last executing test programs: 5.98232593s ago: executing program 4 (id=1136): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x22, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 5.870329384s ago: executing program 4 (id=1138): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r1 = eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x30, 0x0, 0xb, r0, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r1}]) 5.747522657s ago: executing program 4 (id=1139): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x1, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x2000000}, 0x80, 0x0}, 0x20000041) recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x102) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240)={0x5c5c434a458d4a19, 0x827ba8cd85529cd8, 0x28}, 0x18) socket(0x10, 0x3, 0x4) syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x147c84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x143841, 0x1b0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f00000002c0)={r1, 0x0, 0xa103, 0x8, 0xfffffffffffffbff, 0x1}) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0xff9, 0x8000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r2, 0x0, 0x10000000) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7c0e, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0x108) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@nullb, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 5.509844792s ago: executing program 4 (id=1141): r0 = semget$private(0x0, 0x6, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, [@alu={0x7, 0x0, 0x9, 0x0, 0x4, 0x2, 0xffffffffffffffff}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}, 0x3400c8d4) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) semtimedop(r0, &(0x7f0000000500)=[{0x0, 0xffff, 0x1000}], 0x1, &(0x7f0000000540)={0x0, 0x3938700}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000300)=[0x6]) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) 5.415917715s ago: executing program 4 (id=1142): epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x2810012, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB="d76c94fb6b18fca8fb74fa87d3d379b1d33f8607d2e98e14abca3a200971963f95b733b56e57ffd74a5191f976ba325dd3ba8f8c10b635f7978f0a8cd633ff687066bf179ec81aab91da02a8a63d5cb1d8df6d06ddb9fd51a207e93ecaa50229d9d699a4bbbf6f8bbfac6bd3339cf24a84c4221a18b098a1bb105c43d62bed9acc71989cf2ba2349377e63da6436bd32ce3501cb395d1e3329798cb00ec50bb99a8baff96bd1d4d21f79b9fe12bf29124af6ca292e0ac46567c53fb96819be933409e4fe3609202f90e1095249035c2830ebbc63416b720eaf2e9696a5aefc62bba3efdf85beb7b9b7930c09a6fe8187b62b", @ANYRES64, @ANYRES8=0x0], 0x1, 0x2d0, &(0x7f00000009c0)="$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") r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x55) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x80047210, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340"], 0x88}}, 0x0) 5.356496246s ago: executing program 4 (id=1143): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x1120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r3, @ANYBLOB="0000000000000000000000000000000000000000fd"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) listen(r8, 0xfffffffe) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000400)="05", 0x1}], 0x1) 3.246421749s ago: executing program 1 (id=1166): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x2, 0xffffffff}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x2, 0xffffffff}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x104, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x104, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000000000)={0xa, {"a2e39b214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838681a0890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b343b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900004288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef7becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe505003d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6ae4effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d71eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d471c8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949d9a92587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15aa82000000000000a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x1000}}, 0x1006) lseek(r0, 0xf1f6, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d030000000000000000130000002400098008"], 0x38}}, 0x4) (async) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d030000000000000000130000002400098008"], 0x38}}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(r5, &(0x7f00000000c0)='./file0\x00', 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xa, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002e000000870a00000000000025000000000000009500000d0000000036e0fe9d628154331435e9e6ce79c9df0dafb05b570f3a5e216269570953ed4e8ef92cbd5659aa3327828105ea37cf394d0e22a71a3e05b26e86c93f9733f22bf8c4189a9b2b1351c0a4ea63d3371870918db0dad0aa5c36c1173f"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYRES8=r6], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r8, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r8, 0x0, 0x0}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x84}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r7}, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private0, @in=@initdev}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8) 2.369986031s ago: executing program 3 (id=1173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000af", @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000100000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) 2.270099503s ago: executing program 3 (id=1174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0xf3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.269505003s ago: executing program 3 (id=1175): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0b0b26fd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000c080}, 0x4000814) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000040}, 0x4004080) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, r4, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) r5 = socket$kcm(0x21, 0x2, 0x2) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) connect$vsock_stream(r5, &(0x7f0000000400), 0x10) write$P9_RREADDIR(r6, &(0x7f0000000640)={0x141, 0x29, 0x1, {0xdb, [{{0x0, 0x0, 0x4}, 0xbd, 0x4d, 0x7, './file0'}, {{0x1, 0x0, 0x3}, 0x9, 0x81, 0x7, './file0'}, {{0x0, 0x0, 0x6}, 0xff, 0x5d, 0x7, './file1'}, {{0x2, 0x2, 0x3}, 0x0, 0x10, 0x7, './file0'}, {{0xa1e975fa598a6243, 0x3, 0x5}, 0xffffffff00000001, 0x4, 0x7, './file0'}, {{0x4, 0x0, 0x7}, 0x4, 0xc, 0x7, './file0'}, {{0x20, 0x3, 0x3}, 0x6, 0x60, 0x7, './file0'}, {{0x20, 0x3, 0x2}, 0x0, 0x0, 0x7, './file1'}, {{0x20, 0x1, 0x4}, 0x149c1da6, 0x7, 0x7, './file1'}, {{0x0, 0x3, 0x3}, 0x5, 0x5, 0x7, './file1'}]}}, 0x141) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xd9a0}, @TCA_HHF_EVICT_TIMEOUT={0xffffffffffffffeb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0xaf, @local, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0xb56c, 0x8, 0x6, 0x5, 0x8, "ac2e29477b0beeb4f9fc607ea279c92c9c1f1e"}) 2.181438856s ago: executing program 3 (id=1176): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="6797f04cdb6f2c95f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3c24", 0x5dc}], 0x1}, 0x30008b08) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r2, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) syz_clone(0x1300211, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) 1.791691285s ago: executing program 3 (id=1179): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) syz_open_pts(r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 1.760115976s ago: executing program 2 (id=1180): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000016c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x4}], @param_prob={0x4, 0x1, 0x0, 0x66, {0xe, 0x6, "8e27de", 0x1, 0x87, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x28}}}}}}}, 0xfdef) (fail_nth: 7) 1.400701655s ago: executing program 1 (id=1182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xc, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.306108267s ago: executing program 2 (id=1184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4d3, 0x3, 0xf, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000014) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r9, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f", 0x20}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0", 0xe}], 0x2, 0x0, 0x0, 0x10000000}, 0x8000) 1.236348979s ago: executing program 2 (id=1186): ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x5452, &(0x7f0000000d80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8040) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20800, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xac1) ioctl$TCSBRKP(r0, 0x5425, 0x0) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 1.049114974s ago: executing program 3 (id=1188): r0 = semget$private(0x0, 0x6, 0x1b5) semop(r0, &(0x7f0000000040)=[{0x0, 0xff43}], 0x1) socket$nl_route(0x10, 0x3, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_getnexthop={0x20, 0x6a, 0x7fc12344b4233679, 0x70bd68, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0xfffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c4) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x9c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xe17, 0x400c0}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xc1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x389a, 0xd3a}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x68, 0x18, 0x1, 0x70bd2c, 0x24dfdc00, {0xa}, [@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x21, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r6, &(0x7f0000006240)='-1\x00', 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ptrace(0x4207, 0x0) unshare(0x64000600) 722.369812ms ago: executing program 0 (id=1189): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="6797f04cdb6f2c95f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3c24", 0x5dc}], 0x1}, 0x30008b08) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r2, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) syz_clone(0x1300211, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) 608.922184ms ago: executing program 1 (id=1190): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x11, &(0x7f00000002c0)={[{@noblock_validity}, {@nolazytime}, {@errors_remount}, {@mblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x87ab}}]}, 0x1, 0x626, &(0x7f0000000d00)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fddbdb2500000000", @ANYRES32=r1, @ANYBLOB="af7c"], 0x1c}, 0x1, 0x0, 0x0, 0xa911}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x4, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0xfffffffd, 0x9, 0x0, 0x0, 0x400, 0x0, 0x4, 0x0, 0x200f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x166) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x189800, 0x207) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x40047211, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00') creat(&(0x7f0000000140)='./file0\x00', 0x49) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) unlink(&(0x7f00000001c0)='./file0\x00') setxattr$security_selinux(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:ssh_exec_t:s0\x00', 0x20, 0x2) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$inet(r2, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r2, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) r4 = syz_io_uring_setup(0x51ed, &(0x7f0000000080)={0x0, 0x91c2, 0x80, 0x1, 0x27a}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f0000001380)={0x7, 0x81}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 470.488258ms ago: executing program 0 (id=1191): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a3ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000500)={0x4009, 0x400008, 0x3, 0x797a, 0x3, "00a6400d00000000000000f8ffffff00"}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02037f02210000050000000000000000030006000000000002000000ac14142e00000000000000000200010000000000100000007fffffff030005002b00000002000000ac1414aa000000000000000017000800"], 0x108}, 0x1, 0x7}, 0x0) 390.16482ms ago: executing program 0 (id=1192): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000016c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x4}], @param_prob={0x4, 0x1, 0x0, 0x66, {0xe, 0x6, "8e27de", 0x1, 0x87, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x28}}}}}}}, 0xfdef) 388.31403ms ago: executing program 1 (id=1193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000000300001802c00018014000300fe80000000000000000000000000002014000400fe8000000000000000000000000000aa3c0003800c00028004000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100000000000000000000000000013c0002800c00028005000100860000002c0001801400030000000000000000000000000000000000140004"], 0xbc}, 0x1, 0x0, 0x0, 0x24000801}, 0x14) 386.64837ms ago: executing program 2 (id=1194): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x20, 0x29, 0x7, {[@generic={0x7, 0x10, "093288a6d5a96c15ef5b200dd6a0"}]}}}], 0x40}, 0x20002800) 350.257701ms ago: executing program 0 (id=1195): socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}, {&(0x7f0000000080)="785c1c08b9ff5e110e0b7905655627f7db698d6e88", 0x15}, {&(0x7f00000000c0)="81e8a7bb1a947d3ca84f6a24ca196ebc9fcaa98e561f6674825e60dea2e6f0054cbe470d32f1328fc1150be239e1617e06566563e5c8243e6072d987a7dfcef194a4c182dea7a39245ec115ef178ea61134a713b33e18273b1014e898288a0fb012c625a3bdc6be46675e4c80f87ebca2fb234", 0x73}], 0x3}, 0x20040900) 346.669851ms ago: executing program 1 (id=1196): setresuid(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) 345.860291ms ago: executing program 2 (id=1197): ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f00000003c0)={{&(0x7f0000000000)=[{0xb, 0xfffffffffffffff2, 0xfff, {0x4, 0x2}, 0xffff, 0x1d7e, 0xff}, {0x0, 0x100000001, 0x9, {0xffffffff80000000, 0x7f}, 0x5, 0x101, 0x4}], 0x2, 0x40, 0x2, 0x7}, {0x0, 0x0, 0x10, 0xf801, 0x4}, {0x0, 0x0, 0x8, 0x5, 0x8000}, {0x0, 0x0, 0x28, 0x1, 0x3}, {0x0, 0x0, 0x8, 0x8, 0x91}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da9c5129a3aa3c5c772f383a909e691eb23d4701000000b5533a96c995b3e2189cf625a0720af29782317e759e5705e9000000fcd1a6b80b5ab26400"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "f1fdd8e492db0679", "0000000453c8f489663b8f830d00", "f14df56b", "387d82122e6780a2"}, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x42880) r3 = epoll_create1(0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x2, 0x1}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="180000001600553100000000000000000b000000a9"], 0x18}}, 0x0) close(0x3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x8000200b}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 280.479323ms ago: executing program 1 (id=1198): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) syz_open_pts(r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 239.179594ms ago: executing program 2 (id=1199): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007, 0x0, 0x100a}) write(r0, &(0x7f0000000080)='4', 0x1) 238.501014ms ago: executing program 0 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./trace/file0\x00', &(0x7f0000000100)='tracefs\x00', 0x2028088, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/instances/inst1/set_event\x00', 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) r4 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0xffff, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, r4}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioprio_set$pid(0x1, 0x0, 0x4007) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRES8=r0], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) unshare(0x22020600) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r9, 0x6, 0x2b, 