attributes in process `,&#^%'. [ 191.181248][T10713] netlink: 32 bytes leftover after parsing attributes in process `,&#^%'. [ 191.189819][T10713] netlink: 28 bytes leftover after parsing attributes in process `,&#^%'. [ 191.198903][T10713] netlink: 32 bytes leftover after parsing attributes in process `,&#^%'. [ 191.214810][T10712] netlink: 'syz.4.2485': attribute type 21 has an invalid length. [ 191.230204][ T29] kauditd_printk_skb: 1556 callbacks suppressed [ 191.230222][ T29] audit: type=1400 audit(1759841990.063:18493): avc: denied { create } for pid=10714 comm="syz.0.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 191.272313][ T29] audit: type=1400 audit(1759841990.063:18494): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.296659][ T29] audit: type=1400 audit(1759841990.095:18495): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.321079][ T29] audit: type=1400 audit(1759841990.105:18496): avc: denied { create } for pid=10716 comm="syz.3.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 191.340768][ T29] audit: type=1400 audit(1759841990.105:18497): avc: denied { prog_load } for pid=10716 comm="syz.3.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 191.397447][ T29] audit: type=1400 audit(1759841990.189:18498): avc: denied { map_create } for pid=10718 comm="syz.4.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 191.416924][ T29] audit: type=1400 audit(1759841990.189:18499): avc: denied { prog_load } for pid=10718 comm="syz.4.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 191.436201][ T29] audit: type=1400 audit(1759841990.189:18500): avc: denied { prog_load } for pid=10718 comm="syz.4.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 191.455545][ T29] audit: type=1400 audit(1759841990.189:18501): avc: denied { create } for pid=10718 comm="syz.4.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 191.475483][ T29] audit: type=1400 audit(1759841990.189:18502): avc: denied { create } for pid=10718 comm="syz.4.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 192.442214][T10782] netlink: 'syz.3.2517': attribute type 1 has an invalid length. [ 192.475515][T10782] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.526124][T10793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.533513][T10793] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 192.545151][T10793] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 192.572910][T10782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10782 comm=syz.3.2517 [ 193.396106][T10862] netlink: 'syz.3.2550': attribute type 1 has an invalid length. [ 193.409962][T10862] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.430926][T10862] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.442880][T10862] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 193.469280][T10862] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 193.478665][T10864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10864 comm=syz.3.2550 [ 194.178677][T10903] __nla_validate_parse: 21 callbacks suppressed [ 194.178697][T10903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2569'. [ 194.488703][T10918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2574'. [ 194.497789][T10918] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2574'. [ 194.506797][T10918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2574'. [ 194.559212][T10918] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2574'. [ 194.589224][T10922] netlink: 'syz.0.2576': attribute type 1 has an invalid length. [ 194.617756][T10922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.674128][T10922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.701844][T10922] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 194.736527][T10930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10930 comm=syz.0.2576 [ 194.738883][T10929] netlink: 'syz.4.2579': attribute type 21 has an invalid length. [ 194.757712][T10922] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 194.883834][T10940] netlink: 'syz.3.2584': attribute type 1 has an invalid length. [ 194.900506][T10940] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.918245][T10940] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.925506][T10940] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 194.937127][T10940] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 194.950255][T10932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2580'. [ 194.971780][T10944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10944 comm=syz.3.2584 [ 194.993019][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2586'. [ 195.002065][T10946] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2586'. [ 195.011022][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2586'. [ 195.020347][T10946] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2586'. [ 195.082262][T10956] netlink: 'syz.0.2591': attribute type 21 has an invalid length. [ 195.250459][T10973] netlink: 'syz.3.2598': attribute type 1 has an invalid length. [ 195.290823][T10973] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.323386][T10973] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.345871][T10973] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 195.392859][T10977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10977 comm=syz.3.2598 [ 195.406036][T10973] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 195.695592][T10990] netlink: 'syz.1.2604': attribute type 21 has an invalid length. [ 195.880493][T11022] netlink: 'syz.2.2619': attribute type 21 has an invalid length. [ 196.003815][ T29] kauditd_printk_skb: 1272 callbacks suppressed [ 196.003833][ T29] audit: type=1400 audit(1759841995.081:19697): avc: denied { prog_load } for pid=11034 comm="syz.0.