last executing test programs: 4m57.957873838s ago: executing program 4 (id=5): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xefffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x40, 0x0, &(0x7f0000000140)) r0 = syz_open_procfs(0x0, 0x0) read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200004, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000001540)=ANY=[@ANYBLOB="020000000100000000000000040004000000000010000700000000002000000000000000077b0e9ff365c084304c70222b6a3b334af9b87256be8b59d025b5a7fd1916e2ca5c9159734ea00bd71fdd3c112a37a12366caea96d7eccd3276d866fd20b2ad22465591769b579ff1"], 0x24, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x1a30c1, 0x9c37611dc13d0dab) fchown(r4, 0x0, 0xee01) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) writev(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001140), 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9f0300000000000002000000140000001400000003000000000000000100000d000000000f00000002000000005f00"], &(0x7f0000001300)=""/204, 0x2f, 0xcc, 0x1, 0x5}, 0x28) unlinkat(0xffffffffffffff9c, &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) setxattr$security_capability(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0), &(0x7f0000001100)=@v2={0x2000000, [{0x9, 0x6}, {0x7fffffff, 0xec3}]}, 0x14, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3f86dd6100272400323afffc020000000000000000000000000001ff0200000000000000000000000000010200907800000500663a794500023a00fc020000000001fe8000000000000000000000004000bb8029"], 0x0) 4m56.626316111s ago: executing program 4 (id=13): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000100)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4m54.472359635s ago: executing program 4 (id=29): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xc8a60842a9fe8455, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) sendto$inet6(r1, 0x0, 0x0, 0x24000010, &(0x7f00000001c0)={0xa, 0x2, 0x10000, @loopback, 0x9}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/16, 0x6e}], 0x1, 0xe, 0x10040006) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r5 = socket(0x1, 0x803, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000d00)=0xefc5, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_ringparam={0x16, 0xfffffff7, 0xa, 0x101, 0x8, 0x10007, 0x5, 0x5, 0x65}}) pread64(r9, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 4m54.449822615s ago: executing program 32 (id=29): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xc8a60842a9fe8455, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) sendto$inet6(r1, 0x0, 0x0, 0x24000010, &(0x7f00000001c0)={0xa, 0x2, 0x10000, @loopback, 0x9}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/16, 0x6e}], 0x1, 0xe, 0x10040006) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r5 = socket(0x1, 0x803, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000d00)=0xefc5, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_ringparam={0x16, 0xfffffff7, 0xa, 0x101, 0x8, 0x10007, 0x5, 0x5, 0x65}}) pread64(r9, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 19.160684599s ago: executing program 1 (id=2727): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) creat(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0xc, 0x0, 0x0, 0x0, 0x7, 0x84510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xc, 0x2b23}, 0x11ecca, 0x4001224, 0xfffffffb, 0x8, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ffs.usb0\x00') r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r2, 0x89f3, 0x20001116) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100230100003402000003000000400001800d00"], 0x54}}, 0x0) r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r5, 0x409, 0xe) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xfe4) r6 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0xffffffffffffffab, 0x1}}, 0x1) 16.601219433s ago: executing program 1 (id=2736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0xf, 0x4) sendto$inet(r0, &(0x7f0000000100)="ab", 0xfffd, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000008d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x800) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) unshare(0x22020400) writev(r6, &(0x7f0000000480)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 15.859316202s ago: executing program 1 (id=2739): socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) r1 = open(&(0x7f0000000140)='./bus\x00', 0x149cc2, 0x1c0) fsetxattr(r1, &(0x7f0000001040)=@known='security.selinux\x00', &(0x7f00000001c0)='\xbc\x1aO\x06Pc\xd5\xc7\x99\xbb\x9e\xc5\xe8?\x89s\x81\xde\fU\xe2\xb2\xc9\b\xec^t\xfa\x16\x94\x14Q`w\xea\x18\x9d\x15&\f\xf2\x98m\n\xa4\xf9\xa1\f\xd7%\xd3Z\xca\xf3\xae\xc7@L\x14\x1a0\xf5N\xef\xb5r\x91\rL\xb21X\x8b\x0f)\xd9\x92i\x01\x86\x15j\xcf\x02\xc9\x92\x01%\xd8\x91\x10\xd9f\xcb\xed\xee\x7fYjw\xf5\xd4L\xdd\x8d\x98\xbb\xe38\xf4\xc7\xdd\x1b\xb1\xe1\vb\x16V:\xb1v\xd3i\x0f\xfd\t\x00\xd4K\x15J\x97GD)\xadF.\xb9\xfa\x84\xa2DI(\xcd\x8d\x12\xbe\\\xee\xdc\x96\x9c\x17\xd9\x10\x9f\xc4\x9aX\xcb\x00\x00', 0xa5, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000100)={0x5, 0x1fffffffc00, 0x0, 0x6e}) socket$inet(0x2, 0x80001, 0x84) syz_emit_ethernet(0x66, 0x0, 0x0) (async) syz_emit_ethernet(0x66, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000180)='./bus\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x5, 0xe, 0x0, &(0x7f0000000140)="bd573f3771a76d1708ff014588a8", 0x0, 0x1, 0x2a0, 0xffffffffffffff7b, 0x0, 0x0, 0x0, 0x2}, 0x50) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000200)=0xffffffffffffffff, 0x400, 0x7) (async) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000200)=0xffffffffffffffff, 0x400, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[], 0x7c}}, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005"], 0x60}}, 0x0) 15.691031847s ago: executing program 1 (id=2740): socket$inet6(0x10, 0x3, 0x4) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x80000000, 0x101000) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000005c0)={0x2, &(0x7f0000000500)="e6209376283833f3866f897a24e4aa1caa94c64760435bd10116f9b2b2f554b004112ec30562ac9b72592263562e936d88807b3512f7c6f146c0ef63f342e685e7172286c8afc4c10128dcaf9787c66ef5551031d41f8c7f5023df89cf938105636fa7a548ffad5e24dc3eafa549a12f8e41730d5964d13228d71b2bb616bda86c6032060e328662b3b477f6bdcee8ad5daeb027d58d70a3ac8025d34bbe39"}) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x1000001, 0x401d031, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x3f, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0xa76, 0x2, &(0x7f0000000200)={&(0x7f0000001000)}, &(0x7f0000000300)={&(0x7f0000000640)="31247bc8431f8b777d510c9d2c547ba85f2487a41bd3feeaf4fb0a40e979724b4c9ff3e06ac9e30b1398434cb30af1630115461be08289cd3e5543fab051574c8e239e9f2b1f97c57e2a8cdc8124b7d9588d6fec04090b7defb39dd7bb9cbc711e0a792637ff40e23d5c7506a8df793bb2868b5263991b6dfd8ce4459640cf5c0dd7d5850c41aa36214413a0fc10035aed22c3aa14ef3420f318a428d146d9764ab1ebde336991829932ee0454feeae123cbcb823588d7dffebbcead939459755d6b6dfab2030aa22fc9d6c145147a23ec04986c5e000000000000", 0xdb, 0x1, 0x0, 0x4}, {0x0, 0x9}}, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x7fffffff, 0x40400) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) listns(&(0x7f0000000140)={0x20, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080)=[0x4, 0x1], 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0x0, 0x80000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x5, 0x7, 0x0, 'queue0\x00', 0x240001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x0, 0x1}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1a72a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x209, 0x6, 0x0, 0x5, 0x87c, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x2711, @hyper}, 0x10) close(0x4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) 15.485165941s ago: executing program 1 (id=2741): r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000380)) fcntl$getownex(r0, 0x10, &(0x7f00000014c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000002a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002900)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0xa608dc269756ab2f}, 0x40000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000002680)={0x200, &(0x7f0000001500), &(0x7f0000001540), &(0x7f0000001580), {0x37}, &(0x7f00000015c0)=""/4096, 0x1000, &(0x7f00000025c0)=""/123, &(0x7f0000002640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 15.329589025s ago: executing program 1 (id=2742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)='\b', 0x1}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) unshare(0x22020600) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x34, r5, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}}, 0x34}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a000000"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f40003820000000000000000100100200001267000000000100100201001001017705dc0000000073797a5f74756e000000000000000000"], 0x0) r6 = open(0x0, 0x108843, 0x55) fcntl$setlease(r6, 0x400, 0x1) syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000100)={0x0, 0x34bb, 0x800, 0x2, 0x2e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r8 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x604, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r8, 0x9) syz_io_uring_complete(r7, r8) write(0xffffffffffffffff, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1", 0xf) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) 13.713772696s ago: executing program 5 (id=2748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000007"], 0x18}, 0x8050) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) 10.949885935s ago: executing program 2 (id=2758): listns(&(0x7f00000000c0)={0x20, 0x0, 0x5c, 0x4000000, 0x0, 0x3}, 0x0, 0x41, 0x0) 10.321104851s ago: executing program 2 (id=2759): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) creat(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0xc, 0x0, 0x0, 0x0, 0x7, 0x84510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xc, 0x2b23}, 0x11ecca, 0x4001224, 0xfffffffb, 0x8, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ffs.usb0\x00') r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r2, 0x89f3, 0x20001116) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100230100003402000003000000400001800d0001007564703a73797a30"], 0x54}}, 0x0) r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r5, 0x409, 0xe) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xfe4) r6 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0xffffffffffffffab, 0x1}}, 0x1) 10.318677901s ago: executing program 0 (id=2760): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/74, 0x4a}], 0x1, 0x200005, 0x92874fa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x58080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newaddr={0x5c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x28, 0x2, @remote}, @IFA_CACHEINFO={0x14}]}, 0x5c}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, 0x0, 0x37) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000400)='overlay\x00', 0x2800000, 0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="07000000000000000000050000002c0003801c0003801800018008000200292459fea0e10492c9f7020000000000080002000900000004000100180001801400020073797a5f74756e00000000000000"], 0x60}}, 0x0) ioprio_get$pid(0x1, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89fb, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) mmap(&(0x7f00001dc000/0x3000)=nil, 0x3000, 0x3000001, 0x4000010, r8, 0x8a10c000) sync() 10.262034492s ago: executing program 5 (id=2762): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [0x0, 0xffffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1000, 0x0) fcntl$getflags(r2, 0x401) socket(0x11, 0x5, 0x300) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="3400000011000500004a0a000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030062617461647630000000000000"], 0x34}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x3) mkdir(&(0x7f0000000000)='dir0\x00', 0x2ba) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='0', 0x1) pwritev(r6, &(0x7f00000005c0)=[{&(0x7f0000000040)="00213ae50deba8cd1caf190e1ae69f52cf98f3a1309b", 0x16}], 0x1, 0x807, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401000000000000000000080003000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x10) 9.595877389s ago: executing program 0 (id=2763): socket$inet6(0x10, 0x3, 0x4) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x80000000, 0x101000) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000005c0)={0x2, &(0x7f0000000500)="e6209376283833f3866f897a24e4aa1caa94c64760435bd10116f9b2b2f554b004112ec30562ac9b72592263562e936d88807b3512f7c6f146c0ef63f342e685e7172286c8afc4c10128dcaf9787c66ef5551031d41f8c7f5023df89cf938105636fa7a548ffad5e24dc3eafa549a12f8e41730d5964d13228d71b2bb616bda86c6032060e328662b3b477f6bdcee8ad5daeb027d58d70a3ac8025d34bbe39"}) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x1000001, 0x401d031, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x3f, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0xa76, 0x2, &(0x7f0000000200)={&(0x7f0000001000)}, &(0x7f0000000300)={&(0x7f0000000640)="31247bc8431f8b777d510c9d2c547ba85f2487a41bd3feeaf4fb0a40e979724b4c9ff3e06ac9e30b1398434cb30af1630115461be08289cd3e5543fab051574c8e239e9f2b1f97c57e2a8cdc8124b7d9588d6fec04090b7defb39dd7bb9cbc711e0a792637ff40e23d5c7506a8df793bb2868b5263991b6dfd8ce4459640cf5c0dd7d5850c41aa36214413a0fc10035aed22c3aa14ef3420f318a428d146d9764ab1ebde336991829932ee0454feeae123cbcb823588d7dffebbcead939459755d6b6dfab2030aa22fc9d6c145147a23ec04986c5e000000000000", 0xdb, 0x1, 0x0, 0x4}, {0x0, 0x9}}, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xa, 0x0, &(0x7f0000000380)="f6e4e9a1d78ad62ceef1", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x7fffffff, 0x40400) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) listns(&(0x7f0000000140)={0x20, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080)=[0x4, 0x1], 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0x0, 0x80000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x5, 0x7, 0x0, 'queue0\x00', 0x240001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x0, 0x1}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1a72a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x209, 0x6, 0x0, 0x5, 0x87c, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x2711, @hyper}, 0x10) close(0x4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) 9.521744211s ago: executing program 5 (id=2765): syncfs(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x7ccc5aff403c30f3, 0x0, 0x6, 0x1, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000840)={{{@in=@broadcast, @in=@remote, 0x4e20, 0x7f, 0x4e24, 0x1, 0xa, 0x30, 0x20, 0x16}, {0x5fff, 0x8, 0x4, 0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x7}, {0x9, 0x3, 0x10000, 0x7ff}, 0x6, 0x0, 0x0, 0x0, 0x2, 0x3}, {{@in=@remote, 0x4d3, 0x32}, 0xa, @in6=@mcast2, 0x3505, 0x2, 0x3, 0x0, 0x6, 0x10000, 0x4}}, 0xe8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x20040001) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0xe4}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {0x0, 0x0, 0x0, 0x2000}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {0x400}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x18}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) r7 = socket(0x9, 0x3, 0x1) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r8) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000010427bd700000000000000000", @ANYRES32=0x0, @ANYBLOB="914003000000000020001280080001007369740014000280"], 0x54}, 0x1, 0x0, 0x0, 0x24048c00}, 0x8010) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r9, 0xa, 