0x0, &(0x7f0000000040)) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x20}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000700)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x9c, 0x0, @void}}}}}}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000b80), 0x141001, 0x0) 0s ago: executing program 0 (id=1201): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="6797f04cdb6f2c95f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3c24", 0x5dc}], 0x1}, 0x30008b08) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r2, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) syz_clone(0x1300211, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) kernel console output (not intermixed with test programs): 0] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.048312][ T3298] veth1_vlan: entered promiscuous mode [ 36.049856][ T28] audit: type=1400 audit(1785677963.775:149): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.076250][ T28] audit: type=1400 audit(1785677963.775:150): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.wGiWtw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.086824][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.104981][ T28] audit: type=1400 audit(1785677963.775:151): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.122388][ T3294] veth0_macvtap: entered promiscuous mode [ 36.135112][ T28] audit: type=1400 audit(1785677963.775:152): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.wGiWtw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.148923][ T3299] veth0_macvtap: entered promiscuous mode [ 36.166938][ T28] audit: type=1400 audit(1785677963.775:153): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.wGiWtw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.197958][ T28] audit: type=1400 audit(1785677963.795:154): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.219789][ T28] audit: type=1400 audit(1785677963.825:155): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.223514][ T3295] veth1_vlan: entered promiscuous mode [ 36.245536][ T28] audit: type=1400 audit(1785677963.825:156): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=4547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 36.249778][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.292179][ T3299] veth1_macvtap: entered promiscuous mode [ 36.304573][ T3294] veth1_macvtap: entered promiscuous mode [ 36.315517][ T3298] veth0_macvtap: entered promiscuous mode [ 36.321514][ T28] audit: type=1400 audit(1785677964.085:157): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.348780][ T3295] veth0_macvtap: entered promiscuous mode [ 36.360813][ T3298] veth1_macvtap: entered promiscuous mode [ 36.371620][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.379382][ T3295] veth1_macvtap: entered promiscuous mode [ 36.387774][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.397475][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.419742][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.441762][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.450826][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.458621][ T3501] syz.2.3 (3501) used greatest stack depth: 11008 bytes left [ 36.467295][ T326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.490728][ T3504] syz.2.6 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.508017][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.519422][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.537388][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.568329][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.661421][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.677091][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.696494][ T3517] netlink: 'syz.2.7': attribute type 4 has an invalid length. [ 36.704355][ T3517] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7'. [ 36.713516][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.832533][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.879435][ T181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.894567][ T3529] capability: warning: `syz.4.8' uses 32-bit capabilities (legacy support in use) [ 36.912874][ T3527] bond0: entered promiscuous mode [ 36.918146][ T3527] bond_slave_0: entered promiscuous mode [ 36.947811][ T3530] netlink: 332 bytes leftover after parsing attributes in process `syz.2.7'. [ 36.958385][ T3527] bond_slave_1: entered promiscuous mode [ 37.012676][ T3529] random: crng reseeded on system resumption [ 37.043634][ T3527] batadv0: entered promiscuous mode [ 37.128504][ T3527] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 37.236546][ T3527] bond0: left promiscuous mode [ 37.275806][ T3527] bond_slave_0: left promiscuous mode [ 37.324818][ T3527] bond_slave_1: left promiscuous mode [ 37.380519][ T3527] batadv0: left promiscuous mode [ 37.688744][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.730164][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.754540][ T3523] syz.2.7 (3523) used greatest stack depth: 9192 bytes left [ 37.807650][ T181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.916709][ T3543] netlink: 'syz.4.9': attribute type 6 has an invalid length. [ 37.929068][ T181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.964796][ T3543] netlink: 'syz.4.9': attribute type 21 has an invalid length. [ 38.152005][ T3554] netlink: 'syz.2.12': attribute type 10 has an invalid length. [ 38.190232][ T3552] bridge_slave_0: left allmulticast mode [ 38.207223][ T3556] netlink: 'syz.1.11': attribute type 6 has an invalid length. [ 38.222600][ T3552] bridge_slave_0: left promiscuous mode [ 38.268552][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.281234][ T3556] netlink: 'syz.1.11': attribute type 21 has an invalid length. [ 38.355022][ T3552] bridge_slave_1: left allmulticast mode [ 38.371395][ T3561] netlink: 80 bytes leftover after parsing attributes in process `syz.3.13'. [ 38.400043][ T3557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 38.428388][ T3552] bridge_slave_1: left promiscuous mode [ 38.447363][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.474007][ T3552] bond0: (slave bond_slave_0): Releasing backup interface [ 38.503428][ T3552] bond0: (slave bond_slave_1): Releasing backup interface [ 38.534630][ T3552] team0: Port device team_slave_0 removed [ 38.558609][ T3552] team0: Port device team_slave_1 removed [ 38.580853][ T3552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.606389][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.630685][ T3552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.655661][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.681234][ T3552] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 38.752952][ T3554] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 38.777328][ T3557] bond0: (slave bridge0): Releasing backup interface [ 38.864709][ T3569] netlink: 'syz.0.16': attribute type 11 has an invalid length. [ 38.885678][ T3569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 38.928767][ T181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.937771][ T181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.009235][ T326] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.025333][ T326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.069721][ T3574] FAULT_INJECTION: forcing a failure. [ 39.069721][ T3574] name failslab, interval 1, probability 0, space 0, times 1 [ 39.086161][ T3575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 39.096519][ T3574] CPU: 1 UID: 0 PID: 3574 Comm: syz.3.19 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.096552][ T3574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.096573][ T3574] Call Trace: [ 39.096581][ T3574] [ 39.096590][ T3574] __dump_stack+0x1d/0x30 [ 39.096617][ T3574] dump_stack_lvl+0x95/0xd0 [ 39.096691][ T3574] dump_stack+0x15/0x1b [ 39.096791][ T3574] should_fail_ex+0x25e/0x270 [ 39.096876][ T3574] ? getname_long+0x32/0x100 [ 39.096933][ T3574] should_failslab+0x8c/0xb0 [ 39.096962][ T3574] __kmalloc_cache_noprof+0x7b/0x3d0 [ 39.096987][ T3574] ? getname_long+0x32/0x100 [ 39.097038][ T3574] ? should_fail_usercopy+0x1a/0x20 [ 39.097074][ T3574] getname_long+0x32/0x100 [ 39.097105][ T3574] do_getname+0x12e/0x1c0 [ 39.097220][ T3574] __se_sys_renameat+0x35/0x1c0 [ 39.097341][ T3574] __x64_sys_renameat+0x55/0x70 [ 39.097371][ T3574] x64_sys_call+0x2c90/0x3020 [ 39.097400][ T3574] do_syscall_64+0x136/0x3c0 [ 39.097432][ T3574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.097491][ T3574] RIP: 0033:0x7f7bf3c0e019 [ 39.097506][ T3574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.097524][ T3574] RSP: 002b:00007f7bf2667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 39.097546][ T3574] RAX: ffffffffffffffda RBX: 00007f7bf3e95fa0 RCX: 00007f7bf3c0e019 [ 39.097563][ T3574] RDX: ffffffffffffffff RSI: 00002000000004c0 RDI: ffffffffffffffff [ 39.097640][ T3574] RBP: 00007f7bf2667090 R08: 0000000000000000 R09: 0000000000000000 [ 39.097656][ T3574] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001 [ 39.097673][ T3574] R13: 00007f7bf3e96038 R14: 00007f7bf3e95fa0 R15: 00007ffc3ac19d28 [ 39.097691][ T3574] [ 39.151990][ T3575] FAULT_INJECTION: forcing a failure. [ 39.151990][ T3575] name failslab, interval 1, probability 0, space 0, times 1 [ 39.290189][ T3575] CPU: 0 UID: 0 PID: 3575 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.290215][ T3575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.290227][ T3575] Call Trace: [ 39.290235][ T3575] [ 39.290243][ T3575] __dump_stack+0x1d/0x30 [ 39.290272][ T3575] dump_stack_lvl+0x95/0xd0 [ 39.290308][ T3575] dump_stack+0x15/0x1b [ 39.290331][ T3575] should_fail_ex+0x25e/0x270 [ 39.290373][ T3575] should_failslab+0x8c/0xb0 [ 39.290421][ T3575] __kvmalloc_node_noprof+0x15b/0x590 [ 39.290449][ T3575] ? alloc_netdev_mqs+0x577/0xa90 [ 39.290488][ T3575] ? alloc_netdev_mqs+0x577/0xa90 [ 39.290528][ T3575] alloc_netdev_mqs+0x577/0xa90 [ 39.290622][ T3575] rtnl_create_link+0x239/0x720 [ 39.290646][ T3575] rtnl_newlink_create+0x175/0x650 [ 39.290752][ T3575] rtnl_newlink+0x1181/0x1400 [ 39.290791][ T3575] ? __siphash_unaligned+0x185/0x2d0 [ 39.290821][ T3575] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 39.290907][ T3575] ? __rcu_read_unlock+0x4e/0x70 [ 39.291001][ T3575] ? avc_has_perm_noaudit+0xa3/0x120 [ 39.291105][ T3575] ? cred_has_capability+0x224/0x2a0 [ 39.291137][ T3575] ? selinux_capable+0x31/0x40 [ 39.291164][ T3575] ? security_capable+0x7b/0x90 [ 39.291190][ T3575] ? ns_capable+0x80/0xb0 [ 39.291324][ T3575] ? __pfx_rtnl_newlink+0x10/0x10 [ 39.291360][ T3575] rtnetlink_rcv_msg+0x64b/0x720 [ 39.291461][ T3575] netlink_rcv_skb+0x11e/0x220 [ 39.291489][ T3575] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 39.291516][ T3575] rtnetlink_rcv+0x1c/0x30 [ 39.291572][ T3575] netlink_unicast+0x5a7/0x680 [ 39.291602][ T3575] netlink_sendmsg+0x5be/0x6f0 [ 39.291687][ T3575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.291720][ T3575] ____sys_sendmsg+0x532/0x580 [ 39.291746][ T3575] ___sys_sendmsg+0x195/0x1e0 [ 39.291768][ T3575] ? terminate_walk+0x1d5/0x200 [ 39.291940][ T3575] __sys_sendmmsg+0x185/0x320 [ 39.291975][ T3575] __x64_sys_sendmmsg+0x57/0x70 [ 39.291994][ T3575] x64_sys_call+0x27aa/0x3020 [ 39.292042][ T3575] do_syscall_64+0x136/0x3c0 [ 39.292094][ T3575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.292122][ T3575] RIP: 0033:0x7fa1e157e019 [ 39.292141][ T3575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.292232][ T3575] RSP: 002b:00007fa1dffd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 39.292251][ T3575] RAX: ffffffffffffffda RBX: 00007fa1e1805fa0 RCX: 00007fa1e157e019 [ 39.292264][ T3575] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 39.292281][ T3575] RBP: 00007fa1dffd7090 R08: 0000000000000000 R09: 0000000000000000 [ 39.292315][ T3575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.292397][ T3575] R13: 00007fa1e1806038 R14: 00007fa1e1805fa0 R15: 00007ffdfaa75268 [ 39.292419][ T3575] [ 39.292559][ T3575] Zero length message leads to an empty skb [ 39.717184][ T3595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27'. [ 39.988214][ T3604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6428 sclass=netlink_route_socket pid=3604 comm=syz.2.31 [ 40.138182][ T3610] mmap: syz.3.33 (3610) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.033651][ T28] kauditd_printk_skb: 231 callbacks suppressed [ 41.033862][ T28] audit: type=1400 audit(1785677968.805:389): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 41.075811][ T28] audit: type=1400 audit(1785677968.845:390): avc: denied { create } for pid=3628 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 41.257660][ T28] audit: type=1400 audit(1785677969.025:391): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 41.289356][ T28] audit: type=1400 audit(1785677969.055:392): avc: denied { open } for pid=3635 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 41.308815][ T28] audit: type=1400 audit(1785677969.055:393): avc: denied { open } for pid=3635 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 41.328960][ T28] audit: type=1400 audit(1785677969.065:394): avc: denied { open } for pid=3635 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 41.401055][ T28] audit: type=1400 audit(1785677969.175:395): avc: denied { create } for pid=3635 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 41.421906][ T28] audit: type=1400 audit(1785677969.195:396): avc: denied { create } for pid=3635 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 41.667493][ T28] audit: type=1400 audit(1785677969.435:397): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 41.708620][ T28] audit: type=1400 audit(1785677969.465:398): avc: denied { open } for pid=3639 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 42.215619][ T3656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 42.333698][ T3665] netlink: 132 bytes leftover after parsing attributes in process `syz.4.52'. [ 42.675951][ T3699] syz.4.66 uses obsolete (PF_INET,SOCK_PACKET) [ 42.738121][ T3703] batadv0: entered promiscuous mode [ 42.743699][ T3703] macvtap1: entered promiscuous mode [ 42.749600][ T3703] macvtap1: entered allmulticast mode [ 42.755138][ T3703] batadv0: entered allmulticast mode [ 42.762364][ T3703] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 42.958586][ T3713] netlink: 'syz.4.72': attribute type 1 has an invalid length. [ 42.999514][ T3713] veth3: entered allmulticast mode [ 43.045760][ T3714] macvlan2: entered promiscuous mode [ 43.051189][ T3714] macvlan2: entered allmulticast mode [ 43.171188][ T3722] all: renamed from lo (while UP) [ 43.380693][ T3705] syz.0.69 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 43.395131][ T3705] CPU: 0 UID: 0 PID: 3705 Comm: syz.0.69 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.395162][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.395174][ T3705] Call Trace: [ 43.395180][ T3705] [ 43.395190][ T3705] __dump_stack+0x1d/0x30 [ 43.395219][ T3705] dump_stack_lvl+0x95/0xd0 [ 43.395246][ T3705] dump_stack+0x15/0x1b [ 43.395272][ T3705] dump_header+0x80/0x240 [ 43.395294][ T3705] oom_kill_process+0x295/0x350 [ 43.395395][ T3705] out_of_memory+0x981/0xbc0 [ 43.395562][ T3705] try_charge_memcg+0x621/0xa00 [ 43.395597][ T3705] __memcg_kmem_charge_page+0x199/0x3a0 [ 43.395637][ T3705] __alloc_frozen_pages_noprof+0x18a/0x350 [ 43.395669][ T3705] alloc_pages_mpol+0xa9/0x1d0 [ 43.395713][ T3705] alloc_pages_noprof+0x8f/0x140 [ 43.395752][ T3705] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 43.395799][ T3705] __kvmalloc_node_noprof+0x3a0/0x590 [ 43.395877][ T3705] ? futex_hash_allocate+0x192/0x920 [ 43.395950][ T3705] ? futex_hash_allocate+0x192/0x920 [ 43.395977][ T3705] ? futex_hash_allocate+0x192/0x920 [ 43.396006][ T3705] futex_hash_allocate+0x192/0x920 [ 43.396066][ T3705] ? cap_task_prctl+0x13f/0x6b0 [ 43.396109][ T3705] futex_hash_prctl+0xd8/0xf0 [ 43.396135][ T3705] __se_sys_prctl+0x4f4/0x13b0 [ 43.396180][ T3705] __x64_sys_prctl+0x67/0x80 [ 43.396207][ T3705] x64_sys_call+0x2533/0x3020 [ 43.396312][ T3705] do_syscall_64+0x136/0x3c0 [ 43.396404][ T3705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.396428][ T3705] RIP: 0033:0x7fa1e157e019 [ 43.396444][ T3705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.396466][ T3705] RSP: 002b:00007fa1dffd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 43.396502][ T3705] RAX: ffffffffffffffda RBX: 00007fa1e1805fa0 RCX: 00007fa1e157e019 [ 43.396542][ T3705] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 43.396555][ T3705] RBP: 00007fa1e161500c R08: 0000000000000000 R09: 0000000000000000 [ 43.396569][ T3705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.396623][ T3705] R13: 00007fa1e1806038 R14: 00007fa1e1805fa0 R15: 00007ffdfaa75268 [ 43.396679][ T3705] [ 43.396830][ T3705] memory: usage 307200kB, limit 307200kB, failcnt 220 [ 43.638133][ T3705] memory+swap: usage 267604kB, limit 9007199254740988kB, failcnt 0 [ 43.646483][ T3705] kmem: usage 260860kB, limit 9007199254740988kB, failcnt 0 [ 43.653956][ T3705] Memory cgroup stats for /syz0: [ 43.654289][ T3705] cache 0 [ 43.662596][ T3705] rss 0 [ 43.665394][ T3705] shmem 0 [ 43.668340][ T3705] mapped_file 0 [ 43.672055][ T3705] dirty 0 [ 43.675027][ T3705] writeback 0 [ 43.678358][ T3705] workingset_refault_anon 47 [ 43.683187][ T3705] workingset_refault_file 434 [ 43.687923][ T3705] swap 188416 [ 43.691412][ T3705] swapcached 385024 [ 43.697247][ T3705] pgpgin 7493 [ 43.700860][ T3705] pgpgout 7492 [ 43.706087][ T3705] pgfault 9761 [ 43.709785][ T3705] pgmajfault 27 [ 43.716387][ T3705] inactive_anon 0 [ 43.723175][ T3705] active_anon 4096 [ 43.746411][ T3705] inactive_file 0 [ 43.755998][ T3705] active_file 0 [ 43.762769][ T3705] unevictable 0 [ 43.767801][ T3705] hierarchical_memory_limit 314572800 [ 43.779179][ T3705] hierarchical_memsw_limit 9223372036854771712 [ 43.792558][ T3705] total_cache 0 [ 43.799437][ T3705] total_rss 0 [ 43.807005][ T3705] total_shmem 0 [ 43.814227][ T3705] total_mapped_file 0 [ 43.822113][ T3705] total_dirty 0 [ 43.836360][ T3732] FAULT_INJECTION: forcing a failure. [ 43.836360][ T3732] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.851080][ T3705] total_writeback 0 [ 43.856635][ T3705] total_workingset_refault_anon 47 [ 43.867007][ T3705] total_workingset_refault_file 434 [ 43.873870][ T3705] total_swap 188416 [ 43.882386][ T3732] CPU: 0 UID: 0 PID: 3732 Comm: syz.1.77 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.882484][ T3732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.882576][ T3732] Call Trace: [ 43.882583][ T3732] [ 43.882593][ T3732] __dump_stack+0x1d/0x30 [ 43.882622][ T3732] dump_stack_lvl+0x95/0xd0 [ 43.882647][ T3732] dump_stack+0x15/0x1b [ 43.882669][ T3732] should_fail_ex+0x25e/0x270 [ 43.882742][ T3732] should_fail+0xb/0x20 [ 43.882776][ T3732] should_fail_usercopy+0x1a/0x20 [ 43.882888][ T3732] _copy_to_user+0x20/0xa0 [ 43.882915][ T3732] simple_read_from_buffer+0xb5/0x130 [ 43.882949][ T3732] proc_fail_nth_read+0x10e/0x150 [ 43.883003][ T3732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 43.883024][ T3732] vfs_read+0x18e/0x7c0 [ 43.883042][ T3732] ? __rcu_read_unlock+0x4e/0x70 [ 43.883118][ T3732] ? __fget_files+0x184/0x1c0 [ 43.883151][ T3732] ? mutex_lock+0x57/0x90 [ 43.883266][ T3732] ksys_read+0xdc/0x1a0 [ 43.883285][ T3732] __x64_sys_read+0x40/0x50 [ 43.883303][ T3732] x64_sys_call+0x2886/0x3020 [ 43.883332][ T3732] do_syscall_64+0x136/0x3c0 [ 43.883375][ T3732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.883402][ T3732] RIP: 0033:0x7f20d73ce84e [ 43.883421][ T3732] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 43.883444][ T3732] RSP: 002b:00007f20d5e45fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.883539][ T3732] RAX: ffffffffffffffda RBX: 00007f20d5e466c0 RCX: 00007f20d73ce84e [ 43.883580][ T3732] RDX: 000000000000000f RSI: 00007f20d5e460a0 RDI: 000000000000000a [ 43.883608][ T3732] RBP: 00007f20d5e46090 R08: 0000000000000000 R09: 0000000000000000 [ 43.883620][ T3732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.883632][ T3732] R13: 00007f20d7696128 R14: 00007f20d7696090 R15: 00007ffcf1858128 [ 43.883650][ T3732] [ 43.883691][ T3705] total_swapcached 385024 [ 44.100148][ T3705] total_pgpgin 7493 [ 44.104003][ T3705] total_pgpgout 7492 [ 44.107912][ T3705] total_pgfault 9761 [ 44.121479][ T3705] total_pgmajfault 27 [ 44.131683][ T3705] total_inactive_anon 0 [ 44.144946][ T3705] total_active_anon 4096 [ 44.157887][ T3705] total_inactive_file 0 [ 44.170884][ T3705] total_active_file 0 [ 44.182259][ T3705] total_unevictable 0 [ 44.198868][ T3705] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.69,pid=3704,uid=0 [ 44.250682][ T3705] Memory cgroup out of memory: Killed process 3704 (syz.0.69) total-vm:94188kB, anon-rss:1244kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 44.308837][ T3723] syz.4.75 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 44.324778][ T3723] CPU: 0 UID: 0 PID: 3723 Comm: syz.4.75 Not tainted syzkaller #0 PREEMPT(lazy) [ 44.324805][ T3723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.324821][ T3723] Call Trace: [ 44.324830][ T3723] [ 44.324840][ T3723] __dump_stack+0x1d/0x30 [ 44.324917][ T3723] dump_stack_lvl+0x95/0xd0 [ 44.324939][ T3723] dump_stack+0x15/0x1b [ 44.324963][ T3723] dump_header+0x80/0x240 [ 44.324988][ T3723] oom_kill_process+0x295/0x350 [ 44.325083][ T3723] out_of_memory+0x981/0xbc0 [ 44.325114][ T3723] try_charge_memcg+0x621/0xa00 [ 44.325145][ T3723] charge_memcg+0x6d/0x120 [ 44.325189][ T3723] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 44.325224][ T3723] swap_cache_alloc_folio+0x47b/0x5e0 [ 44.325262][ T3723] swap_cluster_readahead+0x2b1/0x460 [ 44.325438][ T3723] swapin_readahead+0xd8/0x8a0 [ 44.325473][ T3723] ? _raw_spin_unlock+0x9/0x30 [ 44.325502][ T3723] ? swap_put_entries_cluster+0x49c/0x4c0 [ 44.325634][ T3723] ? __entry_text_end+0xf238/0x102179 [ 44.325658][ T3723] ? __rcu_read_unlock+0x4e/0x70 [ 44.325691][ T3723] ? swap_cache_get_folio+0x1f7/0x200 [ 44.325791][ T3723] do_swap_page+0x2a2/0x1ec0 [ 44.325823][ T3723] ? __css_rstat_updated+0xbb/0x280 [ 44.325919][ T3723] ? __rcu_read_lock+0x36/0x50 [ 44.325955][ T3723] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 44.325988][ T3723] handle_mm_fault+0xb3c/0x2da0 [ 44.326097][ T3723] do_user_addr_fault+0x634/0x1060 [ 44.326139][ T3723] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 44.326229][ T3723] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 44.326265][ T3723] ? trace_page_fault_user+0x1f/0xa0 [ 44.326302][ T3723] exc_page_fault+0x62/0xa0 [ 44.326331][ T3723] asm_exc_page_fault+0x26/0x30 [ 44.326379][ T3723] RIP: 0033:0x7fe8ffe4b8ec [ 44.326395][ T3723] Code: 6a 32 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 44.326428][ T3723] RSP: 002b:00007ffcbfb60590 EFLAGS: 00010202 [ 44.326444][ T3723] RAX: 0000000000000000 RBX: 00007fe900206090 RCX: 00005555608e6808 [ 44.326460][ T3723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.326474][ T3723] RBP: 00007fe900207da0 R08: 0000000000000000 R09: 0000000000000000 [ 44.326487][ T3723] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000abe6 [ 44.326504][ T3723] R13: 00007fe90020609c R14: 000000000000a938 R15: 00007fe900206090 [ 44.326559][ T3723] [ 44.328177][ T3723] memory: usage 307200kB, limit 307200kB, failcnt 256 [ 44.575920][ T3723] memory+swap: usage 225908kB, limit 9007199254740988kB, failcnt 0 [ 44.583893][ T3723] kmem: usage 225180kB, limit 9007199254740988kB, failcnt 0 [ 44.622770][ T3723] Memory cgroup stats for /syz4: [ 44.623002][ T3723] cache 0 [ 44.637251][ T3723] rss 0 [ 44.643251][ T3723] shmem 0 [ 44.647826][ T3723] mapped_file 0 [ 44.654487][ T3723] dirty 0 [ 44.661242][ T3723] writeback 0 [ 44.667613][ T3723] workingset_refault_anon 40 [ 44.677059][ T3723] workingset_refault_file 415 [ 44.686970][ T3723] swap 622592 [ 44.693448][ T3723] swapcached 786432 [ 44.700607][ T3723] pgpgin 6494 [ 44.708470][ T3723] pgpgout 6494 [ 44.715072][ T3723] pgfault 11141 [ 44.721697][ T3723] pgmajfault 36 [ 44.730205][ T3723] inactive_anon 0 [ 44.749208][ T3723] active_anon 0 [ 44.757074][ T3723] inactive_file 0 [ 44.764453][ T3723] active_file 0 [ 44.775323][ T3723] unevictable 0 [ 44.783151][ T3723] hierarchical_memory_limit 314572800 [ 44.796465][ T3723] hierarchical_memsw_limit 9223372036854771712 [ 44.808849][ T3723] total_cache 0 [ 44.817926][ T3723] total_rss 0 [ 44.826013][ T3723] total_shmem 0 [ 44.834720][ T3723] total_mapped_file 0 [ 44.860129][ T3723] total_dirty 0 [ 44.870873][ T3723] total_writeback 0 [ 44.881088][ T3723] total_workingset_refault_anon 40 [ 44.891863][ T3723] total_workingset_refault_file 415 [ 44.908059][ T3723] total_swap 622592 [ 44.917491][ T3723] total_swapcached 786432 [ 44.931953][ T3723] total_pgpgin 6494 [ 44.956612][ T3723] total_pgpgout 6494 [ 44.963154][ T3760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'. [ 44.963651][ T3723] total_pgfault 11141 [ 44.985847][ T3723] total_pgmajfault 36 [ 45.000169][ T3723] total_inactive_anon 0 [ 45.004447][ T3723] total_active_anon 0 [ 45.008451][ T3723] total_inactive_file 0 [ 45.012762][ T3723] total_active_file 0 [ 45.031080][ T3723] total_unevictable 0 [ 45.040971][ T3723] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.75,pid=3723,uid=0 [ 45.084516][ T3723] Memory cgroup out of memory: Killed process 3723 (syz.4.75) total-vm:104428kB, anon-rss:1236kB, file-rss:21576kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 45.126876][ T3736] syz.2.80 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 45.178087][ T3762] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 45.239333][ T3736] CPU: 1 UID: 0 PID: 3736 Comm: syz.2.80 Not tainted syzkaller #0 PREEMPT(lazy) [ 45.239367][ T3736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.239383][ T3736] Call Trace: [ 45.239389][ T3736] [ 45.239396][ T3736] __dump_stack+0x1d/0x30 [ 45.239418][ T3736] dump_stack_lvl+0x95/0xd0 [ 45.239546][ T3736] dump_stack+0x15/0x1b [ 45.239570][ T3736] dump_header+0x80/0x240 [ 45.239598][ T3736] oom_kill_process+0x295/0x350 [ 45.239700][ T3736] out_of_memory+0x981/0xbc0 [ 45.239735][ T3736] try_charge_memcg+0x621/0xa00 [ 45.239760][ T3736] ? __rcu_read_unlock+0x4e/0x70 [ 45.239915][ T3736] __memcg_kmem_charge_page+0x199/0x3a0 [ 45.240007][ T3736] __alloc_frozen_pages_noprof+0x18a/0x350 [ 45.240037][ T3736] alloc_pages_mpol+0xa9/0x1d0 [ 45.240110][ T3736] alloc_pages_noprof+0x8f/0x140 [ 45.240231][ T3736] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 45.240294][ T3736] __kvmalloc_node_noprof+0x3a0/0x590 [ 45.240330][ T3736] ? futex_hash_allocate+0x192/0x920 [ 45.240391][ T3736] ? futex_hash_allocate+0x192/0x920 [ 45.240411][ T3736] ? futex_hash_allocate+0x192/0x920 [ 45.240438][ T3736] futex_hash_allocate+0x192/0x920 [ 45.240466][ T3736] ? cap_task_prctl+0x13f/0x6b0 [ 45.240549][ T3736] futex_hash_prctl+0xd8/0xf0 [ 45.240579][ T3736] __se_sys_prctl+0x4f4/0x13b0 [ 45.240616][ T3736] __x64_sys_prctl+0x67/0x80 [ 45.240648][ T3736] x64_sys_call+0x2533/0x3020 [ 45.240788][ T3736] do_syscall_64+0x136/0x3c0 [ 45.240816][ T3736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.240844][ T3736] RIP: 0033:0x7fcbcddde019 [ 45.240893][ T3736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.240917][ T3736] RSP: 002b:00007fcbcc837028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 45.240969][ T3736] RAX: ffffffffffffffda RBX: 00007fcbce065fa0 RCX: 00007fcbcddde019 [ 45.240987][ T3736] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 45.241004][ T3736] RBP: 00007fcbcde7500c R08: 0000000000000000 R09: 0000000000000000 [ 45.241076][ T3736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.241093][ T3736] R13: 00007fcbce066038 R14: 00007fcbce065fa0 R15: 00007ffea7a232d8 [ 45.241118][ T3736] [ 45.245395][ T3736] memory: usage 307200kB, limit 307200kB, failcnt 365 [ 45.506456][ T3736] memory+swap: usage 307572kB, limit 9007199254740988kB, failcnt 0 [ 45.515917][ T3736] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 45.532241][ T3736] Memory cgroup stats for /syz2: [ 45.532501][ T3736] cache 4096 [ 45.558951][ T3736] rss 0 [ 45.561866][ T3736] shmem 0 [ 45.564898][ T3736] mapped_file 0 [ 45.568382][ T3736] dirty 0 [ 45.571369][ T3736] writeback 0 [ 45.574744][ T3736] workingset_refault_anon 33 [ 45.620501][ T3736] workingset_refault_file 640 [ 45.626725][ T3736] swap 380928 [ 45.630089][ T3736] swapcached 520192 [ 45.633981][ T3736] pgpgin 3648 [ 45.637277][ T3736] pgpgout 3646 [ 45.640810][ T3736] pgfault 2972 [ 45.660093][ T3736] pgmajfault 24 [ 45.678743][ T3736] inactive_anon 4096 [ 45.690146][ T3736] active_anon 0 [ 45.693653][ T3736] inactive_file 0 [ 45.697331][ T3736] active_file 4096 [ 45.701107][ T3736] unevictable 0 [ 45.704587][ T3736] hierarchical_memory_limit 314572800 [ 45.731028][ T3736] hierarchical_memsw_limit 9223372036854771712 [ 45.737323][ T3736] total_cache 4096 [ 45.741266][ T3736] total_rss 0 [ 45.744605][ T3736] total_shmem 0 [ 45.748179][ T3736] total_mapped_file 0 [ 45.756794][ T3736] total_dirty 0 [ 45.763442][ T3736] total_writeback 0 [ 45.781841][ T3736] total_workingset_refault_anon 33 [ 45.798598][ T3736] total_workingset_refault_file 640 [ 45.803917][ T3736] total_swap 380928 [ 45.810826][ T3736] total_swapcached 520192 [ 45.819590][ T3736] total_pgpgin 3648 [ 45.827866][ T3736] total_pgpgout 3646 [ 45.836315][ T3736] total_pgfault 2972 [ 45.846797][ T3736] total_pgmajfault 24 [ 45.854052][ T3736] total_inactive_anon 4096 [ 45.864315][ T3736] total_active_anon 0 [ 45.872959][ T3736] total_inactive_file 0 [ 45.895543][ T3736] total_active_file 4096 [ 45.909817][ T3736] total_unevictable 0 [ 45.921474][ T3736] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.80,pid=3735,uid=0 [ 45.972450][ T3736] Memory cgroup out of memory: Killed process 3735 (syz.2.80) total-vm:94116kB, anon-rss:1240kB, file-rss:22232kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 46.046669][ T28] kauditd_printk_skb: 266 callbacks suppressed [ 46.046690][ T28] audit: type=1400 audit(1785677973.815:665): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.086576][ T28] audit: type=1400 audit(1785677973.855:666): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.140140][ T28] audit: type=1400 audit(1785677973.915:667): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.189661][ T28] audit: type=1400 audit(1785677973.915:668): avc: denied { open } for pid=3783 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 46.232094][ T28] audit: type=1400 audit(1785677973.915:669): avc: denied { prog_load } for pid=3783 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 46.241046][ T3786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3786 comm=syz.0.98 [ 46.270513][ T28] audit: type=1400 audit(1785677973.915:670): avc: denied { create } for pid=3783 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 46.303326][ T3789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.99'. [ 46.314513][ T28] audit: type=1400 audit(1785677973.915:671): avc: denied { module_request } for pid=3783 comm="syz.2.95" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 46.357920][ T28] audit: type=1400 audit(1785677973.915:672): avc: denied { sys_module } for pid=3783 comm="syz.2.95" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 46.384514][ T28] audit: type=1400 audit(1785677973.915:673): avc: denied { mounton } for pid=3783 comm="syz.2.95" path="/18/proc" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 46.427141][ T3802] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 46.462476][ T28] audit: type=1400 audit(1785677973.945:674): avc: denied { open } for pid=3785 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 46.489174][ T3804] FAULT_INJECTION: forcing a failure. [ 46.489174][ T3804] name failslab, interval 1, probability 0, space 0, times 0 [ 46.503557][ T3809] netlink: 'syz.1.100': attribute type 6 has an invalid length. [ 46.534369][ T3809] netlink: 'syz.1.100': attribute