last executing test programs: 11m57.722034099s ago: executing program 32 (id=26): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x478, &(0x7f0000001500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r7, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x20000054) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0xe, 0x0, &(0x7f00000004c0)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) lseek(r1, 0x200, 0x1) getdents64(r1, 0x0, 0x0) 11m55.733361071s ago: executing program 33 (id=33): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x478, &(0x7f0000001500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x102a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101c, 0x67, 0x0, 0x2, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x1008, 0x0, @gue={{0x1, 0x0, 0x2, 0x2, 0x0, @void}, "bc8995a47722c88eedb5524d3c55194d458f7525df35e49153c516e43d4ff5a2bca4b92ede0081519a7c640a5136370e13779e513fb5dbfff57fc852bf914e801bf19da883568adc34d4e9df8b2f9c95e2243bde85dd6368f19cb3819c605e4624de9b8eb7284490da5666ea2d810ffb91c31b61b5693c7141e19a377ef5df846688914d9a14588b672b35e089a5824d51a3e8a1de652bdf604f184a059d29a69acfddef5f15bd968461dd84e2c033d344bf47ac61e012e860ff52ec7ab693227db71e5fa1e5a9626320ac6f96c0b4932fa47179c23a1c7634fe553414d0acc2cf15c16226da107a9af94547f4e645ae523fcedd7bddac9a3ef3f180fb2434259dae1ee1c970086430aed8b37dd8227d9cce9950c83ae056b79432b63ccc23d08db28ac974e5b7c63475a74ba19995b17048ae3855ce13d3f962b54ac333a56337e8bdf13dca963dcb094f84837f3170d864982893c72a7e6c1d0df106b08d4f96e7dff5117316df279b1f10fb30c02ca5e197b1116358f230bb770299eef1bba1933d3831f128ea413a7bac2985b2b0ec4c8e1a0dec5e13c28ec972a9500e7fd07bb2598011b5b763eb1a39e2d00fa3ef41d5b4df14090ca1030ac7bd53c35adbefc475cf4e5a29c00d6848f830c607503a04a96c6e587a17479bf70e6a4f1dbf174a5220b1884e8df4c22dd7728dbc0d71eab14cc40f7c85be81c523d96fa7a1cd5a61e1b3ba8fc19912b4db529308dfa145053b79e88050579f94b72d4579435c26d161d4003763d2f791afde431ace39e83e36a128e66a25fac7e7fe83ba1c7ebc38b6272888f8540b8af378897e2be4810ba9b123d9dae448125dd9eceef96d08104b5c561833bf6b4a4620fed2df0c0cbf2af6046aa53d7f5c60f1d37cd05e0f75b192b4f36e94c6c939d0fd053240e57ded0df01e6a098c3a3e7805cda289f4117097c893e7ac6d55a145e6f0a30c593737e47aa653166cb699411733818bd08ddd24a5e36208ed3749cc4e551df6517adf0cbf9c0b5b44e63ed8b52c8fe1879fbdc4fac0a64c27249d90b8a1c1a8b829b74c91e89da53fc8ca0018278beb614ac60a5a94de6242648557acb467e879bc41f39b1b8e14868c6a6f7411c0fd00e6ebe4dc4ba1fcc736556bc0751db4d6e80b7d4a3535b9060c615ba01330909c0f19471bc2dfb06defae2dacd6f9ea5c371562c1677cead506af289e272c49c54a7cb1165487b298c5ea805688bc92bed04a2bb20eac6675a8166af08b8469d580a4e1bd39df4d8821f6f5a243c57f976544c566ae5524de8afcde3334edf0322347844abc27b98e10ba70e8de313ab288d99b1635b1f59d74052f957dd883016aab4ec4a142732668e7596dbc14183de1f13617d59fda0a86263b88efe95a2e836b07f701d686086e6cf089a1791efb958c1cd7bc4f70bfd175ab0f881c7301393a6d03f4d3b8de2298daa4086961a0415fd017fc97e82a00b749b188a32b5e490a9c1d5b28f65d7fbd3176c54cc5a76c55445ff3933cf4d6a1a489808c6807f79a94cbd729f8e7dd7fef18ae851b41e8d328c4a180617591c91dd54ea3534b3dead0f183008e9eb15842307dc8724f01c4643266ac274750f330fa9ae5e3631fa54a6216e0a4f824865a85bfc46da80c21ccc8275eda14701f79afbfc281b74e8c6c4e5e0261afd203865c5f186efbdbd56b5d24a16fccece9a65ee24c3a4afde42fb34af51c3fe49403027489e4422c61b0b869dfc1d08659bad63d1b248eee74a629866966a344572340bb30cfd71c905c25610a63c047e672bd2b2b6e306c2d54b0bf68bcc561165c9bb39576ab391eb514560a406e7763af0d259339ee7d6504b47905852074cd059ecf7ff5a53d55ca3828b76ddd9b57725e06a7d46565314f050640bb61916659464a284491bf432b7c697d69c0b1de9717a399e66608f32ebca204c3c6fbe876d23c361d108d3185eb8098861b0920cd54f07bc9593ae5a1afd363745e9cbcb3a5184fbccc6f9def7f98cfe6b15980266db54f617cc2543d8fa8d7cccac29dcc50a9a91eb8cdb04ed3ca49d8675efba1ad89a8deb9778cecbfe4d63a35b76c402f1b740a0b9529973e60b16ac4564e858f87de5f65e60d1ee998b668e2c67cfcfe9bbdb289d2b4da547fab48f0a0228b582eab62f21fa0da194d1a98737ab7cf50ef66ddf70907448961b50631ca90acd9743696e15687e25756ca31a856d1d06c223ed01bdfb47dd954540f0c47af55f58729ae7810444ccc0faebfdb498ce014d724a269f181090c5476008cd63d76e262bd2a7dcc2d462050215c8b598b829f80053927c5d90a2a548b2ec37e449afe766795661b294ee11476f505d83a9792a0b52236ae7f4595430f584aff414533318057b3660369c7a991b6c4304998d5f2d191494fea18de10094c5d93e0721af3fdf55ba29da2d1d459e789bfa12b1f76fbf7df7edcbf536b0b1e8a28e767db14ffd82ab0df8bad1e05a98f4bb1d44554f4876b87b3d6454773cad802402bbbc01d7400163e023957e05a1bf3267eea719ca73dc88afdfebabce7855d2116b19d29b1dadc39bb8e7e7ef5eac6ce9321625878c24206404b36189ab80211a80e8746ccbf9085dd0343baf854636bef10255701ca086d69aed6736f06c1bc490c3f45540f974531c974113c62a332d92978d968639b81419d2b9090d3ee0999a833baf4b78dc98e842fd9aca39184e3697d6b0cd2bce56277988154915d4b989d39751a8768fe844bd5fe71eab05987905c751116f79280d245125268a2c8603c6ed9379a3c7da7bbe2d3d0474509b2af51110d828c2888236a5a74f1aa8cf61c9a405532c51f8c92b6df69ba46dc8c7f2ad1cb48c8a05f247d05b60310721f8995b57149bfc4427e1d143d8d76ce90d565dfd541b16512cc822f47b91695d407934f561fcab449e1d5f4f29ef29e503126a834460373771c3fe9434c394b5d1a00c2be5fd060efd8019efb6034fe0f44cb3ad09e736ada5cae8bab9876efc41dbb8749206ae286b7c86fe7eabe910c38731c3c5e17dbcf937f7a4207f34f0c4d5f0ebabfeb7dd898675c39e6a5bf75bbe604d6d46b0ba3e2d83fe5f452e6796b922be31d1709b17226585c9d1d3d5f6fc1dcdf0c09710ad8c2d68a4727273cea4d86f3dd443db2d0f3a19eabf42468e142a801fc7346a8fb4711974e8ce0082816e67828acdb099c995f604c2b411f97d2bd7603b10ab4cfa20f2969fb8b0fbdff8285324b316809b634c9e74ca947125a26ffc034d8a353886a71d16ee9e884d25a3b78de5437e6266ab9075b42b54b038a2ed5fb8907b4edf37e1b8559796530ffd3e4258f209621e9798efd0d91b10e872d4512a6a5374ccc77fda160bacf61403ae7dd76a4313d09a79ebef5d935ba62c412aa67e14073aff5440bd442aa6224f61897d26a4e11746508d586716fa5d7d1fcc62cc90fb102143bf74dcdfc02b3c3665a490ee69dd093495f42f69fc294f6eb8b81b788e5955f1e59674a9eb516eb76523b3b7fe9ff382d7a0050b4c3b6ea8f5f85dbdd6184758cb58ecd9b9c365f8fc602cad8d5f3b428d26f49869323b9340e0f53a21dedf1bd98c3de580ced45de0236568acd13f9dac2831b6b3311987cc5cc04ad1c089c6cb0ace5b5eb92c03c3edc93862658b1b7db20983996dfddc8a06777a1419a5b6494525e4f8b58bdf3f4871bbe9457aec5f712d8a437fc479b8485b49d9cd8ec8a001d97266780d1ed0a5524c24b895aedcb32351faf3681ec4cf043276184c3bd3493fd6c8411818fc7f449b735664ee7e35c066952966afa8b0eeeaa3855c09e5433a071316437a25cb604cbaeac63493a07929936d35137d134a5bd7248680a38235fb2260cb460ce113880f8cc801daf66a0bdbaf274025221cebafa2b062b7d864db0c37d76d60c381e433a9b6a1a4c2b49b3a0720acb9a69e4a318bbe8070f4cdadcb27741d13ebf8179fa7a8b0efbf733a034ebf94e500c0e1961585a2001fe6d69f226efddba779df84ebab49191188e275eed8e3483e7d7da97bea73e97e349af200e078aa3a9041101a2e786a5b3e9310d025c6ffea956bdcdbdc0a95107d0d726bc2e93cdec8e6ad166c03833472ff24c664105c5aea8ac2dbd5ac8d7b4b7077aeaae604184d769911a8c1f00e9df01f7b3e67d18cfa937aab481d4405dc13768257b9089aca51093b2e3beabe5e5aff95faa4a4902ee509725a904aaf4d7f3d971ba2fae7665e3c719e727ff12591a15eb1e5fc8b052ac30ed118bf2f21002e1b10a0bd5bd70e02e5f34dcb2eef5f388947a3c02d647cf454fd6626819284c6664d96414a9508273ac04474905eb9d70a863cc52f648670f5998e5754695e9b71f624b8a8b8bf8189985d52052b33020dcb64e629655fe7cc347691f5eb42a5ebd7c55364dc0adce4ce779aee06addd3da431599f64b21fff25f7f4a840bf51e52e15fa5553324d0c698832c6d7203e9bf38f35fd19aaa726ed270e519fd1b840da27fe15934cf05de7436e970ee4de658b24ec8b8251803ed7e21715f396a59b4a7db04338d3d8e587979e61801f834afc0ff153e4a41e8803de4db430b4c2fca4cb49f6ec53adaf2137537df14862a5b5e071ff19dc6688ad71cbbfd7ede2c967be554126787137ed4f4e8f95b63984cac961ac367a935effd880f52602657bf37d7f207a1f57ba9981069fab35f1fb89caa98ba66c2cadcb63d6ba9b812a9250931dd8b7641338f77474c150350db2b22b46d594685241fc5035b6d0276ae96b2c28781d98f9ae7de93956912549c688917bf1bf1d968b753f6c589bc1c5514ab81d51b6f469c8a015a767e253fe118a1326bb36f947c2be699829ad6642ad89cf36bfccae96527ff648973415b0813422567b934cc8dac1d0b19331f0e5cede256f8ccca27baeb7424d45a90466db623a6845bf15bfb4f02ca80b6f028b562438eeca4a81ba7a8b9702b0b3558b270d01263481bf2f735baea29eee78e70d8bc9f8cf65b2fe1f4a9d7059afe7691131393b4fd4a123b95531451a930c48813dc3643c0d4fb5b19aea96ef4025985010980dae057391b25ae420540ed8cd0dae74a20fe9d2ddbb204b64fc4c3cdfec784d1e13038a72e451b693a5c18e502e637f771dd3975e558fb77f251608a0b29d3b499ce511fdf704946acbdb678b975cd9dc00f9e64856cfe9cfbb1262dc4b8e1fe781d827ea0347077a00c67dc5f43632bbef7ab872e020007ec35cbf741e027ff89c0fb46acac911fc23d9e9f1985687973286603197426cbec8410f3e89f037c4c44eec9191a6abfa9e04faf994f15c8fbb87fc22193d22f38f3bad9e7ee56a25f874f1b8a7a199e8a2926b96654f0b26c971820d16b6ba35b173ccde623278458b10f5f1c5f151a363f05582a39ee18c7423bd86bb50e392d53a264734913f2748d01bc7b98fd89ed7a403223d2b6a9eea01b322b2e9ae52219c718e82fe2073cbec505b8b2cebfb3cea3f06479add8e449b74b250339036395bfb032ae7c52bbd9876f64e3e10bca5278b8494200c5bb3ac3ccc97781b340601cd5315520665726d269413caa6a45b4c3cf52cee9be89ee5eb60e177cbc8da45d420882f7d184047dcfa7f3055c74eeab798ef4a3ae816350952d8a3f2689d4923b08a39c28956401ceba6c6bec54a8a065089321d897bc8a8a541b75e13dce2030c73a81817c6a4cfcee082d54ca0f58e4b284e1c29f2970b4428adea212cc852ecda879586ca064a5ccef7785d6"}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r7, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x20000054) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0xe, 0x0, &(0x7f00000004c0)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) lseek(r1, 0x200, 0x1) getdents64(r1, 0x0, 0x0) 8m35.243991795s ago: executing program 34 (id=1326): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="2cb9"], 0x5) 8m26.28959387s ago: executing program 35 (id=1363): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) fallocate(r1, 0x10, 0x2, 0x7fff) 8m0.031243865s ago: executing program 36 (id=1470): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x44}, 0x4, 0x700000000000000}, 0x0) 7m31.007421341s ago: executing program 37 (id=1514): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) process_vm_readv(r1, &(0x7f00000000c0), 0x0, &(0x7f00000025c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_connect(0x5, 0x36, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 3m30.559903797s ago: executing program 2 (id=2593): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0x8}, 0x5, 0x9, 0x800000, 0x0, 0xffffffffffffffff, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/udp6\x00') r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) timerfd_create(0x8, 0x800) eventfd(0x6) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, 0x0, 0xc010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x6c}, 0x94) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000008c0)=r6, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r7, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x39}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5d9}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x388}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd02}]}, 0x40}, 0x1, 0x0, 0x0, 0x8811}, 0x4000094) open$dir(&(0x7f00000001c0)='./file0\x00', 0x88800, 0x100) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r9, 0x0, 0x3}) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 3m30.353780411s ago: executing program 2 (id=2597): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m30.352379482s ago: executing program 2 (id=2598): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001300)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000080) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180300000000000000000000000000808510000006000000180000000000000000000000000000006600020000000000180000000000000000000000000000009500000000000000870300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000002, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x6f, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x7, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x6, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x2, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x0, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x3, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0xfffffe00, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x2003, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x3, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x40000009, 0x68, 0x7, 0x1ff, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x9, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0xe, 0x981, 0x80000000, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x40, 0x0, 0x1, 0x8002, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x390, 0x1, 0xa, 0x3, 0x4, 0x9, 0x9, 0x37c, 0xd, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x6, 0xd, 0x34ea, 0xfffc, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x4, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x7c, 0x9, 0x40000000, 0x4, 0x10000004, 0x0, 0xd, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x7, 0x100, 0x44, 0x59b, 0x7, 0x2c95, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x400006, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x81, 0x0, 0xae, 0x8, 0x1, 0xfffffeff, 0x6, 0x5, 0x7fff, 0x103, 0x7, 0x8000006, 0x709, 0x2, 0x49, 0x10, 0x7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0x4, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0xc, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x2, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0x1c, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x8000004, 0x6, 0x20080000, 0x9, 0x8001, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x101, 0xffef, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0x4000d, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x3, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x8, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x4, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x3, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x0, 0xf, 0x3, 0xe, 0x8, 0x7, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x7, 0x0, 0x0, 0x35, 0x8, 0x5, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x1, 0x6, 0xb, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x28f, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x1, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x0, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0xffffffff, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0xfffffff7, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x1, 0x0, 0x6, 0x7, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x6, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x42, 0x3, 0x4, 0x5, 0x5, 0x675, 0x5, 0x8, 0x5, 0x3, 0x8, 0x0, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x5, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0x7, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x4, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x5, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0xf, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0xf, 0x5, 0x7, 0xde, 0x6, 0x89, 0xfffffffd, 0x100, 0x1, 0x9, 0x6, 0x3fe, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x1, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r5 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000002500)=@ethtool_dump={0x19, 0x7, 0x9}}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd7}, 0x10311, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000012c0)=ANY=[@ANYRES32=r1], 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 3m27.314000309s ago: executing program 2 (id=2613): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x9, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT], 0x25, 0x363, &(0x7f0000000340)="$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") open(0x0, 0x20000, 0x0) r1 = inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x80000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000000)={0x41, 0x0, 0xfffffffffffffe3a}, &(0x7f0000000500)=[{}, {}, {}, {}]) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) fcntl$getown(r0, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r5, 0x2, 0x6, @local}, 0x6b) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 3m26.904093477s ago: executing program 2 (id=2616): socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 3m26.76707624s ago: executing program 2 (id=2618): unshare(0x24020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x758a, &(0x7f0000000480)={0x0, 0xb4a1, 0x10000, 0x2, 0x80000}, 0x0, 0x0, &(0x7f0000000000)) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[r0], 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c8, 0x2, 0x9dff, 