0x21) fcntl$setlease(r9, 0x400, 0x0) 8.785371159s ago: executing program 0 (id=2766): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x10000, 0x80000000, {{0x1f, 0x4, 0x1, 0x9, 0x7c, 0x65, 0x0, 0x9, 0x4d18499141889838, 0x0, @remote, @rand_addr=0x64010100, {[@timestamp={0x44, 0x18, 0x59, 0x0, 0x6, [0x1, 0xe19c, 0x5, 0x30000, 0x7f]}, @lsrr={0x83, 0x2b, 0x45, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010100, @multicast2, @broadcast, @multicast1, @rand_addr=0x64010101, @local, @local, @loopback]}, @end, @timestamp={0x44, 0x1c, 0x23, 0x0, 0x1, [0x8, 0x2, 0x0, 0x80000000, 0x2, 0x80]}, @rr={0x7, 0x7, 0x57, [@private=0xa010102]}]}}}}}) statx(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x6000, 0x2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)=@acquire={0x2cc, 0x17, 0x2, 0x70bd2c, 0x25dfdbff, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x3c}, @in6=@empty, {@in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0xd, 0x4e23, 0x2, 0xa, 0x100, 0xa0, 0x32, 0x0, r1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast1, 0x4e24, 0xda2, 0x4e24, 0x3, 0x2, 0x80, 0xa0, 0x3a, r2, r3}, {0x6, 0x1, 0x8000000000000001, 0x2, 0x9, 0xc71, 0x1ff, 0x8001}, {0x2, 0xce, 0xbd50, 0x1}, 0x200, 0x6e6bb4, 0x1, 0x1, 0x1}, 0x5, 0x8, 0x5, 0x70bd2d}, [@srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x34}}, @coaddr={0x14, 0xe, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @algo_auth={0x95, 0x1, {{'ghash\x00'}, 0x268, "5fbbb9b3d81d5989325ecb1eb274ee9a22535a70b047b3dee3f6dd14adeb1955bac2b1acd1a843d95290ad31f76b3ee4b96556f2c33830c1007b02803362a8d8e4fc000c6cf06d82ac5f21191d"}}, @iptfs_max_qsize={0x8, 0x28, 0x101}, @coaddr={0x14, 0xe, @in=@local}, @encap={0x1c, 0x4, {0x1, 0x4e23, 0x4e23, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, @iptfs_drop_time={0x8, 0x24, 0x5}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd25, 0x70bd2b, 0x70bd27, 0x70bd2c, 0x5, [0x9, 0x9, 0x1, 0x8, 0x3, 0x9, 0x3, 0x2, 0xb55b]}}, @sec_ctx={0x61, 0x8, {0x5d, 0x8, 0x1, 0x5, 0x55, "1347aaaaae0931be73c47032c1dcd5f3d798af599f8b31cd564ae97897866729c84b19ca81dcdc9475acc65fb62365087018a4862e046b204b85ff8a913122652d824ad9dae4afab00379db2e3cb89b2212c2bd364"}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x890}, 0x24000081) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x717, 0x4e23, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2, {0x7, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x52}, {0x1, 0x3fc}, 0x7e, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x22, 0x2}]}, 0x140}}, 0x844) 8.783430289s ago: executing program 2 (id=2767): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg(r1, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[{0x10, 0x104, 0x5}, {0x10, 0x84, 0x5}], 0x20}, 0x4) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0xfffffc}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) syz_clone3(&(0x7f0000000640)={0x29c0080, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000100), {0x1d}, &(0x7f0000000500)=""/144, 0x90, &(0x7f0000000280)=""/60, &(0x7f00000000c0)=[r6, r6], 0x2, {r5}}, 0x58) unshare(0x70300) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x21c, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r9) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/136, 0x88}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) 8.780383109s ago: executing program 3 (id=2768): listns(0x0, 0x0, 0x0, 0x0) 8.735883571s ago: executing program 5 (id=2769): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x13, 0x9c58d, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0xa}, 0x1410d, 0x6, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r0, 0xffffffffffffffff, 0x3, 0x1}, 0x20) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x98}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006feffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r4 = socket(0x10, 0x80002, 0x0) recvmmsg$unix(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x300, 0x1000000}}], 0x14, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x20) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 7.885276652s ago: executing program 0 (id=2770): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10}]}]}, 0x3c}}, 0x40) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1, 0x9}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}]}, 0xa0}}, 0x0) 7.883488272s ago: executing program 3 (id=2771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000007"], 0x18}, 0x8050) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) 6.803851199s ago: executing program 0 (id=2772): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/74, 0x4a}], 0x1, 0x200005, 0x92874fa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x58080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newaddr={0x5c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x28, 0x2, @remote}, @IFA_CACHEINFO={0x14}]}, 0x5c}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, 0x0, 0x37) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000400)='overlay\x00', 0x2800000, 0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="07000000000000000000050000002c0003801c0003801800018008000200292459fea0e10492c9f7020000000000080002000900000004000100180001801400020073797a5f74756e00000000000000"], 0x60}}, 0x0) ioprio_get$pid(0x1, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89fb, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) mmap(&(0x7f00001dc000/0x3000)=nil, 0x3000, 0x3000001, 0x4000010, r8, 0x8a10c000) sync() 4.466483607s ago: executing program 3 (id=2773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000002060108000000af3ef4d300020000000500010007000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e65742c6f77260c81fb706f72742c6e65740000000ffda77b0371ab37670b94e0fd7a05a9dc875062b8e0657c64cc36709e"], 0x50}}, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000000b0601020000000000000000020000000900020073797a300000000005000100070000002c0007800c00018008000140ffffffff0c00148008000140ffffffff0600044050000d000500070006000000"], 0x54}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r1) sendmsg$NFC_CMD_SE_IO(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r2 = socket(0x1, 0x803, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000b00)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000001}}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000280)='./bus\x00', 0x3d3c9b, 0x0, 0x80, 0x0, &(0x7f0000000600)) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x20050800) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @mcast1, 0x80001}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.114542381s ago: executing program 2 (id=2774): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [0x0, 0xffffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1000, 0x0) fcntl$getflags(r2, 0x401) socket(0x11, 0x5, 0x300) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="3400000011000500004a0a000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030062617461647630000000000000"], 0x34}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x3) mkdir(&(0x7f0000000000)='dir0\x00', 0x2ba) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='0', 0x1) pwritev(r6, &(0x7f00000005c0)=[{&(0x7f0000000040)="00213ae50deba8cd1caf190e1ae69f52cf98f3a1309b", 0x16}], 0x1, 0x807, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401000000000000000000080003000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x10) 3.067871103s ago: executing program 3 (id=2775): socket$inet6(0x10, 0x3, 0x4) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x80000000, 0x101000) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000005c0)={0x2, &(0x7f0000000500)="e6209376283833f3866f897a24e4aa1caa94c64760435bd10116f9b2b2f554b004112ec30562ac9b72592263562e936d88807b3512f7c6f146c0ef63f342e685e7172286c8afc4c10128dcaf9787c66ef5551031d41f8c7f5023df89cf938105636fa7a548ffad5e24dc3eafa549a12f8e41730d5964d13228d71b2bb616bda86c6032060e328662b3b477f6bdcee8ad5daeb027d58d70a3ac8025d34bbe39"}) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x1000001, 0x401d031, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x3f, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0xa76, 0x2, &(0x7f0000000200)={&(0x7f0000001000)}, &(0x7f0000000300)={&(0x7f0000000640)="31247bc8431f8b777d510c9d2c547ba85f2487a41bd3feeaf4fb0a40e979724b4c9ff3e06ac9e30b1398434cb30af1630115461be08289cd3e5543fab051574c8e239e9f2b1f97c57e2a8cdc8124b7d9588d6fec04090b7defb39dd7bb9cbc711e0a792637ff40e23d5c7506a8df793bb2868b5263991b6dfd8ce4459640cf5c0dd7d5850c41aa36214413a0fc10035aed22c3aa14ef3420f318a428d146d9764ab1ebde336991829932ee0454feeae123cbcb823588d7dffebbcead939459755d6b6dfab2030aa22fc9d6c145147a23ec04986c5e000000000000", 0xdb, 0x1, 0x0, 0x4}, {0x0, 0x9}}, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xa, 0x0, &(0x7f0000000380)="f6e4e9a1d78ad62ceef1", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x7fffffff, 0x40400) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) listns(&(0x7f0000000140)={0x20, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080)=[0x4, 0x1], 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x0, 0x0, 0x80000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x5, 0x7, 0x0, 'queue0\x00', 0x240001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x0, 0x1}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1a72a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x209, 0x6, 0x0, 0x5, 0x87c, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x2711, @hyper}, 0x10) close(0x4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) 1.651929358s ago: executing program 0 (id=2776): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) creat(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0xc, 0x0, 0x0, 0x0, 0x7, 0x84510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xc, 0x2b23}, 0x11ecca, 0x4001224, 0xfffffffb, 0x8, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ffs.usb0\x00') r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r2, 0x89f3, 0x20001116) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100230100003402000003000000400001800d0001007564703a73797a30"], 0x54}}, 0x0) r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r5, 0x409, 0xe) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xfe4) r6 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0xffffffffffffffab, 0x1}}, 0x1) 1.640206008s ago: executing program 2 (id=2777): r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000380)) fcntl$getownex(r0, 0x10, &(0x7f00000014c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000002680)={0x200, &(0x7f0000001500), &(0x7f0000001540), &(0x7f0000001580), {0x37}, &(0x7f00000015c0)=""/4096, 0x1000, &(0x7f00000025c0)=""/123, &(0x7f0000002640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) 1.618413819s ago: executing program 3 (id=2778): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000600c000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c72c4f6a2f96506af3af6394ae907da681245ba606ed13d4651f3915a03b86cae7d2893ff479747133b4de3bbb94af"], 0x50) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) (async) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@canfd={{0x2, 0x0, 0x1}, 0x42, 0x2, 0x0, 0x0, "559c4157df5c5fc0a343bdfd992c89ec7c178d3d401a0657e948c1e50e9f29438946924347e8c9a7f1d228cf082056214904d6e39350c2d1bf5443d0ef0296b0"}, 0x48}, 0x1, 0x0, 0x0, 0x4000051}, 0x811) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000880984372efa0939f7de2063200000000000000000096", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000440)=0x2, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000440)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) (async) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) write$tun(r6, &(0x7f0000003b00)=ANY=[], 0x367a) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendfile(r5, r6, &(0x7f00000000c0)=0x1, 0x7ff) (async) sendfile(r5, r6, &(0x7f00000000c0)=0x1, 0x7ff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000263276da0efee9a9b6c4983fa1b2de124f223e81fd2024bb2a27ebec61b1a527f0b2b24b38ca91250f835a06d2ae3a2a9dd06aa46e842f23362cd02ba9f2d5444f75ca4348a5642643b9e01c46971303f3eb3d8d36c13b1a8b81b18224b20fa1d2db14bff525fdba1c941f723f26942bc65c7be5f5070fb71cade0e722c85eaebd3e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000200"/28], 0x50) socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x400, 0x2, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) dup(r7) 1.611097029s ago: executing program 5 (id=2779): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getgroups(0x449a065a, 0xfffffffffffffffe) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in, @in=@initdev}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0) fstat(r3, 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, &(0x7f0000000200)) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x6, 0xef, 0xfffff038}, {0x6, 0x6, 0xfe, 0x1057c}]}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0) 78.027137ms ago: executing program 2 (id=2780): listns(0x0, 0x0, 0x0, 0x0) 47.453258ms ago: executing program 3 (id=2781): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000040)='7', 0x1) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000140)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90424fc600d00030009000300ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000580)={0x26, {{0x2, 0x4e21, @empty=0xe0009eff}}, {{0x2, 0x4e24, @remote}}}, 0x108) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x2) ioctl$PIO_UNIMAP(r3, 0xc0104d03, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x50, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x24006800) 0s ago: executing program 5 (id=2782): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x40086602, &(0x7f00000002c0)) kernel console output (not intermixed with test programs): em_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 221.500880][ T29] audit: type=1400 audit(1791492536.527:320905): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 221.501480][ T29] audit: type=1400 audit(1791492536.527:320906): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 221.505320][ T29] audit: type=1400 audit(1791492536.536:320907): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 221.510254][ T29] audit: type=1400 audit(1791492536.536:320908): avc: denied { read } for pid=3305 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 221.514652][ T29] audit: type=1400 audit(1791492536.536:320909): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 221.516955][ T29] audit: type=1400 audit(1791492536.545:320910): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 221.525816][ T29] audit: type=1400 audit(1791492536.545:320911): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 221.526991][ T29] audit: type=1400 audit(1791492536.545:320912): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 221.574268][ T9804] FAULT_INJECTION: forcing a failure. [ 221.574268][ T9804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.574373][ T9804] CPU: 1 UID: 0 PID: 9804 Comm: syz.3.2260 Not tainted syzkaller #0 PREEMPT(lazy) [ 221.574399][ T9804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.574412][ T9804] Call Trace: [ 221.574420][ T9804] [ 221.574428][ T9804] __dump_stack+0x1d/0x30 [ 221.574480][ T9804] dump_stack_lvl+0x95/0xd0 [ 221.574503][ T9804] dump_stack+0x15/0x1b [ 221.574524][ T9804] should_fail_ex+0x262/0x280 [ 221.574553][ T9804] should_fail+0xb/0x20 [ 221.574577][ T9804] should_fail_usercopy+0x1a/0x20 [ 221.574615][ T9804] _copy_from_user+0x1c/0xb0 [ 221.574646][ T9804] memdup_user_nul+0x5f/0xe0 [ 221.574674][ T9804] sel_write_enforce+0x9c/0x2d0 [ 221.574777][ T9804] vfs_writev+0x420/0x8c0 [ 221.574797][ T9804] ? __pfx_sel_write_enforce+0x10/0x10 [ 221.574868][ T9804] do_writev+0xe9/0x210 [ 221.574892][ T9804] __x64_sys_writev+0x45/0x50 [ 221.574911][ T9804] x64_sys_call+0x23c9/0x2550 [ 221.574951][ T9804] do_syscall_64+0x112/0x360 [ 221.574977][ T9804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.575001][ T9804] RIP: 0033:0x7fc4b1aee1d9 [ 221.575033][ T9804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.575051][ T9804] RSP: 002b:00007fc4b0547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 221.575102][ T9804] RAX: ffffffffffffffda RBX: 00007fc4b1d75fa0 RCX: 00007fc4b1aee1d9 [ 221.575117][ T9804] RDX: 0000000000000002 RSI: 0000200000000640 RDI: 0000000000000003 [ 221.575131][ T9804] RBP: 00007fc4b0547090 R08: 0000000000000000 R09: 0000000000000000 [ 221.575174][ T9804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.575187][ T9804] R13: 00007fc4b1d76038 R14: 00007fc4b1d75fa0 R15: 00007fff2cc3c738 [ 221.575204][ T9804] [ 222.311471][ T9823] netlink: 'syz.1.2268': attribute type 12 has an invalid length. [ 222.311490][ T9823] netlink: 'syz.1.2268': attribute type 29 has an invalid length. [ 222.311503][ T9823] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2268'. [ 223.502903][ T9866] netlink: 1012 bytes leftover after parsing attributes in process `syz.0.2286'. [ 223.503697][ T9866] tunl0: left promiscuous mode [ 224.300462][ T9887] netlink: 'syz.1.2294': attribute type 10 has an invalid length. [ 224.435421][ T9887] syz_tun: entered promiscuous mode [ 224.460737][ T9887] tipc: Resetting bearer [ 224.599402][ T9887] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 225.368127][ T9905] FAULT_INJECTION: forcing a failure. [ 225.368127][ T9905] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 225.368228][ T9905] CPU: 0 UID: 0 PID: 9905 Comm: syz.1.2302 Not tainted syzkaller #0 PREEMPT(lazy) [ 225.368251][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.368262][ T9905] Call Trace: [ 225.368269][ T9905] [ 225.368277][ T9905] __dump_stack+0x1d/0x30 [ 225.368341][ T9905] dump_stack_lvl+0x95/0xd0 [ 225.368428][ T9905] dump_stack+0x15/0x1b [ 225.368446][ T9905] should_fail_ex+0x262/0x280 [ 225.368506][ T9905] should_fail_alloc_page+0xf2/0x100 [ 225.368539][ T9905] __alloc_frozen_pages_noprof+0x157/0x400 [ 225.368567][ T9905] alloc_pages_mpol+0xaf/0x1d0 [ 225.368653][ T9905] alloc_migration_target_by_mpol+0x11b/0x2a0 [ 225.368682][ T9905] migrate_pages_batch+0x371/0x1c20 [ 225.368747][ T9905] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 225.368782][ T9905] ? __walk_page_range+0x323/0x340 [ 225.368871][ T9905] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 225.368971][ T9905] ? find_vma+0x6c/0xa0 [ 225.368993][ T9905] migrate_pages+0x1073/0x1890 [ 225.369016][ T9905] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 225.369046][ T9905] ? mas_next_slot+0x833/0x880 [ 225.369089][ T9905] ? mbind_range+0x169/0x430 [ 225.369115][ T9905] __se_sys_mbind+0xc9c/0xdd0 [ 225.369143][ T9905] __x64_sys_mbind+0x78/0x90 [ 225.369230][ T9905] x64_sys_call+0x1d78/0x2550 [ 225.369255][ T9905] do_syscall_64+0x112/0x360 [ 225.369280][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.369380][ T9905] RIP: 0033:0x7f50877fe1d9 [ 225.369398][ T9905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.369419][ T9905] RSP: 002b:00007f5086257028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 225.369441][ T9905] RAX: ffffffffffffffda RBX: 00007f5087a85fa0 RCX: 00007f50877fe1d9 [ 225.369494][ T9905] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 225.369531][ T9905] RBP: 00007f5086257090 R08: 0000000000000000 R09: 0000000000000002 [ 225.369544][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.369555][ T9905] R13: 00007f5087a86038 R14: 00007f5087a85fa0 R15: 00007ffca9fa60c8 [ 225.369613][ T9905] [ 225.770614][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 226.238156][ T9920] netlink: 'syz.3.2307': attribute type 2 has an invalid length. [ 226.238177][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2307'. [ 226.908862][ T29] kauditd_printk_skb: 2923 callbacks suppressed [ 226.908878][ T29] audit: type=1400 audit(1791492541.533:323836): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 226.909598][ T29] audit: type=1400 audit(1791492541.533:323837): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 226.913387][ T29] audit: type=1400 audit(1791492541.533:323838): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 226.913897][ T29] audit: type=1400 audit(1791492541.533:323839): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 226.915887][ T29] audit: type=1400 audit(1791492541.533:323840): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 226.916398][ T29] audit: type=1400 audit(1791492541.533:323841): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 226.918472][ T29] audit: type=1400 audit(1791492541.542:323842): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 226.918971][ T29] audit: type=1400 audit(1791492541.542:323843): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 226.921094][ T29] audit: type=1400 audit(1791492541.542:323844): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 226.923173][ T29] audit: type=1400 audit(1791492541.542:323845): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 227.327166][ T9941] FAULT_INJECTION: forcing a failure. [ 227.327166][ T9941] name failslab, interval 1, probability 0, space 0, times 0 [ 227.327201][ T9941] CPU: 1 UID: 0 PID: 9941 Comm: syz.1.2315 Not tainted syzkaller #0 PREEMPT(lazy) [ 227.327281][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.327295][ T9941] Call Trace: [ 227.327303][ T9941] [ 227.327312][ T9941] __dump_stack+0x1d/0x30 [ 227.327338][ T9941] dump_stack_lvl+0x95/0xd0 [ 227.327371][ T9941] dump_stack+0x15/0x1b [ 227.327393][ T9941] should_fail_ex+0x262/0x280 [ 227.327472][ T9941] ? __alloc_skb+0x2e0/0x6f0 [ 227.327519][ T9941] should_failslab+0x8c/0xb0 [ 227.327650][ T9941] kmem_cache_alloc_node_noprof+0x82/0x400 [ 227.327686][ T9941] ? should_fail_ex+0xdb/0x280 [ 227.327716][ T9941] ? __alloc_skb+0x2e0/0x6f0 [ 227.327738][ T9941] __alloc_skb+0x2e0/0x6f0 [ 227.327816][ T9941] ? __alloc_skb+0x209/0x6f0 [ 227.327835][ T9941] audit_log_start+0x3aa/0x730 [ 227.327859][ T9941] audit_seccomp+0x49/0x110 [ 227.327888][ T9941] __seccomp_filter+0x909/0x1360 [ 227.327938][ T9941] ? __se_sys_io_uring_enter+0xe2b/0xf90 [ 227.328041][ T9941] ? mutex_lock+0x57/0x90 [ 227.328082][ T9941] ? mutex_unlock+0x4e/0x90 [ 227.328135][ T9941] __seccomp_permit_syscall+0x7d/0x150 [ 227.328168][ T9941] do_syscall_64+0xca/0x360 [ 227.328238][ T9941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.328263][ T9941] RIP: 0033:0x7f50877bea0e [ 227.328281][ T9941] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 227.328311][ T9941] RSP: 002b:00007f5086256fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 227.328330][ T9941] RAX: ffffffffffffffda RBX: 00007f50862576c0 RCX: 00007f50877bea0e [ 227.328346][ T9941] RDX: 000000000000000f RSI: 00007f50862570a0 RDI: 0000000000000006 [ 227.328362][ T9941] RBP: 00007f5086257090 R08: 0000000000000000 R09: 0000000000000000 [ 227.328376][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.328410][ T9941] R13: 00007f5087a86038 R14: 00007f5087a85fa0 R15: 00007ffca9fa60c8 [ 227.328426][ T9941] [ 228.108214][ T9961] netlink: 600 bytes leftover after parsing attributes in process `syz.0.2323'. [ 228.126443][ T9961] bridge_slave_1: left promiscuous mode [ 228.290048][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2324'. [ 228.496066][ T9961] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 229.501469][ T9987] FAULT_INJECTION: forcing a failure. [ 229.501469][ T9987] name failslab, interval 1, probability 0, space 0, times 0 [ 229.501502][ T9987] CPU: 0 UID: 0 PID: 9987 Comm: syz.0.2328 Not tainted syzkaller #0 PREEMPT(lazy) [ 229.501527][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.501571][ T9987] Call Trace: [ 229.501580][ T9987] [ 229.501589][ T9987] __dump_stack+0x1d/0x30 [ 229.501721][ T9987] dump_stack_lvl+0x95/0xd0 [ 229.501746][ T9987] dump_stack+0x15/0x1b [ 229.501880][ T9987] should_fail_ex+0x262/0x280 [ 229.501910][ T9987] ? alloc_empty_file+0x70/0x1e0 [ 229.501999][ T9987] should_failslab+0x8c/0xb0 [ 229.502035][ T9987] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 229.502080][ T9987] ? alloc_empty_file+0x70/0x1e0 [ 229.502180][ T9987] alloc_empty_file+0x70/0x1e0 [ 229.502208][ T9987] alloc_file_pseudo+0x92/0x120 [ 229.502235][ T9987] aio_setup_ring+0x119/0x710 [ 229.502293][ T9987] ? ioctx_alloc+0x273/0x480 [ 229.502385][ T9987] ioctx_alloc+0x296/0x480 [ 229.502421][ T9987] __se_sys_io_setup+0x6b/0x1b0 [ 229.502519][ T9987] __x64_sys_io_setup+0x31/0x40 [ 229.502560][ T9987] x64_sys_call+0x1a9f/0x2550 [ 229.502651][ T9987] do_syscall_64+0x112/0x360 [ 229.502682][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.502705][ T9987] RIP: 0033:0x7fec3aaae1d9 [ 229.502722][ T9987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.502817][ T9987] RSP: 002b:00007fec39507028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 229.502837][ T9987] RAX: ffffffffffffffda RBX: 00007fec3ad35fa0 RCX: 00007fec3aaae1d9 [ 229.502854][ T9987] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000000020fe [ 229.502869][ T9987] RBP: 00007fec39507090 R08: 0000000000000000 R09: 0000000000000000 [ 229.502882][ T9987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.502952][ T9987] R13: 00007fec3ad36038 R14: 00007fec3ad35fa0 R15: 00007ffe1798dce8 [ 229.502970][ T9987] [ 230.838781][ T9996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.878167][ T9996] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.274458][T10011] ip_tables: iptables: counters copy to user failed while replacing table [ 231.736881][T10019] ip_tables: iptables: counters copy to user failed while replacing table [ 232.143517][ T9996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.143581][ T9996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.206125][ T9996] veth1_macvtap: left promiscuous mode [ 232.264042][ T9996] veth0_macvtap: left promiscuous mode [ 232.289052][ T9996] veth0_macvtap: entered promiscuous mode [ 232.332833][ T29] kauditd_printk_skb: 3266 callbacks suppressed [ 232.332850][ T29] audit: type=1400 audit(1791492546.539:327110): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 232.335339][ T29] audit: type=1400 audit(1791492546.539:327111): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 232.335799][ T29] audit: type=1400 audit(1791492546.539:327112): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 232.336295][ T29] audit: type=1400 audit(1791492546.539:327113): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 232.344019][ T29] audit: type=1400 audit(1791492546.548:327114): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 232.344702][ T29] audit: type=1400 audit(1791492546.548:327115): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 232.345164][ T29] audit: type=1400 audit(1791492546.548:327116): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 232.345575][ T29] audit: type=1400 audit(1791492546.548:327117): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 232.347532][ T29] audit: type=1400 audit(1791492546.548:327118): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 232.347921][ T29] audit: type=1400 audit(1791492546.548:327119): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 232.350938][ T9996] veth1_macvtap: entered promiscuous mode [ 232.556683][ T9996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.645900][ T9996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.695638][ T9996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.781487][ T9996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 233.305875][ T9996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.393350][ T364] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.393391][ T364] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.393426][ T364] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.393505][ T364] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.658796][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.658832][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.699688][ T131] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.699726][ T131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.133330][T10039] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2349'. [ 234.190830][T10040] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2349'. [ 234.719925][T10035] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2348'. [ 235.027266][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2353'. [ 235.027286][T10059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2353'. [ 235.254809][ T31] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 235.862542][T10095] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2371'. [ 235.863403][T10095] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2371'. [ 236.371752][T10112] FAULT_INJECTION: forcing a failure. [ 236.371752][T10112] name failslab, interval 1, probability 0, space 0, times 0 [ 236.371784][T10112] CPU: 1 UID: 0 PID: 10112 Comm: syz.3.2379 Not tainted syzkaller #0 PREEMPT(lazy) [ 236.371811][T10112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.371871][T10112] Call Trace: [ 236.371879][T10112] [ 236.371888][T10112] __dump_stack+0x1d/0x30 [ 236.371915][T10112] dump_stack_lvl+0x95/0xd0 [ 236.371951][T10112] dump_stack+0x15/0x1b [ 236.371974][T10112] should_fail_ex+0x262/0x280 [ 236.372001][T10112] ? __inet_diag_dump_start+0x53/0x850 [ 236.372024][T10112] should_failslab+0x8c/0xb0 [ 236.372070][T10112] __kmalloc_cache_noprof+0x7a/0x400 [ 236.372166][T10112] ? xas_load+0x413/0x430 [ 236.372187][T10112] ? __inet_diag_dump_start+0x53/0x850 [ 236.372210][T10112] __inet_diag_dump_start+0x53/0x850 [ 236.372289][T10112] ? __rcu_read_unlock+0x33/0x70 [ 236.372363][T10112] ? __netlink_lookup+0x276/0x2b0 [ 236.372390][T10112] inet_diag_dump_start+0x1a/0x30 [ 236.372431][T10112] __netlink_dump_start+0x322/0x520 [ 236.372457][T10112] inet_diag_handler_cmd+0xf3/0x140 [ 236.372476][T10112] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 236.372547][T10112] ? __pfx_inet_diag_dump+0x10/0x10 [ 236.372569][T10112] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 236.372640][T10112] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 236.372663][T10112] sock_diag_rcv_msg+0x288/0x2c0 [ 236.372697][T10112] netlink_rcv_skb+0x11e/0x220 [ 236.372719][T10112] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 236.372817][T10112] sock_diag_rcv+0x1c/0x30 [ 236.372847][T10112] netlink_unicast+0x5a9/0x680 [ 236.372941][T10112] netlink_sendmsg+0x5be/0x6f0 [ 236.372967][T10112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.373014][T10112] sock_write_iter+0x2c5/0x2f0 [ 236.373047][T10112] do_iter_readv_writev+0x4f6/0x5a0 [ 236.373087][T10112] vfs_writev+0x2d3/0x8c0 [ 236.373134][T10112] ? get_pid_task+0x92/0xc0 [ 236.373163][T10112] do_writev+0xe9/0x210 [ 236.373207][T10112] __x64_sys_writev+0x45/0x50 [ 236.373229][T10112] x64_sys_call+0x23c9/0x2550 [ 236.373321][T10112] do_syscall_64+0x112/0x360 [ 236.373427][T10112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.373452][T10112] RIP: 0033:0x7fc4b1aee1d9 [ 236.373472][T10112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.373493][T10112] RSP: 002b:00007fc4b0547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 236.373575][T10112] RAX: ffffffffffffffda RBX: 00007fc4b1d75fa0 RCX: 00007fc4b1aee1d9 [ 236.373591][T10112] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 236.373669][T10112] RBP: 00007fc4b0547090 R08: 0000000000000000 R09: 0000000000000000 [ 236.373685][T10112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.373700][T10112] R13: 00007fc4b1d76038 R14: 00007fc4b1d75fa0 R15: 00007fff2cc3c738 [ 236.373721][T10112] [ 237.621348][T10153] nr0: port 1(veth1_virt_wifi) entered blocking state [ 237.621837][T10153] nr0: port 1(veth1_virt_wifi) entered disabled state [ 237.622223][T10153] veth1_virt_wifi: entered allmulticast mode [ 237.627558][T10153] veth1_virt_wifi: entered promiscuous mode [ 237.756117][ T29] kauditd_printk_skb: 3596 callbacks suppressed [ 237.756170][ T29] audit: type=1400 audit(1791492551.536:330716): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 237.756281][ T29] audit: type=1400 audit(1791492551.536:330717): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 237.757083][ T29] audit: type=1400 audit(1791492551.545:330718): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 237.758585][ T29] audit: type=1400 audit(1791492551.545:330719): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 237.760282][ T29] audit: type=1400 audit(1791492551.545:330720): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 237.760374][ T29] audit: type=1400 audit(1791492551.545:330721): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 237.760398][ T29] audit: type=1400 audit(1791492551.545:330722): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 237.760424][ T29] audit: type=1400 audit(1791492551.545:330723): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 237.762032][ T29] audit: type=1400 audit(1791492551.545:330724): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 237.762139][ T29] audit: type=1400 audit(1791492551.545:330725): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 239.125347][T10174] syzkaller0: entered promiscuous mode [ 239.125511][T10174] syzkaller0: entered allmulticast mode [ 239.282663][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 240.406356][T10218] netlink: 'syz.2.2420': attribute type 8 has an invalid length. [ 240.406376][T10218] sch_fq: defrate 0 ignored. [ 241.140224][T10238] xt_TCPMSS: Only works on TCP SYN packets [ 243.182339][ T29] kauditd_printk_skb: 2562 callbacks suppressed [ 243.182358][ T29] audit: type=1400 audit(1791492556.560:333288): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.183026][ T29] audit: type=1400 audit(1791492556.560:333289): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.185273][ T29] audit: type=1400 audit(1791492556.560:333290): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.188919][ T29] audit: type=1400 audit(1791492556.560:333291): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.189459][ T29] audit: type=1400 audit(1791492556.560:333292): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.196637][ T29] audit: type=1400 audit(1791492556.569:333293): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.197303][ T29] audit: type=1400 audit(1791492556.569:333294): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.199505][ T29] audit: type=1400 audit(1791492556.569:333295): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.203208][ T29] audit: type=1400 audit(1791492556.569:333296): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.204997][ T29] audit: type=1400 audit(1791492556.569:333297): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.860216][T10271] xt_l2tp: wrong L2TP version: 0 [ 244.541971][T10283] xt_TCPMSS: Only works on TCP SYN packets [ 244.550552][T10281] FAULT_INJECTION: forcing a failure. [ 244.550552][T10281] name failslab, interval 1, probability 0, space 0, times 0 [ 244.550588][T10281] CPU: 0 UID: 0 PID: 10281 Comm: syz.2.2443 Not tainted syzkaller #0 PREEMPT(lazy) [ 244.550610][T10281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.550694][T10281] Call Trace: [ 244.550702][T10281] [ 244.550710][T10281] __dump_stack+0x1d/0x30 [ 244.550735][T10281] dump_stack_lvl+0x95/0xd0 [ 244.550756][T10281] dump_stack+0x15/0x1b [ 244.550791][T10281] should_fail_ex+0x262/0x280 [ 244.550829][T10281] ? audit_log_start+0x34c/0x730 [ 244.550855][T10281] should_failslab+0x8c/0xb0 [ 244.550960][T10281] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 244.551002][T10281] ? fixup_exception+0x742/0xce0 [ 244.551018][T10281] ? audit_log_start+0x34c/0x730 [ 244.551041][T10281] audit_log_start+0x34c/0x730 [ 244.551067][T10281] ? raw_irqentry_exit_cond_resched+0x3b/0x60 [ 244.551158][T10281] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 244.551219][T10281] audit_seccomp+0x49/0x110 [ 244.551242][T10281] __seccomp_filter+0x909/0x1360 [ 244.551273][T10281] ? filename_rmdir+0x98/0x360 [ 244.551292][T10281] ? filename_rmdir+0x321/0x360 [ 244.551393][T10281] ? xfd_validate_state+0x45/0xf0 [ 244.551426][T10281] __seccomp_permit_syscall+0x7d/0x150 [ 244.551456][T10281] do_syscall_64+0xca/0x360 [ 244.551542][T10281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.551567][T10281] RIP: 0033:0x7fef330fea0e [ 244.551582][T10281] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 244.551601][T10281] RSP: 002b:00007fef31b96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.551618][T10281] RAX: ffffffffffffffda RBX: 00007fef31b976c0 RCX: 00007fef330fea0e [ 244.551694][T10281] RDX: 000000000000000f RSI: 00007fef31b970a0 RDI: 0000000000000003 [ 244.551709][T10281] RBP: 00007fef31b97090 R08: 0000000000000000 R09: 0000000000000000 [ 244.551723][T10281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.551735][T10281] R13: 00007fef333c6038 R14: 00007fef333c5fa0 R15: 00007ffc44d65188 [ 244.551781][T10281] [ 244.954054][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2447'. [ 247.012600][T10320] syzkaller0: entered promiscuous mode [ 247.012751][T10320] syzkaller0: entered allmulticast mode [ 247.944375][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 248.606927][ T29] kauditd_printk_skb: 2580 callbacks suppressed [ 248.606944][ T29] audit: type=1400 audit(1791492561.566:335876): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.607650][ T29] audit: type=1400 audit(1791492561.566:335877): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.608253][ T29] audit: type=1400 audit(1791492561.566:335878): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.608899][ T29] audit: type=1400 audit(1791492561.566:335879): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.609435][ T29] audit: type=1400 audit(1791492561.566:335880): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.611430][ T29] audit: type=1400 audit(1791492561.566:335881): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.611970][ T29] audit: type=1400 audit(1791492561.566:335882): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.614077][ T29] audit: type=1400 audit(1791492561.566:335883): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.618341][ T29] audit: type=1400 audit(1791492561.575:335884): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.620981][ T29] audit: type=1400 audit(1791492561.575:335885): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 250.435582][T10371] GUP no longer grows the stack in syz.0.2468 (10371): 200000005000-200000008000 (200000004000) [ 250.435625][T10371] CPU: 0 UID: 0 PID: 10371 Comm: syz.0.2468 Not tainted syzkaller #0 PREEMPT(lazy) [ 250.435654][T10371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.435685][T10371] Call Trace: [ 250.435693][T10371] [ 250.435702][T10371] __dump_stack+0x1d/0x30 [ 250.435728][T10371] dump_stack_lvl+0x95/0xd0 [ 250.435753][T10371] dump_stack+0x15/0x1b [ 250.435814][T10371] fixup_user_fault+0x4fe/0x550 [ 250.435902][T10371] fault_in_user_writeable+0x5c/0xc0 [ 250.435936][T10371] futex_lock_pi+0x5ea/0x7c0 [ 250.436013][T10371] ? __pfx_futex_wake_mark+0x10/0x10 [ 250.436044][T10371] do_futex+0x2ea/0x460 [ 250.436127][T10371] __se_sys_futex+0x2f6/0x370 [ 250.436200][T10371] ? xfd_validate_state+0x45/0xf0 [ 250.436231][T10371] __x64_sys_futex+0x78/0x90 [ 250.436345][T10371] x64_sys_call+0x22e2/0x2550 [ 250.436374][T10371] do_syscall_64+0x112/0x360 [ 250.436413][T10371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.436434][T10371] RIP: 0033:0x7fec3aaae1d9 [ 250.436505][T10371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.436521][T10371] RSP: 002b:00007fec39507028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 250.436541][T10371] RAX: ffffffffffffffda RBX: 00007fec3ad35fa0 RCX: 00007fec3aaae1d9 [ 250.436602][T10371] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 250.436618][T10371] RBP: 00007fec3ab45888 R08: 0000000000000000 R09: 0000000000000001 [ 250.436639][T10371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.436654][T10371] R13: 00007fec3ad36038 R14: 00007fec3ad35fa0 R15: 00007ffe1798dce8 [ 250.436691][T10371] [ 250.442749][T10373] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2469'. [ 250.502559][T10374] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2469'. [ 251.487039][T10360] tipc: Resetting bearer [ 251.734447][T10360] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.734529][T10360] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.029363][ T29] kauditd_printk_skb: 3528 callbacks suppressed [ 254.029381][ T29] audit: type=1400 audit(1791492566.581:339414): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.029775][ T29] audit: type=1400 audit(1791492566.581:339415): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.030447][ T29] audit: type=1400 audit(1791492566.581:339416): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.030953][ T29] audit: type=1400 audit(1791492566.581:339417): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.031496][ T29] audit: type=1400 audit(1791492566.581:339418): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.032097][ T29] audit: type=1400 audit(1791492566.581:339419): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.032977][ T29] audit: type=1400 audit(1791492566.581:339420): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.033361][ T29] audit: type=1400 audit(1791492566.581:339421): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.033979][ T29] audit: type=1400 audit(1791492566.581:339422): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.034727][ T29] audit: type=1400 audit(1791492566.581:339423): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 257.778835][T10393] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2475'. [ 257.841643][T10396] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2475'. [ 258.542846][T10403] xt_TCPMSS: Only works on TCP SYN packets [ 258.967819][ T364] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 258.967864][ T364] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.967893][ T364] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 258.967947][ T364] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.967979][ T364] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 258.968016][ T364] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.968048][ T364] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 258.968116][ T364] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.970367][T10411] xt_TCPMSS: Only works on TCP SYN packets [ 259.455843][ T29] kauditd_printk_skb: 3688 callbacks suppressed [ 259.455861][ T29] audit: type=1400 audit(1791492571.587:343112): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.458003][ T29] audit: type=1400 audit(1791492571.587:343113): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.460410][ T29] audit: type=1400 audit(1791492571.587:343114): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.461098][ T29] audit: type=1400 audit(1791492571.587:343115): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.463291][ T29] audit: type=1400 audit(1791492571.587:343116): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.467871][ T29] audit: type=1400 audit(1791492571.596:343117): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.468753][ T29] audit: type=1400 audit(1791492571.596:343118): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.471699][ T29] audit: type=1400 audit(1791492571.596:343119): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.476668][ T29] audit: type=1400 audit(1791492571.596:343120): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.477460][ T29] audit: type=1400 audit(1791492571.596:343121): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 260.306678][T10436] FAULT_INJECTION: forcing a failure. [ 260.306678][T10436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.306758][T10436] CPU: 0 UID: 0 PID: 10436 Comm: syz.5.2487 Not tainted syzkaller #0 PREEMPT(lazy) [ 260.306865][T10436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.306879][T10436] Call Trace: [ 260.306888][T10436] [ 260.306897][T10436] __dump_stack+0x1d/0x30 [ 260.306993][T10436] dump_stack_lvl+0x95/0xd0 [ 260.307062][T10436] dump_stack+0x15/0x1b [ 260.307085][T10436] should_fail_ex+0x262/0x280 [ 260.307196][T10436] should_fail+0xb/0x20 [ 260.307222][T10436] should_fail_usercopy+0x1a/0x20 [ 260.307308][T10436] _copy_from_user+0x1c/0xb0 [ 260.307384][T10436] kstrtouint_from_user+0x69/0xf0 [ 260.307409][T10436] ? 0xffffffff81000000 [ 260.307422][T10436] ? avc_policy_seqno+0x15/0x30 [ 260.307452][T10436] proc_fail_nth_write+0x50/0x160 [ 260.307479][T10436] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 260.307540][T10436] vfs_write+0x254/0x9a0 [ 260.307570][T10436] ? __fget_files+0x184/0x1c0 [ 260.307619][T10436] ? mutex_lock+0x57/0x90 [ 260.307667][T10436] ksys_write+0xdc/0x1a0 [ 260.307701][T10436] __x64_sys_write+0x40/0x50 [ 260.307733][T10436] x64_sys_call+0x154e/0x2550 [ 260.307756][T10436] do_syscall_64+0x112/0x360 [ 260.307785][T10436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.307810][T10436] RIP: 0033:0x7ffa07e5ea0e [ 260.307833][T10436] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 260.307908][T10436] RSP: 002b:00007ffa068f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.307932][T10436] RAX: ffffffffffffffda RBX: 00007ffa068f76c0 RCX: 00007ffa07e5ea0e [ 260.307946][T10436] RDX: 0000000000000001 RSI: 00007ffa068f70a0 RDI: 0000000000000004 [ 260.307957][T10436] RBP: 00007ffa068f7090 R08: 0000000000000000 R09: 0000000000000000 [ 260.307969][T10436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.307981][T10436] R13: 00007ffa08126038 R14: 00007ffa08125fa0 R15: 00007ffde0dc9218 [ 260.308062][T10436] [ 260.690356][T10443] FAULT_INJECTION: forcing a failure. [ 260.690356][T10443] name failslab, interval 1, probability 0, space 0, times 0 [ 260.690388][T10443] CPU: 0 UID: 0 PID: 10443 Comm: syz.3.2489 Not tainted syzkaller #0 PREEMPT(lazy) [ 260.690448][T10443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.690460][T10443] Call Trace: [ 260.690468][T10443] [ 260.690478][T10443] __dump_stack+0x1d/0x30 [ 260.690569][T10443] dump_stack_lvl+0x95/0xd0 [ 260.690594][T10443] dump_stack+0x15/0x1b [ 260.690614][T10443] should_fail_ex+0x262/0x280 [ 260.690686][T10443] ? vcs_write+0x8f/0xbe0 [ 260.690720][T10443] should_failslab+0x8c/0xb0 [ 260.690779][T10443] __kmalloc_cache_noprof+0x7a/0x400 [ 260.690825][T10443] ? __rcu_read_unlock+0x4e/0x70 [ 260.690901][T10443] ? vcs_write+0x8f/0xbe0 [ 260.691007][T10443] vcs_write+0x8f/0xbe0 [ 260.691040][T10443] ? __import_iovec+0x321/0x530 [ 260.691093][T10443] ? avc_policy_seqno+0x15/0x30 [ 260.691138][T10443] ? selinux_file_permission+0x1dc/0x310 [ 260.691278][T10443] vfs_writev+0x420/0x8c0 [ 260.691329][T10443] ? __pfx_vcs_write+0x10/0x10 [ 260.691369][T10443] do_writev+0xe9/0x210 [ 260.691396][T10443] __x64_sys_writev+0x45/0x50 [ 260.691459][T10443] x64_sys_call+0x23c9/0x2550 [ 260.691483][T10443] do_syscall_64+0x112/0x360 [ 260.691514][T10443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.691676][T10443] RIP: 0033:0x7fc4b1aee1d9 [ 260.691697][T10443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.691715][T10443] RSP: 002b:00007fc4b0547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 260.691737][T10443] RAX: ffffffffffffffda RBX: 00007fc4b1d75fa0 RCX: 00007fc4b1aee1d9 [ 260.691820][T10443] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000003 [ 260.691833][T10443] RBP: 00007fc4b0547090 R08: 0000000000000000 R09: 0000000000000000 [ 260.691849][T10443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.691861][T10443] R13: 00007fc4b1d76038 R14: 00007fc4b1d75fa0 R15: 00007fff2cc3c738 [ 260.691878][T10443] [ 260.937498][T10448] xt_TCPMSS: Only works on TCP SYN packets [ 261.118311][T10450] xt_l2tp: v2 doesn't support IP mode [ 261.324637][T10458] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2495'. [ 261.997729][T10479] lo: Caught tx_queue_len zero misconfig [ 261.997800][T10479] netlink: 'syz.1.2503': attribute type 8 has an invalid length. [ 261.997864][T10479] sch_fq: defrate 0 ignored. [ 262.020547][T10479] FAULT_INJECTION: forcing a failure. [ 262.020547][T10479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.020637][T10479] CPU: 0 UID: 0 PID: 10479 Comm: syz.1.2503 Not tainted syzkaller #0 PREEMPT(lazy) [ 262.020666][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.020679][T10479] Call Trace: [ 262.020688][T10479] [ 262.020696][T10479] __dump_stack+0x1d/0x30 [ 262.020732][T10479] dump_stack_lvl+0x95/0xd0 [ 262.020756][T10479] dump_stack+0x15/0x1b [ 262.020792][T10479] should_fail_ex+0x262/0x280 [ 262.020839][T10479] should_fail+0xb/0x20 [ 262.020866][T10479] should_fail_usercopy+0x1a/0x20 [ 262.020899][T10479] _copy_from_user+0x1c/0xb0 [ 262.020933][T10479] kstrtouint_from_user+0x69/0xf0 [ 262.021032][T10479] ? 