type 21 has an invalid length. [ 46.541739][ T3804] CPU: 0 UID: 0 PID: 3804 Comm: syz.3.105 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.541826][ T3804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.541861][ T3804] Call Trace: [ 46.541890][ T3804] [ 46.541912][ T3804] __dump_stack+0x1d/0x30 [ 46.541987][ T3804] dump_stack_lvl+0x95/0xd0 [ 46.542050][ T3804] dump_stack+0x15/0x1b [ 46.542068][ T3804] should_fail_ex+0x25e/0x270 [ 46.542144][ T3804] should_failslab+0x8c/0xb0 [ 46.542172][ T3804] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 46.542199][ T3804] ? security_inode_alloc+0x37/0x100 [ 46.542300][ T3804] ? security_inode_alloc+0x37/0x100 [ 46.542419][ T3804] ? sockfs_init_fs_context+0x41/0x80 [ 46.542506][ T3804] security_inode_alloc+0x37/0x100 [ 46.542546][ T3804] inode_init_always_gfp+0x495/0x4e0 [ 46.542606][ T3804] ? __pfx_sock_alloc_inode+0x10/0x10 [ 46.542690][ T3804] alloc_inode+0x58/0x170 [ 46.542809][ T3804] __sock_create+0x121/0x580 [ 46.542935][ T3804] __sys_socketpair+0x1c4/0x430 [ 46.543093][ T3804] __x64_sys_socketpair+0x52/0x60 [ 46.543186][ T3804] x64_sys_call+0x2de5/0x3020 [ 46.543262][ T3804] do_syscall_64+0x136/0x3c0 [ 46.543361][ T3804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.543435][ T3804] RIP: 0033:0x7f7bf3c0e019 [ 46.543498][ T3804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.543557][ T3804] RSP: 002b:00007f7bf2667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 46.543621][ T3804] RAX: ffffffffffffffda RBX: 00007f7bf3e95fa0 RCX: 00007f7bf3c0e019 [ 46.543745][ T3804] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 46.543873][ T3804] RBP: 00007f7bf2667090 R08: 0000000000000000 R09: 0000000000000000 [ 46.543914][ T3804] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 46.543957][ T3804] R13: 00007f7bf3e96038 R14: 00007f7bf3e95fa0 R15: 00007ffc3ac19d28 [ 46.544028][ T3804] [ 46.553221][ T3804] socket: no more sockets [ 46.881051][ T3826] netlink: 'syz.4.111': attribute type 1 has an invalid length. [ 46.914618][ T3826] netlink: 'syz.4.111': attribute type 2 has an invalid length. [ 47.283809][ T3853] FAULT_INJECTION: forcing a failure. [ 47.283809][ T3853] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 47.312274][ T3853] CPU: 1 UID: 0 PID: 3853 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT(lazy) [ 47.312355][ T3853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.312367][ T3853] Call Trace: [ 47.312374][ T3853] [ 47.312381][ T3853] __dump_stack+0x1d/0x30 [ 47.312410][ T3853] dump_stack_lvl+0x95/0xd0 [ 47.312465][ T3853] dump_stack+0x15/0x1b [ 47.312486][ T3853] should_fail_ex+0x25e/0x270 [ 47.312580][ T3853] should_fail_alloc_page+0xf2/0x100 [ 47.312608][ T3853] __alloc_frozen_pages_noprof+0x108/0x350 [ 47.312638][ T3853] alloc_pages_mpol+0xa9/0x1d0 [ 47.312726][ T3853] alloc_pages_noprof+0x8f/0x140 [ 47.312760][ T3853] get_free_pages_noprof+0xc/0x40 [ 47.312794][ T3853] selinux_genfs_get_sid+0x33/0x180 [ 47.312864][ T3853] inode_doinit_with_dentry+0x606/0x7b0 [ 47.312891][ T3853] selinux_d_instantiate+0x27/0x40 [ 47.312915][ T3853] security_d_instantiate+0x76/0x90 [ 47.313067][ T3853] d_make_persistent+0x49/0x110 [ 47.313092][ T3853] __debugfs_create_file+0x14e/0x2b0 [ 47.313119][ T3853] debugfs_create_file_full+0x3f/0x60 [ 47.313149][ T3853] ? __pfx_macvtap_setup+0x10/0x10 [ 47.313268][ T3853] ref_tracker_dir_debugfs+0x10e/0x220 [ 47.313315][ T3853] alloc_netdev_mqs+0x1a9/0xa90 [ 47.313382][ T3853] rtnl_create_link+0x239/0x720 [ 47.313465][ T3853] rtnl_newlink_create+0x175/0x650 [ 47.313499][ T3853] ? security_capable+0x7b/0x90 [ 47.313528][ T3853] ? netlink_ns_capable+0x86/0xa0 [ 47.313553][ T3853] rtnl_newlink+0x1181/0x1400 [ 47.313660][ T3853] ? __siphash_unaligned+0x185/0x2d0 [ 47.313693][ T3853] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 47.313730][ T3853] ? __rcu_read_unlock+0x4e/0x70 [ 47.313761][ T3853] ? avc_has_perm_noaudit+0xa3/0x120 [ 47.313845][ T3853] ? cred_has_capability+0x224/0x2a0 [ 47.313873][ T3853] ? selinux_capable+0x31/0x40 [ 47.313905][ T3853] ? security_capable+0x7b/0x90 [ 47.313934][ T3853] ? ns_capable+0x80/0xb0 [ 47.313973][ T3853] ? __pfx_rtnl_newlink+0x10/0x10 [ 47.314055][ T3853] rtnetlink_rcv_msg+0x64b/0x720 [ 47.314088][ T3853] netlink_rcv_skb+0x11e/0x220 [ 47.314111][ T3853] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 47.314138][ T3853] rtnetlink_rcv+0x1c/0x30 [ 47.314181][ T3853] netlink_unicast+0x5a7/0x680 [ 47.314204][ T3853] netlink_sendmsg+0x5be/0x6f0 [ 47.314231][ T3853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.314307][ T3853] ____sys_sendmsg+0x532/0x580 [ 47.314334][ T3853] ___sys_sendmsg+0x195/0x1e0 [ 47.314372][ T3853] __x64_sys_sendmsg+0xd4/0x160 [ 47.314396][ T3853] x64_sys_call+0x194c/0x3020 [ 47.314543][ T3853] do_syscall_64+0x136/0x3c0 [ 47.314577][ T3853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.314600][ T3853] RIP: 0033:0x7fcbcddde019 [ 47.314640][ T3853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.314731][ T3853] RSP: 002b:00007fcbcc837028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.314756][ T3853] RAX: ffffffffffffffda RBX: 00007fcbce065fa0 RCX: 00007fcbcddde019 [ 47.314776][ T3853] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 47.314790][ T3853] RBP: 00007fcbcc837090 R08: 0000000000000000 R09: 0000000000000000 [ 47.314805][ T3853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.314870][ T3853] R13: 00007fcbce066038 R14: 00007fcbce065fa0 R15: 00007ffea7a232d8 [ 47.314891][ T3853] [ 47.659979][ T3853] batadv0: entered promiscuous mode [ 47.665335][ T3853] macvtap1: entered promiscuous mode [ 47.670919][ T3853] macvtap1: entered allmulticast mode [ 47.676384][ T3853] batadv0: entered allmulticast mode [ 47.683075][ T3853] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 47.733393][ T3858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.122'. [ 49.389510][ T3944] tun0: tun_chr_ioctl cmd 1074025681 [ 49.400938][ T3944] netlink: 25 bytes leftover after parsing attributes in process `syz.3.155'. [ 49.417712][ T3944] lo: entered promiscuous mode [ 49.551200][ T3949] xfrm1: entered allmulticast mode [ 49.558081][ T3949] xt_hashlimit: max too large, truncated to 1048576 [ 50.017210][ T3989] 8021q: VLANs not supported on sit0 [ 50.102552][ T3999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 50.207475][ T3997] netlink: 'syz.1.178': attribute type 6 has an invalid length. [ 50.355582][ T4021] capability: warning: `syz.3.188' uses deprecated v2 capabilities in a way that may be insecure [ 50.393467][ T4022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4022 comm=syz.2.185 [ 50.514068][ T4043] netlink: 20 bytes leftover after parsing attributes in process `syz.4.195'. [ 50.650321][ T4060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.202'. [ 50.667247][ T4060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.202'. [ 50.772333][ T4071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.207'. [ 50.782252][ T4073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.208'. [ 51.007392][ T4102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.220'. [ 51.058736][ T28] kauditd_printk_skb: 816 callbacks suppressed [ 51.058755][ T28] audit: type=1400 audit(1785677979.827:1491): avc: denied { create } for pid=4104 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 51.097397][ T28] audit: type=1400 audit(1785677979.867:1492): avc: denied { mounton } for pid=4092 comm="syz.4.215" path="/52/file0" dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 51.121034][ T28] audit: type=1400 audit(1785677979.867:1493): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.145803][ T28] audit: type=1400 audit(1785677979.897:1494): avc: denied { create } for pid=4092 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 51.165989][ T28] audit: type=1400 audit(1785677979.897:1495): avc: denied { write } for pid=4092 comm="syz.4.215" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=0 [ 51.214648][ T28] audit: type=1400 audit(1785677979.897:1496): avc: denied { create } for pid=4092 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 51.249186][ T28] audit: type=1400 audit(1785677979.897:1497): avc: denied { create } for pid=4092 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 51.290148][ T28] audit: type=1400 audit(1785677979.897:1498): avc: denied { open } for pid=4092 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 51.318712][ T28] audit: type=1400 audit(1785677979.897:1499): avc: denied { open } for pid=4106 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 51.374484][ T28] audit: type=1400 audit(1785677979.897:1500): avc: denied { bpf } for pid=4106 comm="syz.3.222" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 51.413785][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 51.434685][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.456559][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.921372][ T4185] No such timeout policy "syz1" [ 52.005207][ T4199] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 52.242004][ T4224] can0: slcan on ttyS3. [ 52.375644][ T4227] macsec1: entered promiscuous mode [ 52.388363][ T4227] dummy0: entered promiscuous mode [ 52.403028][ T4227] macsec1: entered allmulticast mode [ 52.411736][ T4227] dummy0: entered allmulticast mode [ 52.429277][ T4227] dummy0: left allmulticast mode [ 52.472250][ T3383] dummy0: left promiscuous mode [ 52.945237][ T4270] __nla_validate_parse: 6 callbacks suppressed [ 52.945256][ T4270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 52.969375][ T4271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 53.006314][ T4271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 53.015362][ T4209] can0 (unregistered): slcan off ttyS3. [ 53.015375][ T68] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.058768][ T68] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.075940][ T68] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.103836][ T4270] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 53.128716][ T30] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.140323][ T4271] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 53.234072][ T4282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.294'. [ 53.742106][ T4306] netlink: 'syz.3.303': attribute type 6 has an invalid length. [ 53.762608][ T4307] netlink: 'syz.0.302': attribute type 6 has an invalid length. [ 53.770341][ T4306] netlink: 'syz.3.303': attribute type 21 has an invalid length. [ 53.799466][ T4307] netlink: 'syz.0.302': attribute type 21 has an invalid length. [ 53.869092][ T4310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 53.894451][ T4310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.304'. [ 54.099773][ T4322] netlink: 'syz.2.306': attribute type 6 has an invalid length. [ 54.108720][ T4322] netlink: 'syz.2.306': attribute type 21 has an invalid length. [ 54.685773][ T4328] netlink: 'syz.3.308': attribute type 6 has an invalid length. [ 54.725066][ T4328] netlink: 'syz.3.308': attribute type 21 has an invalid length. [ 55.001831][ T4334] ªªªªªª: renamed from vlan0 (while UP) [ 56.068751][ T28] kauditd_printk_skb: 12520 callbacks suppressed [ 56.068768][ T28] audit: type=1400 audit(1785677984.847:14021): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 56.113591][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 56.133245][ T4346] audit: audit_backlog=65 > audit_backlog_limit=64 [ 56.133550][ T3019] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 56.153503][ T4346] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 56.161426][ T28] audit: type=1400 audit(1785677984.867:14022): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 56.183218][ T3019] audit: backlog limit exceeded [ 56.193330][ T4346] audit: backlog limit exceeded [ 56.198332][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 56.203619][ T4347] audit: audit_backlog=65 > audit_backlog_limit=64 [ 56.346770][ T4351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.316'. [ 57.148159][ T4377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.327'. [ 57.274334][ T4384] bridge0: port 3(syz_tun) entered blocking state [ 57.299364][ T4384] bridge0: port 3(syz_tun) entered disabled state [ 57.322520][ T4384] syz_tun: entered allmulticast mode [ 57.356185][ T4384] syz_tun: entered promiscuous mode [ 57.401154][ T4384] bridge0: port 3(syz_tun) entered blocking state [ 57.407665][ T4384] bridge0: port 3(syz_tun) entered forwarding state [ 57.598858][ T4396] syzkaller0: entered promiscuous mode [ 57.618863][ T4396] syzkaller0: entered allmulticast mode [ 57.902158][ T4409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.340'. [ 58.371619][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 58.395054][ T4430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'. [ 58.433237][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 58.484638][ T4430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'. [ 58.635943][ T4433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.348'. [ 58.744413][ T4439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.351'. [ 59.138583][ T4457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26640 sclass=netlink_route_socket pid=4457 comm=syz.1.357 [ 59.178277][ T4457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=4457 comm=syz.1.357 [ 59.320031][ T4470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.362'. [ 59.459138][ T4476] bond0: entered promiscuous mode [ 59.477654][ T4476] bond_slave_0: entered promiscuous mode [ 59.497910][ T4476] bond_slave_1: entered promiscuous mode [ 60.088267][ T4507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.374'. [ 60.189070][ T4515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 60.199467][ T4515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.377'. [ 60.339056][ T4532] syzkaller0: entered promiscuous mode [ 60.344892][ T4532] syzkaller0: entered allmulticast mode [ 60.607989][ T4553] Cannot find set identified by id 0 to match [ 61.042776][ T4622] FAULT_INJECTION: forcing a failure. [ 61.042776][ T4622] name failslab, interval 1, probability 0, space 0, times 0 [ 61.078693][ T28] kauditd_printk_skb: 19024 callbacks suppressed [ 61.078710][ T28] audit: type=1400 audit(1785677989.847:32458): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 61.107985][ T4622] CPU: 0 UID: 0 PID: 4622 Comm: syz.1.421 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.108018][ T4622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.108034][ T4622] Call Trace: [ 61.108042][ T4622] [ 61.108051][ T4622] __dump_stack+0x1d/0x30 [ 61.108089][ T4622] dump_stack_lvl+0x95/0xd0 [ 61.108168][ T4622] dump_stack+0x15/0x1b [ 61.108193][ T4622] should_fail_ex+0x25e/0x270 [ 61.108236][ T4622] should_failslab+0x8c/0xb0 [ 61.108340][ T4622] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 61.108364][ T4622] ? radix_tree_node_alloc+0x8a/0x1f0 [ 61.108419][ T4622] ? radix_tree_node_alloc+0x8a/0x1f0 [ 61.108520][ T4622] radix_tree_node_alloc+0x8a/0x1f0 [ 61.108573][ T4622] idr_get_free+0x1fc/0x560 [ 61.108596][ T4622] idr_alloc_u32+0xe9/0x1a0 [ 61.108686][ T4622] u32_change+0x9af/0x1430 [ 61.108709][ T4622] ? u32_init+0x257/0x3c0 [ 61.108746][ T4622] ? memcmp+0x5e/0x90 [ 61.108774][ T4622] tc_new_tfilter+0xf74/0x1170 [ 61.108950][ T4622] ? __rcu_read_unlock+0x4e/0x70 [ 61.108986][ T4622] ? __pfx_tc_new_tfilter+0x10/0x10 [ 61.109009][ T4622] rtnetlink_rcv_msg+0x64b/0x720 [ 61.109107][ T4622] netlink_rcv_skb+0x11e/0x220 [ 61.109162][ T4622] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 61.109191][ T4622] rtnetlink_rcv+0x1c/0x30 [ 61.109246][ T4622] netlink_unicast+0x5a7/0x680 [ 61.109270][ T4622] netlink_sendmsg+0x5be/0x6f0 [ 61.109322][ T4622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.109349][ T4622] ____sys_sendmsg+0x532/0x580 [ 61.109370][ T4622] ___sys_sendmsg+0x195/0x1e0 [ 61.109399][ T4622] __x64_sys_sendmsg+0xd4/0x160 [ 61.109421][ T4622] x64_sys_call+0x194c/0x3020 [ 61.109521][ T4622] do_syscall_64+0x136/0x3c0 [ 61.109550][ T4622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.109571][ T4622] RIP: 0033:0x7f20d740e019 [ 61.109591][ T4622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.109618][ T4622] RSP: 002b:00007f20d5e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.109637][ T4622] RAX: ffffffffffffffda RBX: 00007f20d7695fa0 RCX: 00007f20d740e019 [ 61.109651][ T4622] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000004 [ 61.109796][ T4622] RBP: 00007f20d5e67090 R08: 0000000000000000 R09: 0000000000000000 [ 61.109809][ T4622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.109821][ T4622] R13: 00007f20d7696038 R14: 00007f20d7695fa0 R15: 00007ffcf1858128 [ 61.109839][ T4622] [ 61.120468][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.141746][ T28] audit: type=1400 audit(1785677989.847:32459): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 61.193997][ T3019] audit: audit_lost=200 audit_rate_limit=0 audit_backlog_limit=64 [ 61.210939][ T4627] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.212832][ T4626] audit: audit_backlog=65 > audit_backlog_limit=64 [ 61.217253][ T4627] audit: audit_lost=201 audit_rate_limit=0 audit_backlog_limit=64 [ 61.232638][ T4626] audit: audit_lost=202 audit_rate_limit=0 audit_backlog_limit=64 [ 61.305927][ T4627] audit: backlog limit exceeded [ 61.333079][ T28] audit: type=1400 audit(1785677989.847:32460): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 61.751617][ T4645] FAULT_INJECTION: forcing a failure. [ 61.751617][ T4645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.784822][ T4645] CPU: 0 UID: 0 PID: 4645 Comm: syz.1.430 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.784849][ T4645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.784864][ T4645] Call Trace: [ 61.784872][ T4645] [ 61.784895][ T4645] __dump_stack+0x1d/0x30 [ 61.784932][ T4645] dump_stack_lvl+0x95/0xd0 [ 61.785031][ T4645] dump_stack+0x15/0x1b [ 61.785055][ T4645] should_fail_ex+0x25e/0x270 [ 61.785087][ T4645] should_fail+0xb/0x20 [ 61.785119][ T4645] should_fail_usercopy+0x1a/0x20 [ 61.785153][ T4645] _copy_from_iter+0xcc/0xe70 [ 61.785195][ T4645] ? _copy_from_iter+0x13b/0xe70 [ 61.785262][ T4645] copy_page_from_iter+0x15d/0x1f0 [ 61.785304][ T4645] skb_copy_datagram_from_iter+0x22d/0x480 [ 61.785369][ T4645] tun_get_user+0xc1d/0x2820 [ 61.785407][ T4645] ? _parse_integer_limit+0x177/0x1a0 [ 61.785452][ T4645] ? _parse_integer+0x27/0x40 [ 61.785505][ T4645] ? ref_tracker_alloc+0x1eb/0x2f0 [ 61.785559][ T4645] tun_chr_write_iter+0x15a/0x210 [ 61.785630][ T4645] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 61.785666][ T4645] vfs_write+0x57d/0x990 [ 61.785759][ T4645] ksys_write+0xdc/0x1a0 [ 61.785785][ T4645] __x64_sys_write+0x40/0x50 [ 61.785809][ T4645] x64_sys_call+0x27e1/0x3020 [ 61.785844][ T4645] do_syscall_64+0x136/0x3c0 [ 61.785886][ T4645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.785907][ T4645] RIP: 0033:0x7f20d740e019 [ 61.785922][ T4645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.785969][ T4645] RSP: 002b:00007f20d5e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.786051][ T4645] RAX: ffffffffffffffda RBX: 00007f20d7695fa0 RCX: 00007f20d740e019 [ 61.786066][ T4645] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 61.786081][ T4645] RBP: 00007f20d5e67090 R08: 0000000000000000 R09: 0000000000000000 [ 61.786096][ T4645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.786112][ T4645] R13: 00007f20d7696038 R14: 00007f20d7695fa0 R15: 00007ffcf1858128 [ 61.786205][ T4645] [ 62.419956][ T4686] syzkaller0: entered promiscuous mode [ 62.420036][ T4686] syzkaller0: entered allmulticast mode [ 63.907573][ T4787] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 64.004701][ T4787] bond1 (unregistering): Released all slaves [ 64.796609][ T4812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4812 comm=syz.3.496 [ 64.847717][ T4812] __nla_validate_parse: 9 callbacks suppressed [ 64.847731][ T4812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 65.011258][ T4815] batman_adv: batadv0: Adding interface: dummy0 [ 65.025200][ T4815] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.068729][ T4815] batman_adv: batadv0: Interface activated: dummy0 [ 65.140706][ T4818] batman_adv: batadv0: Adding interface: dummy0 [ 65.161587][ T4818] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.229431][ T4818] batman_adv: batadv0: Interface activated: dummy0 [ 66.002208][ T4852] netlink: 36 bytes leftover after parsing attributes in process `syz.4.511'. [ 66.026453][ T4852] xt_ipcomp: unknown flags 1D [ 66.088859][ T28] kauditd_printk_skb: 21594 callbacks suppressed [ 66.088910][ T28] audit: type=1400 audit(1785677994.867:47942): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 66.124743][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 66.131578][ T3019] audit: audit_lost=2240 audit_rate_limit=0 audit_backlog_limit=64 [ 66.139683][ T28] audit: type=1400 audit(1785677994.897:47943): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 66.161292][ T3019] audit: backlog limit exceeded [ 66.166347][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 66.173280][ T3019] audit: audit_lost=2241 audit_rate_limit=0 audit_backlog_limit=64 [ 66.181460][ T3019] audit: backlog limit exceeded [ 66.186477][ T28] audit: type=1400 audit(1785677994.897:47944): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 66.208296][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 66.354009][ T4868] FAULT_INJECTION: forcing a failure. [ 66.354009][ T4868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.381129][ T4868] CPU: 1 UID: 0 PID: 4868 Comm: syz.4.517 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.381162][ T4868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.381234][ T4868] Call Trace: [ 66.381240][ T4868] [ 66.381247][ T4868] __dump_stack+0x1d/0x30 [ 66.381281][ T4868] dump_stack_lvl+0x95/0xd0 [ 66.381307][ T4868] dump_stack+0x15/0x1b [ 66.381330][ T4868] should_fail_ex+0x25e/0x270 [ 66.381426][ T4868] should_fail+0xb/0x20 [ 66.381453][ T4868] should_fail_usercopy+0x1a/0x20 [ 66.381504][ T4868] _copy_to_user+0x20/0xa0 [ 66.381556][ T4868] simple_read_from_buffer+0xb5/0x130 [ 66.381588][ T4868] proc_fail_nth_read+0x10e/0x150 [ 66.381618][ T4868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.381706][ T4868] vfs_read+0x18e/0x7c0 [ 66.381723][ T4868] ? finish_task_switch+0x125/0x340 [ 66.381743][ T4868] ? __rcu_read_unlock+0x4e/0x70 [ 66.381850][ T4868] ? __fget_files+0x184/0x1c0 [ 66.381941][ T4868] ? mutex_lock+0x57/0x90 [ 66.382047][ T4868] ksys_read+0xdc/0x1a0 [ 66.382066][ T4868] __x64_sys_read+0x40/0x50 [ 66.382084][ T4868] x64_sys_call+0x2886/0x3020 [ 66.382162][ T4868] do_syscall_64+0x136/0x3c0 [ 66.382195][ T4868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.382216][ T4868] RIP: 0033:0x7fe8fff3e84e [ 66.382236][ T4868] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 66.382267][ T4868] RSP: 002b:00007fe8fe9d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.382342][ T4868] RAX: ffffffffffffffda RBX: 00007fe8fe9d76c0 RCX: 00007fe8fff3e84e [ 66.382356][ T4868] RDX: 000000000000000f RSI: 00007fe8fe9d70a0 RDI: 0000000000000003 [ 66.382368][ T4868] RBP: 00007fe8fe9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.382383][ T4868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.382399][ T4868] R13: 00007fe900206038 R14: 00007fe900205fa0 R15: 00007ffcbfb60428 [ 66.382486][ T4868] [ 66.724924][ T4876] netlink: 'syz.3.522': attribute type 10 has an invalid length. [ 66.743805][ T4876] batman_adv: batadv0: Interface deactivated: dummy0 [ 66.761932][ T4876] batman_adv: batadv0: Removing interface: dummy0 [ 66.790645][ T4876] team0: Port device dummy0 added [ 67.537898][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 67.690610][ T4932] xt_CT: No such helper "netbios-ns" [ 67.832597][ T4941] netlink: 100 bytes leftover after parsing attributes in process `syz.4.545'. [ 67.860519][ T4941] netlink: 2 bytes leftover after parsing attributes in process `syz.4.545'. [ 67.924038][ T4935] pim6reg1: entered promiscuous mode [ 67.945044][ T4935] pim6reg1: entered allmulticast mode [ 68.032942][ T4949] FAULT_INJECTION: forcing a failure. [ 68.032942][ T4949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.056453][ T4949] CPU: 0 UID: 0 PID: 4949 Comm: syz.4.548 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.056483][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.056496][ T4949] Call Trace: [ 68.056502][ T4949] [ 68.056509][ T4949] __dump_stack+0x1d/0x30 [ 68.056533][ T4949] dump_stack_lvl+0x95/0xd0 [ 68.056574][ T4949] dump_stack+0x15/0x1b [ 68.056592][ T4949] should_fail_ex+0x25e/0x270 [ 68.056628][ T4949] should_fail+0xb/0x20 [ 68.056735][ T4949] should_fail_usercopy+0x1a/0x20 [ 68.056773][ T4949] strncpy_from_user+0x27/0x250 [ 68.056806][ T4949] do_getname+0x59/0x1c0 [ 68.056897][ T4949] __se_sys_mkdirat+0x21/0xf0 [ 68.056925][ T4949] __x64_sys_mkdirat+0x43/0x50 [ 68.056944][ T4949] x64_sys_call+0x2c4e/0x3020 [ 68.056978][ T4949] do_syscall_64+0x136/0x3c0 [ 68.057004][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.057025][ T4949] RIP: 0033:0x7fe8fff7ce87 [ 68.057086][ T4949] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.057104][ T4949] RSP: 002b:00007fe8fe9d6e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 68.057123][ T4949] RAX: ffffffffffffffda RBX: 00007fe8fe9d6ee0 RCX: 00007fe8fff7ce87 [ 68.057136][ T4949] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c [ 68.057150][ T4949] RBP: 0000200000000180 R08: 0000200000000000 R09: 0000000000000000 [ 68.057172][ T4949] R10: 0000200000000180 R11: 0000000000000246 R12: 0000200000000100 [ 68.057224][ T4949] R13: 00007fe8fe9d6ea0 R14: 0000000000000000 R15: 00002000000001c0 [ 68.057242][ T4949] [ 68.251835][ T4954] netlink: 'syz.4.551': attribute type 25 has an invalid length. [ 68.259737][ T4954] netlink: 'syz.4.551': attribute type 3 has an invalid length. [ 68.267481][ T4954] netlink: 132 bytes leftover after parsing attributes in process `syz.4.551'. [ 68.385874][ T4966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.556'. [ 68.731224][ T4991] FAULT_INJECTION: forcing a failure. [ 68.731224][ T4991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.749014][ T4991] CPU: 0 UID: 0 PID: 4991 Comm: syz.1.568 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.749090][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.749105][ T4991] Call Trace: [ 68.749113][ T4991] [ 68.749123][ T4991] __dump_stack+0x1d/0x30 [ 68.749152][ T4991] dump_stack_lvl+0x95/0xd0 [ 68.749178][ T4991] dump_stack+0x15/0x1b [ 68.749220][ T4991] should_fail_ex+0x25e/0x270 [ 68.749259][ T4991] should_fail+0xb/0x20 [ 68.749292][ T4991] should_fail_usercopy+0x1a/0x20 [ 68.749335][ T4991] _copy_to_user+0x20/0xa0 [ 68.749361][ T4991] simple_read_from_buffer+0xb5/0x130 [ 68.749389][ T4991] proc_fail_nth_read+0x10e/0x150 [ 68.749487][ T4991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.749514][ T4991] vfs_read+0x18e/0x7c0 [ 68.749535][ T4991] ? __rcu_read_unlock+0x4e/0x70 [ 68.749630][ T4991] ? __fget_files+0x184/0x1c0 [ 68.749655][ T4991] ? mutex_lock+0x57/0x90 [ 68.749771][ T4991] ksys_read+0xdc/0x1a0 [ 68.749794][ T4991] __x64_sys_read+0x40/0x50 [ 68.749836][ T4991] x64_sys_call+0x2886/0x3020 [ 68.749868][ T4991] do_syscall_64+0x136/0x3c0 [ 68.749979][ T4991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.750002][ T4991] RIP: 0033:0x7f20d73ce84e [ 68.750023][ T4991] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.750046][ T4991] RSP: 002b:00007f20d5e66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.750081][ T4991] RAX: ffffffffffffffda RBX: 00007f20d5e676c0 RCX: 00007f20d73ce84e [ 68.750100][ T4991] RDX: 000000000000000f RSI: 00007f20d5e670a0 RDI: 0000000000000003 [ 68.750118][ T4991] RBP: 00007f20d5e67090 R08: 0000000000000000 R09: 0000000000000000 [ 68.750135][ T4991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.750150][ T4991] R13: 00007f20d7696038 R14: 00007f20d7695fa0 R15: 00007ffcf1858128 [ 68.750175][ T4991] [ 69.219570][ T5031] serio: Serial port ptm2 [ 69.364481][ T5043] xt_CT: No such helper "pptp" [ 69.716925][ T5069] bridge0: port 3(syz_tun) entered blocking state [ 69.734082][ T5069] bridge0: port 3(syz_tun) entered disabled state [ 69.740950][ T5069] syz_tun: entered allmulticast mode [ 69.751292][ T5069] syz_tun: entered promiscuous mode [ 69.758090][ T5069] bridge0: port 3(syz_tun) entered blocking state [ 69.764607][ T5069] bridge0: port 3(syz_tun) entered forwarding state [ 69.807418][ T5077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.601'. [ 69.907221][ T5083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.914777][ T5083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.922575][ T5083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.930153][ T5083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.652824][ T5109] FAULT_INJECTION: forcing a failure. [ 70.652824][ T5109] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 70.698858][ T5109] CPU: 0 UID: 0 PID: 5109 Comm: syz.2.615 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.698893][ T5109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.698919][ T5109] Call Trace: [ 70.698951][ T5109] [ 70.698961][ T5109] __dump_stack+0x1d/0x30 [ 70.698993][ T5109] dump_stack_lvl+0x95/0xd0 [ 70.699050][ T5109] dump_stack+0x15/0x1b [ 70.699073][ T5109] should_fail_ex+0x25e/0x270 [ 70.699112][ T5109] should_fail_alloc_page+0xf2/0x100 [ 70.699144][ T5109] __alloc_frozen_pages_noprof+0x108/0x350 [ 70.699233][ T5109] alloc_pages_mpol+0xa9/0x1d0 [ 70.699269][ T5109] alloc_migration_target_by_mpol+0x11b/0x2a0 [ 70.699317][ T5109] migrate_pages_batch+0x33f/0x1f90 [ 70.699429][ T5109] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 70.699510][ T5109] ? __walk_page_range+0x323/0x340 [ 70.699541][ T5109] ? mas_ascend+0x1d1/0x570 [ 70.699574][ T5109] ? find_vma+0x6c/0xa0 [ 70.699645][ T5109] migrate_pages+0x1073/0x1890 [ 70.699671][ T5109] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 70.699705][ T5109] ? mas_next_slot+0x887/0x8c0 [ 70.699787][ T5109] __se_sys_mbind+0xc9c/0xdd0 [ 70.699830][ T5109] __x64_sys_mbind+0x78/0x90 [ 70.699916][ T5109] x64_sys_call+0x2b72/0x3020 [ 70.699946][ T5109] do_syscall_64+0x136/0x3c0 [ 70.699986][ T5109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.700007][ T5109] RIP: 0033:0x7fcbcddde019 [ 70.700024][ T5109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.700043][ T5109] RSP: 002b:00007fcbcc837028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 70.700122][ T5109] RAX: ffffffffffffffda RBX: 00007fcbce065fa0 RCX: 00007fcbcddde019 [ 70.700140][ T5109] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 70.700157][ T5109] RBP: 00007fcbcc837090 R08: 0000000000000000 R09: 0000000000000002 [ 70.700173][ T5109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.700185][ T5109] R13: 00007fcbce066038 R14: 00007fcbce065fa0 R15: 00007ffea7a232d8 [ 70.700202][ T5109] [ 70.956035][ T5119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'. [ 71.098923][ T28] kauditd_printk_skb: 21197 callbacks suppressed [ 71.098993][ T28] audit: type=1400 audit(1785677999.877:64533): avc: denied { prog_load } for pid=5120 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 71.127954][ T5128] gretap1: entered promiscuous mode [ 71.135230][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.136047][ T5128] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.151035][ T28] audit: type=1400 audit(1785677999.867:64532): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.161446][ T3019] audit: audit_lost=3779 audit_rate_limit=0 audit_backlog_limit=64 [ 71.173306][ T5128] audit: audit_lost=3780 audit_rate_limit=0 audit_backlog_limit=64 [ 71.188588][ T5128] audit: backlog limit exceeded [ 71.193675][ T28] audit: type=1400 audit(1785677999.877:64534): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.216395][ T3019] audit: backlog limit exceeded [ 