0xe, "3d52e3ff00"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x40, 0x3, 0x7, 0x11, "b0bf2ebb48c801000000000003000018bfff40"}) 3m26.76677714s ago: executing program 38 (id=2618): unshare(0x24020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x758a, &(0x7f0000000480)={0x0, 0xb4a1, 0x10000, 0x2, 0x80000}, 0x0, 0x0, &(0x7f0000000000)) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[r0], 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c8, 0x2, 0x9dff, 0xe, "3d52e3ff00"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x40, 0x3, 0x7, 0x11, "b0bf2ebb48c801000000000003000018bfff40"}) 59.099041553s ago: executing program 6 (id=3575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040054) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 58.943439789s ago: executing program 6 (id=3580): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 58.832092107s ago: executing program 6 (id=3585): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cdg', 0x3) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000580)="7b6c60cacdaad6c996017e8241c92c576fbbacf35f1bf8d8db1e0566c263fe38e7922db31fe55c6150dffd821bc82de07f08a3af656ed4beabd7066a", 0x3c}, {&(0x7f00000005c0)="4bfc6af9354142e4e6ab1ca7e3753a9f3f0b2e242a3e9ce83302ed487413c024dae519d5d31600d0383d428cb26d5760a444b132d2c38433fa35e9cd62c10755e8a6157fac49523d5d6467df5130597906e41bdb5dd686ec3b2bd920996a445944579043a273caebb1648ecba3caab10cf6bceb9607f607c53243c76f1", 0x7d}, {&(0x7f0000000640)="9237555bcec1e409d9c1df5358ba56906163e07981862ef92e1d17892a44bb167499efafba8046565cace6db363bb1757c217f9bed7c7038", 0x38}, {&(0x7f0000002000)="ea3671da4c16a47848799b4779970c25ca1a361937a248644e6f574392a8df1b8ce64d5c79669b42700a61123177fdf95d2b49ca5e12e377c3a1f64952f817fe915bfe5150d11a1c358c47ca707e0c45864b56060c2abd07c4f9666771f93c771d4a636810d3388d79f5eceed800eba624a29701b3f7134a860a2052ac1bc3b3660f7ae2306a687f85240aff9a16bbffde830865f7380af36f615d6ee82385366e346960cd0806ebe9611559a71e3bd915810f5c22e3cc0b034da15c5b3d2724538d1da2c35d00f9284f41cbef6e0669fc2970591a323fe763deb7cdc5e4e09a8f747f6703aa1653894c7d6b58c6150a78793122b6067d5c55cd7946e97762dd7d9c1a9dfaf73a2c052a288a29f8c2fb0c0512cfb0d302e0a3229a35b2bdf0507c5b5dd98c028dfac9dc3bfb0e3db8af865a9faedcdae3ef66ac8052c38aaf8f31b287188c421cbd38a3f44e04a889786172d480d77fcb48394d15710e2b9580df76fa1186538019b4aad59ca3226fb8989ce651e4810b22155c1525f4343b052712960b77e85b6cdb8702e1e81ca2a5714486623e2a354c14c321c32a9fe14f9ac1d19fe2eae84c7c6176f5e809438187ce9c7a34812fb7f52146e048b0d423c00e93cc28427f192cbfba40b3aed96af45ff4f009c560e33afa92e8cc42592a566a47cc45073cdee2d38ef2c0ce9ef51e94e0378ff1115ca0b5131c9e8e2c31ab00dd6918bb9e646123fea6f0c2ce8501e91e36b90d746dc5eda45df153e8bd473ce0a8266434f350fdd4bef072674bf91048071ea74d98eb82c7aab0747180aed64d21f73dfac79a4ad3f05fb861362b23632d155ae3de06719c9497f9d073aed34c21967cf713c2d4958e081a50609b168f32b4cfb7ce890bee6745823dfb9fe5f960b880c47b2d776e469df12e993171ddf41e5a5f1e0dd2d155daff1b34017095d73458476bd85b8d924136e5679af0c7ddc99ff2ad46e2c8e8ef258160cceb37ad4e6d0ea9ace2101ee13356f9c5570f47c33b8d05244c11675b77623f7a6e42255a7145e60745f92dfe884237ae5ecf3e054ffaac403f41771646050d2a87f5ad4096ddfbbeb50ebb3ada6741b2ba5dff4de5c6a2b2028059e318e722121e8ce294ba069cbc07b894cbf8bce5e6b896fbdb664c97d107cb9aa3d10df7c078784bb234fbd6e468ee2071c67feafae0f90327749a50951490bd68c296ded245c15e255087e9092ffcc68c5af4dd78c1a2fdf4995d9b365d0a474cf96acdbbf9ef1c3442ca80abc406fda5fd32c4563f93d53a9c6f2a28adca32d14d815f4bb9896a373a1898c10220d5fd63777ca6d6f06d56ffa180b8eecc9cbed7b7c5de95024e304ab8a6581b7f6b0a5ede19fdb33c1b2f5a902405c10804531c397e0c5c6387301fa7688d272ef984fe1dd48301d1804f8fbd59a9290924cde0d7dcf87ffdb229ed9c760db7352a8059c88ddbc7022a2f6f4dd31d0495566b0ffe284f46868642ccfef3616d433408bc82dc82060e95a7f59d41964fef84d62522134f2e85db0217452e6b5ffa8b6942c72b8ba0b0073dc4919b8bf8848dae9df72aebd74a11bec6d9fb7393ba8180364797c8f07c7b6b99bd4dd6ae8ced1a75173c195969c962298dad980a1bfbbab34564de04000ec382dab503726eb771177ee09ba3608b", 0x4a4}], 0x4}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="137d", 0x2}], 0x1}}], 0x2, 0x0) 58.796050484s ago: executing program 6 (id=3588): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x28000, 0x0) 58.726812065s ago: executing program 6 (id=3589): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xfc37, 0xc000, 0x6, 0x20002f9}) 58.486984035s ago: executing program 6 (id=3597): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f0000000280)) 58.465125468s ago: executing program 39 (id=3597): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f0000000280)) 50.844196681s ago: executing program 7 (id=3780): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 50.696144975s ago: executing program 7 (id=3783): syz_emit_ethernet(0xfc1, &(0x7f0000000780)=ANY=[], 0x0) 50.636568096s ago: executing program 7 (id=3784): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 50.522861284s ago: executing program 7 (id=3786): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x28000, 0x0) 50.496569159s ago: executing program 7 (id=3789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=@framed, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x24000000) 50.374804259s ago: executing program 7 (id=3792): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000060000000000000000", @ANYRES32=0x0], 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r0, 0xffffc000) 50.343104445s ago: executing program 40 (id=3792): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000060000000000000000", @ANYRES32=0x0], 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r0, 0xffffc000) 50.107760954s ago: executing program 5 (id=3802): socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = memfd_create(&(0x7f0000000480)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L\x10\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7s\tzv0M\xcf\x9e\x16b\x89\x1f\x7fg\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 38.064917125s ago: executing program 3 (id=4025): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x24000050) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @exit], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6a, 0x6e, 0x0, 0x0) close(r0) 37.998473885s ago: executing program 3 (id=4027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 37.947465494s ago: executing program 3 (id=4031): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x28000, 0x0) 37.746150448s ago: executing program 3 (id=4037): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000041000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x700, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) 37.410422184s ago: executing program 3 (id=4043): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x4788, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 37.365117461s ago: executing program 42 (id=4043): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x4788, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 3.365026078s ago: executing program 0 (id=4706): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfc1, &(0x7f0000000780)=ANY=[], 0x0) 3.364586868s ago: executing program 0 (id=4707): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) socket(0xa, 0x3, 0x3e) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.470038988s ago: executing program 0 (id=4724): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) 2.39508695s ago: executing program 0 (id=4725): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0x6, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=""/144, 0x90}, 0x7fffffff}], 0x1, 0x40010000, 0x0) 1.522908726s ago: executing program 4 (id=4746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000000000)="f5fb", 0x2}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000000140)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000580)='t', 0x1}, {&(0x7f00000002c0)='y', 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="9f52", 0x2}, {&(0x7f0000000900)="11", 0x1}], 0x2}}], 0x4, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.456139207s ago: executing program 0 (id=4748): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000208500000070000000180100002020692500000000002020207b1a78ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f00000195c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.392706328s ago: executing program 4 (id=4751): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trmw'], 0xa) 1.391772158s ago: executing program 0 (id=4752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_notify(r3, &(0x7f00000003c0)={0x0, 0xd, 0x1, @thr={0x0, 0x0}}) mq_notify(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b"], 0x0) 1.353892394s ago: executing program 1 (id=4753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40081}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x5, @mcast1, 0x9, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f00000009c0)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}, {&(0x7f0000000040)="2be6c16d", 0x4}], 0x2}, 0x0) 1.31478806s ago: executing program 1 (id=4754): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc509055e8af4e052}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 1.263015889s ago: executing program 4 (id=4755): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.220742686s ago: executing program 1 (id=4758): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8905, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() 527.086402ms ago: executing program 4 (id=4760): r0 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='fd/3\x00') 491.742038ms ago: executing program 9 (id=4761): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 292.060531ms ago: executing program 9 (id=4763): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)={0x110, 0x1f, 0x1, 0x70bd26, 0x25dfdbfb, "", [@nested={0x100, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x104, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x8}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x110}], 0x1}, 0x0) 291.810981ms ago: executing program 8 (id=4764): bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) fchdir(0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 291.126491ms ago: executing program 4 (id=4765): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfc1, &(0x7f0000000780)=ANY=[], 0x0) 232.227381ms ago: executing program 4 (id=4766): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f000000b0c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x10}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010}}], 0x2, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 186.970369ms ago: executing program 9 (id=4767): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f00000000c0)='2'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 186.761039ms ago: executing program 8 (id=4768): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000300)=""/148, 0x94, 0x1) 157.384844ms ago: executing program 1 (id=4769): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0xe2840, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000240)={0x18}) 146.910655ms ago: executing program 9 (id=4770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000001940), r0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x480c4) 136.634227ms ago: executing program 1 (id=4771): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) 91.084275ms ago: executing program 8 (id=4772): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trmw'], 0xa) 90.843874ms ago: executing program 8 (id=4773): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x28, r3, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 90.467625ms ago: executing program 9 (id=4774): socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 82.098146ms ago: executing program 1 (id=4775): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x18, &(0x7f0000000140)={0x20, 0xb66c32b63972d1cc, 0x1, "85"}, 0x0, 0x0, 0x0, 0x0}) 36.623294ms ago: executing program 8 (id=4776): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfc1, &(0x7f0000000780)=ANY=[], 0x0) 15.518377ms ago: executing program 9 (id=4777): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0) 0s ago: executing program 8 (id=4778): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom$l2tp6(r0, &(0x7f0000000000)=""/53, 0x35, 0x100, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x20) kernel console output (not intermixed with test programs): 00 [ 656.215471][ T28] audit: type=1326 audit(1775958241.575:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18123 comm="syz.8.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166be5c819 code=0x7ffc0000 [ 656.279370][T17904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.621320][T17904] veth0_vlan: entered promiscuous mode [ 656.631067][T17904] veth1_vlan: entered promiscuous mode [ 656.650859][T17904] veth0_macvtap: entered promiscuous mode [ 656.659434][T17904] veth1_macvtap: entered promiscuous mode [ 656.671310][T17904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.723856][T17904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.746341][ T308] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.154659][ T308] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.194974][ T308] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.212734][ T308] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.645531][ T28] audit: type=1326 audit(1775958243.055:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18178 comm="syz.6.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 657.803212][ T28] audit: type=1326 audit(1775958243.055:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18178 comm="syz.6.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 657.843056][T18187] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3116'. [ 658.010702][ T28] audit: type=1326 audit(1775958243.055:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18178 comm="syz.6.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 658.303072][ T28] audit: type=1326 audit(1775958243.055:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18178 comm="syz.6.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 658.433757][ T28] audit: type=1326 audit(1775958243.055:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18178 comm="syz.6.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 658.512253][T18203] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 658.528837][ T28] audit: type=1326 audit(1775958243.055:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18178 comm="syz.6.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 658.553400][ T28] audit: type=1326 audit(1775958243.055:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18178 comm="syz.6.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 658.577363][ T28] audit: type=1326 audit(1775958243.055:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18178 comm="syz.6.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 658.660395][T18206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.687744][T18209] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3119'. [ 658.728611][T18206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.756703][T18203] bond1 (unregistering): Released all slaves [ 659.524961][T18223] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3123'. [ 659.593606][T18221] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 659.705196][T18221] bond1 (unregistering): Released all slaves [ 659.743834][T18224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.755167][T18224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.960739][T18239] xt_NFQUEUE: number of total queues is 0 [ 661.653145][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 661.653164][ T28] audit: type=1326 audit(1775958247.085:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 661.767305][ T28] audit: type=1326 audit(1775958247.085:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 661.901787][ T28] audit: type=1326 audit(1775958247.115:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 662.058150][ T28] audit: type=1326 audit(1775958247.115:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 662.082234][ T28] audit: type=1326 audit(1775958247.125:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 662.214238][ T28] audit: type=1326 audit(1775958247.125:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 662.690648][ T28] audit: type=1326 audit(1775958247.125:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 662.714958][ T28] audit: type=1326 audit(1775958247.125:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 663.316771][ T28] audit: type=1326 audit(1775958247.125:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 663.405540][ T28] audit: type=1326 audit(1775958247.125:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18244 comm="syz.6.