0xffffffff81000000 [ 262.021048][T10479] ? avc_policy_seqno+0x15/0x30 [ 262.021133][T10479] proc_fail_nth_write+0x50/0x160 [ 262.021161][T10479] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 262.021186][T10479] vfs_write+0x254/0x9a0 [ 262.021325][T10479] ? __fget_files+0x184/0x1c0 [ 262.021395][T10479] ? mutex_lock+0x57/0x90 [ 262.021432][T10479] ksys_write+0xdc/0x1a0 [ 262.021516][T10479] __x64_sys_write+0x40/0x50 [ 262.021551][T10479] x64_sys_call+0x154e/0x2550 [ 262.021580][T10479] do_syscall_64+0x112/0x360 [ 262.021608][T10479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.021706][T10479] RIP: 0033:0x7f50877bea0e [ 262.021728][T10479] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 262.021763][T10479] RSP: 002b:00007f5086256fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.021785][T10479] RAX: ffffffffffffffda RBX: 00007f50862576c0 RCX: 00007f50877bea0e [ 262.021800][T10479] RDX: 0000000000000001 RSI: 00007f50862570a0 RDI: 0000000000000005 [ 262.021814][T10479] RBP: 00007f5086257090 R08: 0000000000000000 R09: 0000000000000000 [ 262.021828][T10479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.021879][T10479] R13: 00007f5087a86038 R14: 00007f5087a85fa0 R15: 00007ffca9fa60c8 [ 262.021901][T10479] [ 262.308793][T10482] xt_TCPMSS: Only works on TCP SYN packets [ 262.829624][ T1898] IPVS: starting estimator thread 0... [ 262.919321][T10492] IPVS: using max 2688 ests per chain, 134400 per kthread [ 263.348095][T10510] FAULT_INJECTION: forcing a failure. [ 263.348095][T10510] name failslab, interval 1, probability 0, space 0, times 0 [ 263.348128][T10510] CPU: 0 UID: 0 PID: 10510 Comm: syz.1.2514 Not tainted syzkaller #0 PREEMPT(lazy) [ 263.348157][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.348168][T10510] Call Trace: [ 263.348176][T10510] [ 263.348184][T10510] __dump_stack+0x1d/0x30 [ 263.348214][T10510] dump_stack_lvl+0x95/0xd0 [ 263.348239][T10510] dump_stack+0x15/0x1b [ 263.348262][T10510] should_fail_ex+0x262/0x280 [ 263.348293][T10510] ? skb_clone+0x151/0x1f0 [ 263.348321][T10510] should_failslab+0x8c/0xb0 [ 263.348365][T10510] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 263.348402][T10510] ? skb_clone+0x151/0x1f0 [ 263.348443][T10510] skb_clone+0x151/0x1f0 [ 263.348547][T10510] __netlink_deliver_tap+0x2be/0x510 [ 263.348573][T10510] __netlink_sendskb+0xc3/0xd0 [ 263.348650][T10510] netlink_dump+0x6f8/0x870 [ 263.348753][T10510] __netlink_dump_start+0x435/0x520 [ 263.348844][T10510] ? __pfx_ip6addrlbl_dump+0x10/0x10 [ 263.348868][T10510] rtnetlink_rcv_msg+0x59f/0x720 [ 263.348945][T10510] ? __pfx_ip6addrlbl_dump+0x10/0x10 [ 263.348970][T10510] ? skb_clone+0x151/0x1f0 [ 263.349066][T10510] ? __pfx_ip6addrlbl_dump+0x10/0x10 [ 263.349089][T10510] netlink_rcv_skb+0x11e/0x220 [ 263.349110][T10510] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 263.349178][T10510] rtnetlink_rcv+0x1c/0x30 [ 263.349209][T10510] netlink_unicast+0x5a9/0x680 [ 263.349248][T10510] netlink_sendmsg+0x5be/0x6f0 [ 263.349308][T10510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.349329][T10510] ____sys_sendmsg+0x532/0x580 [ 263.349480][T10510] ___sys_sendmsg+0x195/0x1e0 [ 263.349515][T10510] __x64_sys_sendmsg+0xd4/0x160 [ 263.349546][T10510] x64_sys_call+0x22ab/0x2550 [ 263.349629][T10510] do_syscall_64+0x112/0x360 [ 263.349660][T10510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.349684][T10510] RIP: 0033:0x7f50877fe1d9 [ 263.349703][T10510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.349735][T10510] RSP: 002b:00007f5086257028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.349823][T10510] RAX: ffffffffffffffda RBX: 00007f5087a85fa0 RCX: 00007f50877fe1d9 [ 263.349838][T10510] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 263.349909][T10510] RBP: 00007f5086257090 R08: 0000000000000000 R09: 0000000000000000 [ 263.349923][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.349936][T10510] R13: 00007f5087a86038 R14: 00007f5087a85fa0 R15: 00007ffca9fa60c8 [ 263.349956][T10510] [ 263.881902][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 264.574961][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 264.879192][ T29] kauditd_printk_skb: 2481 callbacks suppressed [ 264.879210][ T29] audit: type=1400 audit(1791492576.602:345603): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 264.879261][ T29] audit: type=1400 audit(1791492576.602:345604): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 264.879286][ T29] audit: type=1400 audit(1791492576.602:345605): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 264.882443][ T29] audit: type=1400 audit(1791492576.602:345606): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 264.882477][ T29] audit: type=1400 audit(1791492576.602:345607): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 264.884035][ T29] audit: type=1400 audit(1791492576.602:345608): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 264.885593][ T29] audit: type=1400 audit(1791492576.602:345609): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 264.887394][ T29] audit: type=1400 audit(1791492576.602:345610): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 264.887438][ T29] audit: type=1400 audit(1791492576.602:345611): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 264.916333][ T29] audit: type=1400 audit(1791492576.612:345612): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 265.764440][T10538] netlink: 'syz.2.2523': attribute type 11 has an invalid length. [ 265.764486][T10538] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2523'. [ 266.126613][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2525'. [ 266.471317][T10558] IPv6: sit1: Disabled Multicast RS [ 266.477074][T10558] sit1: entered allmulticast mode [ 266.478744][T10556] FAULT_INJECTION: forcing a failure. [ 266.478744][T10556] name failslab, interval 1, probability 0, space 0, times 0 [ 266.478771][T10556] CPU: 0 UID: 0 PID: 10556 Comm: syz.5.2530 Not tainted syzkaller #0 PREEMPT(lazy) [ 266.478877][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.478891][T10556] Call Trace: [ 266.478898][T10556] [ 266.478905][T10556] __dump_stack+0x1d/0x30 [ 266.478990][T10556] dump_stack_lvl+0x95/0xd0 [ 266.479013][T10556] dump_stack+0x15/0x1b [ 266.479036][T10556] should_fail_ex+0x262/0x280 [ 266.479133][T10556] should_failslab+0x8c/0xb0 [ 266.479169][T10556] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 266.479208][T10556] ? sidtab_sid2str_get+0xa0/0x130 [ 266.479327][T10556] ? sidtab_sid2str_get+0xa0/0x130 [ 266.479355][T10556] kmemdup_noprof+0x2b/0x70 [ 266.479383][T10556] sidtab_sid2str_get+0xa0/0x130 [ 266.479446][T10556] security_sid_to_context_core+0x179/0x2d0 [ 266.479472][T10556] security_sid_to_context+0x27/0x40 [ 266.479564][T10556] selinux_lsmprop_to_secctx+0x67/0xf0 [ 266.479601][T10556] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 266.479715][T10556] audit_log_subj_ctx+0xa4/0x3e0 [ 266.479745][T10556] audit_log_task_context+0x48/0x70 [ 266.479773][T10556] audit_log_task+0xf3/0x240 [ 266.479898][T10556] audit_seccomp+0x6a/0x110 [ 266.480017][T10556] __seccomp_filter+0x909/0x1360 [ 266.480059][T10556] ? __se_sys_io_uring_enter+0xe2b/0xf90 [ 266.480098][T10556] __seccomp_permit_syscall+0x7d/0x150 [ 266.480181][T10556] do_syscall_64+0xca/0x360 [ 266.480210][T10556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.480313][T10556] RIP: 0033:0x7ffa07e5ea0e [ 266.480330][T10556] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 266.480350][T10556] RSP: 002b:00007ffa068f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.480401][T10556] RAX: ffffffffffffffda RBX: 00007ffa068f76c0 RCX: 00007ffa07e5ea0e [ 266.480417][T10556] RDX: 000000000000000f RSI: 00007ffa068f70a0 RDI: 0000000000000006 [ 266.480440][T10556] RBP: 00007ffa068f7090 R08: 0000000000000000 R09: 0000000000000000 [ 266.480455][T10556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.480466][T10556] R13: 00007ffa08126038 R14: 00007ffa08125fa0 R15: 00007ffde0dc9218 [ 266.480482][T10556] [ 268.252583][T10585] netlink: 'syz.3.2540': attribute type 40 has an invalid length. [ 268.684870][T10595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2544'. [ 269.519238][T10619] FAULT_INJECTION: forcing a failure. [ 269.519238][T10619] name failslab, interval 1, probability 0, space 0, times 0 [ 269.519271][T10619] CPU: 1 UID: 0 PID: 10619 Comm: syz.1.2551 Not tainted syzkaller #0 PREEMPT(lazy) [ 269.519378][T10619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.519390][T10619] Call Trace: [ 269.519397][T10619] [ 269.519407][T10619] __dump_stack+0x1d/0x30 [ 269.519432][T10619] dump_stack_lvl+0x95/0xd0 [ 269.519454][T10619] dump_stack+0x15/0x1b [ 269.519532][T10619] should_fail_ex+0x262/0x280 [ 269.519563][T10619] should_failslab+0x8c/0xb0 [ 269.519603][T10619] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 269.519642][T10619] ? sidtab_sid2str_get+0xa0/0x130 [ 269.519669][T10619] ? sidtab_sid2str_get+0xa0/0x130 [ 269.519702][T10619] kmemdup_noprof+0x2b/0x70 [ 269.519760][T10619] sidtab_sid2str_get+0xa0/0x130 [ 269.519786][T10619] security_sid_to_context_core+0x179/0x2d0 [ 269.519895][T10619] security_sid_to_context+0x27/0x40 [ 269.519920][T10619] selinux_lsmprop_to_secctx+0x67/0xf0 [ 269.519943][T10619] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 269.520003][T10619] audit_log_subj_ctx+0xa4/0x3e0 [ 269.520035][T10619] audit_log_task_context+0x48/0x70 [ 269.520076][T10619] audit_log_task+0xf3/0x240 [ 269.520102][T10619] audit_seccomp+0x6a/0x110 [ 269.520126][T10619] __seccomp_filter+0x909/0x1360 [ 269.520219][T10619] ? __fget_files+0x184/0x1c0 [ 269.520246][T10619] ? xfd_validate_state+0x45/0xf0 [ 269.520389][T10619] __seccomp_permit_syscall+0x7d/0x150 [ 269.520423][T10619] do_syscall_64+0xca/0x360 [ 269.520446][T10619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.520467][T10619] RIP: 0033:0x7f50877fe1d9 [ 269.520486][T10619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.520569][T10619] RSP: 002b:00007f5086257028 EFLAGS: 00000246 ORIG_RAX: 000000000000005b [ 269.520622][T10619] RAX: ffffffffffffffda RBX: 00007f5087a85fa0 RCX: 00007f50877fe1d9 [ 269.520638][T10619] RDX: 0000000000000000 RSI: 0000000000000061 RDI: ffffffffffffffff [ 269.520653][T10619] RBP: 00007f5086257090 R08: 0000000000000000 R09: 0000000000000000 [ 269.520668][T10619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.520682][T10619] R13: 00007f5087a86038 R14: 00007f5087a85fa0 R15: 00007ffca9fa60c8 [ 269.520700][T10619] [ 270.306097][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2558'. [ 270.337950][ T29] kauditd_printk_skb: 3022 callbacks suppressed [ 270.337967][ T29] audit: type=1400 audit(1791492581.636:348633): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.337996][ T29] audit: type=1400 audit(1791492581.636:348634): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.338021][ T29] audit: type=1400 audit(1791492581.636:348635): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.345386][ T29] audit: type=1400 audit(1791492581.636:348636): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.345416][ T29] audit: type=1400 audit(1791492581.636:348637): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.345441][ T29] audit: type=1400 audit(1791492581.636:348638): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.345828][ T29] audit: type=1400 audit(1791492581.636:348639): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.354283][ T29] audit: type=1400 audit(1791492581.645:348640): avc: denied { read } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 270.423813][ T29] audit: type=1400 audit(1791492581.719:348641): avc: denied { read } for pid=3305 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 270.427129][ T29] audit: type=1400 audit(1791492581.719:348642): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 270.761027][T10643] ip6t_hbh: Not strict - not implemented [ 270.947031][T10647] FAULT_INJECTION: forcing a failure. [ 270.947031][T10647] name failslab, interval 1, probability 0, space 0, times 0 [ 270.947060][T10647] CPU: 0 UID: 0 PID: 10647 Comm: syz.1.2555 Not tainted syzkaller #0 PREEMPT(lazy) [ 270.947146][T10647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.947160][T10647] Call Trace: [ 270.947169][T10647] [ 270.947178][T10647] __dump_stack+0x1d/0x30 [ 270.947208][T10647] dump_stack_lvl+0x95/0xd0 [ 270.947249][T10647] dump_stack+0x15/0x1b [ 270.947268][T10647] should_fail_ex+0x262/0x280 [ 270.947295][T10647] ? rtnl_newlink+0x5c/0x1510 [ 270.947329][T10647] should_failslab+0x8c/0xb0 [ 270.947436][T10647] __kmalloc_cache_noprof+0x7a/0x400 [ 270.947474][T10647] ? rtnl_newlink+0x5c/0x1510 [ 270.947529][T10647] ? __pfx_rtnl_newlink+0x10/0x10 [ 270.947599][T10647] rtnl_newlink+0x5c/0x1510 [ 270.947639][T10647] ? __memcg_slab_free_hook+0x154/0x340 [ 270.947723][T10647] ? __rcu_read_unlock+0x4e/0x70 [ 270.947791][T10647] ? avc_has_perm_noaudit+0xac/0x160 [ 270.947819][T10647] ? cred_has_capability+0x224/0x2a0 [ 270.947845][T10647] ? selinux_capable+0x31/0x40 [ 270.947945][T10647] ? security_capable+0x7b/0x90 [ 270.947974][T10647] ? ns_capable+0x80/0xb0 [ 270.948011][T10647] ? __pfx_rtnl_newlink+0x10/0x10 [ 270.948045][T10647] rtnetlink_rcv_msg+0x64b/0x720 [ 270.948083][T10647] netlink_rcv_skb+0x11e/0x220 [ 270.948180][T10647] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 270.948223][T10647] rtnetlink_rcv+0x1c/0x30 [ 270.948330][T10647] netlink_unicast+0x5a9/0x680 [ 270.948366][T10647] netlink_sendmsg+0x5be/0x6f0 [ 270.948392][T10647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.948486][T10647] ____sys_sendmsg+0x532/0x580 [ 270.948515][T10647] ___sys_sendmsg+0x195/0x1e0 [ 270.948547][T10647] __x64_sys_sendmsg+0xd4/0x160 [ 270.948629][T10647] x64_sys_call+0x22ab/0x2550 [ 270.948723][T10647] do_syscall_64+0x112/0x360 [ 270.948817][T10647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.948844][T10647] RIP: 0033:0x7f50877fe1d9 [ 270.948861][T10647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.948881][T10647] RSP: 002b:00007f5086215028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.948903][T10647] RAX: ffffffffffffffda RBX: 00007f5087a86180 RCX: 00007f50877fe1d9 [ 270.948919][T10647] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 270.948950][T10647] RBP: 00007f5086215090 R08: 0000000000000000 R09: 0000000000000000 [ 270.948965][T10647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.948978][T10647] R13: 00007f5087a86218 R14: 00007f5087a86180 R15: 00007ffca9fa60c8 [ 270.948995][T10647] [ 272.772919][T10673] FAULT_INJECTION: forcing a failure. [ 272.772919][T10673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.773093][T10673] CPU: 0 UID: 0 PID: 10673 Comm: syz.0.2569 Not tainted syzkaller #0 PREEMPT(lazy) [ 272.773142][T10673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.773155][T10673] Call Trace: [ 272.773162][T10673] [ 272.773170][T10673] __dump_stack+0x1d/0x30 [ 272.773218][T10673] dump_stack_lvl+0x95/0xd0 [ 272.773243][T10673] dump_stack+0x15/0x1b [ 272.773265][T10673] should_fail_ex+0x262/0x280 [ 272.773375][T10673] should_fail+0xb/0x20 [ 272.773399][T10673] should_fail_usercopy+0x1a/0x20 [ 272.773428][T10673] _copy_from_user+0x1c/0xb0 [ 272.773461][T10673] kstrtouint_from_user+0x69/0xf0 [ 272.773502][T10673] ? 