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 196.030811][ T29] audit: type=1400 audit(1759841995.081:19698): avc: denied { open } for pid=11036 comm="syz.2.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 196.050410][ T29] audit: type=1400 audit(1759841995.081:19699): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 196.074792][ T29] audit: type=1326 audit(1759841995.081:19700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.2.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b824eec9 code=0x7ffc0000 [ 196.098432][ T29] audit: type=1326 audit(1759841995.081:19701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.2.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b824eec9 code=0x7ffc0000 [ 196.122045][ T29] audit: type=1326 audit(1759841995.081:19702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.2.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f59b824eec9 code=0x7ffc0000 [ 196.145564][ T29] audit: type=1326 audit(1759841995.081:19703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.2.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b824eec9 code=0x7ffc0000 [ 196.169244][ T29] audit: type=1326 audit(1759841995.081:19704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.2.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b824eec9 code=0x7ffc0000 [ 196.192965][ T29] audit: type=1326 audit(1759841995.081:19705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.2.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f59b824eec9 code=0x7ffc0000 [ 196.216556][ T29] audit: type=1326 audit(1759841995.081:19706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.2.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b824eec9 code=0x7ffc0000 [ 196.989021][T11106] netlink: 'syz.3.2657': attribute type 21 has an invalid length. [ 197.179939][T11128] netlink: 'syz.1.2668': attribute type 1 has an invalid length. [ 197.193828][T11128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.215010][T11128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.230776][T11128] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 197.247152][T11128] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 197.269887][T11135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11135 comm=syz.1.2668 [ 199.032591][T11201] __nla_validate_parse: 44 callbacks suppressed [ 199.032609][T11201] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2696'. [ 199.577718][T11225] netlink: 'syz.2.2705': attribute type 1 has an invalid length. [ 199.685683][T11225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.747897][T11232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11232 comm=syz.2.2705 [ 199.770528][T11230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11230 comm=syz.2.2705 [ 199.890509][T11239] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2709'. [ 200.039322][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2713'. [ 200.794135][ T29] kauditd_printk_skb: 764 callbacks suppressed [ 200.794151][ T29] audit: type=1400 audit(1759842256.104:20471): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.897964][ T29] audit: type=1400 audit(1759842256.146:20472): avc: denied { read write } for pid=11268 comm="syz.3.2721" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.922297][ T29] audit: type=1400 audit(1759842256.146:20473): avc: denied { prog_load } for pid=11268 comm="syz.3.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 200.941566][ T29] audit: type=1400 audit(1759842256.146:20474): avc: denied { create } for pid=11268 comm="syz.3.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 201.101200][T11272] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2723'. [ 201.120122][ T29] audit: type=1400 audit(1759842256.409:20475): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 201.126787][T11272] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2723'. [ 201.144525][ T29] audit: type=1400 audit(1759842256.419:20476): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 201.177801][ T29] audit: type=1400 audit(1759842256.419:20477): avc: denied { map_create } for pid=11271 comm="syz.4.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 201.197210][ T29] audit: type=1400 audit(1759842256.430:20478): avc: denied { prog_load } for pid=11271 comm="syz.4.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 201.216562][ T29] audit: type=1400 audit(1759842256.430:20479): avc: denied { prog_load } for pid=11271 comm="syz.4.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 201.235849][ T29] audit: type=1400 audit(1759842256.430:20480): avc: denied { create } for pid=11271 comm="syz.4.