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 663.471062][T18311] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3135'. [ 663.999556][T18325] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3139'. [ 664.767623][T18360] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3145'. [ 665.804053][T18422] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3152'. [ 666.074342][T18391] xt_hashlimit: size too large, truncated to 1048576 [ 666.639760][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3155'. [ 666.708587][T18449] bond2: option lacp_active: invalid value (5) [ 666.716397][T18449] bond2 (unregistering): Released all slaves [ 667.375626][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 667.375644][ T28] audit: type=1400 audit(1775958252.655:4572): avc: denied { recv } for pid=18466 comm="syz.7.3157" saddr=10.128.0.163 src=30036 daddr=10.128.1.155 dest=43582 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 668.087366][T18497] loop6: detected capacity change from 0 to 8192 [ 668.165674][ T3309] loop6: p1 p2 p3 p4 [ 668.175780][ T3309] loop6: p2 size 262235 extends beyond EOD, truncated [ 668.204884][ T3309] loop6: p3 start 117772289 is beyond EOD, truncated [ 668.232113][ T3309] loop6: p4 size 720896 extends beyond EOD, truncated [ 668.598125][T18497] loop6: p1 p2 p3 p4 [ 668.614470][T18497] loop6: p2 size 262235 extends beyond EOD, truncated [ 668.636052][T18497] loop6: p3 start 117772289 is beyond EOD, truncated [ 668.642797][T18497] loop6: p4 size 720896 extends beyond EOD, truncated [ 668.787455][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 668.794796][ T28] audit: type=1326 audit(1775958254.225:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18513 comm="syz.8.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166be5c819 code=0x7ffc0000 [ 668.800875][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 668.834859][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 668.848260][ T28] audit: type=1326 audit(1775958254.225:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18513 comm="syz.8.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166be5c819 code=0x7ffc0000 [ 668.855759][T18522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3166'. [ 668.882854][ T28] audit: type=1326 audit(1775958254.225:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18513 comm="syz.8.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f166be5c819 code=0x7ffc0000 [ 668.912092][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 668.912564][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 668.933658][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 668.941517][ T28] audit: type=1326 audit(1775958254.225:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18513 comm="syz.8.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166be5c819 code=0x7ffc0000 [ 669.013341][ T28] audit: type=1326 audit(1775958254.225:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18513 comm="syz.8.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166be5c819 code=0x7ffc0000 [ 669.045606][ T28] audit: type=1326 audit(1775958254.225:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18513 comm="syz.8.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f166be5c819 code=0x7ffc0000 [ 669.092263][ T28] audit: type=1326 audit(1775958254.225:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18513 comm="syz.8.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166be5c819 code=0x7ffc0000 [ 669.116303][ T28] audit: type=1326 audit(1775958254.225:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18513 comm="syz.8.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f166be5c819 code=0x7ffc0000 [ 669.141662][ T28] audit: type=1326 audit(1775958254.225:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18513 comm="syz.8.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166be5c819 code=0x7ffc0000 [ 669.303627][T18538] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3169'. [ 669.648127][T18556] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3174'. [ 671.063445][T18615] netlink: 120 bytes leftover after parsing attributes in process `syz.8.3179'. [ 671.099147][T18618] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 671.112257][T18618] bond2 (unregistering): Released all slaves [ 672.816689][T18704] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3185'. [ 673.256901][T18720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 673.458042][T18727] netlink: 'syz.0.3191': attribute type 29 has an invalid length. [ 673.502461][T18727] netlink: 'syz.0.3191': attribute type 29 has an invalid length. [ 673.612626][T18733] FAULT_INJECTION: forcing a failure. [ 673.612626][T18733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.625980][T18733] CPU: 1 UID: 0 PID: 18733 Comm: syz.0.3193 Not tainted syzkaller #0 PREEMPT(full) [ 673.626012][T18733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 673.626028][T18733] Call Trace: [ 673.626035][T18733] [ 673.626044][T18733] __dump_stack+0x1d/0x30 [ 673.626113][T18733] dump_stack_lvl+0x95/0xd0 [ 673.626169][T18733] dump_stack+0x15/0x1b [ 673.626195][T18733] should_fail_ex+0x263/0x280 [ 673.626228][T18733] should_fail+0xb/0x20 [ 673.626255][T18733] should_fail_usercopy+0x1a/0x20 [ 673.626358][T18733] _copy_from_iter+0xcf/0xea0 [ 673.626392][T18733] ? should_fail_ex+0x30/0x280 [ 673.626493][T18733] ? __rcu_read_unlock+0x4e/0x70 [ 673.626579][T18733] ? avc_has_perm_noaudit+0xab/0x130 [ 673.626615][T18733] ? __rcu_read_unlock+0x4e/0x70 [ 673.626648][T18733] rawv6_sendmsg+0x901/0x1230 [ 673.626697][T18733] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 673.626782][T18733] inet_sendmsg+0xc5/0xd0 [ 673.626800][T18733] ? __pfx_inet_sendmsg+0x10/0x10 [ 673.626822][T18733] ____sys_sendmsg+0x519/0x5b0 [ 673.626851][T18733] ___sys_sendmsg+0x195/0x1e0 [ 673.626887][T18733] __x64_sys_sendmsg+0xd4/0x160 [ 673.626967][T18733] x64_sys_call+0x194c/0x3020 [ 673.627008][T18733] do_syscall_64+0x12c/0x370 [ 673.627044][T18733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.627095][T18733] RIP: 0033:0x7fd94922c819 [ 673.627141][T18733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.627165][T18733] RSP: 002b:00007fd947c7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.627209][T18733] RAX: ffffffffffffffda RBX: 00007fd9494a5fa0 RCX: 00007fd94922c819 [ 673.627298][T18733] RDX: 0000000000040810 RSI: 0000200000000580 RDI: 0000000000000003 [ 673.627313][T18733] RBP: 00007fd947c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 673.627326][T18733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.627338][T18733] R13: 00007fd9494a6038 R14: 00007fd9494a5fa0 R15: 00007ffd55ebaed8 [ 673.627394][T18733] [ 673.895836][T18740] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3196'. [ 674.073841][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 674.073858][ T28] audit: type=1400 audit(1775958259.505:4612): avc: denied { write } for pid=18734 comm="syz.8.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 674.383015][T18759] netlink: 'syz.7.3202': attribute type 2 has an invalid length. [ 674.436884][T18765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3204'. [ 674.642504][T18779] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3205'. [ 674.796220][T18779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.842993][T18779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.964374][T18883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3217'. [ 677.284115][ T28] audit: type=1400 audit(1775958262.675:4613): avc: denied { read } for pid=18905 comm="syz.4.3220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 678.324108][ T28] audit: type=1326 audit(1775958263.755:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18932 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 678.915201][ T28] audit: type=1326 audit(1775958263.755:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18932 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 679.537079][ T28] audit: type=1326 audit(1775958263.755:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18932 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 679.567260][ T28] audit: type=1326 audit(1775958263.755:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18932 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 679.605385][ T28] audit: type=1326 audit(1775958263.755:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18932 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 679.659167][ T28] audit: type=1326 audit(1775958263.755:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18932 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 679.688372][ T28] audit: type=1326 audit(1775958263.755:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18932 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 679.726632][ T28] audit: type=1326 audit(1775958263.755:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18932 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 679.794472][ T28] audit: type=1326 audit(1775958263.755:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18932 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 679.849285][ T28] audit: type=1326 audit(1775958263.755:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18932 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 679.887518][ T28] audit: type=1326 audit(1775958263.755:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18932 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 679.914324][ T28] audit: type=1326 audit(1775958263.755:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18932 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 680.079745][T18988] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3239'. [ 680.094409][T18988] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3239'. [ 680.147429][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3240'. [ 681.221209][T19072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3253'. [ 681.251096][T19074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=19074 comm=syz.0.3254 [ 681.252796][T19019] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3245'. [ 681.276753][T19074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3254'. [ 681.288410][T19074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3254'. [ 681.392924][T19078] loop6: detected capacity change from 0 to 512 [ 681.402068][T19078] EXT4-fs: Ignoring removed mblk_io_submit option [ 681.430997][T19078] EXT4-fs error (device loop6): __ext4_iget:5393: inode #11: block 1: comm syz.6.3255: invalid block [ 681.444930][T19078] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 681.445096][T19078] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3255: couldn't read orphan inode 11 (err -117) [ 681.454306][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 681.454328][ C0] EXT4-fs (loop6): initial error at time 1775958266: __ext4_iget:5393: inode 11: block 1 [ 681.454389][ C0] EXT4-fs (loop6): last error at time 1775958266: __ext4_iget:5393: inode 11: block 1 [ 681.492478][T19078] loop6: lost filesystem error report for type 5 error -117 [ 681.506923][T19078] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.961979][T19088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3257'. [ 682.344038][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3261'. [ 684.611500][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 684.611523][ T28] audit: type=1326 audit(1775958270.045:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83958ec819 code=0x7ffc0000 [ 684.648443][T19160] tc_dump_action: action bad kind [ 684.715852][ T28] audit: type=1326 audit(1775958270.075:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83958ec819 code=0x7ffc0000 [ 684.818318][ T28] audit: type=1326 audit(1775958270.075:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83958ec819 code=0x7ffc0000 [ 684.908368][ T28] audit: type=1326 audit(1775958270.075:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83958ec819 code=0x7ffc0000 [ 684.999992][ T28] audit: type=1326 audit(1775958270.075:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83958ec819 code=0x7ffc0000 [ 686.195460][ T28] audit: type=1326 audit(1775958270.075:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83958ec819 code=0x7ffc0000 [ 686.690116][ T28] audit: type=1326 audit(1775958270.075:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83958ec819 code=0x7ffc0000 [ 686.714069][ T28] audit: type=1326 audit(1775958270.075:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f83958ec819 code=0x7ffc0000 [ 686.740447][ T28] audit: type=1326 audit(1775958270.075:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83958ec819 code=0x7ffc0000 [ 686.764406][ T28] audit: type=1326 audit(1775958270.085:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.4.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83958ec819 code=0x7ffc0000 [ 687.110935][T19229] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 687.166342][T19233] netlink: 'syz.6.3280': attribute type 29 has an invalid length. [ 687.281413][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3283'. [ 687.294364][T19238] netlink: 'syz.6.3280': attribute type 29 has an invalid length. [ 687.454707][T19248] FAULT_INJECTION: forcing a failure. [ 687.454707][T19248] name failslab, interval 1, probability 0, space 0, times 0 [ 687.467904][T19248] CPU: 1 UID: 0 PID: 19248 Comm: syz.6.3286 Not tainted syzkaller #0 PREEMPT(full) [ 687.467994][T19248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 687.468011][T19248] Call Trace: [ 687.468019][T19248] [ 687.468028][T19248] __dump_stack+0x1d/0x30 [ 687.468124][T19248] dump_stack_lvl+0x95/0xd0 [ 687.468256][T19248] dump_stack+0x15/0x1b [ 687.468285][T19248] should_fail_ex+0x263/0x280 [ 687.468323][T19248] should_failslab+0x8c/0xb0 [ 687.468394][T19248] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 687.468427][T19248] ? __alloc_skb+0x2d6/0x690 [ 687.468464][T19248] ? _raw_spin_lock_bh+0x56/0xb0 [ 687.468508][T19248] __alloc_skb+0x2d6/0x690 [ 687.468545][T19248] ? __alloc_skb+0x200/0x690 [ 687.468583][T19248] kcm_sendmsg+0x166e/0x1820 [ 687.468644][T19248] ? avc_has_perm+0x101/0x190 [ 687.468683][T19248] ? selinux_socket_sendmsg+0x192/0x1c0 [ 687.468769][T19248] ? __pfx_kcm_sendmsg+0x10/0x10 [ 687.468808][T19248] sock_sendmsg+0x213/0x240 [ 687.468881][T19248] splice_to_socket+0x6e2/0xa80 [ 687.468933][T19248] ? __pfx_splice_to_socket+0x10/0x10 [ 687.469018][T19248] direct_splice_actor+0x156/0x2a0 [ 687.469048][T19248] ? shmem_file_write_iter+0xd1/0xf0 [ 687.469089][T19248] splice_direct_to_actor+0x311/0x670 [ 687.469119][T19248] ? __pfx_direct_splice_actor+0x10/0x10 [ 687.469163][T19248] do_splice_direct+0x119/0x1a0 [ 687.469247][T19248] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 687.469285][T19248] do_sendfile+0x382/0x650 [ 687.469376][T19248] __x64_sys_sendfile64+0x105/0x150 [ 687.469410][T19248] x64_sys_call+0x2dc4/0x3020 [ 687.469531][T19248] do_syscall_64+0x12c/0x370 [ 687.469646][T19248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.469702][T19248] RIP: 0033:0x7f084dabc819 [ 687.469723][T19248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.469745][T19248] RSP: 002b:00007f084c517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 687.469771][T19248] RAX: ffffffffffffffda RBX: 00007f084dd35fa0 RCX: 00007f084dabc819 [ 687.469789][T19248] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 687.469806][T19248] RBP: 00007f084c517090 R08: 0000000000000000 R09: 0000000000000000 [ 687.469881][T19248] R10: 000000008000fb00 R11: 0000000000000246 R12: 0000000000000001 [ 687.469898][T19248] R13: 00007f084dd36038 R14: 00007f084dd35fa0 R15: 00007ffe4d19ad78 [ 687.469925][T19248] [ 687.932411][T19270] mmap: syz.6.3289 (19270): VmData 167485440 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 688.088614][T19280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3290'. [ 688.126565][T19280] program