0xffffffff81000000 [ 272.773518][T10673] ? avc_policy_seqno+0x15/0x30 [ 272.773550][T10673] proc_fail_nth_write+0x50/0x160 [ 272.773575][T10673] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 272.773644][T10673] vfs_write+0x254/0x9a0 [ 272.773752][T10673] ? __fget_files+0x184/0x1c0 [ 272.773779][T10673] ? mutex_lock+0x57/0x90 [ 272.773816][T10673] ksys_write+0xdc/0x1a0 [ 272.773906][T10673] __x64_sys_write+0x40/0x50 [ 272.773941][T10673] x64_sys_call+0x154e/0x2550 [ 272.773969][T10673] do_syscall_64+0x112/0x360 [ 272.773997][T10673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.774082][T10673] RIP: 0033:0x7fec3aa6ea0e [ 272.774099][T10673] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 272.774119][T10673] RSP: 002b:00007fec39506fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.774141][T10673] RAX: ffffffffffffffda RBX: 00007fec395076c0 RCX: 00007fec3aa6ea0e [ 272.774157][T10673] RDX: 0000000000000001 RSI: 00007fec395070a0 RDI: 0000000000000003 [ 272.774208][T10673] RBP: 00007fec39507090 R08: 0000000000000000 R09: 0000000000000000 [ 272.774255][T10673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.774270][T10673] R13: 00007fec3ad36038 R14: 00007fec3ad35fa0 R15: 00007ffe1798dce8 [ 272.774289][T10673] [ 272.850542][T10674] selinux_netlink_send: 24 callbacks suppressed [ 272.850586][T10674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10674 comm=syz.3.2570 [ 274.828641][T10702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.852926][T10702] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.762851][ T29] kauditd_printk_skb: 2223 callbacks suppressed [ 275.762870][ T29] audit: type=1400 audit(1791492586.651:350866): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.763440][ T29] audit: type=1400 audit(1791492586.651:350867): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.765575][ T29] audit: type=1400 audit(1791492586.651:350868): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.767959][ T29] audit: type=1400 audit(1791492586.651:350869): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.777510][ T29] audit: type=1400 audit(1791492586.660:350870): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.781171][ T29] audit: type=1400 audit(1791492586.660:350871): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.781769][ T29] audit: type=1400 audit(1791492586.660:350872): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.784006][ T29] audit: type=1400 audit(1791492586.660:350873): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.788143][ T29] audit: type=1400 audit(1791492586.660:350874): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 275.788785][ T29] audit: type=1400 audit(1791492586.660:350875): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 276.352415][T10702] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.352443][T10702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.485700][T10702] veth1_vlan: left promiscuous mode [ 276.518977][T10702] veth0_vlan: left promiscuous mode [ 276.545738][T10702] veth0_vlan: entered promiscuous mode [ 276.641194][T10702] veth1_vlan: entered promiscuous mode [ 276.926727][T10702] veth1_macvtap: left promiscuous mode [ 276.963010][T10702] veth0_macvtap: left promiscuous mode [ 276.979138][T10702] veth0_macvtap: entered promiscuous mode [ 277.000805][T10702] veth1_macvtap: entered promiscuous mode [ 277.171087][T10702] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 277.209221][T10702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 277.256443][T10702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 277.338834][T10702] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 277.646037][T10702] hsr1: Slave A (netdevsim1) is not up; please bring it up to get a fully working HSR network [ 277.646063][T10702] hsr1: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 277.677536][T10702] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 277.977874][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2586'. [ 277.985684][ T364] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.985721][ T364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.992121][ T31] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.992155][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.992190][ T31] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.992252][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.992331][ T31] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.992419][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.029243][ T1898] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.029350][ T1898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.114553][ T1898] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.114600][ T1898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.497056][ T1898] nr0: port 1(veth1_virt_wifi) entered blocking state [ 278.497094][ T1898] nr0: port 1(veth1_virt_wifi) entered forwarding state [ 279.115374][ T1898] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 279.129152][ T1898] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 281.187706][ T29] kauditd_printk_skb: 2308 callbacks suppressed [ 281.187779][ T29] audit: type=1400 audit(1791492591.657:353184): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 281.187802][ T29] audit: type=1400 audit(1791492591.657:353185): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 281.187823][ T29] audit: type=1400 audit(1791492591.657:353186): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 281.189471][ T29] audit: type=1400 audit(1791492591.657:353187): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 281.189497][ T29] audit: type=1400 audit(1791492591.657:353188): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 281.189582][ T29] audit: type=1400 audit(1791492591.657:353189): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 281.192733][ T29] audit: type=1400 audit(1791492591.657:353190): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 281.192804][ T29] audit: type=1400 audit(1791492591.657:353191): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 281.194282][ T29] audit: type=1400 audit(1791492591.657:353192): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 281.222173][ T29] audit: type=1400 audit(1791492591.666:353193): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 282.813002][T10787] bridge_slave_1: entered promiscuous mode [ 283.284177][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 283.359063][T10789] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 283.531657][T10798] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2612'. [ 283.587049][T10800] FAULT_INJECTION: forcing a failure. [ 283.587049][T10800] name failslab, interval 1, probability 0, space 0, times 0 [ 283.587122][T10800] CPU: 0 UID: 0 PID: 10800 Comm: syz.2.2612 Not tainted syzkaller #0 PREEMPT(lazy) [ 283.587149][T10800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.587164][T10800] Call Trace: [ 283.587172][T10800] [ 283.587179][T10800] __dump_stack+0x1d/0x30 [ 283.587229][T10800] dump_stack_lvl+0x95/0xd0 [ 283.587255][T10800] dump_stack+0x15/0x1b [ 283.587278][T10800] should_fail_ex+0x262/0x280 [ 283.587307][T10800] ? rtnl_newlink+0x5c/0x1510 [ 283.587342][T10800] should_failslab+0x8c/0xb0 [ 283.587380][T10800] __kmalloc_cache_noprof+0x7a/0x400 [ 283.587483][T10800] ? rtnl_newlink+0x5c/0x1510 [ 283.587530][T10800] ? __pfx_rtnl_newlink+0x10/0x10 [ 283.587635][T10800] rtnl_newlink+0x5c/0x1510 [ 283.587675][T10800] ? __rcu_read_unlock+0x4e/0x70 [ 283.587709][T10800] ? avc_has_perm_noaudit+0xac/0x160 [ 283.587742][T10800] ? cred_has_capability+0x224/0x2a0 [ 283.587781][T10800] ? selinux_capable+0x31/0x40 [ 283.587814][T10800] ? security_capable+0x7b/0x90 [ 283.587839][T10800] ? ns_capable+0x80/0xb0 [ 283.587861][T10800] ? __pfx_rtnl_newlink+0x10/0x10 [ 283.587919][T10800] rtnetlink_rcv_msg+0x64b/0x720 [ 283.587952][T10800] netlink_rcv_skb+0x11e/0x220 [ 283.588026][T10800] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 283.588064][T10800] rtnetlink_rcv+0x1c/0x30 [ 283.588094][T10800] netlink_unicast+0x5a9/0x680 [ 283.588184][T10800] netlink_sendmsg+0x5be/0x6f0 [ 283.588209][T10800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.588233][T10800] ____sys_sendmsg+0x532/0x580 [ 283.588263][T10800] ___sys_sendmsg+0x195/0x1e0 [ 283.588317][T10800] __sys_sendmmsg+0x185/0x320 [ 283.588352][T10800] __x64_sys_sendmmsg+0x57/0x70 [ 283.588444][T10800] x64_sys_call+0x1fb4/0x2550 [ 283.588472][T10800] do_syscall_64+0x112/0x360 [ 283.588579][T10800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.588600][T10800] RIP: 0033:0x7fef3313e1d9 [ 283.588616][T10800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.588636][T10800] RSP: 002b:00007fef31b76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 283.588659][T10800] RAX: ffffffffffffffda RBX: 00007fef333c6090 RCX: 00007fef3313e1d9 [ 283.588719][T10800] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 283.588735][T10800] RBP: 00007fef31b76090 R08: 0000000000000000 R09: 0000000000000000 [ 283.588749][T10800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.588763][T10800] R13: 00007fef333c6128 R14: 00007fef333c6090 R15: 00007ffc44d65188 [ 283.588784][T10800] [ 283.721774][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 284.679132][T10805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.784723][T10805] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.383118][T10805] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.383146][T10805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.533543][T10805] veth1_macvtap: left promiscuous mode [ 286.608122][T10805] veth0_macvtap: left promiscuous mode [ 286.609623][ T29] kauditd_printk_skb: 2570 callbacks suppressed [ 286.609718][ T29] audit: type=1400 audit(1791492596.672:355764): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 286.611377][ T29] audit: type=1400 audit(1791492596.672:355765): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 286.611408][ T29] audit: type=1400 audit(1791492596.672:355766): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 286.613009][ T29] audit: type=1400 audit(1791492596.672:355767): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 286.624752][ T29] audit: type=1400 audit(1791492596.681:355768): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 286.624870][ T29] audit: type=1400 audit(1791492596.681:355769): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 286.624903][ T29] audit: type=1400 audit(1791492596.681:355770): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 286.624929][ T29] audit: type=1400 audit(1791492596.681:355771): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 286.631404][ T29] audit: type=1400 audit(1791492596.681:355772): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 286.631437][ T29] audit: type=1400 audit(1791492596.691:355773): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 286.652423][T10805] veth0_macvtap: entered promiscuous mode [ 286.802689][T10805] veth1_macvtap: entered promiscuous mode [ 287.094010][T10805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 287.123566][T10805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 287.166590][T10805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 287.232420][T10805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 287.393402][T10805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.615659][T10805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.898400][T10833] xt_TCPMSS: Only works on TCP SYN packets [ 288.178002][T10838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2621'. [ 288.222614][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.223145][ T31] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 288.223495][ T31] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 288.223555][ T31] bond2: (slave veth3): making interface the new active one [ 288.238418][ T31] bond2: active interface up! [ 288.614422][ T364] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.510954][T10863] x_tables: duplicate underflow at hook 3 [ 289.511182][T10863] x_tables: duplicate underflow at hook 3 [ 289.511506][T10863] x_tables: duplicate underflow at hook 3 [ 289.511760][T10863] x_tables: duplicate underflow at hook 3 [ 289.515186][T10863] x_tables: duplicate underflow at hook 3 [ 289.515424][T10863] x_tables: duplicate underflow at hook 3 [ 289.518861][T10863] x_tables: duplicate underflow at hook 3 [ 289.519085][T10863] x_tables: duplicate underflow at hook 3 [ 289.519323][T10863] x_tables: duplicate underflow at hook 3 [ 289.519560][T10863] x_tables: duplicate underflow at hook 3 [ 289.532743][ T364] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.547594][ T364] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.033479][T10875] xt_TCPMSS: Only works on TCP SYN packets [ 290.052692][ T31] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.375022][T10885] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2637'. [ 290.556318][T10890] tun0: tun_chr_ioctl cmd 2148553947 [ 291.365338][T10913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2648'. [ 292.037045][ T29] kauditd_printk_skb: 2988 callbacks suppressed [ 292.037063][ T29] audit: type=1400 audit(1791492601.678:358762): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 292.037514][ T29] audit: type=1400 audit(1791492601.678:358763): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 292.039350][ T29] audit: type=1400 audit(1791492601.678:358764): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 292.041393][ T29] audit: type=1400 audit(1791492601.678:358765): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 292.047686][ T29] audit: type=1400 audit(1791492601.687:358766): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 292.048171][ T29] audit: type=1400 audit(1791492601.687:358767): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 292.048407][ T29] audit: type=1400 audit(1791492601.687:358768): avc: denied { create } for pid=10907 comm="syz.3.