71.224826][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.268715][ T181] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 71.277888][ T181] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 71.297005][ T181] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 71.331864][ T181] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 71.553269][ T5153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.630'. [ 72.390807][ T5182] netlink: 'syz.1.640': attribute type 6 has an invalid length. [ 72.424611][ T5182] netlink: 'syz.1.640': attribute type 21 has an invalid length. [ 72.804713][ T5191] netlink: 'syz.3.642': attribute type 6 has an invalid length. [ 72.840089][ T5191] netlink: 'syz.3.642': attribute type 21 has an invalid length. [ 72.891585][ T5197] netlink: 'syz.0.643': attribute type 6 has an invalid length. [ 72.915453][ T5197] netlink: 'syz.0.643': attribute type 21 has an invalid length. [ 72.927967][ T5198] netlink: 'syz.4.644': attribute type 6 has an invalid length. [ 72.975417][ T5198] netlink: 'syz.4.644': attribute type 21 has an invalid length. [ 76.108812][ T28] kauditd_printk_skb: 17144 callbacks suppressed [ 76.108831][ T28] audit: type=1400 audit(1785678004.887:81303): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.155809][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 76.175398][ T3019] audit: audit_lost=3907 audit_rate_limit=0 audit_backlog_limit=64 [ 76.189274][ T28] audit: type=1400 audit(1785678004.917:81304): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.220813][ T3019] audit: backlog limit exceeded [ 76.235999][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 76.256964][ T3019] audit: audit_lost=3908 audit_rate_limit=0 audit_backlog_limit=64 [ 76.275859][ T28] audit: type=1400 audit(1785678004.917:81305): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 76.280815][ T3019] audit: backlog limit exceeded [ 76.345272][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 76.394167][ T5239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.590799][ T5293] can0: slcan on ttyS3. [ 77.751822][ T5302] No such timeout policy "syz1" [ 77.887615][ T5319] netlink: 72 bytes leftover after parsing attributes in process `syz.1.688'. [ 78.073007][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.690'. [ 78.283002][ T5344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 78.295490][ T5344] ipvlan2: entered allmulticast mode [ 78.301189][ T5344] dummy0: entered allmulticast mode [ 78.328771][ T5284] can0 (unregistered): slcan off ttyS3. [ 78.427288][ T5358] netlink: 'syz.1.699': attribute type 6 has an invalid length. [ 78.463761][ T5358] netlink: 'syz.1.699': attribute type 21 has an invalid length. [ 79.345013][ T5401] netlink: 'syz.4.721': attribute type 1 has an invalid length. [ 79.361531][ T5401] netlink: 'syz.4.721': attribute type 2 has an invalid length. [ 79.701445][ T5427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'. [ 79.880398][ T5440] syzkaller0: entered promiscuous mode [ 79.897680][ T5440] syzkaller0: entered allmulticast mode [ 79.915071][ T5447] netlink: 80 bytes leftover after parsing attributes in process `syz.2.740'. [ 80.485812][ T5493] syzkaller0: entered promiscuous mode [ 80.491811][ T5493] syzkaller0: entered allmulticast mode [ 80.988328][ T5523] Cannot find map_set index 0 as target [ 81.118867][ T28] kauditd_printk_skb: 22647 callbacks suppressed [ 81.118884][ T28] audit: type=1400 audit(1785678009.897:103798): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.159221][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.172666][ T3019] audit: audit_lost=3961 audit_rate_limit=0 audit_backlog_limit=64 [ 81.182278][ T28] audit: type=1400 audit(1785678009.917:103799): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.209534][ T3019] audit: backlog limit exceeded [ 81.221464][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.234010][ T3019] audit: audit_lost=3962 audit_rate_limit=0 audit_backlog_limit=64 [ 81.241302][ T28] audit: type=1400 audit(1785678009.917:103800): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 81.260334][ T3019] audit: backlog limit exceeded [ 81.280545][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 81.513918][ T5546] netlink: 'syz.4.782': attribute type 11 has an invalid length. [ 81.670281][ T5555] netlink: 'syz.4.783': attribute type 6 has an invalid length. [ 81.680060][ T5556] netlink: 'syz.1.784': attribute type 6 has an invalid length. [ 81.703083][ T5555] netlink: 'syz.4.783': attribute type 21 has an invalid length. [ 81.731379][ T5556] netlink: 'syz.1.784': attribute type 21 has an invalid length. [ 81.974655][ T9] IPVS: starting estimator thread 0... [ 82.068724][ T5567] IPVS: using max 2304 ests per chain, 115200 per kthread [ 84.519414][ T5651] netlink: 'syz.2.819': attribute type 4 has an invalid length. [ 84.924677][ T5651] batadv0: left allmulticast mode [ 84.948838][ T68] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.957994][ T68] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.969031][ T68] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.997033][ T68] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.027999][ T68] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.056027][ T68] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.098774][ T68] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.122374][ T68] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.366605][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 85.377055][ T5677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.828'. [ 85.397249][ T5677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.828'. [ 85.407031][ T5679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.827'. [ 85.443205][ T5677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.828'. [ 85.475221][ T5677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.828'. [ 86.128706][ T28] kauditd_printk_skb: 17739 callbacks suppressed [ 86.128724][ T28] audit: type=1400 audit(1785678014.897:121538): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.157166][ T28] audit: type=1400 audit(1785678014.897:121539): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.184146][ T28] audit: type=1400 audit(1785678014.897:121540): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.205907][ T28] audit: type=1400 audit(1785678014.897:121541): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.227704][ T28] audit: type=1400 audit(1785678014.897:121542): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.239817][ T5724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.842'. [ 86.250200][ T28] audit: type=1400 audit(1785678014.897:121543): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.258368][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 86.279508][ T28] audit: type=1400 audit(1785678014.897:121544): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.307371][ T28] audit: type=1400 audit(1785678014.907:121545): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 86.329696][ T5724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.842'. [ 86.339135][ T5724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.842'. [ 86.342020][ T3019] audit: audit_lost=3964 audit_rate_limit=0 audit_backlog_limit=64 [ 86.348303][ T5724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.842'. [ 86.591248][ T5746] netlink: 'syz.4.848': attribute type 6 has an invalid length. [ 86.617622][ T5746] netlink: 'syz.4.848': attribute type 21 has an invalid length. [ 86.836244][ T5761] netlink: 'syz.0.855': attribute type 6 has an invalid length. [ 86.845415][ T5761] netlink: 'syz.0.855': attribute type 21 has an invalid length. [ 88.479853][ T5815] syzkaller0: entered promiscuous mode [ 88.485512][ T5815] syzkaller0: entered allmulticast mode [ 88.681590][ T5825] netlink: 'syz.1.881': attribute type 4 has an invalid length. [ 88.746846][ T5825] bridge0: port 3(syz_tun) entered disabled state [ 88.766930][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.774203][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.869949][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.969407][ T181] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.980359][ T181] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.000362][ T181] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.040851][ T181] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.434535][ T5836] netlink: 'syz.2.884': attribute type 6 has an invalid length. [ 89.442453][ T5836] netlink: 'syz.2.884': attribute type 21 has an invalid length. [ 90.021524][ T5845] netlink: 'syz.4.886': attribute type 6 has an invalid length. [ 90.047848][ T5845] netlink: 'syz.4.886': attribute type 21 has an invalid length. [ 91.090171][ T5849] __nla_validate_parse: 7 callbacks suppressed [ 91.090189][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 91.138720][ T28] kauditd_printk_skb: 18219 callbacks suppressed [ 91.138745][ T28] audit: type=1400 audit(1785678019.917:139764): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 91.183525][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 91.196647][ T3019] audit: audit_lost=3965 audit_rate_limit=0 audit_backlog_limit=64 [ 91.208180][ T28] audit: type=1400 audit(1785678019.937:139765): avc: denied { allowed } for pid=5848 comm="syz.3.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 91.227991][ T3019] audit: backlog limit exceeded [ 91.233996][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 91.241718][ T3019] audit: audit_lost=3966 audit_rate_limit=0 audit_backlog_limit=64 [ 91.249953][ T28] audit: type=1400 audit(1785678019.947:139766): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 91.272180][ T3019] audit: backlog limit exceeded [ 91.277338][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 91.551945][ T5858] IPVS: sed: FWM 3 0x00000003 - no destination available [ 91.577653][ T5858] FAULT_INJECTION: forcing a failure. [ 91.577653][ T5858] name failslab, interval 1, probability 0, space 0, times 0 [ 91.590327][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: syz.0.890 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.590352][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.590441][ T5858] Call Trace: [ 91.590447][ T5858] [ 91.590455][ T5858] __dump_stack+0x1d/0x30 [ 91.590481][ T5858] dump_stack_lvl+0x95/0xd0 [ 91.590529][ T5858] dump_stack+0x15/0x1b [ 91.590553][ T5858] should_fail_ex+0x25e/0x270 [ 91.590585][ T5858] should_failslab+0x8c/0xb0 [ 91.590678][ T5858] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 91.590731][ T5858] ? __alloc_skb+0x2db/0x6f0 [ 91.590764][ T5858] ? __alloc_skb+0x2db/0x6f0 [ 91.590800][ T5858] __alloc_skb+0x2db/0x6f0 [ 91.590861][ T5858] ? __alloc_skb+0x205/0x6f0 [ 91.590892][ T5858] alloc_skb_with_frags+0x7e/0x3d0 [ 91.590949][ T5858] sock_alloc_send_pskb+0x44d/0x500 [ 91.590978][ T5858] __ip_append_data+0x1861/0x23a0 [ 91.591010][ T5858] ? __pfx_icmp_glue_bits+0x10/0x10 [ 91.591120][ T5858] ? __kmalloc_cache_noprof+0x19a/0x3d0 [ 91.591151][ T5858] ? ip_setup_cork+0x170/0x3e0 [ 91.591175][ T5858] ip_append_data+0xd5/0x130 [ 91.591201][ T5858] ? __pfx_icmp_glue_bits+0x10/0x10 [ 91.591255][ T5858] icmp_push_reply+0x60/0x230 [ 91.591322][ T5858] ? ipv4_mtu+0x205/0x230 [ 91.591401][ T5858] ? __pfx_ipv4_mtu+0x10/0x10 [ 91.591427][ T5858] __icmp_send+0xb45/0xc00 [ 91.591455][ T5858] ? __icmp_send+0x349/0xc00 [ 91.591503][ T5858] ip_vs_leave+0x2b1/0x7e0 [ 91.591550][ T5858] udp_conn_schedule+0x2f1/0x410 [ 91.591581][ T5858] ip_vs_in_hook+0x61e/0x12f0 [ 91.591618][ T5858] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 91.591665][ T5858] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 91.591757][ T5858] nf_hook_slow+0x78/0x180 [ 91.591847][ T5858] __ip_local_out+0x2fd/0x320 [ 91.591879][ T5858] ? __pfx_dst_output+0x10/0x10 [ 91.591902][ T5858] ip_send_skb+0x32/0x140 [ 91.591944][ T5858] udp_send_skb+0x519/0x7a0 [ 91.592034][ T5858] udp_sendmsg+0x1094/0x14e0 [ 91.592069][ T5858] udpv6_sendmsg+0x8ee/0x1700 [ 91.592159][ T5858] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 91.592184][ T5858] inet6_sendmsg+0xac/0xd0 [ 91.592211][ T5858] ? __pfx_inet6_sendmsg+0x10/0x10 [ 91.592238][ T5858] ____sys_sendmsg+0x390/0x580 [ 91.592262][ T5858] ___sys_sendmsg+0x195/0x1e0 [ 91.592350][ T5858] __x64_sys_sendmsg+0xd4/0x160 [ 91.592371][ T5858] x64_sys_call+0x194c/0x3020 [ 91.592394][ T5858] do_syscall_64+0x136/0x3c0 [ 91.592423][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.592472][ T5858] RIP: 0033:0x7fa1e157e019 [ 91.592488][ T5858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.592512][ T5858] RSP: 002b:00007fa1dffd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.592531][ T5858] RAX: ffffffffffffffda RBX: 00007fa1e1805fa0 RCX: 00007fa1e157e019 [ 91.592563][ T5858] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 91.592578][ T5858] RBP: 00007fa1dffd7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.592590][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.592602][ T5858] R13: 00007fa1e1806038 R14: 00007fa1e1805fa0 R15: 00007ffdfaa75268 [ 91.592622][ T5858] [ 92.571978][ T5877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.650356][ T5914] netlink: 642 bytes leftover after parsing attributes in process `syz.1.912'. [ 93.670391][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.912'. [ 93.758785][ T5916] x_tables: ip_tables: osf match: only valid for protocol 6 [ 93.912005][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 94.080788][ T5932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5932 comm=syz.0.920 [ 94.409386][ T5945] netlink: 'syz.2.924': attribute type 6 has an invalid length. [ 94.409409][ T5945] netlink: 'syz.2.924': attribute type 21 has an invalid length. [ 94.985342][ T5947] syz.4.925 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 95.010084][ T5947] CPU: 1 UID: 0 PID: 5947 Comm: syz.4.925 Not tainted syzkaller #0 PREEMPT(lazy) [ 95.010117][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.010132][ T5947] Call Trace: [ 95.010140][ T5947] [ 95.010150][ T5947] __dump_stack+0x1d/0x30 [ 95.010176][ T5947] dump_stack_lvl+0x95/0xd0 [ 95.010206][ T5947] dump_stack+0x15/0x1b [ 95.010226][ T5947] dump_header+0x80/0x240 [ 95.010258][ T5947] oom_kill_process+0x295/0x350 [ 95.010326][ T5947] out_of_memory+0x981/0xbc0 [ 95.010360][ T5947] try_charge_memcg+0x621/0xa00 [ 95.010385][ T5947] charge_memcg+0x6d/0x120 [ 95.010421][ T5947] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 95.010464][ T5947] swap_cache_alloc_folio+0x47b/0x5e0 [ 95.010514][ T5947] swap_cluster_readahead+0x2b1/0x460 [ 95.010610][ T5947] swapin_readahead+0xd8/0x8a0 [ 95.010639][ T5947] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 95.010667][ T5947] ? hrtimer_start_range_ns+0x108/0x120 [ 95.010725][ T5947] ? __rcu_read_unlock+0x4e/0x70 [ 95.010757][ T5947] ? swap_cache_get_folio+0x1f7/0x200 [ 95.010794][ T5947] do_swap_page+0x2a2/0x1ec0 [ 95.010933][ T5947] ? __schedule+0x799/0xd10 [ 95.010972][ T5947] ? __rcu_read_lock+0x36/0x50 [ 95.011003][ T5947] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 95.011058][ T5947] handle_mm_fault+0xb3c/0x2da0 [ 95.011103][ T5947] do_user_addr_fault+0x634/0x1060 [ 95.011143][ T5947] ? trace_page_fault_user+0x1f/0xa0 [ 95.011226][ T5947] exc_page_fault+0x62/0xa0 [ 95.011251][ T5947] asm_exc_page_fault+0x26/0x30 [ 95.011277][ T5947] RIP: 0033:0x7fe8fff39178 [ 95.011297][ T5947] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 95.011327][ T5947] RSP: 002b:00007ffcbfb60510 EFLAGS: 00010246 [ 95.011349][ T5947] RAX: 0000000000000000 RBX: 00005555608e6500 RCX: 00007fe8fff3e84e [ 95.011429][ T5947] RDX: 00007ffcbfb60560 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.011445][ T5947] RBP: 00007fe900207da0 R08: 0000000000000000 R09: 0000000000000000 [ 95.011462][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001741c [ 95.011478][ T5947] R13: 00007fe90020609c R14: 0000000000017167 R15: 00007ffcbfb60690 [ 95.011502][ T5947] [ 95.014497][ T5947] memory: usage 