syz.4.3290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.219264][T19289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3292'. [ 688.233536][T19291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.242023][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3292'. [ 688.253744][T19291] FAULT_INJECTION: forcing a failure. [ 688.253744][T19291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.268307][T19291] CPU: 0 UID: 0 PID: 19291 Comm: syz.0.3291 Not tainted syzkaller #0 PREEMPT(full) [ 688.268333][T19291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 688.268346][T19291] Call Trace: [ 688.268387][T19291] [ 688.268396][T19291] __dump_stack+0x1d/0x30 [ 688.268430][T19291] dump_stack_lvl+0x95/0xd0 [ 688.268461][T19291] dump_stack+0x15/0x1b [ 688.268487][T19291] should_fail_ex+0x263/0x280 [ 688.268645][T19291] should_fail+0xb/0x20 [ 688.268679][T19291] should_fail_usercopy+0x1a/0x20 [ 688.268716][T19291] _copy_from_user+0x1c/0xb0 [ 688.268815][T19291] ___sys_sendmsg+0xc1/0x1e0 [ 688.268902][T19291] __x64_sys_sendmsg+0xd4/0x160 [ 688.268928][T19291] x64_sys_call+0x194c/0x3020 [ 688.269029][T19291] do_syscall_64+0x12c/0x370 [ 688.269057][T19291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.269141][T19291] RIP: 0033:0x7fd94922c819 [ 688.269166][T19291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.269187][T19291] RSP: 002b:00007fd947c7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.269207][T19291] RAX: ffffffffffffffda RBX: 00007fd9494a5fa0 RCX: 00007fd94922c819 [ 688.269270][T19291] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 688.269284][T19291] RBP: 00007fd947c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 688.269300][T19291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.269316][T19291] R13: 00007fd9494a6038 R14: 00007fd9494a5fa0 R15: 00007ffd55ebaed8 [ 688.269335][T19291] [ 688.622309][T19316] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3297'. [ 689.880411][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 689.880427][ T28] audit: type=1400 audit(1775958275.315:4724): avc: denied { getopt } for pid=19415 comm="syz.8.3303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 689.919917][T19416] bond2: entered allmulticast mode [ 689.948631][T19421] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 689.976079][T19424] FAULT_INJECTION: forcing a failure. [ 689.976079][T19424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.990520][T19424] CPU: 0 UID: 0 PID: 19424 Comm: syz.8.3305 Not tainted syzkaller #0 PREEMPT(full) [ 689.990552][T19424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 689.990568][T19424] Call Trace: [ 689.990577][T19424] [ 689.990586][T19424] __dump_stack+0x1d/0x30 [ 689.990642][T19424] dump_stack_lvl+0x95/0xd0 [ 689.990672][T19424] dump_stack+0x15/0x1b [ 689.990700][T19424] should_fail_ex+0x263/0x280 [ 689.990733][T19424] should_fail+0xb/0x20 [ 689.990914][T19424] should_fail_usercopy+0x1a/0x20 [ 689.990951][T19424] _copy_from_user+0x1c/0xb0 [ 689.990994][T19424] do_sock_getsockopt+0xf1/0x210 [ 689.991039][T19424] __x64_sys_getsockopt+0x11d/0x1a0 [ 689.991216][T19424] x64_sys_call+0x2dcf/0x3020 [ 689.991312][T19424] do_syscall_64+0x12c/0x370 [ 689.991346][T19424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.991478][T19424] RIP: 0033:0x7f166be5c819 [ 689.991498][T19424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.991521][T19424] RSP: 002b:00007f166a8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 689.991682][T19424] RAX: ffffffffffffffda RBX: 00007f166c0d5fa0 RCX: 00007f166be5c819 [ 689.991697][T19424] RDX: 000000000000000b RSI: 0000000000000011 RDI: 0000000000000003 [ 689.991709][T19424] RBP: 00007f166a8b7090 R08: 0000200000000040 R09: 0000000000000000 [ 689.991754][T19424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.991766][T19424] R13: 00007f166c0d6038 R14: 00007f166c0d5fa0 R15: 00007ffca1656238 [ 689.991787][T19424] [ 690.204823][ T28] audit: type=1400 audit(1775958275.625:4725): avc: denied { mount } for pid=19429 comm="syz.8.3308" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 690.233916][T19432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3309'. [ 690.275102][T19438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 690.339929][T19446] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3313'. [ 690.385647][T19451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 690.494997][T19450] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3314'. [ 691.384108][T19483] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3325'. [ 692.246817][T19493] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 692.272663][T19489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3327'. [ 692.446685][T19489] team0: Port device team_slave_0 removed [ 692.753138][T19512] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3335'. [ 692.872143][T19495] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3330'. [ 694.671270][T19521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.691980][T19521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.532884][T19542] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3345'. [ 695.813115][T19550] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3348'. [ 695.996678][T19554] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 696.091078][T19554] bond2 (unregistering): Released all slaves [ 696.142038][T19554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.145618][T19554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.146848][ T28] audit: type=1326 audit(1775958282.585:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 697.177763][ T28] audit: type=1326 audit(1775958282.605:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 697.202880][ T28] audit: type=1326 audit(1775958282.605:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 697.277748][ T28] audit: type=1326 audit(1775958282.605:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 697.323487][T19584] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3359'. [ 697.359758][ T28] audit: type=1326 audit(1775958282.605:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 697.397177][ T28] audit: type=1326 audit(1775958282.605:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 697.437386][ T28] audit: type=1326 audit(1775958282.605:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 697.499461][ T3425] IPVS: starting estimator thread 0... [ 697.512082][ T28] audit: type=1326 audit(1775958282.605:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9491ed04e code=0x7ffc0000 [ 697.536989][ T28] audit: type=1326 audit(1775958282.605:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd94922db17 code=0x7ffc0000 [ 697.549723][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3361'. [ 697.562040][ T28] audit: type=1326 audit(1775958282.605:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19579 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd94922c819 code=0x7ffc0000 [ 697.585312][T19592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3361'. [ 697.607307][T19593] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3362'. [ 697.626299][T19589] IPVS: using max 2256 ests per chain, 112800 per kthread [ 697.661565][T19593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.686377][T19593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.300675][T19598] tc_dump_action: action bad kind [ 698.473414][T19612] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 698.510749][T19612] bond1 (unregistering): Released all slaves [ 698.604273][T19612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.615918][T19612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.661442][T19622] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3371'. [ 702.039087][T19711] random: crng reseeded on system resumption [ 702.112570][T19713] netlink: 'syz.4.3387': attribute type 29 has an invalid length. [ 702.131408][T19713] netlink: 'syz.4.3387': attribute type 29 has an invalid length. [ 702.222778][T19694] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3381'. [ 702.230537][T19722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3390'. [ 702.273182][T19696] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3382'. [ 702.419247][T19716] netlink: 'syz.8.3388': attribute type 16 has an invalid length. [ 702.427430][T19716] netlink: 'syz.8.3388': attribute type 3 has an invalid length. [ 702.435228][T19716] netlink: 64066 bytes leftover after parsing attributes in process `syz.8.3388'. [ 702.566219][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3388'. [ 702.575958][T19716] hsr_slave_0: left promiscuous mode [ 702.582058][T19716] hsr_slave_1: left promiscuous mode [ 702.943934][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 702.943951][ T28] audit: type=1400 audit(1775958288.365:4805): avc: denied { unmount } for pid=8566 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 705.062292][T19755] netlink: 'syz.6.3401': attribute type 29 has an invalid length. [ 706.011122][T19759] netlink: 'syz.6.3401': attribute type 29 has an invalid length. [ 706.531994][T19763] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3403'. [ 706.646765][T19775] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 706.708728][T19782] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3408'. [ 706.976487][T19775] bond1 (unregistering): Released all slaves [ 707.482907][T19787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.978278][T19787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.105649][T19785] lo speed is unknown, defaulting to 1000 [ 708.111468][T19785] lo speed is unknown, defaulting to 1000 [ 708.117570][T19785] lo speed is unknown, defaulting to 1000 [ 708.123601][T19785] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 708.131268][T19785] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 708.417251][ T28] audit: type=1400 audit(1775958293.765:4806): avc: denied { getopt } for pid=19781 comm="syz.8.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 708.420250][T19786] lo speed is unknown, defaulting to 1000 [ 708.475945][T19785] lo speed is unknown, defaulting to 1000 [ 708.476471][T19785] lo speed is unknown, defaulting to 1000 [ 708.477116][T19785] lo speed is unknown, defaulting to 1000 [ 708.477823][T19785] lo speed is unknown, defaulting to 1000 [ 708.478376][T19785] lo speed is unknown, defaulting to 1000 [ 708.946813][ T28] audit: type=1400 audit(1775958293.795:4807): avc: denied { map } for pid=19781 comm="syz.8.3408" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 709.455899][ T28] audit: type=1400 audit(1775958294.885:4808): avc: denied { write } for pid=19799 comm="syz.6.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 709.721496][T19807] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3411'. [ 710.534433][T19815] bond1: option arp_validate: invalid value (6216) [ 710.597993][T19815] bond1 (unregistering): Released all slaves [ 710.607117][T19823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3419'. [ 710.626291][ T28] audit: type=1326 audit(1775958296.055:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19822 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fc8ec819 code=0x7ffc0000 [ 710.827730][T19823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3419'. [ 710.896698][ T28] audit: type=1326 audit(1775958296.055:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19822 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f95fc8ec819 code=0x7ffc0000 [ 710.944754][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3419'. [ 711.161033][ T28] audit: type=1326 audit(1775958296.055:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19822 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fc8ec819 code=0x7ffc0000 [ 711.441162][ T28] audit: type=1326 audit(1775958296.055:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19822 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fc8ec819 code=0x7ffc0000 [ 711.578590][T19841] netlink: 'syz.4.3425': attribute type 24 has an invalid length. [ 711.653385][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3425'. [ 711.691476][ T28] audit: type=1326 audit(1775958296.055:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19822 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95fc8ec819 code=0x7ffc0000 [ 711.760817][ T28] audit: type=1326 audit(1775958296.055:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19822 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fc8ec819 code=0x7ffc0000 [ 711.784696][ T28] audit: type=1326 audit(1775958296.055:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19822 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fc8ec819 code=0x7ffc0000 [ 711.839709][T19828] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3421'. [ 712.104057][T19870] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3436'. [ 712.756017][T19807] syz.6.3411 (19807) used greatest stack depth: 9400 bytes left [ 712.981433][T19904] FAULT_INJECTION: forcing a failure. [ 712.981433][T19904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.995517][T19904] CPU: 0 UID: 0 PID: 19904 Comm: syz.7.3444 Not tainted syzkaller #0 PREEMPT(full) [ 712.995570][T19904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 712.995587][T19904] Call Trace: [ 712.995596][T19904] [ 712.995605][T19904] __dump_stack+0x1d/0x30 [ 712.995633][T19904] dump_stack_lvl+0x95/0xd0 [ 712.995659][T19904] dump_stack+0x15/0x1b [ 712.995815][T19904] should_fail_ex+0x263/0x280 [ 712.995876][T19904] should_fail+0xb/0x20 [ 712.995907][T19904] should_fail_usercopy+0x1a/0x20 [ 712.995944][T19904] _copy_from_user+0x1c/0xb0 [ 712.996050][T19904] kstrtouint_from_user+0x69/0xf0 [ 712.996086][T19904] proc_fail_nth_write+0x50/0x160 [ 712.996239][T19904] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 712.996280][T19904] vfs_write+0x269/0x9f0 [ 712.996304][T19904] ? __rcu_read_unlock+0x4e/0x70 [ 712.996331][T19904] ? __fget_files+0x184/0x1c0 [ 712.996396][T19904] ? mutex_lock+0x57/0x90 [ 712.996451][T19904] ksys_write+0xdc/0x1a0 [ 712.996476][T19904] __x64_sys_write+0x40/0x50 [ 712.996529][T19904] x64_sys_call+0x27e1/0x3020 [ 712.996619][T19904] do_syscall_64+0x12c/0x370 [ 712.996656][T19904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.996721][T19904] RIP: 0033:0x7f95fc8ad04e [ 712.996736][T19904] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 712.996779][T19904] RSP: 002b:00007f95fb346fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 712.996810][T19904] RAX: ffffffffffffffda RBX: 00007f95fb3476c0 RCX: 00007f95fc8ad04e [ 712.996824][T19904] RDX: 0000000000000001 RSI: 00007f95fb3470a0 RDI: 0000000000000005 [ 712.996836][T19904] RBP: 00007f95fb347090 R08: 0000000000000000 R09: 0000000000000000 [ 712.996851][T19904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.996868][T19904] R13: 00007f95fcb66038 R14: 00007f95fcb65fa0 R15: 00007ffdd24d2d18 [ 712.996887][T19904] [ 713.250081][T19905] FAULT_INJECTION: forcing a failure. [ 713.250081][T19905] name failslab, interval 1, probability 0, space 0, times 0 [ 713.263676][T19905] CPU: 0 UID: 0 PID: 19905 Comm: syz.6.3441 Not tainted syzkaller #0 PREEMPT(full) [ 713.263708][T19905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 713.263725][T19905] Call Trace: [ 713.263766][T19905] [ 713.263774][T19905] __dump_stack+0x1d/0x30 [ 713.263802][T19905] dump_stack_lvl+0x95/0xd0 [ 713.263830][T19905] dump_stack+0x15/0x1b [ 713.263853][T19905] should_fail_ex+0x263/0x280 [ 713.263945][T19905] should_failslab+0x8c/0xb0 [ 713.263967][T19905] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 713.263999][T19905] ? __alloc_skb+0x2d6/0x690 [ 713.264060][T19905] __alloc_skb+0x2d6/0x690 [ 713.264091][T19905] ? __alloc_skb+0x200/0x690 [ 713.264196][T19905] netlink_alloc_large_skb+0xbf/0xf0 [ 713.264238][T19905] netlink_sendmsg+0x40c/0x6f0 [ 713.264266][T19905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.264296][T19905] ____sys_sendmsg+0x563/0x5b0 [ 713.264318][T19905] ___sys_sendmsg+0x195/0x1e0 [ 713.264353][T19905] __x64_sys_sendmsg+0xd4/0x160 [ 713.264383][T19905] x64_sys_call+0x194c/0x3020 [ 713.264416][T19905] do_syscall_64+0x12c/0x370 [ 713.264504][T19905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.264533][T19905] RIP: 0033:0x7f084dabc819 [ 713.264553][T19905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.264582][T19905] RSP: 002b:00007f084c4d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.264605][T19905] RAX: ffffffffffffffda RBX: 00007f084dd36180 RCX: 00007f084dabc819 [ 713.264736][T19905] RDX: 0000000000004000 RSI: 0000200000000dc0 RDI: 0000000000000009 [ 713.264748][T19905] RBP: 00007f084c4d5090 R08: 0000000000000000 R09: 0000000000000000 [ 713.264761][T19905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.264776][T19905] R13: 00007f084dd36218 R14: 00007f084dd36180 R15: 00007ffe4d19ad78 [ 713.264843][T19905] [ 713.838364][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 713.838381][ T28] audit: type=1400 audit(1775958299.275:4863): avc: denied { read } for pid=19910 comm="syz.8.