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 292.050413][ T29] audit: type=1400 audit(1791492601.687:358769): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 292.052407][ T29] audit: type=1400 audit(1791492601.687:358770): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 292.056935][ T29] audit: type=1400 audit(1791492601.697:358771): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 292.292438][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 293.678314][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 294.284652][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 294.386768][T10956] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2659'. [ 294.397499][T10956] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2659'. [ 295.128268][T10947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.151453][T10947] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.200432][T10947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.200458][T10947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.317214][T10947] veth1_vlan: left promiscuous mode [ 296.357869][T10947] veth0_vlan: left promiscuous mode [ 296.390658][T10947] veth0_vlan: entered promiscuous mode [ 296.535118][T10947] veth1_vlan: entered promiscuous mode [ 296.739530][T10947] veth1_macvtap: left promiscuous mode [ 296.777762][T10947] veth0_macvtap: left promiscuous mode [ 296.794661][T10947] veth0_macvtap: entered promiscuous mode [ 296.823837][T10947] veth1_macvtap: entered promiscuous mode [ 297.060058][T10947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.103408][T10947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.144296][T10947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.175050][T10947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 297.458440][ T29] kauditd_printk_skb: 3183 callbacks suppressed [ 297.458471][ T29] audit: type=1400 audit(1791492606.684:361955): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 297.458887][ T29] audit: type=1400 audit(1791492606.684:361956): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 297.459288][ T29] audit: type=1400 audit(1791492606.684:361957): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 297.461266][ T29] audit: type=1400 audit(1791492606.684:361958): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 297.461840][ T29] audit: type=1400 audit(1791492606.684:361959): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 297.462350][ T29] audit: type=1400 audit(1791492606.684:361960): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 297.464380][ T29] audit: type=1400 audit(1791492606.684:361961): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 297.466395][ T29] audit: type=1400 audit(1791492606.684:361962): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 297.467221][ T29] audit: type=1400 audit(1791492606.684:361963): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 297.471355][ T29] audit: type=1400 audit(1791492606.702:361964): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 297.846797][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 298.135095][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.135129][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.166638][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.166676][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.713962][T10979] FAULT_INJECTION: forcing a failure. [ 298.713962][T10979] name failslab, interval 1, probability 0, space 0, times 0 [ 298.713994][T10979] CPU: 1 UID: 0 PID: 10979 Comm: syz.2.2665 Not tainted syzkaller #0 PREEMPT(lazy) [ 298.714078][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.714092][T10979] Call Trace: [ 298.714171][T10979] [ 298.714181][T10979] __dump_stack+0x1d/0x30 [ 298.714210][T10979] dump_stack_lvl+0x95/0xd0 [ 298.714235][T10979] dump_stack+0x15/0x1b [ 298.714297][T10979] should_fail_ex+0x262/0x280 [ 298.714328][T10979] ? iter_file_splice_write+0x105/0xa60 [ 298.714351][T10979] should_failslab+0x8c/0xb0 [ 298.714433][T10979] __kmalloc_noprof+0xd0/0x4d0 [ 298.714470][T10979] ? iter_file_splice_write+0x105/0xa60 [ 298.714525][T10979] ? __pfx_iter_file_splice_write+0x10/0x10 [ 298.714549][T10979] iter_file_splice_write+0x105/0xa60 [ 298.714574][T10979] ? copy_splice_read+0x670/0x6b0 [ 298.714600][T10979] ? copy_splice_read+0x670/0x6b0 [ 298.714678][T10979] ? __pfx_iter_file_splice_write+0x10/0x10 [ 298.714705][T10979] direct_splice_actor+0x158/0x280 [ 298.714781][T10979] ? __pfx_copy_splice_read+0x10/0x10 [ 298.714863][T10979] splice_direct_to_actor+0x2f9/0x680 [ 298.714890][T10979] ? kstrtouint_from_user+0xa8/0xf0 [ 298.714914][T10979] ? __pfx_direct_splice_actor+0x10/0x10 [ 298.714946][T10979] do_splice_direct+0x119/0x1a0 [ 298.714967][T10979] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 298.715033][T10979] do_sendfile+0x37d/0x640 [ 298.715095][T10979] __x64_sys_sendfile64+0x105/0x150 [ 298.715155][T10979] x64_sys_call+0x1015/0x2550 [ 298.715185][T10979] do_syscall_64+0x112/0x360 [ 298.715210][T10979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.715233][T10979] RIP: 0033:0x7fef3313e1d9 [ 298.715392][T10979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.715414][T10979] RSP: 002b:00007fef31b97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 298.715436][T10979] RAX: ffffffffffffffda RBX: 00007fef333c5fa0 RCX: 00007fef3313e1d9 [ 298.715450][T10979] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 298.715462][T10979] RBP: 00007fef31b97090 R08: 0000000000000000 R09: 0000000000000000 [ 298.715474][T10979] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000002 [ 298.715548][T10979] R13: 00007fef333c6038 R14: 00007fef333c5fa0 R15: 00007ffc44d65188 [ 298.715568][T10979] [ 299.340561][T10990] FAULT_INJECTION: forcing a failure. [ 299.340561][T10990] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 299.340594][T10990] CPU: 1 UID: 0 PID: 10990 Comm: syz.1.2668 Not tainted syzkaller #0 PREEMPT(lazy) [ 299.340637][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.340682][T10990] Call Trace: [ 299.340689][T10990] [ 299.340698][T10990] __dump_stack+0x1d/0x30 [ 299.340725][T10990] dump_stack_lvl+0x95/0xd0 [ 299.340813][T10990] dump_stack+0x15/0x1b [ 299.340832][T10990] should_fail_ex+0x262/0x280 [ 299.340857][T10990] should_fail_alloc_page+0xf2/0x100 [ 299.340891][T10990] __alloc_frozen_pages_noprof+0x157/0x400 [ 299.340943][T10990] alloc_pages_mpol+0xaf/0x1d0 [ 299.340971][T10990] folio_alloc_noprof+0xa2/0x160 [ 299.340999][T10990] filemap_alloc_folio_noprof+0x92/0x220 [ 299.341026][T10990] __filemap_get_folio_mpol+0x2a0/0x840 [ 299.341123][T10990] ? __kmalloc_noprof+0x1f1/0x4d0 [ 299.341155][T10990] aio_setup_ring+0x262/0x710 [ 299.341247][T10990] ioctx_alloc+0x296/0x480 [ 299.341283][T10990] __se_sys_io_setup+0x6b/0x1b0 [ 299.341315][T10990] __x64_sys_io_setup+0x31/0x40 [ 299.341342][T10990] x64_sys_call+0x1a9f/0x2550 [ 299.341424][T10990] do_syscall_64+0x112/0x360 [ 299.341452][T10990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.341478][T10990] RIP: 0033:0x7f50877fe1d9 [ 299.341495][T10990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.341547][T10990] RSP: 002b:00007f5086257028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 299.341569][T10990] RAX: ffffffffffffffda RBX: 00007f5087a85fa0 RCX: 00007f50877fe1d9 [ 299.341586][T10990] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000000020fe [ 299.341601][T10990] RBP: 00007f5086257090 R08: 0000000000000000 R09: 0000000000000000 [ 299.341616][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.341729][T10990] R13: 00007f5087a86038 R14: 00007f5087a85fa0 R15: 00007ffca9fa60c8 [ 299.341748][T10990] [ 299.569660][ T2249] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 299.569700][ T2249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.623103][ T364] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 299.623142][ T364] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.912336][T11000] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 300.061578][T11000] bond2 (unregistering): Released all slaves [ 300.295392][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2673'. [ 301.183086][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 301.183327][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.183576][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 301.183606][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.889963][T11040] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2680'. [ 302.483701][T11045] FAULT_INJECTION: forcing a failure. [ 302.483701][T11045] name failslab, interval 1, probability 0, space 0, times 0 [ 302.483734][T11045] CPU: 1 UID: 0 PID: 11045 Comm: syz.0.2681 Not tainted syzkaller #0 PREEMPT(lazy) [ 302.483759][T11045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.483772][T11045] Call Trace: [ 302.483777][T11045] [ 302.483795][T11045] __dump_stack+0x1d/0x30 [ 302.483819][T11045] dump_stack_lvl+0x95/0xd0 [ 302.483840][T11045] dump_stack+0x15/0x1b [ 302.483859][T11045] should_fail_ex+0x262/0x280 [ 302.483922][T11045] should_failslab+0x8c/0xb0 [ 302.483969][T11045] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 302.484020][T11045] ? sidtab_sid2str_get+0xa0/0x130 [ 302.484045][T11045] ? sidtab_sid2str_get+0xa0/0x130 [ 302.484148][T11045] kmemdup_noprof+0x2b/0x70 [ 302.484175][T11045] sidtab_sid2str_get+0xa0/0x130 [ 302.484203][T11045] security_sid_to_context_core+0x179/0x2d0 [ 302.484246][T11045] security_sid_to_context+0x27/0x40 [ 302.484270][T11045] avc_audit_post_callback+0x9d/0x520 [ 302.484345][T11045] ? audit_log_lsm_data+0x7ea/0xbb0 [ 302.484384][T11045] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 302.484434][T11045] common_lsm_audit+0x1ba/0x230 [ 302.484455][T11045] ? set_normalized_timespec64+0xe0/0x110 [ 302.484629][T11045] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 302.484677][T11045] ? inode_doinit_with_dentry+0x98/0x7b0 [ 302.484779][T11045] slow_avc_audit+0x14c/0x190 [ 302.484804][T11045] audit_inode_permission+0x119/0x160 [ 302.484899][T11045] selinux_inode_permission+0x66e/0x740 [ 302.484928][T11045] security_inode_permission+0x69/0xa0 [ 302.485013][T11045] inode_permission+0x1da/0x3b0 [ 302.485043][T11045] may_open+0x255/0x350 [ 302.485073][T11045] path_openat+0xb1c/0x10d0 [ 302.485190][T11045] ? kstrtouint+0x76/0xc0 [ 302.485211][T11045] do_file_open+0x16c/0x290 [ 302.485320][T11045] do_sys_openat2+0xa0/0x130 [ 302.485347][T11045] __x64_sys_openat+0xf2/0x120 [ 302.485421][T11045] x64_sys_call+0x1f72/0x2550 [ 302.485449][T11045] do_syscall_64+0x112/0x360 [ 302.485477][T11045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.485554][T11045] RIP: 0033:0x7fec3aaae1d9 [ 302.485572][T11045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.485590][T11045] RSP: 002b:00007fec39507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 302.485613][T11045] RAX: ffffffffffffffda RBX: 00007fec3ad35fa0 RCX: 00007fec3aaae1d9 [ 302.485630][T11045] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 302.485643][T11045] RBP: 00007fec39507090 R08: 0000000000000000 R09: 0000000000000000 [ 302.485695][T11045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.485710][T11045] R13: 00007fec3ad36038 R14: 00007fec3ad35fa0 R15: 00007ffe1798dce8 [ 302.485729][T11045] [ 302.513434][ T31] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.515055][ T2249] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.515099][ T2249] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.515133][ T2249] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.688298][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.809993][ T131] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.881993][ T29] kauditd_printk_skb: 2306 callbacks suppressed [ 302.882011][ T29] audit: type=1400 audit(1791492611.699:364271): avc: denied { create } for pid=11049 comm="syz.0.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 302.891970][ T29] audit: type=1400 audit(1791492611.699:364272): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 302.893595][ T29] audit: type=1400 audit(1791492611.708:364273): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 302.906449][ T29] audit: type=1400 audit(1791492611.708:364274): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 302.907162][ T29] audit: type=1400 audit(1791492611.708:364275): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 302.909278][ T29] audit: type=1400 audit(1791492611.708:364276): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 302.909601][ T29] audit: type=1400 audit(1791492611.708:364277): avc: denied { create } for pid=11049 comm="syz.0.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=0 [ 302.918294][ T29] audit: type=1400 audit(1791492611.708:364278): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 302.918873][ T29] audit: type=1400 audit(1791492611.708:364279): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 302.921981][ T29] audit: type=1400 audit(1791492611.736:364280): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 304.372636][T11070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.821003][T11089] syzkaller0: entered promiscuous mode [ 306.821166][T11089] syzkaller0: entered allmulticast mode [ 307.263396][T11111] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 307.537104][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 307.656923][T11123] netlink: 'syz.5.2707': attribute type 1 has an invalid length. [ 307.771846][T11125] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2707'. [ 308.219383][T11123] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.305768][ T29] kauditd_printk_skb: 2591 callbacks suppressed [ 308.305786][ T29] audit: type=1400 audit(1791492616.696:366872): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 308.306001][ T29] audit: type=1400 audit(1791492616.696:366873): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 308.306029][ T29] audit: type=1400 audit(1791492616.696:366874): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 308.311669][ T29] audit: type=1400 audit(1791492616.705:366875): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 308.311742][ T29] audit: type=1400 audit(1791492616.705:366876): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 308.311769][ T29] audit: type=1400 audit(1791492616.705:366877): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 308.311853][ T29] audit: type=1400 audit(1791492616.705:366878): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 308.313991][ T29] audit: type=1400 audit(1791492616.705:366879): avc: denied { read } for pid=3676 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 308.315180][ T29] audit: type=1400 audit(1791492616.705:366880): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 308.315382][ T29] audit: type=1400 audit(1791492616.705:366881): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 309.409207][T11154] FAULT_INJECTION: forcing a failure. [ 309.409207][T11154] name failslab, interval 1, probability 0, space 0, times 0 [ 309.409238][T11154] CPU: 0 UID: 0 PID: 11154 Comm: syz.1.2715 Not tainted syzkaller #0 PREEMPT(lazy) [ 309.409282][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.409296][T11154] Call Trace: [ 309.409303][T11154] [ 309.409312][T11154] __dump_stack+0x1d/0x30 [ 309.409338][T11154] dump_stack_lvl+0x95/0xd0 [ 309.409369][T11154] dump_stack+0x15/0x1b [ 309.409390][T11154] should_fail_ex+0x262/0x280 [ 309.409424][T11154] ? hashtab_duplicate+0x105/0x370 [ 309.409448][T11154] should_failslab+0x8c/0xb0 [ 309.409481][T11154] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 309.409552][T11154] ? hashtab_duplicate+0x105/0x370 [ 309.409578][T11154] ? __pfx_cond_bools_destroy+0x10/0x10 [ 309.409613][T11154] hashtab_duplicate+0x105/0x370 [ 309.409682][T11154] ? __pfx_cond_bools_copy+0x10/0x10 [ 309.409718][T11154] cond_policydb_dup+0xc0/0x4d0 [ 309.409853][T11154] security_set_bools+0xa1/0x350 [ 309.409879][T11154] sel_commit_bools_write+0x1e9/0x270 [ 309.409915][T11154] vfs_writev+0x420/0x8c0 [ 309.409940][T11154] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 309.409983][T11154] do_writev+0xe9/0x210 [ 309.410047][T11154] __x64_sys_writev+0x45/0x50 [ 309.410069][T11154] x64_sys_call+0x23c9/0x2550 [ 309.410094][T11154] do_syscall_64+0x112/0x360 [ 309.410123][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.410217][T11154] RIP: 0033:0x7f50877fe1d9 [ 309.410285][T11154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.410302][T11154] RSP: 