307200kB, limit 307200kB, failcnt 482 [ 95.245348][ T5947] memory+swap: usage 278792kB, limit 9007199254740988kB, failcnt 0 [ 95.259189][ T5947] kmem: usage 272104kB, limit 9007199254740988kB, failcnt 0 [ 95.274058][ T5947] Memory cgroup stats for /syz4: [ 95.274261][ T5947] cache 0 [ 95.288148][ T5947] rss 0 [ 95.293985][ T5947] shmem 0 [ 95.299861][ T5947] mapped_file 0 [ 95.306353][ T5947] dirty 0 [ 95.312359][ T5947] writeback 0 [ 95.320091][ T5947] workingset_refault_anon 2761 [ 95.329245][ T5947] workingset_refault_file 1473 [ 95.338618][ T5947] swap 196608 [ 95.345075][ T5947] swapcached 24805376 [ 95.353618][ T5947] pgpgin 76866 [ 95.360094][ T5947] pgpgout 76865 [ 95.366534][ T5947] pgfault 107509 [ 95.375911][ T5947] pgmajfault 280 [ 95.382529][ T5947] inactive_anon 0 [ 95.391235][ T5947] active_anon 4096 [ 95.398019][ T5947] inactive_file 0 [ 95.406261][ T5947] active_file 0 [ 95.413026][ T5947] unevictable 0 [ 95.420470][ T5947] hierarchical_memory_limit 314572800 [ 95.431243][ T5947] hierarchical_memsw_limit 9223372036854771712 [ 95.444304][ T5947] total_cache 0 [ 95.450804][ T5947] total_rss 0 [ 95.458609][ T5947] total_shmem 0 [ 95.465269][ T5947] total_mapped_file 0 [ 95.473732][ T5947] total_dirty 0 [ 95.483973][ T5947] total_writeback 0 [ 95.490811][ T5947] total_workingset_refault_anon 2761 [ 95.502649][ T5947] total_workingset_refault_file 1473 [ 95.512587][ T5947] total_swap 196608 [ 95.524474][ T5947] total_swapcached 24805376 [ 95.535510][ T5947] total_pgpgin 76866 [ 95.551650][ T5947] total_pgpgout 76865 [ 95.564347][ T5947] total_pgfault 107509 [ 95.564361][ T5947] total_pgmajfault 280 [ 95.564374][ T5947] total_inactive_anon 0 [ 95.564384][ T5947] total_active_anon 4096 [ 95.564394][ T5947] total_inactive_file 0 [ 95.564403][ T5947] total_active_file 0 [ 95.564413][ T5947] total_unevictable 0 [ 95.564422][ T5947] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.925,pid=5947,uid=0 [ 95.621270][ T5947] Memory cgroup out of memory: Killed process 5947 (syz.4.925) total-vm:94188kB, anon-rss:1236kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 95.834137][ T5967] : renamed from veth1_to_hsr [ 96.149460][ T28] kauditd_printk_skb: 18322 callbacks suppressed [ 96.149478][ T28] audit: type=1400 audit(1785678024.927:157487): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.180318][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.198409][ T3019] audit: audit_lost=4168 audit_rate_limit=0 audit_backlog_limit=64 [ 96.201999][ T28] audit: type=1400 audit(1785678024.927:157488): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.216689][ T3019] audit: backlog limit exceeded [ 96.240356][ T5988] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.249981][ T5988] audit: audit_lost=4169 audit_rate_limit=0 audit_backlog_limit=64 [ 96.258325][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.273769][ T28] audit: type=1400 audit(1785678024.927:157489): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 96.295849][ T5988] audit: backlog limit exceeded [ 96.415783][ T5969] syz.4.932 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 96.431483][ T5995] netlink: 'syz.3.939': attribute type 6 has an invalid length. [ 96.440922][ T5995] netlink: 'syz.3.939': attribute type 21 has an invalid length. [ 96.488199][ T5969] CPU: 0 UID: 0 PID: 5969 Comm: syz.4.932 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.488230][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.488243][ T5969] Call Trace: [ 96.488249][ T5969] [ 96.488257][ T5969] __dump_stack+0x1d/0x30 [ 96.488283][ T5969] dump_stack_lvl+0x95/0xd0 [ 96.488302][ T5969] dump_stack+0x15/0x1b [ 96.488394][ T5969] dump_header+0x80/0x240 [ 96.488427][ T5969] oom_kill_process+0x295/0x350 [ 96.488462][ T5969] out_of_memory+0x981/0xbc0 [ 96.488516][ T5969] try_charge_memcg+0x621/0xa00 [ 96.488576][ T5969] ? __list_del_entry_valid_or_report+0x65/0x130 [ 96.488608][ T5969] __memcg_kmem_charge_page+0x199/0x3a0 [ 96.488710][ T5969] __alloc_frozen_pages_noprof+0x18a/0x350 [ 96.488741][ T5969] alloc_pages_mpol+0xa9/0x1d0 [ 96.488851][ T5969] alloc_pages_noprof+0x8f/0x140 [ 96.488883][ T5969] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 96.488977][ T5969] __kvmalloc_node_noprof+0x3a0/0x590 [ 96.489015][ T5969] ? futex_hash_allocate+0x192/0x920 [ 96.489042][ T5969] ? futex_hash_allocate+0x192/0x920 [ 96.489188][ T5969] ? futex_hash_allocate+0x192/0x920 [ 96.489216][ T5969] futex_hash_allocate+0x192/0x920 [ 96.489237][ T5969] ? cap_task_prctl+0x13f/0x6b0 [ 96.489282][ T5969] futex_hash_prctl+0xd8/0xf0 [ 96.489370][ T5969] __se_sys_prctl+0x4f4/0x13b0 [ 96.489397][ T5969] __x64_sys_prctl+0x67/0x80 [ 96.489515][ T5969] x64_sys_call+0x2533/0x3020 [ 96.489546][ T5969] do_syscall_64+0x136/0x3c0 [ 96.489590][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.489611][ T5969] RIP: 0033:0x7fe8fff7e019 [ 96.489627][ T5969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.489685][ T5969] RSP: 002b:00007fe8fe9d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 96.489704][ T5969] RAX: ffffffffffffffda RBX: 00007fe900205fa0 RCX: 00007fe8fff7e019 [ 96.489730][ T5969] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 96.489743][ T5969] RBP: 00007fe90001500c R08: 0000000000000000 R09: 0000000000000000 [ 96.489755][ T5969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.489767][ T5969] R13: 00007fe900206038 R14: 00007fe900205fa0 R15: 00007ffcbfb60428 [ 96.489790][ T5969] [ 96.808948][ T5969] memory: usage 173300kB, limit 307200kB, failcnt 736 [ 96.825668][ T5969] memory+swap: usage 161168kB, limit 9007199254740988kB, failcnt 0 [ 96.845124][ T5969] kmem: usage 145700kB, limit 9007199254740988kB, failcnt 0 [ 96.861675][ T5969] Memory cgroup stats for /syz4: [ 96.861972][ T5969] cache 0 [ 96.880348][ T5969] rss 0 [ 96.886822][ T5969] shmem 0 [ 96.894650][ T5969] mapped_file 0 [ 96.902973][ T5969] dirty 0 [ 96.909626][ T5969] writeback 0 [ 96.917527][ T5969] workingset_refault_anon 2820 [ 96.930159][ T5969] workingset_refault_file 2341 [ 96.940976][ T5969] swap 622592 [ 96.949437][ T5969] swapcached 25604096 [ 96.957691][ T5969] pgpgin 78191 [ 96.965683][ T5969] pgpgout 78191 [ 96.973553][ T5969] pgfault 108211 [ 96.988402][ T5969] pgmajfault 320 [ 96.996730][ T5969] inactive_anon 0 [ 97.005011][ T5969] active_anon 0 [ 97.012957][ T5969] inactive_file 0 [ 97.021013][ T5969] active_file 0 [ 97.029131][ T5969] unevictable 0 [ 97.037568][ T5969] hierarchical_memory_limit 314572800 [ 97.052563][ T5969] hierarchical_memsw_limit 9223372036854771712 [ 97.067386][ T5969] total_cache 0 [ 97.076089][ T5969] total_rss 0 [ 97.086912][ T5969] total_shmem 0 [ 97.095381][ T5969] total_mapped_file 0 [ 97.106090][ T5969] total_dirty 0 [ 97.114573][ T5969] total_writeback 0 [ 97.123567][ T5969] total_workingset_refault_anon 2820 [ 97.137370][ T5969] total_workingset_refault_file 2341 [ 97.159970][ T5969] total_swap 622592 [ 97.171619][ T5969] total_swapcached 25604096 [ 97.184564][ T5969] total_pgpgin 78191 [ 97.197569][ T5969] total_pgpgout 78191 [ 97.206923][ T5969] total_pgfault 108211 [ 97.216418][ T5969] total_pgmajfault 320 [ 97.226035][ T5969] total_inactive_anon 0 [ 97.237125][ T5969] total_active_anon 0 [ 97.246825][ T5969] total_inactive_file 0 [ 97.256882][ T5969] total_active_file 0 [ 97.268850][ T5969] total_unevictable 0 [ 97.278425][ T5969] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.932,pid=5968,uid=0 [ 97.316953][ T5969] Memory cgroup out of memory: Killed process 5968 (syz.4.932) total-vm:104428kB, anon-rss:1236kB, file-rss:21868kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 97.436910][ T6002] netlink: 'syz.1.953': attribute type 10 has an invalid length. [ 97.444915][ T6002] ipvlan0: entered promiscuous mode [ 97.459025][ T6002] ipvlan0: entered allmulticast mode [ 97.473232][ T6002] veth0_vlan: entered allmulticast mode [ 97.493767][ T6002] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 97.532850][ T6002] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 97.532960][ T6002] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 97.542245][ T6008] can0: slcan on ttyS3. [ 97.874718][ T6021] netlink: 'syz.4.945': attribute type 6 has an invalid length. [ 97.909273][ T6021] netlink: 'syz.4.945': attribute type 21 has an invalid length. [ 97.918068][ T6022] netlink: 'syz.1.946': attribute type 6 has an invalid length. [ 97.933296][ T6022] netlink: 'syz.1.946': attribute type 21 has an invalid length. [ 98.250308][ T5997] can0 (unregistered): slcan off ttyS3. [ 98.304482][ T6025] FAULT_INJECTION: forcing a failure. [ 98.304482][ T6025] name failslab, interval 1, probability 0, space 0, times 0 [ 98.328721][ T6025] CPU: 0 UID: 0 PID: 6025 Comm: syz.0.947 Not tainted syzkaller #0 PREEMPT(lazy) [ 98.328748][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.328760][ T6025] Call Trace: [ 98.328766][ T6025] [ 98.328774][ T6025] __dump_stack+0x1d/0x30 [ 98.328798][ T6025] dump_stack_lvl+0x95/0xd0 [ 98.328862][ T6025] dump_stack+0x15/0x1b [ 98.328953][ T6025] should_fail_ex+0x25e/0x270 [ 98.328987][ T6025] should_failslab+0x8c/0xb0 [ 98.329068][ T6025] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 98.329089][ T6025] ? sk_prot_alloc+0x3f/0x180 [ 98.329116][ T6025] ? sk_prot_alloc+0x3f/0x180 [ 98.329147][ T6025] sk_prot_alloc+0x3f/0x180 [ 98.329271][ T6025] sk_alloc+0x34/0x3e0 [ 98.329305][ T6025] unix_create1+0xa1/0x400 [ 98.329359][ T6025] unix_create+0x110/0x140 [ 98.329381][ T6025] __sock_create+0x2e5/0x580 [ 98.329507][ T6025] __sys_socketpair+0x1c4/0x430 [ 98.329535][ T6025] __x64_sys_socketpair+0x52/0x60 [ 98.329565][ T6025] x64_sys_call+0x2de5/0x3020 [ 98.329634][ T6025] do_syscall_64+0x136/0x3c0 [ 98.329658][ T6025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.329677][ T6025] RIP: 0033:0x7fa1e157e019 [ 98.329693][ T6025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.329725][ T6025] RSP: 002b:00007fa1dffd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 98.329748][ T6025] RAX: ffffffffffffffda RBX: 00007fa1e1805fa0 RCX: 00007fa1e157e019 [ 98.329762][ T6025] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 98.329776][ T6025] RBP: 00007fa1dffd7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.329790][ T6025] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 98.329848][ T6025] R13: 00007fa1e1806038 R14: 00007fa1e1805fa0 R15: 00007ffdfaa75268 [ 98.329869][ T6025] [ 101.086800][ T6056] netlink: 'syz.0.961': attribute type 6 has an invalid length. [ 101.130517][ T6056] netlink: 'syz.0.961': attribute type 21 has an invalid length. [ 101.159094][ T28] kauditd_printk_skb: 20025 callbacks suppressed [ 101.159116][ T28] audit: type=1400 audit(1785678029.927:175335): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.204320][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.229882][ T3019] audit: audit_lost=4897 audit_rate_limit=0 audit_backlog_limit=64 [ 101.243480][ T28] audit: type=1400 audit(1785678029.937:175336): avc: denied { create } for pid=6053 comm="syz.0.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 101.252120][ T3019] audit: backlog limit exceeded [ 101.298101][ T28] audit: type=1400 audit(1785678029.957:175337): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.316248][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.343056][ T3019] audit: audit_lost=4898 audit_rate_limit=0 audit_backlog_limit=64 [ 101.361944][ T28] audit: type=1400 audit(1785678029.957:175338): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 101.364093][ T3019] audit: backlog limit exceeded [ 101.655493][ T6068] netlink: 'syz.4.962': attribute type 6 has an invalid length. [ 101.666583][ T6068] netlink: 'syz.4.962': attribute type 21 has an invalid length. [ 102.143765][ T6088] netlink: 'syz.3.972': attribute type 6 has an invalid length. [ 102.165495][ T6088] netlink: 'syz.3.972': attribute type 21 has an invalid length. [ 102.950842][ T6109] tun0: tun_chr_ioctl cmd 1074025681 [ 102.979424][ T6109] netlink: 25 bytes leftover after parsing attributes in process `syz.2.981'. [ 103.022882][ T6109] lo: entered promiscuous mode [ 103.095526][ T6115] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 105.692271][ T6130] bridge_slave_0: left allmulticast mode [ 105.719994][ T6130] bridge_slave_0: left promiscuous mode [ 105.735866][ T6131] netlink: 'syz.0.989': attribute type 10 has an invalid length. [ 105.763853][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.810009][ T6130] bridge_slave_1: left allmulticast mode [ 105.833303][ T6130] bridge_slave_1: left promiscuous mode [ 105.856699][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.889478][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 105.933373][ T6130] bond0: (slave bond_slave_0): Releasing backup interface [ 106.003796][ T6130] bond0: (slave bond_slave_1): Releasing backup interface [ 106.040369][ T6130] team0: Port device team_slave_0 removed [ 106.073874][ T6130] team0: Port device team_slave_1 removed [ 106.094021][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.132476][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.146477][ T28] kauditd_printk_skb: 18269 callbacks suppressed [ 106.146497][ T28] audit: type=1400 audit(1785678290.946:193608): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.181104][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.199867][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.213932][ T3019] audit: audit_lost=4899 audit_rate_limit=0 audit_backlog_limit=64 [ 106.220076][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.225819][ T28] audit: type=1400 audit(1785678290.977:193609): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.256146][ T3019] audit: backlog limit exceeded [ 106.265758][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.279008][ T6130] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.279839][ T3019] audit: audit_lost=4900 audit_rate_limit=0 audit_backlog_limit=64 [ 106.312270][ T28] audit: type=1400 audit(1785678290.977:193610): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 106.359261][ T3019] audit: backlog limit exceeded [ 106.370994][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.400488][ T6131] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 106.458892][ T6136] bond0: (slave bridge0): Releasing backup interface [ 106.657195][ T6145] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 106.685840][ T6145] bond1: entered promiscuous mode [ 106.695148][ T6145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.908704][ T6165] netlink: 'syz.3.998': attribute type 28 has an invalid length. [ 106.940014][ T6165] netlink: 'syz.3.998': attribute type 4 has an invalid length. [ 106.956644][ T6165] netlink: 132 bytes leftover after parsing attributes in process `syz.3.998'. [ 107.140426][ T6172] netlink: 'syz.3.1000': attribute type 6 has an invalid length. [ 107.177936][ T6172] netlink: 'syz.3.1000': attribute type 21 has an invalid length. [ 108.217863][ T6207] serio: Serial port ptm1 [ 108.433667][ T6222] ªªªªªª: renamed from vlan0 [ 108.576833][ T6228] No such timeout policy "syz1" [ 108.608671][ T6230] netlink: 'syz.0.1022': attribute type 6 has an invalid length. [ 108.676506][ T6230] netlink: 'syz.0.1022': attribute type 21 has an invalid length. [ 110.991985][ T6255] serio: Serial port ptm1 [ 111.120329][ T28] kauditd_printk_skb: 16350 callbacks suppressed [ 111.120347][ T28] audit: type=1400 audit(1785678295.942:209959): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 111.168476][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 111.189450][ T3019] audit: audit_lost=4902 audit_rate_limit=0 audit_backlog_limit=64 [ 111.191897][ T28] audit: type=1400 audit(1785678295.942:209960): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 111.218734][ T3019] audit: backlog limit exceeded [ 111.234958][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 111.255806][ T3019] audit: audit_lost=4903 audit_rate_limit=0 audit_backlog_limit=64 [ 111.267735][ T28] audit: type=1400 