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 714.920148][T19908] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3446'. [ 715.045026][T19923] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.116412][T19923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 715.404803][ T28] audit: type=1400 audit(1775958300.835:4864): avc: denied { ioctl } for pid=19927 comm="syz.0.3452" path="socket:[49300]" dev="sockfs" ino=49300 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 715.486340][ T28] audit: type=1326 audit(1775958300.885:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19928 comm="syz.6.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 715.512502][ T28] audit: type=1326 audit(1775958300.885:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19928 comm="syz.6.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 715.536440][ T28] audit: type=1326 audit(1775958300.885:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19928 comm="syz.6.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 715.560297][ T28] audit: type=1326 audit(1775958300.885:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19928 comm="syz.6.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 715.584074][ T28] audit: type=1326 audit(1775958300.885:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19928 comm="syz.6.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 715.614476][ T28] audit: type=1326 audit(1775958300.885:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19928 comm="syz.6.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 715.638890][ T28] audit: type=1326 audit(1775958300.885:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19928 comm="syz.6.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 715.662656][ T28] audit: type=1326 audit(1775958300.885:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19928 comm="syz.6.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084dabc819 code=0x7ffc0000 [ 715.740715][T19943] lo speed is unknown, defaulting to 1000 [ 715.799958][T19951] SELinux: Context ›Y7 is not valid (left unmapped). [ 717.011944][T19971] vxcan0: tx address claim with dlc 0 [ 717.069643][T19973] syzkaller1: entered promiscuous mode [ 717.076526][T19973] syzkaller1: entered allmulticast mode [ 717.278157][T19977] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3467'. [ 717.308565][T19993] lo speed is unknown, defaulting to 1000 [ 717.358958][T19996] netlink: 'syz.6.3471': attribute type 1 has an invalid length. [ 718.185504][T20012] lo speed is unknown, defaulting to 1000 [ 718.264285][T20020] usb usb9: usbfs: process 20020 (syz.7.3481) did not claim interface 0 before use [ 718.339191][T20020] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 718.549829][T20047] syzkaller0: entered promiscuous mode [ 718.557245][T20047] syzkaller0: entered allmulticast mode [ 719.088398][T20046] tipc: Started in network mode [ 719.097459][T20046] tipc: Node identity 82cd7299872d, cluster identity 4711 [ 719.115122][T20046] tipc: Enabled bearer , priority 0 [ 719.172266][T20046] tipc: Resetting bearer [ 719.197016][T20046] tipc: Disabling bearer [ 719.719113][T20070] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3496'. [ 719.837365][T20069] lo speed is unknown, defaulting to 1000 [ 720.253130][T20107] Invalid ELF header magic: != ELF [ 720.262365][ T28] kauditd_printk_skb: 113 callbacks suppressed [ 720.262392][ T28] audit: type=1400 audit(1775958305.695:4986): avc: denied { connect } for pid=20105 comm="syz.0.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 720.438485][T20125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3509'. [ 720.455834][T20125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3509'. [ 721.155931][ T28] audit: type=1400 audit(1775958306.595:4987): avc: denied { ioctl } for pid=20158 comm="syz.4.3512" path="socket:[49725]" dev="sockfs" ino=49725 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 721.375936][T20160] netlink: 'syz.4.3512': attribute type 10 has an invalid length. [ 721.461434][ T28] audit: type=1400 audit(1775958306.895:4988): avc: denied { write } for pid=20186 comm="syz.4.3518" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 721.486780][ T28] audit: type=1400 audit(1775958306.895:4989): avc: denied { open } for pid=20186 comm="syz.4.3518" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 721.513871][ T28] audit: type=1400 audit(1775958306.895:4990): avc: denied { read } for pid=20186 comm="syz.4.3518" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 721.921939][T20195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 722.001731][T20197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3521'. [ 722.274999][T20226] Invalid ELF header magic: != ELF [ 722.280367][ T28] audit: type=1400 audit(1775958307.705:4991): avc: denied { module_load } for pid=20214 comm="syz.6.3530" path="/81/bus" dev="tmpfs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 722.638130][ T3374] kernel write not supported for file bpf-prog (pid: 3374 comm: kworker/1:2) [ 722.903900][T20260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20260 comm=syz.0.3549 [ 723.213475][T20273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.223689][T20273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.364172][T20302] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3567'. [ 723.502141][ T28] audit: type=1400 audit(1775958308.935:4992): avc: denied { map } for pid=20314 comm="syz.6.3573" path="socket:[49944]" dev="sockfs" ino=49944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 723.526642][ T28] audit: type=1400 audit(1775958308.935:4993): avc: denied { read } for pid=20314 comm="syz.6.3573" path="socket:[49944]" dev="sockfs" ino=49944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 723.551562][T20317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3574'. [ 723.562726][T20317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3574'. [ 723.762972][ T28] audit: type=1400 audit(1775958309.195:4994): avc: denied { bind } for pid=20325 comm="syz.7.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 723.809057][T20332] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3580'. [ 723.986437][T17904] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.999645][ T28] audit: type=1326 audit(1775958309.435:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.0.3590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd94922c819 code=0x0 [ 724.650815][T20396] macsec1: entered promiscuous mode [ 724.665191][T20396] bond0: entered promiscuous mode [ 724.670532][T20396] bond_slave_0: entered promiscuous mode [ 724.677110][T20396] bond_slave_1: entered promiscuous mode [ 724.690741][T20396] bond0: left promiscuous mode [ 724.695647][T20396] bond_slave_0: left promiscuous mode [ 724.701248][T20396] bond_slave_1: left promiscuous mode [ 724.764969][T20376] lo speed is unknown, defaulting to 1000 [ 724.796435][T20402] netlink: 'syz.0.3611': attribute type 1 has an invalid length. [ 724.840570][T20376] chnl_net:caif_netlink_parms(): no params data found [ 725.401273][T20376] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.409727][T20376] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.419783][T20376] bridge_slave_0: entered allmulticast mode [ 725.438949][T20376] bridge_slave_0: entered promiscuous mode [ 725.458184][T20376] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.466347][T20376] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.477398][T20376] bridge_slave_1: entered allmulticast mode [ 725.492021][T20376] bridge_slave_1: entered promiscuous mode [ 725.540997][T20376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.555843][T20376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.568731][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 725.568804][ T28] audit: type=1400 audit(1775958311.005:4999): avc: denied { unmount } for pid=15590 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 725.615058][T20376] team0: Port device team_slave_0 added [ 725.625225][T20376] team0: Port device team_slave_1 added [ 725.666098][T20428] netlink: 'syz.7.3617': attribute type 3 has an invalid length. [ 725.671039][T20376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.682091][T20376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.709835][T20376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.723965][T20376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.735593][T20428] netlink: 'syz.7.3617': attribute type 3 has an invalid length. [ 725.744636][T20428] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3617'. [ 725.754808][T20376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.808118][T20376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.855124][T20376] hsr_slave_0: entered promiscuous mode [ 725.861988][T20376] hsr_slave_1: entered promiscuous mode [ 725.870048][T20376] debugfs: 'hsr0' already exists in 'hsr' [ 725.876014][T20376] Cannot create hsr debugfs directory [ 725.899420][T20436] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20436 comm=syz.8.3620 [ 726.355731][T20376] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 726.374528][T20376] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 726.398180][T20376] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 726.418310][T20504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.427008][T20376] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 726.435721][T20504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.497358][T20376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.519265][T20376] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.532041][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.539190][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.556484][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.563613][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.670011][ T28] audit: type=1400 audit(1775958312.105:5000): avc: denied { map } for pid=20538 comm="syz.7.3640" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 726.719462][T20376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.741433][ T28] audit: type=1400 audit(1775958312.105:5001): avc: denied { execute } for pid=20538 comm="syz.7.3640" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 726.830506][T20560] Invalid ELF header magic: != ELF [ 727.109354][ T28] audit: type=1400 audit(1775958312.545:5002): avc: denied { read write } for pid=20584 comm="syz.7.3651" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 727.128448][T20586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.142021][T20586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.152057][ T28] audit: type=1400 audit(1775958312.575:5003): avc: denied { open } for pid=20584 comm="syz.7.3651" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 727.207281][ T28] audit: type=1400 audit(1775958312.585:5004): avc: denied { ioctl } for pid=20584 comm="syz.7.3651" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 727.281640][T20376] veth0_vlan: entered promiscuous mode [ 727.301283][T20376] veth1_vlan: entered promiscuous mode [ 727.328860][T20376] veth0_macvtap: entered promiscuous mode [ 727.354453][T20376] veth1_macvtap: entered promiscuous mode [ 727.382587][T20376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.407876][T20376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.422980][ T8550] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.439107][ T8550] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.459038][ T8550] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.476133][ T8550] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.922199][T20664] netlink: 'syz.0.3672': attribute type 39 has an invalid length. [ 728.145015][T20696] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 728.159209][T20690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3679'. [ 728.226711][ T28] audit: type=1326 audit(1775958313.555:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20693 comm="syz.7.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fc8ec819 code=0x7ffc0000 [ 728.336028][ T28] audit: type=1326 audit(1775958313.555:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20693 comm="syz.7.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fc8ec819 code=0x7ffc0000 [ 728.360175][ T28] audit: type=1326 audit(1775958313.555:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20693 comm="syz.7.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fc8ec819 code=0x7ffc0000 [ 728.416721][ T28] audit: type=1326 audit(1775958313.555:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20693 comm="syz.7.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f95fc8ec819 code=0x7ffc0000 [ 728.955144][T20730] netlink: 'syz.5.3691': attribute type 39 has an invalid length. [ 729.427075][T20774] netlink: 'syz.7.3703': attribute type 39 has an invalid length. [ 729.558931][T20789] netlink: 'syz.4.3707': attribute type 29 has an invalid length. [ 729.576862][T20789] netlink: 'syz.4.3707': attribute type 29 has an invalid length. [ 729.676868][T20805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.686925][T20805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.260406][T20892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.308824][T20892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.796059][T20941] netlink: 'syz.4.3756': attribute type 10 has an invalid length. [ 731.102080][T20968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.111455][T20968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.186702][T20969] bridge2: entered promiscuous mode [ 731.192043][T20969] bridge2: entered allmulticast mode [ 731.771738][T20989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3774'. [ 731.823785][T20991] netlink: 'syz.7.3775': attribute type 39 has an invalid length. [ 731.895583][T20998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.918216][T21001] netlink: 'syz.7.3780': attribute type 39 has an invalid length. [ 731.934150][T20998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.038732][T21004] tmpfs: Unknown parameter 'usrquota' [ 732.257819][ T8255] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.336318][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 732.336337][ T28] audit: type=1400 audit(1775958317.775:5015): avc: denied { bind } for pid=21022 comm="syz.0.3781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 732.582120][T21027] lo speed is unknown, defaulting to 1000 [ 732.720005][T21066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.729628][T21066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.756904][T21069] syzkaller0: entered promiscuous mode [ 732.762421][T21069] syzkaller0: entered allmulticast mode [ 732.784264][T21027] chnl_net:caif_netlink_parms(): no params data found [ 732.796598][T21074] netlink: 'syz.0.3812': attribute type 39 has an invalid length. [ 732.847662][T21027] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.854789][T21027] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.862531][T21027] bridge_slave_0: entered allmulticast mode [ 732.870231][T21027] bridge_slave_0: entered promiscuous mode [ 732.879083][T21027] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.886478][T21027] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.893726][T21027] bridge_slave_1: entered allmulticast mode [ 732.901284][T21027] bridge_slave_1: entered promiscuous mode [ 732.920405][T21027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.931681][T21027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.957337][T21027] team0: Port device team_slave_0 added [ 732.964152][T21027] team0: Port device team_slave_1 added [ 