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 201.726716][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2733'. [ 202.117722][T11312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2738'. [ 202.454677][T11323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2743'. [ 202.463715][T11323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2743'. [ 202.472718][T11323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2743'. [ 202.758286][ T3661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.817647][ T3661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.843019][T11336] netlink: 'syz.3.2748': attribute type 1 has an invalid length. [ 202.864083][T11336] 8021q: adding VLAN 0 to HW filter on device bond6 [ 202.895451][T11336] 8021q: adding VLAN 0 to HW filter on device bond6 [ 202.915733][T11336] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 202.928958][T11336] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 202.937910][T11338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11338 comm=syz.3.2748 [ 202.975106][ T3661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.050552][ T3661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.176343][ T3661] bond1 (unregistering): Released all slaves [ 203.184764][ T3661] bond0 (unregistering): Released all slaves [ 203.192980][ T3661] bond2 (unregistering): Released all slaves [ 203.245223][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.252732][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.261310][ T3661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.268711][ T3661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.277727][ T3661] veth1_macvtap: left promiscuous mode [ 203.283316][ T3661] veth0_macvtap: left promiscuous mode [ 203.288842][ T3661] veth1_vlan: left promiscuous mode [ 203.294125][ T3661] veth0_vlan: left promiscuous mode [ 203.359417][ T3661] team0 (unregistering): Port device team_slave_1 removed [ 203.369785][ T3661] team0 (unregistering): Port device team_slave_0 removed [ 203.836966][T11352] __nla_validate_parse: 3 callbacks suppressed [ 203.836983][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2752'. [ 205.847624][ T29] kauditd_printk_skb: 469 callbacks suppressed [ 205.847643][ T29] audit: type=1400 audit(1759842517.405:20950): avc: denied { execmem } for pid=11371 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 205.874525][ T29] audit: type=1400 audit(1759842517.405:20951): avc: denied { prog_load } for pid=11372 comm="syz.3.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.893842][ T29] audit: type=1400 audit(1759842517.405:20952): avc: denied { prog_load } for pid=11372 comm="syz.3.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.913135][ T29] audit: type=1400 audit(1759842517.416:20953): avc: denied { read write } for pid=11372 comm="syz.3.2762" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.938571][ T29] audit: type=1400 audit(1759842517.458:20954): avc: denied { create } for pid=11375 comm="syz.2.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 205.959493][ T29] audit: type=1400 audit(1759842517.458:20955): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.983779][ T29] audit: type=1400 audit(1759842517.458:20956): avc: denied { prog_load } for pid=11374 comm="syz.4.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 206.003010][ T29] audit: type=1400 audit(1759842517.458:20957): avc: denied { prog_load } for pid=11374 comm="syz.4.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 206.022245][ T29] audit: type=1400 audit(1759842517.479:20958): avc: denied { read write } for pid=11374 comm="syz.4.2763" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 206.046474][ T29] audit: type=1400 audit(1759842517.510:20959): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 206.974978][T11387] ================================================================== [ 206.983127][T11387] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 206.991501][T11387] [ 206.993832][T11387] write to 0xffff888104c623d4 of 4 bytes by task 11383 on cpu 0: [ 207.001616][T11387] inode_update_timestamps+0x147/0x270 [ 207.007143][T11387] file_update_time+0x20e/0x2b0 [ 207.012027][T11387] shmem_file_write_iter+0x9c/0xf0 [ 207.017153][T11387] iter_file_splice_write+0x663/0xa60 [ 207.022534][T11387] direct_splice_actor+0x153/0x2a0 [ 207.027661][T11387] splice_direct_to_actor+0x30f/0x680 [ 207.033045][T11387] do_splice_direct+0xda/0x150 [ 207.037817][T11387] do_sendfile+0x380/0x650 [ 207.042250][T11387] __x64_sys_sendfile64+0x105/0x150 [ 207.047464][T11387] x64_sys_call+0x2bb4/0x3000 [ 207.052153][T11387] do_syscall_64+0xd2/0x200 [ 207.056665][T11387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.062568][T11387] [ 207.064893][T11387] read to 0xffff888104c623d4 of 4 bytes by task 11387 on cpu 1: [ 207.072533][T11387] atime_needs_update+0x2a8/0x3e0 [ 207.077581][T11387] touch_atime+0x4a/0x340 [ 207.081923][T11387] shmem_file_read_iter+0x477/0x540 [ 207.087131][T11387] copy_splice_read+0x442/0x660 [ 207.091987][T11387] splice_direct_to_actor+0x290/0x680 [ 207.097367][T11387] do_splice_direct+0xda/0x150 [ 207.102135][T11387] do_sendfile+0x380/0x650 [ 207.106569][T11387] __x64_sys_sendfile64+0x105/0x150 [ 207.111784][T11387] x64_sys_call+0x2bb4/0x3000 [ 207.116469][T11387] do_syscall_64+0xd2/0x200 [ 207.120980][T11387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.126886][T11387] [ 207.129218][T11387] value changed: 0x234c2e02 -> 0x23ec5dd3 [ 207.134943][T11387] [ 207.137270][T11387] Reported by Kernel Concurrency Sanitizer on: [ 207.143421][T11387] CPU: 1 UID: 0 PID: 11387 Comm: syz.3.2766 Not tainted syzkaller #0 PREEMPT(voluntary) [ 207.153237][T11387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.163298][T11387] ================================================================== [ 207.868015][ T569] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.940643][ T569] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.978099][ T569] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.025698][ T569] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.103626][ T569] bridge_slave_1: left allmulticast mode [ 208.109370][ T569] bridge_slave_1: left promiscuous mode [ 208.114990][ T569] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.122707][ T569] bridge_slave_0: left allmulticast mode [ 208.128406][ T569] bridge_slave_0: left promiscuous mode [ 208.134028][ T569] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.310624][ T569] bond1 (unregistering): Released all slaves [ 208.319030][ T569] bond0 (unregistering): Released all slaves [ 208.327761][ T569] bond2 (unregistering): Released all slaves [ 208.336130][ T569] bond3 (unregistering): Released all slaves [ 208.344307][ T569] bond4 (unregistering): Released all slaves [ 208.352893][ T569] bond5 (unregistering): Released all slaves [ 208.361287][ T569] bond6 (unregistering): Released all slaves [ 208.425634][ T569] hsr_slave_0: left promiscuous mode [ 208.431382][ T569] hsr_slave_1: left promiscuous mode [ 208.437081][ T569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.444567][ T569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.452618][ T569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.460028][ T569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.469943][ T569] veth1_vlan: left promiscuous mode [ 208.475187][ T569] veth0_vlan: left promiscuous mode [ 208.530031][ T569] team0 (unregistering): Port device team_slave_1 removed [ 208.540218][ T569] team0 (unregistering): Port device team_slave_0 removed [ 208.903827][ T569] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.979331][ T569] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.045053][ T569] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.092712][ T569] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.324683][ T569] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.378615][ T569] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.417132][ T569] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.463950][ T569] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.522550][ T569] bridge_slave_1: left allmulticast mode [ 209.528271][ T569] bridge_slave_1: left promiscuous mode [ 209.534063][ T569] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.541984][ T569] bridge_slave_0: left allmulticast mode [ 209.547670][ T569] bridge_slave_0: left promiscuous mode [ 209.553361][ T569] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.561892][ T569] bridge_slave_1: left allmulticast mode [ 209.567591][ T569] bridge_slave_1: left promiscuous mode [ 209.573265][ T569] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.581162][ T569] bridge_slave_0: left allmulticast mode [ 209.586849][ T569] bridge_slave_0: left promiscuous mode [ 209.592533][ T569] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.601025][ T569] bridge_slave_1: left allmulticast mode [ 209.606794][ T569] bridge_slave_1: left promiscuous mode [ 209.612469][ T569] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.620402][ T569] bridge_slave_0: left allmulticast mode [ 209.626094][ T569] bridge_slave_0: left promiscuous mode [ 209.631760][ T569] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.730418][ T569] bond0 (unregistering): Released all slaves [ 209.738994][ T569] bond1 (unregistering): Released all slaves [ 209.824860][ T569] bond0 (unregistering): Released all slaves [ 209.958592][ T569] bond1 (unregistering): Released all slaves [ 209.967321][ T569] bond0 (unregistering): Released all slaves [ 210.041209][ T569] hsr_slave_0: left promiscuous mode [ 210.046851][ T569] hsr_slave_1: left promiscuous mode [ 210.052499][ T569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.059884][ T569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.067367][ T569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.074840][ T569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.083230][ T569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.090790][ T569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.099760][ T569] hsr_slave_0: left promiscuous mode [ 210.105473][ T569] hsr_slave_1: left promiscuous mode [ 210.111091][ T569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.118459][ T569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.125913][ T569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.133427][ T569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.145636][ T569] veth1_macvtap: left promiscuous mode [ 210.151168][ T569] veth0_macvtap: left promiscuous mode [ 210.156796][ T569] veth1_vlan: left promiscuous mode [ 210.162025][ T569] veth0_vlan: left promiscuous mode [ 210.167735][ T569] veth1_macvtap: left promiscuous mode [ 210.173233][ T569] veth0_macvtap: left promiscuous mode [ 210.178767][ T569] veth1_vlan: left promiscuous mode [ 210.184047][ T569] veth0_vlan: left promiscuous mode [ 210.282686][ T569] team0 (unregistering): Port device team_slave_1 removed [ 210.292517][ T569] team0 (unregistering): Port device team_slave_0 removed [ 210.336958][ T569] team0 (unregistering): Port device team_slave_1 removed [ 210.346562][ T569] team0 (unregistering): Port device team_slave_0 removed [ 210.400764][ T569] team0 (unregistering): Port device team_slave_1 removed [ 210.410419][ T569] team0 (unregistering): Port device team_slave_0 removed