audit(1785678295.942:209961): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 111.282364][ T3019] audit: backlog limit exceeded [ 111.319369][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 111.527985][ T6265] netlink: 'syz.3.1035': attribute type 6 has an invalid length. [ 111.590275][ T6265] netlink: 'syz.3.1035': attribute type 21 has an invalid length. [ 112.569245][ T6281] FAULT_INJECTION: forcing a failure. [ 112.569245][ T6281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.609362][ T6281] CPU: 1 UID: 0 PID: 6281 Comm: syz.4.1043 Not tainted syzkaller #0 PREEMPT(lazy) [ 112.609397][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.609414][ T6281] Call Trace: [ 112.609423][ T6281] [ 112.609432][ T6281] __dump_stack+0x1d/0x30 [ 112.609531][ T6281] dump_stack_lvl+0x95/0xd0 [ 112.609558][ T6281] dump_stack+0x15/0x1b [ 112.609583][ T6281] should_fail_ex+0x25e/0x270 [ 112.609621][ T6281] should_fail+0xb/0x20 [ 112.609707][ T6281] should_fail_usercopy+0x1a/0x20 [ 112.609747][ T6281] _copy_from_iter+0xcc/0xe70 [ 112.609784][ T6281] ? __alloc_skb+0x511/0x6f0 [ 112.609832][ T6281] ? __alloc_skb+0x205/0x6f0 [ 112.609949][ T6281] netlink_sendmsg+0x4a4/0x6f0 [ 112.609985][ T6281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.610034][ T6281] sock_write_iter+0x2c5/0x2f0 [ 112.610067][ T6281] do_iter_readv_writev+0x4f6/0x5a0 [ 112.610157][ T6281] vfs_writev+0x2d1/0x8b0 [ 112.610190][ T6281] ? get_pid_task+0x92/0xc0 [ 112.610222][ T6281] do_writev+0xe9/0x210 [ 112.610261][ T6281] __x64_sys_writev+0x45/0x50 [ 112.610281][ T6281] x64_sys_call+0x1c0c/0x3020 [ 112.610310][ T6281] do_syscall_64+0x136/0x3c0 [ 112.610381][ T6281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.610409][ T6281] RIP: 0033:0x7fe8fff7e019 [ 112.610430][ T6281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.610453][ T6281] RSP: 002b:00007fe8fe9d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 112.610479][ T6281] RAX: ffffffffffffffda RBX: 00007fe900205fa0 RCX: 00007fe8fff7e019 [ 112.610504][ T6281] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 112.610521][ T6281] RBP: 00007fe8fe9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.610536][ T6281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.610547][ T6281] R13: 00007fe900206038 R14: 00007fe900205fa0 R15: 00007ffcbfb60428 [ 112.610602][ T6281] [ 112.953997][ T6287] netlink: 'syz.0.1044': attribute type 6 has an invalid length. [ 112.961962][ T6287] netlink: 'syz.0.1044': attribute type 21 has an invalid length. [ 113.984399][ T6323] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1059'. [ 114.296444][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 115.046446][ T6371] netlink: 'syz.1.1078': attribute type 6 has an invalid length. [ 115.064852][ T6372] netlink: 'syz.2.1079': attribute type 6 has an invalid length. [ 115.098597][ T6372] netlink: 'syz.2.1079': attribute type 21 has an invalid length. [ 115.112609][ T6371] netlink: 'syz.1.1078': attribute type 21 has an invalid length. [ 116.123974][ T28] kauditd_printk_skb: 15709 callbacks suppressed [ 116.124009][ T28] audit: type=1400 audit(1785678812.957:225666): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 116.160623][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 116.173009][ T6384] audit: audit_backlog=65 > audit_backlog_limit=64 [ 116.177066][ T28] audit: type=1400 audit(1785678812.957:225667): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 116.186933][ T3019] audit: audit_lost=4906 audit_rate_limit=0 audit_backlog_limit=64 [ 116.219229][ T6384] audit: audit_lost=4907 audit_rate_limit=0 audit_backlog_limit=64 [ 116.247429][ T6384] audit: backlog limit exceeded [ 116.252340][ T28] audit: type=1400 audit(1785678812.967:225668): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 116.275143][ T3019] audit: backlog limit exceeded [ 116.282288][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.191650][ T6431] can0: slcan on ttyS3. [ 118.263576][ T6429] can0 (unregistered): slcan off ttyS3. [ 118.768165][ T6466] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 119.337171][ T6472] netlink: 'syz.0.1120': attribute type 6 has an invalid length. [ 119.386119][ T6472] netlink: 'syz.0.1120': attribute type 21 has an invalid length. [ 119.554678][ T6484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1127'. [ 119.612544][ T6484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1127'. [ 119.621677][ T181] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.631006][ T181] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.654342][ T181] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.688916][ T181] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.766656][ T6506] netlink: 'syz.4.1136': attribute type 1 has an invalid length. [ 121.028622][ T6514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.134115][ T28] kauditd_printk_skb: 19623 callbacks suppressed [ 121.134136][ T28] audit: type=1400 audit(1785678817.977:244780): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 121.171173][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 121.183454][ T3019] audit: audit_lost=5079 audit_rate_limit=0 audit_backlog_limit=64 [ 121.191462][ T6518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 121.198123][ T28] audit: type=1400 audit(1785678817.977:244781): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 121.206784][ T3019] audit: backlog limit exceeded [ 121.227259][ T6518] audit: audit_lost=5080 audit_rate_limit=0 audit_backlog_limit=64 [ 121.243366][ T6518] audit: backlog limit exceeded [ 121.253725][ T28] audit: type=1400 audit(1785678817.977:244782): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 121.279814][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 121.574786][ T6529] netlink: 'syz.2.1144': attribute type 6 has an invalid length. [ 121.598983][ T6529] netlink: 'syz.2.1144': attribute type 21 has an invalid length. [ 122.861809][ T6558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.292094][ T6576] Cannot find set identified by id 0 to match [ 124.515732][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 124.683580][ T6613] FAULT_INJECTION: forcing a failure. [ 124.683580][ T6613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.704850][ T6613] CPU: 1 UID: 0 PID: 6613 Comm: syz.0.1177 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.704962][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.705039][ T6613] Call Trace: [ 124.705048][ T6613] [ 124.705057][ T6613] __dump_stack+0x1d/0x30 [ 124.705084][ T6613] dump_stack_lvl+0x95/0xd0 [ 124.705110][ T6613] dump_stack+0x15/0x1b [ 124.705185][ T6613] should_fail_ex+0x25e/0x270 [ 124.705219][ T6613] should_fail+0xb/0x20 [ 124.705248][ T6613] should_fail_usercopy+0x1a/0x20 [ 124.705333][ T6613] _copy_from_iter+0xcc/0xe70 [ 124.705376][ T6613] ? _copy_from_iter+0x13b/0xe70 [ 124.705412][ T6613] copy_page_from_iter+0x15d/0x1f0 [ 124.705519][ T6613] skb_copy_datagram_from_iter+0x22d/0x480 [ 124.705550][ T6613] tun_get_user+0xc1d/0x2820 [ 124.705589][ T6613] ? _parse_integer_limit+0x177/0x1a0 [ 124.705694][ T6613] ? _parse_integer+0x27/0x40 [ 124.705727][ T6613] ? ref_tracker_alloc+0x1eb/0x2f0 [ 124.705762][ T6613] tun_chr_write_iter+0x15a/0x210 [ 124.705795][ T6613] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 124.705921][ T6613] vfs_write+0x57d/0x990 [ 124.705950][ T6613] ksys_write+0xdc/0x1a0 [ 124.706031][ T6613] __x64_sys_write+0x40/0x50 [ 124.706097][ T6613] x64_sys_call+0x27e1/0x3020 [ 124.706120][ T6613] do_syscall_64+0x136/0x3c0 [ 124.706196][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.706223][ T6613] RIP: 0033:0x7fa1e157e019 [ 124.706263][ T6613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.706317][ T6613] RSP: 002b:00007fa1dffd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.706340][ T6613] RAX: ffffffffffffffda RBX: 00007fa1e1805fa0 RCX: 00007fa1e157e019 [ 124.706360][ T6613] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 124.706376][ T6613] RBP: 00007fa1dffd7090 R08: 0000000000000000 R09: 0000000000000000 [ 124.706391][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.706402][ T6613] R13: 00007fa1e1806038 R14: 00007fa1e1805fa0 R15: 00007ffdfaa75268 [ 124.706487][ T6613] [ 125.010362][ T6621] FAULT_INJECTION: forcing a failure. [ 125.010362][ T6621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.023866][ T6620] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 125.033845][ T6620] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 125.068233][ T6621] CPU: 0 UID: 0 PID: 6621 Comm: syz.2.1180 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.068318][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.068330][ T6621] Call Trace: [ 125.068337][ T6621] [ 125.068345][ T6621] __dump_stack+0x1d/0x30 [ 125.068374][ T6621] dump_stack_lvl+0x95/0xd0 [ 125.068400][ T6621] dump_stack+0x15/0x1b [ 125.068424][ T6621] should_fail_ex+0x25e/0x270 [ 125.068508][ T6621] should_fail+0xb/0x20 [ 125.068617][ T6621] should_fail_usercopy+0x1a/0x20 [ 125.068662][ T6621] _copy_from_iter+0xcc/0xe70 [ 125.068694][ T6621] ? skb_set_owner_w+0x19b/0x200 [ 125.068717][ T6621] ? sock_alloc_send_pskb+0x469/0x500 [ 125.068784][ T6621] skb_copy_datagram_from_iter+0xad/0x480 [ 125.068809][ T6621] ? skb_put+0xa9/0xf0 [ 125.068847][ T6621] tun_get_user+0xc1d/0x2820 [ 125.068882][ T6621] ? _parse_integer_limit+0x177/0x1a0 [ 125.068952][ T6621] ? _parse_integer+0x27/0x40 [ 125.068984][ T6621] ? ref_tracker_alloc+0x1eb/0x2f0 [ 125.069054][ T6621] tun_chr_write_iter+0x15a/0x210 [ 125.069087][ T6621] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 125.069152][ T6621] vfs_write+0x57d/0x990 [ 125.069228][ T6621] ksys_write+0xdc/0x1a0 [ 125.069247][ T6621] __x64_sys_write+0x40/0x50 [ 125.069266][ T6621] x64_sys_call+0x27e1/0x3020 [ 125.069367][ T6621] do_syscall_64+0x136/0x3c0 [ 125.069393][ T6621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.069479][ T6621] RIP: 0033:0x7fcbcddde019 [ 125.069499][ T6621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.069521][ T6621] RSP: 002b:00007fcbcc837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.069540][ T6621] RAX: ffffffffffffffda RBX: 00007fcbce065fa0 RCX: 00007fcbcddde019 [ 125.069617][ T6621] RDX: 000000000000fdef RSI: 00002000000016c0 RDI: 0000000000000004 [ 125.069631][ T6621] RBP: 00007fcbcc837090 R08: 0000000000000000 R09: 0000000000000000 [ 125.069650][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.069670][ T6621] R13: 00007fcbce066038 R14: 00007fcbce065fa0 R15: 00007ffea7a232d8 [ 125.069694][ T6621] [ 125.396361][ T6627] syzkaller0: entered promiscuous mode [ 125.404798][ T6627] syzkaller0: entered allmulticast mode [ 125.807295][ T6639] netlink: 'syz.3.1188': attribute type 6 has an invalid length. [ 125.815175][ T6639] netlink: 'syz.3.1188': attribute type 21 has an invalid length. [ 125.965931][ T6643] syzkaller0: entered promiscuous mode [ 125.971783][ T6643] syzkaller0: entered allmulticast mode [ 126.145058][ T28] kauditd_printk_skb: 19467 callbacks suppressed [ 126.145077][ T28] audit: type=1400 audit(1785679334.974:263192): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 126.183158][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 126.191767][ T6648] audit: audit_backlog=65 > audit_backlog_limit=64 [ 126.201067][ T3019] audit: audit_lost=5434 audit_rate_limit=0 audit_backlog_limit=64 [ 126.215755][ T6648] audit: audit_lost=5435 audit_rate_limit=0 audit_backlog_limit=64 [ 126.218921][ T28] audit: type=1400 audit(1785679334.984:263193): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 126.225974][ T3019] audit: backlog limit exceeded [ 126.259108][ T6648] audit: backlog limit exceeded [ 126.270322][ T6651] audit: audit_backlog=65 > audit_backlog_limit=64 [ 126.277095][ T6649] audit: audit_backlog=65 > audit_backlog_limit=64 [ 126.407647][ T6662] netlink: 'syz.0.1195': attribute type 10 has an invalid length. [ 126.429645][ T6662] team0: Port device vxcan0 added [ 126.744517][ T6667] ================================================================== [ 126.752690][ T6667] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 126.760033][ T6667] [ 126.762379][ T6667] read-write to 0xffffc9000f95fcc0 of 8 bytes by task 6671 on cpu 1: [ 126.770474][ T6667] shmem_writeout+0x2eb/0x8f0 [ 126.775188][ T6667] shrink_folio_list+0x1ebb/0x2780 [ 126.780331][ T6667] evict_folios+0x20e2/0x2d60 [ 126.785038][ T6667] try_to_shrink_lruvec+0x74d/0x8b0 [ 126.790269][ T6667] shrink_lruvec+0x25e/0x1b60 [ 126.794976][ T6667] shrink_node+0x67c/0x1e30 [ 126.799507][ T6667] do_try_to_free_pages+0x408/0xc90 [ 126.804777][ T6667] try_to_free_mem_cgroup_pages+0x201/0x420 [ 126.810705][ T6667] mem_cgroup_resize_max+0x1cd/0x240 [ 126.816069][ T6667] mem_cgroup_write+0x1ad/0x250 [ 126.820959][ T6667] cgroup_file_write+0x197/0x350 [ 126.825917][ T6667] kernfs_fop_write_iter+0x1d2/0x2e0 [ 126.831236][ T6667] vfs_write+0x57d/0x990 [ 126.835499][ T6667] ksys_write+0xdc/0x1a0 [ 126.839755][ T6667] __x64_sys_write+0x40/0x50 [ 126.844384][ T6667] x64_sys_call+0x27e1/0x3020 [ 126.849087][ T6667] do_syscall_64+0x136/0x3c0 [ 126.853707][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.859619][ T6667] [ 126.861952][ T6667] read to 0xffffc9000f95fcc0 of 8 bytes by task 6667 on cpu 0: [ 126.869509][ T6667] shmem_fallocate+0x589/0x8f0 [ 126.874300][ T6667] vfs_fallocate+0x3ac/0x400 [ 126.878915][ T6667] file_ioctl+0x4e1/0x5b0 [ 126.883267][ T6667] do_vfs_ioctl+0x7c4/0xe50 [ 126.887789][ T6667] __se_sys_ioctl+0x82/0x140 [ 126.892415][ T6667] __x64_sys_ioctl+0x43/0x50 [ 126.897033][ T6667] x64_sys_call+0x1563/0x3020 [ 126.901731][ T6667] do_syscall_64+0x136/0x3c0 [ 126.906366][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.912279][ T6667] [ 126.914615][ T6667] value changed: 0x00000000000002fb -> 0x0000000000000304 [ 126.921729][ T6667] [ 126.924058][ T6667] Reported by Kernel Concurrency Sanitizer on: [ 126.930233][ T6667] CPU: 0 UID: 0 PID: 6667 Comm: syz.2.1199 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.939539][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.949617][ T6667] ================================================================== [ 131.154018][ T28] kauditd_printk_skb: 36045 callbacks suppressed [ 131.154037][ T28] audit: type=1400 audit(1785679339.984:299235): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 131.169324][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.181735][ T28] audit: type=1400 audit(1785679339.994:299236): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 131.188523][ T3019] audit: audit_lost=5438 audit_rate_limit=0 audit_backlog_limit=64 [ 131.188542][ T3019] audit: backlog limit exceeded [ 131.188687][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.188699][ T3019] audit: audit_lost=5439 audit_rate_limit=0 audit_backlog_limit=64 [ 131.188713][ T3019] audit: backlog limit exceeded [ 131.188853][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.188869][ T3019] audit: audit_lost=5440 audit_rate_limit=0 audit_backlog_limit=64 [ 136.163915][ T28] kauditd_printk_skb: 46273 callbacks suppressed [ 136.163953][ T28] audit: type=1400 audit(1785679344.994:343982): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 136.179965][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 136.192344][ T28] audit: type=1400 audit(1785679345.004:343983): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 136.199558][ T3019] audit: audit_lost=5950 audit_rate_limit=0 audit_backlog_limit=64 [ 136.222148][ T28] audit: type=1400 audit(1785679345.004:343984): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 136.228959][ T3019] audit: backlog limit exceeded [ 136.249076][ T28] audit: type=1400 audit(1785679345.004:343985): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 136.256092][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 136.275195][ T28] audit: type=1400 audit(1785679345.004:343986): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 136.281515][ T3019] audit: audit_lost=5951 audit_rate_limit=0 audit_backlog_limit=64