732.987724][T21027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.994826][T21027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.023037][T21027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.031880][ T28] audit: type=1400 audit(1775958318.455:5016): avc: denied { ioctl } for pid=21086 comm="syz.8.3816" path="socket:[52569]" dev="sockfs" ino=52569 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 733.045129][T21027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.066832][T21027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.095961][T21027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.191708][T21027] hsr_slave_0: entered promiscuous mode [ 733.200076][T21027] hsr_slave_1: entered promiscuous mode [ 733.208952][T21027] debugfs: 'hsr0' already exists in 'hsr' [ 733.214836][T21027] Cannot create hsr debugfs directory [ 733.932198][T21110] bridge_slave_0: left allmulticast mode [ 733.942062][T21110] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.055593][T21110] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 734.081362][ T28] audit: type=1400 audit(1775958319.515:5017): avc: denied { setopt } for pid=21108 comm="syz.0.3826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 734.106373][T21117] netlink: 'syz.0.3826': attribute type 10 has an invalid length. [ 734.224561][T21115] syz_tun: entered allmulticast mode [ 734.311651][T21108] syz_tun: left allmulticast mode [ 734.372964][ T8550] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.461829][ T8550] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.829869][ T8550] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.951961][ T8550] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.002969][T21123] lo speed is unknown, defaulting to 1000 [ 735.421018][T21123] chnl_net:caif_netlink_parms(): no params data found [ 735.599205][T21123] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.610385][T21123] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.619887][T21123] bridge_slave_0: entered allmulticast mode [ 735.628554][T21123] bridge_slave_0: entered promiscuous mode [ 735.642431][T21123] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.654811][T21123] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.662457][T21123] bridge_slave_1: entered allmulticast mode [ 735.670003][T21123] bridge_slave_1: entered promiscuous mode [ 735.693783][T21190] team0: Device ipvlan2 failed to register rx_handler [ 735.707769][T21123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.726843][T21123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.750024][T21123] team0: Port device team_slave_0 added [ 735.756646][ T8550] bridge_slave_1: left allmulticast mode [ 735.763360][ T8550] bridge_slave_1: left promiscuous mode [ 735.769799][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.792952][ T8550] bridge_slave_0: left allmulticast mode [ 735.800163][ T8550] bridge_slave_0: left promiscuous mode [ 735.806382][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.902592][ T8550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.918831][ T8550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.933168][ T8550] bond0 (unregistering): Released all slaves [ 736.949762][T21123] team0: Port device team_slave_1 added [ 737.113283][ T28] audit: type=1400 audit(1775958322.545:5018): avc: denied { name_bind } for pid=21265 comm="syz.8.3861" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 737.147025][T21266] netlink: 'syz.8.3861': attribute type 64 has an invalid length. [ 737.215573][ T28] audit: type=1400 audit(1775958322.575:5019): avc: denied { name_connect } for pid=21265 comm="syz.8.3861" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 737.239151][ T28] audit: type=1400 audit(1775958322.615:5020): avc: denied { block_suspend } for pid=21261 comm="syz.0.3860" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 737.262480][ T8550] hsr_slave_0: left promiscuous mode [ 737.269355][ T8550] hsr_slave_1: left promiscuous mode [ 737.275295][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.286980][ T8550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.306939][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.317289][ T8550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.347693][ T8550] veth1_macvtap: left promiscuous mode [ 737.355460][ T8550] veth0_macvtap: left promiscuous mode [ 737.361328][ T8550] veth1_vlan: left promiscuous mode [ 737.366848][ T8550] veth0_vlan: left promiscuous mode [ 737.559505][T21291] netlink: 'syz.0.3865': attribute type 39 has an invalid length. [ 737.574925][ T8550] team0 (unregistering): Port device team_slave_1 removed [ 737.599525][ T8550] team0 (unregistering): Port device team_slave_0 removed [ 737.660049][T21123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.670463][T21123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.696818][T21123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.710138][T21272] bridge_slave_0: left allmulticast mode [ 737.720056][T21272] bridge_slave_0: left promiscuous mode [ 737.726091][T21272] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.734254][T21272] veth1_to_bridge: left allmulticast mode [ 737.741270][T21272] veth1_to_bridge: left promiscuous mode [ 737.751456][T21272] bridge0: port 3(veth1_to_bridge) entered disabled state [ 737.771815][T21272] bridge_slave_1: left allmulticast mode [ 737.785316][T21272] bridge_slave_1: left promiscuous mode [ 737.797574][T21272] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.806775][T21272] bond0: (slave bond_slave_0): Releasing backup interface [ 737.816966][T21272] bond0: (slave bond_slave_1): Releasing backup interface [ 737.828455][T21272] team0: Port device team_slave_0 removed [ 737.841029][T21272] team0: Port device team_slave_1 removed [ 737.852878][T21272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.872440][T21272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.887684][T21272] bond1: (slave bridge1): Releasing backup interface [ 737.895117][T21272] bridge1: left promiscuous mode [ 737.903860][T21123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.910914][T21123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.954746][T21123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.968312][T21315] netlink: 'syz.0.3867': attribute type 39 has an invalid length. [ 738.016367][T21027] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 738.042671][T21027] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 738.060148][T21123] hsr_slave_0: entered promiscuous mode [ 738.084105][T21123] hsr_slave_1: entered promiscuous mode [ 738.099942][T21123] debugfs: 'hsr0' already exists in 'hsr' [ 738.105791][T21123] Cannot create hsr debugfs directory [ 738.118742][T21027] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 738.148988][T21027] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 739.067061][T21348] tipc: Started in network mode [ 739.083249][T21348] tipc: Node identity aa9b78f4c6c7, cluster identity 4711 [ 739.110534][T21348] tipc: Enabled bearer , priority 0 [ 739.168536][T21347] tipc: Disabling bearer [ 739.264492][T21027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.310640][T21027] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.348115][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.355325][ T5354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.410141][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.417269][ T5354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.561637][T21027] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 739.572589][T21027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 739.869076][T21399] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3889'. [ 740.266649][T21123] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 740.310756][T21123] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 740.339630][T21027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.358546][T21123] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 740.378664][T21442] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3899'. [ 740.392858][T21123] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 740.546013][T21123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.566884][T21027] veth0_vlan: entered promiscuous mode [ 740.582707][T21123] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.593373][T21027] veth1_vlan: entered promiscuous mode [ 740.621602][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.628774][ T5339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.742934][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.750104][ T5339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.795213][T21027] veth0_macvtap: entered promiscuous mode [ 740.831592][T21027] veth1_macvtap: entered promiscuous mode [ 741.006634][T21027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.039844][T21510] tipc: Enabled bearer , priority 0 [ 741.064509][T21506] syzkaller0: entered promiscuous mode [ 741.075076][T21506] syzkaller0: entered allmulticast mode [ 741.087097][T21027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.104616][T21123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 741.116844][T21123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 741.132914][T21502] tipc: Disabling bearer [ 741.181155][ T9817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.207817][ T9817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.303548][ T9817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.363023][ T9817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.514560][T21123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.596328][T21543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.604910][T21543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.652339][T21551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3923'. [ 741.712497][T21556] syzkaller0: entered promiscuous mode [ 741.721536][T21556] syzkaller0: entered allmulticast mode [ 741.769822][T21123] veth0_vlan: entered promiscuous mode [ 741.788242][T21123] veth1_vlan: entered promiscuous mode [ 741.821332][T21123] veth0_macvtap: entered promiscuous mode [ 741.853577][T21123] veth1_macvtap: entered promiscuous mode [ 741.875585][T21579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.885647][T21123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.899267][T21123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.907387][T21579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.968848][ T9817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.981537][ T9817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.007664][ T9817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.016761][ T9817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.030128][T21590] netlink: 'syz.1.3934': attribute type 64 has an invalid length. [ 742.169351][T21613] syzkaller0: entered promiscuous mode [ 742.184297][T21613] syzkaller0: entered allmulticast mode [ 742.540951][T21681] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3958'. [ 743.558893][T21763] syzkaller0: entered promiscuous mode [ 743.571764][T21763] syzkaller0: entered allmulticast mode [ 743.954319][T21800] netlink: 'syz.0.3990': attribute type 39 has an invalid length. [ 744.034448][T21812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3995'. [ 744.158079][T21829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.168187][T21829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.244576][T21839] netlink: 'syz.4.4005': attribute type 39 has an invalid length. [ 744.399172][T21866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4011'. [ 744.441986][T21871] syzkaller0: entered promiscuous mode [ 744.455140][T21871] syzkaller0: entered allmulticast mode [ 744.466927][ T28] audit: type=1400 audit(1775958329.895:5021): avc: denied { write } for pid=21874 comm="syz.8.4015" lport=42038 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 744.875089][T21929] syzkaller0: entered promiscuous mode [ 744.880867][T21929] syzkaller0: entered allmulticast mode [ 745.034799][T21937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 745.316511][ T308] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.395814][T21954] netlink: 'syz.1.4042': attribute type 39 has an invalid length. [ 745.417272][ T308] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.489265][ T308] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.507002][T21969] netlink: 'syz.4.4048': attribute type 1 has an invalid length. [ 745.527390][T21969] bond1: entered promiscuous mode [ 745.532716][T21969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 745.550610][T21969] bond1: (slave bridge1): making interface the new active one [ 745.558842][T21969] bridge1: entered promiscuous mode [ 745.568344][T21969] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 745.600400][ T308] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.792265][ T308] bridge_slave_1: left allmulticast mode [ 745.808443][ T308] bridge_slave_1: left promiscuous mode [ 745.814305][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.829143][ T308] bridge_slave_0: left allmulticast mode [ 745.834911][ T308] bridge_slave_0: left promiscuous mode [ 745.840920][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.960531][ T308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.970932][ T308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.991164][ T308] bond0 (unregistering): Released all slaves [ 746.038786][T22031] syzkaller0: entered promiscuous mode [ 746.044450][T22031] syzkaller0: entered allmulticast mode [ 746.058101][ T308] hsr_slave_0: left promiscuous mode [ 746.066032][ T308] hsr_slave_1: left promiscuous mode [ 746.073378][ T308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.089239][ T308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.108055][ T308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.123211][ T308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.154810][ T308] veth1_macvtap: left promiscuous mode [ 746.165865][ T308] veth0_macvtap: left promiscuous mode [ 746.171533][ T308] veth1_vlan: left promiscuous mode [ 746.178668][ T308] veth0_vlan: left promiscuous mode [ 746.250844][ T308] team0 (unregistering): Port device team_slave_1 removed [ 746.263710][ T308] team0 (unregistering): Port device team_slave_0 removed [ 746.323706][T21966] lo speed is unknown, defaulting to 1000 [ 746.392210][T21966] chnl_net:caif_netlink_parms(): no params data found [ 746.486896][T21966] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.494086][T21966] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.504330][T21966] bridge_slave_0: entered allmulticast mode [ 746.511352][T21966] bridge_slave_0: entered promiscuous mode [ 746.526180][T21966] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.541579][T21966] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.552610][T21966] bridge_slave_1: entered allmulticast mode [ 746.559898][T21966] bridge_slave_1: entered promiscuous mode [ 746.583569][T22072] syzkaller0: entered promiscuous mode [ 746.589772][T22072] syzkaller0: entered allmulticast mode [ 746.600203][T21966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.629253][T22082] netlink: 'syz.8.4070': attribute type 39 has an invalid length. [ 746.642172][T21966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.715181][T21966] team0: Port device team_slave_0 added [ 746.725941][T21966] team0: Port device team_slave_1 added [ 746.743498][T21966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.750560][T21966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.798014][T22103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.815534][T21966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.829020][T22103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.848146][T21966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.855152][T21966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.883582][T21966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.934152][T21966] hsr_slave_0: entered promiscuous mode [ 746.946899][T21966] hsr_slave_1: entered promiscuous mode [ 746.953363][T21966] debugfs: 'hsr0' already exists in 'hsr' [ 746.959449][T21966] Cannot create hsr debugfs directory [ 747.432626][T21966] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 747.452693][T22176] netlink: 'syz.1.4095': attribute type 39 has an invalid length. [ 747.459535][T21966] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 747.480293][T21966] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 747.489463][T21966] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 747.539368][T22181] loop1: detected capacity change from 0 to 256 [ 747.573254][T22181] FAT-fs (loop1): codepage cp936 not found [ 747.723796][T21966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.752766][T21966] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.778594][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.785823][ T5339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.835492][ T9817] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.842603][ T9817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.899140][T22216] netlink: 'syz.8.4104': attribute type 39 has an invalid length. [ 747.958396][T22224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4106'. [ 748.053419][T21966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.123094][T22253] netlink: 'syz.8.4114': attribute type 39 has an invalid length. [ 748.332626][T22288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.363218][T22288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.400403][T22300] netlink: 'syz.8.4127': attribute type 39 has an invalid length. [ 748.412072][T21966] veth0_vlan: entered promiscuous mode [ 748.420685][T21966] veth1_vlan: entered promiscuous mode [ 748.464631][T21966] veth0_macvtap: entered promiscuous mode [ 748.472492][T22307] netlink: 'syz.0.4129': attribute type 1 has an invalid length. [ 748.482848][T21966] veth1_macvtap: entered promiscuous mode [ 748.503450][T22307] bond1: entered promiscuous mode [ 748.515333][T22307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 748.531485][T22307] bond1: (slave bridge2): making interface the new active one [ 748.539904][T22307] bridge2: entered promiscuous mode [ 748.546717][T22307] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 748.576433][T21966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.590574][T21966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.610393][ T408] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.630791][ T408] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.643153][ T408] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.646107][T22320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4133'. [ 748.674101][T22323] loop1: detected capacity change from 0 to 256 [ 748.675264][ T408] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.721595][T22323] FAT-fs (loop1): codepage cp936 not found [ 748.852389][T22347] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4140'. [ 748.986584][T22364] tipc: Enabled bearer , priority 0 [ 749.051989][T22360] tipc: Disabling bearer [ 749.112985][T22387] syzkaller0: entered promiscuous mode [ 749.140803][T22387] syzkaller0: entered allmulticast mode [ 749.259689][T22417] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4163'. [ 749.767645][T22498] netlink: 492 bytes leftover after parsing attributes in process `syz.4.4190'. [ 749.861497][T22507] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 750.653935][ T28] audit: type=1400 audit(1775958335.985:5022): avc: denied { accept } for pid=22520 comm="syz.4.4198" lport=54335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 751.085007][T22556] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.565912][T22607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.574427][T22607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.134431][T22634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.143147][T22634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.543711][T22665] 9p: Bad value for 'rfdno' [ 753.287275][T22676] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4234'. [ 753.362488][T22682] tipc: Enabling of bearer rejected, failed to enable media [ 753.450949][T22692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.486116][T22692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.102441][T22794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.133835][T22794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.318157][ T28] audit: type=1400 audit(1775958340.755:5023): avc: denied { listen } for pid=22819 comm="syz.1.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 755.358307][ T28] audit: type=1400 audit(1775958340.755:5024): avc: denied { read } for pid=22819 comm="syz.1.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 755.500008][T22840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.519173][T22840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.743887][ T28] audit: type=1400 audit(1775958341.175:5025): avc: denied { append } for pid=22855 comm="syz.4.4290" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 756.703147][T22917] netlink: 'syz.1.4314': attribute type 39 has an invalid length. [ 756.853661][ T28] audit: type=1400 audit(1775958342.285:5026): avc: denied { connect } for pid=22931 comm="syz.9.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 757.052154][ T28] audit: type=1400 audit(1775958342.485:5027): avc: denied { setopt } for pid=22950 comm="syz.0.4330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 757.119122][ T28] audit: type=1400 audit(1775958342.555:5028): avc: denied { map } for pid=22957 comm="syz.0.4333" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 757.153400][T22959] bridge2: entered promiscuous mode [ 757.158800][T22959] bridge2: entered allmulticast mode [ 757.769737][T22977] netlink: 492 bytes leftover after parsing attributes in process `syz.9.4340'. [ 757.884544][T22993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.894802][T22993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.956991][T23003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4353'. [ 757.986181][T23005] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4354'. [ 758.023012][T23013] netlink: 'syz.8.4358': attribute type 1 has an invalid length. [ 758.037993][T23013] bond3: entered promiscuous mode [ 758.043717][T23013] 8021q: adding VLAN 0 to HW filter on device bond3 [ 758.060097][T23013] bond3: (slave bridge3): making interface the new active one [ 758.067886][T23013] bridge3: entered promiscuous mode [ 758.075120][T23013] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 758.803765][ T28] audit: type=1400 audit(1775958344.235:5029): avc: denied { remount } for pid=23055 comm="syz.1.4377" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 759.476294][T10061] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.752809][ T28] audit: type=1326 audit(1775958345.185:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23096 comm="syz.9.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59393c819 code=0x7ffc0000 [ 759.785715][ T28] audit: type=1326 audit(1775958345.185:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23096 comm="syz.9.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59393c819 code=0x7ffc0000 [ 759.863014][T23081] lo speed is unknown, defaulting to 1000 [ 759.872626][ T28] audit: type=1326 audit(1775958345.185:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23096 comm="syz.9.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59393c819 code=0x7ffc0000 [ 759.945195][ T28] audit: type=1326 audit(1775958345.195:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23096 comm="syz.9.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fc59393c819 code=0x7ffc0000 [ 760.025294][T23114] ieee802154 phy0 wpan0: encryption failed: -22 [ 760.054172][ T28] audit: type=1326 audit(1775958345.195:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23096 comm="syz.9.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59393c819 code=0x7ffc0000 [ 760.100742][ T308] bridge_slave_1: left allmulticast mode [ 760.106728][ T308] bridge_slave_1: left promiscuous mode [ 760.112610][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.120888][ T308] bridge_slave_0: left allmulticast mode [ 760.129324][ T308] bridge_slave_0: left promiscuous mode [ 760.147936][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.186271][ T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (106) [ 760.195162][ T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 760.293008][ T308] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 760.307568][ T308] bridge1 (unregistering): left promiscuous mode [ 760.451035][ T308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.461616][ T308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.494239][ T308] bond0 (unregistering): Released all slaves [ 760.523422][ T308] bond1 (unregistering): Released all slaves [ 760.647417][ T308] hsr_slave_0: left promiscuous mode [ 760.668302][ T308] hsr_slave_1: left promiscuous mode [ 760.690577][ T308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.721226][ T308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.925584][ T308] team0 (unregistering): Port device team_slave_1 removed [ 760.938772][ T308] team0 (unregistering): Port device team_slave_0 removed [ 760.969182][T23151] program syz.8.4405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 761.021349][T23081] chnl_net:caif_netlink_parms(): no params data found [ 761.093823][T23081] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.099294][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 761.099339][ T28] audit: type=1400 audit(1775958346.535:5040): avc: denied { mount } for pid=23166 comm="syz.9.4408" name="/" dev="ramfs" ino=59644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 761.123186][T23081] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.152902][T23081] bridge_slave_0: entered allmulticast mode [ 761.159967][T23081] bridge_slave_0: entered promiscuous mode [ 761.167044][T23081] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.174180][T23081] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.181832][T23081] bridge_slave_1: entered allmulticast mode [ 761.188848][T23081] bridge_slave_1: entered promiscuous mode [ 761.207356][T23081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.334939][T23081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.357037][T23081] team0: Port device team_slave_0 added [ 761.363882][T23081] team0: Port device team_slave_1 added [ 761.429385][T23081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.491788][T23081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.658129][T23081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.783581][T23081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.832034][T23081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.967446][T23081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.997204][T23081] hsr_slave_0: entered promiscuous mode [ 762.003316][T23081] hsr_slave_1: entered promiscuous mode [ 762.009410][T23081] debugfs: 'hsr0' already exists in 'hsr' [ 762.015250][T23081] Cannot create hsr debugfs directory [ 762.146298][T23210] syzkaller1: entered promiscuous mode [ 762.151824][T23210] syzkaller1: entered allmulticast mode [ 762.381827][T23242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.403186][T23242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.457263][T23251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4431'. [ 762.527807][T23260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4434'. [ 762.635909][ T28] audit: type=1400 audit(1775958348.075:5041): avc: denied { write } for pid=23276 comm="syz.1.4439" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 762.643523][T23081] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 762.698096][T23081] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 762.708463][T23081] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 762.730305][T23081] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 762.828007][T23081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.958859][T23081] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.975025][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.982157][ T5354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.929359][ T8550] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.936489][ T8550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.946661][T23332] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4451'. [ 764.073477][ T28] audit: type=1400 audit(1775958349.495:5042): avc: denied { accept } for pid=23346 comm="syz.9.4456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 764.116104][T23081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.168072][ T28] audit: type=1400 audit(1775958349.595:5043): avc: denied { getopt } for pid=23356 comm="syz.1.4460" lport=38743 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 764.205757][T23364] netlink: 'syz.0.4461': attribute type 39 has an invalid length. [ 764.541647][T23081] veth0_vlan: entered promiscuous mode [ 764.560539][T23081] veth1_vlan: entered promiscuous mode [ 764.618202][T23081] veth0_macvtap: entered promiscuous mode [ 764.646888][T23081] veth1_macvtap: entered promiscuous mode [ 764.696616][T23081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.720635][T23081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.747223][ T5354] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.761047][ T5354] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.774653][T23415] syzkaller0: entered promiscuous mode [ 764.780848][T23415] syzkaller0: entered allmulticast mode [ 764.790860][ T5354] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.810402][ T5354] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.847293][T23425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4476'. [ 764.980476][ T8751] IPVS: starting estimator thread 0... [ 764.991702][T23434] tipc: Started in network mode [ 765.017734][T23434] tipc: Node identity a2a296659fa8, cluster identity 4711 [ 765.041845][T23434] tipc: Enabled bearer , priority 0 [ 765.075575][T23437] IPVS: using max 2256 ests per chain, 112800 per kthread [ 765.085771][T23433] tipc: Disabling bearer [ 765.117631][T23452] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4487'. [ 765.163294][T23456] syzkaller0: entered promiscuous mode [ 765.194057][T23456] syzkaller0: entered allmulticast mode [ 765.208116][T23460] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4490'. [ 765.239046][T23462] netlink: 'syz.1.4492': attribute type 39 has an invalid length. [ 765.302743][T23469] netlink: 'syz.8.4495': attribute type 17 has an invalid length. [ 765.357238][T23478] netlink: 480 bytes leftover after parsing attributes in process `syz.4.4500'. [ 765.474369][ T8751] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 765.493002][ T8751] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 765.512523][T22823] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.558350][ T8751] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 765.576956][ T8751] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 765.589192][T23490] netlink: 4516 bytes leftover after parsing attributes in process `syz.1.4506'. [ 765.606977][ T8751] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 765.629864][ T8751] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 765.684971][ T8751] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 765.849257][ T408] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.873889][ T8751] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 765.927431][ T8751] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 765.949902][ T408] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.978422][ T8751] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 766.029487][ T408] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.059248][ T8751] hid-generic 00A0:0006:0003.0009: hidraw0: HID v0.05 Device [syz0] on syz0 [ 766.185230][ T408] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.213328][T23487] lo speed is unknown, defaulting to 1000 [ 766.535552][ T1036] SELinux: failure in sel_netif_sid_slow(), invalid network interface (121) [ 766.697141][ T408] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 766.714666][ T408] bridge3 (unregistering): left promiscuous mode [ 766.757007][ T408] bond0 (unregistering): Released all slaves [ 766.768165][ T408] bond1 (unregistering): Released all slaves [ 766.777049][ T408] bond2 (unregistering): Released all slaves [ 766.786011][ T408] bond3 (unregistering): Released all slaves [ 766.797404][T23487] chnl_net:caif_netlink_parms(): no params data found [ 766.853297][ T408] tipc: Left network mode [ 766.914972][T23610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.933122][T23610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.044791][T23487] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.056144][T23487] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.063741][T23487] bridge_slave_0: entered allmulticast mode [ 767.074129][T23487] bridge_slave_0: entered promiscuous mode [ 767.081658][T23487] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.088976][T23487] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.097055][T23487] bridge_slave_1: entered allmulticast mode [ 767.103777][T23487] bridge_slave_1: entered promiscuous mode [ 767.129459][T23487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.149768][T23487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.176667][T23487] team0: Port device team_slave_0 added [ 767.191747][T23487] team0: Port device team_slave_1 added [ 767.230043][T23487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.246169][T23487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.295536][T23487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.317847][T23487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.324852][T23487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.356774][T23487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.377871][ T408] IPVS: stop unused estimator thread 0... [ 767.432150][T23487] hsr_slave_0: entered promiscuous mode [ 767.442014][T23487] hsr_slave_1: entered promiscuous mode [ 767.458797][T23487] debugfs: 'hsr0' already exists in 'hsr' [ 767.464584][T23487] Cannot create hsr debugfs directory [ 767.770708][T23689] 9p: Bad value for 'wfdno' [ 768.138623][ T28] audit: type=1400 audit(1775958353.575:5044): avc: denied { ioctl } for pid=23705 comm="syz.1.4562" path="socket:[61436]" dev="sockfs" ino=61436 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 768.375641][T23723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.384122][T23723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.411303][T23487] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 768.453553][T23487] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 768.474124][T23733] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4567'. [ 768.514068][T23733] netlink: 1 bytes leftover after parsing attributes in process `syz.9.4567'. [ 768.553265][T23487] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 768.584607][T23487] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 768.702844][T23487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.733500][T23762] ieee802154 phy0 wpan0: encryption failed: -22 [ 768.744160][T23487] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.777192][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.784356][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.818002][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.825163][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.896606][T23780] 9p: Bad value for 'wfdno' [ 768.983915][T23487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.029862][ T28] audit: type=1400 audit(1775958354.435:5045): avc: denied { getopt } for pid=23795 comm="syz.1.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 769.120542][T23812] ieee802154 phy0 wpan0: encryption failed: -22 [ 769.193682][T23819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.266154][T23819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.803364][T23487] veth0_vlan: entered promiscuous mode [ 769.843015][T23487] veth1_vlan: entered promiscuous mode [ 769.886802][T23487] veth0_macvtap: entered promiscuous mode [ 769.897654][T23487] veth1_macvtap: entered promiscuous mode [ 769.939953][T23487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.951331][T23487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.963768][ T408] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.980715][ T408] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.990971][ T408] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.012127][ T408] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.096751][ T8550] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.364851][ T28] audit: type=1400 audit(1775958355.795:5046): avc: denied { write } for pid=23881 comm="syz.8.4600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 770.682859][ T8550] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.754742][T23910] ieee802154 phy0 wpan0: encryption failed: -22 [ 770.823566][ T8550] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.903691][ T8550] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.062361][T23936] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.074841][T23936] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.340829][ T8550] bridge_slave_1: left allmulticast mode [ 771.367483][ T8550] bridge_slave_1: left promiscuous mode [ 771.391492][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.423211][ T8550] bridge_slave_0: left allmulticast mode [ 771.442599][ T8550] bridge_slave_0: left promiscuous mode [ 771.464930][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.664661][ T8550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.683290][ T9] kernel read not supported for file /48/net/snmp (pid: 9 comm: kworker/0:0) [ 771.743883][ T8550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.815299][ T8550] bond0 (unregistering): Released all slaves [ 771.951078][ T8550] hsr_slave_0: left promiscuous mode [ 771.960249][ T8550] hsr_slave_1: left promiscuous mode [ 772.449330][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.457058][ T8550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.607795][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.636354][ T8550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.704954][ T8550] veth1_macvtap: left promiscuous mode [ 772.712772][ T8550] veth0_macvtap: left promiscuous mode [ 772.719128][ T8550] veth1_vlan: left promiscuous mode [ 772.725238][ T8550] veth0_vlan: left promiscuous mode [ 772.867946][ T8550] team0 (unregistering): Port device team_slave_1 removed [ 772.883056][ T8550] team0 (unregistering): Port device team_slave_0 removed [ 772.960961][T23883] chnl_net:caif_netlink_parms(): no params data found [ 773.141858][T23883] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.149611][T23883] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.156905][T23883] bridge_slave_0: entered allmulticast mode [ 773.163803][T23883] bridge_slave_0: entered promiscuous mode [ 773.173571][T23883] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.181023][T23883] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.191199][T23883] bridge_slave_1: entered allmulticast mode [ 773.198635][T23883] bridge_slave_1: entered promiscuous mode [ 773.229297][T23883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.240526][T23883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.274386][T23883] team0: Port device team_slave_0 added [ 773.281358][T23883] team0: Port device team_slave_1 added [ 773.311099][T23883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.329322][T23883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.378313][T23883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.420899][T23883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.428088][T23883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.527201][T23883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.619794][T23883] hsr_slave_0: entered promiscuous mode [ 773.641247][T23883] hsr_slave_1: entered promiscuous mode [ 773.665272][T23883] debugfs: 'hsr0' already exists in 'hsr' [ 773.676552][T23883] Cannot create hsr debugfs directory [ 773.848382][T24070] tmpfs: Bad value for 'mpol' [ 773.959397][ T28] audit: type=1326 audit(1775958359.355:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 774.253249][T24080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.294506][ T28] audit: type=1326 audit(1775958359.355:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 774.359938][T24080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.401244][ T28] audit: type=1326 audit(1775958359.355:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 774.425261][ T28] audit: type=1326 audit(1775958359.355:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 774.450120][ T28] audit: type=1326 audit(1775958359.355:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 774.474139][ T28] audit: type=1326 audit(1775958359.355:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 774.502225][ T28] audit: type=1326 audit(1775958359.355:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 774.562730][ T28] audit: type=1326 audit(1775958359.355:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 774.640294][T24098] netlink: 'syz.8.4651': attribute type 39 has an invalid length. [ 774.693051][ T28] audit: type=1326 audit(1775958359.355:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 774.725412][ T28] audit: type=1326 audit(1775958359.355:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24055 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 775.093602][T23883] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 775.127831][T23883] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 775.144490][T23883] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 775.155275][T23883] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 775.728455][T24127] bridge1: entered promiscuous mode [ 775.883894][T23883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.923600][T23883] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.956675][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.963941][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.471723][T24160] tipc: Enabling of bearer rejected, failed to enable media [ 776.491127][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.498280][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.590218][T23883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.694199][T24176] netlink: 'syz.0.4663': attribute type 1 has an invalid length. [ 777.156800][T24206] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.4667'. [ 777.213361][T24206] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.4667'. [ 777.271415][T24206] netlink: 640 bytes leftover after parsing attributes in process `syz.0.4667'. [ 777.414922][T23883] veth0_vlan: entered promiscuous mode [ 777.437098][T23883] veth1_vlan: entered promiscuous mode [ 777.471279][T24221] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4672'. [ 777.488624][T24221] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4672'. [ 777.506262][T23883] veth0_macvtap: entered promiscuous mode [ 777.512174][T24229] netlink: 'syz.0.4675': attribute type 39 has an invalid length. [ 777.532473][T23883] veth1_macvtap: entered promiscuous mode [ 777.567197][T23883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.591706][T23883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.615224][ T58] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.638509][ T58] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.668807][ T58] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.692294][ T58] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.706331][ T9] hid_parser_main: 5 callbacks suppressed [ 777.706363][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 777.759523][ T9] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 777.782907][T24247] syzkaller0: entered promiscuous mode [ 777.788953][T24247] syzkaller0: entered allmulticast mode [ 777.820413][T24259] fido_id[24259]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 777.907106][T24273] 9p: Bad value for 'rfdno' [ 777.933194][T24275] netlink: 'syz.9.4687': attribute type 39 has an invalid length. [ 779.146013][T24305] 9p: Bad value for 'rfdno' [ 779.184285][T24302] syzkaller0: entered promiscuous mode [ 779.225042][T24302] syzkaller0: entered allmulticast mode [ 779.497665][T24332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.507102][T24332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.516523][T24332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.530689][T24332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.276665][T24361] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4723'. [ 780.836369][T24389] netlink: 'syz.4.4736': attribute type 39 has an invalid length. [ 780.883076][T24393] syzkaller0: entered promiscuous mode [ 780.888787][T24393] syzkaller0: entered allmulticast mode [ 781.021700][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 781.021717][ T28] audit: type=1326 audit(1775958366.425:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24396 comm="syz.8.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 781.052908][ T28] audit: type=1326 audit(1775958366.425:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24396 comm="syz.8.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 781.077614][ T28] audit: type=1326 audit(1775958366.425:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24396 comm="syz.8.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 781.148568][ T28] audit: type=1326 audit(1775958366.425:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24396 comm="syz.8.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 781.173053][ T28] audit: type=1326 audit(1775958366.425:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24396 comm="syz.8.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 781.215545][ T28] audit: type=1326 audit(1775958366.425:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24396 comm="syz.8.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 781.247607][ T28] audit: type=1326 audit(1775958366.425:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24396 comm="syz.8.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 781.310722][ T28] audit: type=1326 audit(1775958366.425:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24396 comm="syz.8.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd0be2ac819 code=0x7ffc0000 [ 781.764025][T24436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.773248][T24436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.822658][ T28] audit: type=1400 audit(1775958367.195:5081): avc: denied { setopt } for pid=24419 comm="syz.0.4752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 782.530749][T24456] netlink: 'syz.9.4767': attribute type 39 has an invalid length. [ 782.664016][T24473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.704524][T24473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.809773][ T3002] ================================================================== [ 782.817959][ T3002] BUG: KCSAN: data-race in d_delete / path_lookupat [ 782.824568][T24485] syzkaller0: entered promiscuous mode [ 782.824624][ T3002] [ 782.824634][ T3002] read-write to 0xffff888107ecc240 of 4 bytes by task 20456 on cpu 0: [ 782.824654][ T3002] d_delete+0xbe/0xe0 [ 782.824687][ T3002] d_delete_notify+0x32/0x100 [ 782.830593][T24485] syzkaller0: entered allmulticast mode [ 782.832507][ T3002] vfs_unlink+0x289/0x490 [ 782.859405][ T3002] filename_unlinkat+0x1e2/0x410 [ 782.864387][ T3002] __se_sys_unlink+0x2b/0xe0 [ 782.869108][ T3002] __x64_sys_unlink+0x1f/0x30 [ 782.873823][ T3002] x64_sys_call+0x2eb6/0x3020 [ 782.878443][T24488] netlink: 'syz.8.4781': attribute type 39 has an invalid length. [ 782.878592][ T3002] do_syscall_64+0x12c/0x370 [ 782.891032][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.897056][ T3002] [ 782.899407][ T3002] read to 0xffff888107ecc240 of 4 bytes by task 3002 on cpu 1: [ 782.906974][ T3002] path_lookupat+0x1d8/0x500 [ 782.911620][ T3002] filename_lookup+0x190/0x390 [ 782.916421][ T3002] do_readlinkat+0x74/0x2f0 [ 782.920965][ T3002] __x64_sys_readlink+0x47/0x60 [ 782.925862][ T3002] x64_sys_call+0x2b51/0x3020 [ 782.930598][ T3002] do_syscall_64+0x12c/0x370 [ 782.935241][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.941185][ T3002] [ 782.943535][ T3002] value changed: 0x00300180 -> 0x00004080 [ 782.949275][ T3002] [ 782.951630][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 782.957815][ T3002] CPU: 1 UID: 0 PID: 3002 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 782.966788][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 782.976879][ T3002] ==================================================================