002b:00007f5086257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 309.410390][T11154] RAX: ffffffffffffffda RBX: 00007f5087a85fa0 RCX: 00007f50877fe1d9 [ 309.410406][T11154] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 309.410420][T11154] RBP: 00007f5086257090 R08: 0000000000000000 R09: 0000000000000000 [ 309.410435][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 309.410447][T11154] R13: 00007f5087a86038 R14: 00007f5087a85fa0 R15: 00007ffca9fa60c8 [ 309.410467][T11154] [ 309.616745][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 310.971645][T11173] FAULT_INJECTION: forcing a failure. [ 310.971645][T11173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 310.971679][T11173] CPU: 0 UID: 0 PID: 11173 Comm: syz.3.2722 Not tainted syzkaller #0 PREEMPT(lazy) [ 310.971785][T11173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.971798][T11173] Call Trace: [ 310.971874][T11173] [ 310.971883][T11173] __dump_stack+0x1d/0x30 [ 310.971935][T11173] dump_stack_lvl+0x95/0xd0 [ 310.971960][T11173] dump_stack+0x15/0x1b [ 310.971981][T11173] should_fail_ex+0x262/0x280 [ 310.972009][T11173] should_fail_alloc_page+0xf2/0x100 [ 310.972094][T11173] __alloc_frozen_pages_noprof+0x157/0x400 [ 310.972122][T11173] alloc_pages_mpol+0xaf/0x1d0 [ 310.972172][T11173] alloc_pages_noprof+0x94/0x140 [ 310.972278][T11173] pte_alloc_one+0x1c/0xc0 [ 310.972297][T11173] __pte_alloc+0x32/0x2a0 [ 310.972411][T11173] handle_mm_fault+0x3083/0x3bb0 [ 310.972506][T11173] do_user_addr_fault+0x636/0x1060 [ 310.972589][T11173] ? ksys_mmap_pgoff+0xc1/0x310 [ 310.972669][T11173] ? __x64_sys_mmap+0x49/0x70 [ 310.972754][T11173] ? trace_page_fault_user+0x1f/0xa0 [ 310.972790][T11173] exc_page_fault+0x62/0xa0 [ 310.972808][T11173] asm_exc_page_fault+0x26/0x30 [ 310.972833][T11173] RIP: 0033:0x7fc4b19a528e [ 310.972852][T11173] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 310.972878][T11173] RSP: 002b:00007fc4b0546470 EFLAGS: 00010246 [ 310.972895][T11173] RAX: 0000000000000001 RBX: 00007fc4b0546530 RCX: 0000000000000101 [ 310.972909][T11173] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fc4b05465d0 [ 310.972924][T11173] RBP: 0000000000000102 R08: 00007fc4a8127000 R09: 0000000000000000 [ 310.972939][T11173] R10: 0000000000000000 R11: 00007fc4b0546540 R12: 0000000000000001 [ 310.972965][T11173] R13: 00007fc4b1ba59c0 R14: 0000000000000000 R15: 00007fc4b05465d0 [ 310.972985][T11173] [ 311.002892][T11173] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 312.388782][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 313.730192][ T29] kauditd_printk_skb: 2060 callbacks suppressed [ 313.730208][ T29] audit: type=1400 audit(1791492621.720:368942): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 313.732485][ T29] audit: type=1400 audit(1791492621.720:368943): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 313.734661][ T29] audit: type=1400 audit(1791492621.720:368944): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 313.738500][ T29] audit: type=1400 audit(1791492621.720:368945): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 313.739088][ T29] audit: type=1400 audit(1791492621.720:368946): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 313.742952][ T29] audit: type=1400 audit(1791492621.729:368947): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 313.745146][ T29] audit: type=1400 audit(1791492621.729:368948): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 313.747428][ T29] audit: type=1400 audit(1791492621.729:368949): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 313.749544][ T29] audit: type=1400 audit(1791492621.729:368950): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 313.751703][ T29] audit: type=1400 audit(1791492621.729:368951): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 316.491703][T11237] A link change request failed with some changes committed already. Interface rmnet0 may have been left with an inconsistent configuration, please check. [ 316.545303][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.660676][T11265] FAULT_INJECTION: forcing a failure. [ 317.660676][T11265] name failslab, interval 1, probability 0, space 0, times 0 [ 317.660703][T11265] CPU: 1 UID: 0 PID: 11265 Comm: syz.2.2745 Not tainted syzkaller #0 PREEMPT(lazy) [ 317.660806][T11265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.660898][T11265] Call Trace: [ 317.660980][T11265] [ 317.660987][T11265] __dump_stack+0x1d/0x30 [ 317.661014][T11265] dump_stack_lvl+0x95/0xd0 [ 317.661093][T11265] dump_stack+0x15/0x1b [ 317.661111][T11265] should_fail_ex+0x262/0x280 [ 317.661182][T11265] ? alloc_vfsmnt+0x2d/0x2f0 [ 317.661249][T11265] should_failslab+0x8c/0xb0 [ 317.661287][T11265] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 317.661321][T11265] ? alloc_vfsmnt+0x2d/0x2f0 [ 317.661395][T11265] alloc_vfsmnt+0x2d/0x2f0 [ 317.661430][T11265] clone_mnt+0x30/0x5d0 [ 317.661460][T11265] ? copy_tree+0xa3/0x890 [ 317.661479][T11265] copy_tree+0xb9/0x890 [ 317.661494][T11265] ? _raw_spin_lock+0x53/0xa0 [ 317.661536][T11265] ? _raw_spin_unlock+0x9/0x30 [ 317.661595][T11265] ? clone_mnt+0x550/0x5d0 [ 317.661734][T11265] __do_loopback+0x12c/0x280 [ 317.661764][T11265] open_new_namespace+0x3a9/0xa90 [ 317.661837][T11265] vfs_open_tree+0x24d/0x2d0 [ 317.661869][T11265] __x64_sys_open_tree+0x5e/0xd0 [ 317.661891][T11265] x64_sys_call+0x1d6d/0x2550 [ 317.661921][T11265] do_syscall_64+0x112/0x360 [ 317.661946][T11265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.661971][T11265] RIP: 0033:0x7fef3313e1d9 [ 317.661988][T11265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.662059][T11265] RSP: 002b:00007fef31b97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 317.662082][T11265] RAX: ffffffffffffffda RBX: 00007fef333c5fa0 RCX: 00007fef3313e1d9 [ 317.662130][T11265] RDX: 0000000000009902 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 317.662208][T11265] RBP: 00007fef31b97090 R08: 0000000000000000 R09: 0000000000000000 [ 317.662223][T11265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.662236][T11265] R13: 00007fef333c6038 R14: 00007fef333c5fa0 R15: 00007ffc44d65188 [ 317.662255][T11265] [ 318.624293][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 319.154650][ T29] kauditd_printk_skb: 2543 callbacks suppressed [ 319.154666][ T29] audit: type=1400 audit(1791492626.726:371495): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 319.156434][ T29] audit: type=1400 audit(1791492626.726:371496): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 319.161381][ T29] audit: type=1400 audit(1791492626.726:371497): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 319.161411][ T29] audit: type=1400 audit(1791492626.726:371498): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 319.164600][ T29] audit: type=1400 audit(1791492626.726:371499): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 319.171938][ T29] audit: type=1400 audit(1791492626.735:371500): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 319.172043][ T29] audit: type=1400 audit(1791492626.735:371501): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 319.172068][ T29] audit: type=1400 audit(1791492626.735:371502): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 319.193597][ T29] audit: type=1400 audit(1791492626.735:371503): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 319.193643][ T29] audit: type=1400 audit(1791492626.735:371504): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 319.526436][T11279] xt_TCPMSS: Only works on TCP SYN packets [ 319.922964][T11287] FAULT_INJECTION: forcing a failure. [ 319.922964][T11287] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 319.922998][T11287] CPU: 0 UID: 0 PID: 11287 Comm: syz.3.2754 Not tainted syzkaller #0 PREEMPT(lazy) [ 319.923026][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.923040][T11287] Call Trace: [ 319.923048][T11287] [ 319.923056][T11287] __dump_stack+0x1d/0x30 [ 319.923080][T11287] dump_stack_lvl+0x95/0xd0 [ 319.923170][T11287] dump_stack+0x15/0x1b [ 319.923192][T11287] should_fail_ex+0x262/0x280 [ 319.923219][T11287] should_fail_alloc_page+0xf2/0x100 [ 319.923285][T11287] __alloc_frozen_pages_noprof+0x157/0x400 [ 319.923309][T11287] alloc_pages_mpol+0xaf/0x1d0 [ 319.923336][T11287] alloc_pages_noprof+0x94/0x140 [ 319.923425][T11287] pte_alloc_one+0x1c/0xc0 [ 319.923447][T11287] __pte_alloc+0x32/0x2a0 [ 319.923529][T11287] handle_mm_fault+0x3083/0x3bb0 [ 319.923562][T11287] do_user_addr_fault+0x636/0x1060 [ 319.923594][T11287] ? ksys_mmap_pgoff+0xc1/0x310 [ 319.923680][T11287] ? __x64_sys_mmap+0x49/0x70 [ 319.923715][T11287] ? trace_page_fault_user+0x1f/0xa0 [ 319.923745][T11287] exc_page_fault+0x62/0xa0 [ 319.923830][T11287] asm_exc_page_fault+0x26/0x30 [ 319.923851][T11287] RIP: 0033:0x7fc4b19a528e [ 319.923866][T11287] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 319.923885][T11287] RSP: 002b:00007fc4b0546470 EFLAGS: 00010246 [ 319.923904][T11287] RAX: 0000000000000001 RBX: 00007fc4b0546530 RCX: 0000000000000101 [ 319.923955][T11287] RDX: 0000000000000010 RSI: 0000000000000001 RDI: 00007fc4b05465d0 [ 319.923970][T11287] RBP: 0000000000000102 R08: 00007fc4a8127000 R09: 0000000000000000 [ 319.923984][T11287] R10: 0000000000000000 R11: 00007fc4b0546540 R12: 0000000000000001 [ 319.923998][T11287] R13: 00007fc4b1ba59c0 R14: 0000000000000000 R15: 00007fc4b05465d0 [ 319.924017][T11287] [ 320.079320][T11287] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 320.768533][ T7325] tipc: Resetting bearer [ 321.054674][ T7325] bond0: (slave syz_tun): Releasing backup interface [ 321.080291][ T7325] tipc: Resetting bearer [ 321.815188][T11310] xt_TCPMSS: Only works on TCP SYN packets [ 321.910963][ T7325] tipc: Disabling bearer [ 322.264628][ T1797] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.264730][ T1797] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.536189][ T1797] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.536348][ T1797] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.617463][T11319] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2765'. [ 322.944126][ T1797] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.944245][ T1797] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.258014][ T1797] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.259812][ T1797] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.422009][ T1797] bridge_slave_1: left promiscuous mode [ 323.422724][ T1797] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.464341][ T1797] bridge_slave_0: left allmulticast mode [ 323.464669][ T1797] bridge_slave_0: left promiscuous mode [ 323.465343][ T1797] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.579343][ T29] kauditd_printk_skb: 2947 callbacks suppressed [ 324.579417][ T29] audit: type=1400 audit(1791492631.741:374452): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 324.580027][ T29] audit: type=1400 audit(1791492631.741:374453): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 324.582376][ T29] audit: type=1400 audit(1791492631.741:374454): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 324.582936][ T29] audit: type=1400 audit(1791492631.741:374455): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 324.583542][ T29] audit: type=1400 audit(1791492631.741:374456): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 324.585965][ T29] audit: type=1400 audit(1791492631.741:374457): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 324.586521][ T29] audit: type=1400 audit(1791492631.741:374458): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 324.588866][ T29] audit: type=1400 audit(1791492631.741:374459): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 324.589530][ T29] audit: type=1400 audit(1791492631.741:374460): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 324.592964][ T29] audit: type=1400 audit(1791492631.750:374461): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 328.230228][ T1797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.352145][ T1797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.534185][ T1797] bond0 (unregistering): Released all slaves [ 328.622321][ T1797] bond1 (unregistering): (slave lo): Releasing backup interface [ 328.624696][ T1797] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 328.719364][ T1797] bond1 (unregistering): Released all slaves [ 329.032233][T11357] xt_TCPMSS: Only works on TCP SYN packets [ 329.219912][ T1797] tipc: Left network mode [ 329.283994][ T1797] hsr_slave_0: left promiscuous mode [ 329.288975][ T1797] hsr_slave_1: left promiscuous mode [ 329.583677][ T1797] veth1_macvtap: left promiscuous mode [ 329.584369][ T1797] veth0_macvtap: left promiscuous mode [ 330.005330][ T29] kauditd_printk_skb: 3778 callbacks suppressed [ 330.005373][ T29] audit: type=1400 audit(1791492636.747:378240): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.005875][ T29] audit: type=1400 audit(1791492636.747:378241): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.006340][ T29] audit: type=1400 audit(1791492636.747:378242): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.006860][ T29] audit: type=1400 audit(1791492636.747:378243): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.008893][ T29] audit: type=1400 audit(1791492636.747:378244): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.009273][ T29] audit: type=1400 audit(1791492636.747:378245): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.009749][ T29] audit: type=1400 audit(1791492636.747:378246): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.010179][ T29] audit: type=1400 audit(1791492636.747:378247): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.012159][ T29] audit: type=1400 audit(1791492636.747:378248): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.012741][ T29] audit: type=1400 audit(1791492636.747:378249): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 332.244728][ C1] ================================================================== [ 332.244774][ C1] BUG: KCSAN: data-race in ktime_get / timekeeping_update_from_shadow [ 332.244828][ C1] [ 332.244833][ C1] write to 0xffffffff895fa508 of 320 bytes by interrupt on cpu 0: [ 332.244854][ C1] timekeeping_update_from_shadow+0x448/0x480 [ 332.244895][ C1] __timekeeping_advance+0xb36/0xcf0 [ 332.244937][ C1] update_wall_time+0x21/0x50 [ 332.244971][ C1] tick_do_update_jiffies64+0x169/0x1c0 [ 332.245010][ C1] tick_nohz_handler+0x88/0x380 [ 332.245045][ C1] __hrtimer_run_queues+0x1f8/0x510 [ 332.245073][ C1] hrtimer_interrupt+0x27b/0x860 [ 332.245101][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 332.245133][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 332.245178][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.245207][ C1] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 332.245240][ C1] hrtimer_run_softirq+0x270/0x290 [ 332.245272][ C1] handle_softirqs+0xcc/0x2a0 [ 332.245299][ C1] run_ksoftirqd+0x1c/0x30 [ 332.245335][ C1] smpboot_thread_fn+0x32f/0x520 [ 332.245361][ C1] kthread+0x223/0x270 [ 332.245385][ C1] ret_from_fork+0x146/0x330 [ 332.245424][ C1] ret_from_fork_asm+0x1a/0x30 [ 332.245456][ C1] [ 332.245461][ C1] read to 0xffffffff895fa528 of 8 bytes by interrupt on cpu 1: [ 332.245482][ C1] ktime_get+0x130/0x240 [ 332.245513][ C1] gate_timer_func+0xda/0x1d0 [ 332.245541][ C1] __hrtimer_run_queues+0x1f8/0x510 [ 332.245570][ C1] hrtimer_run_softirq+0xde/0x290 [ 332.245598][ C1] handle_softirqs+0xcc/0x2a0 [ 332.245623][ C1] run_ksoftirqd+0x1c/0x30 [ 332.245652][ C1] smpboot_thread_fn+0x32f/0x520 [ 332.245677][ C1] kthread+0x223/0x270 [ 332.245700][ C1] ret_from_fork+0x146/0x330 [ 332.245735][ C1] ret_from_fork_asm+0x1a/0x30 [ 332.245767][ C1] [ 332.245772][ C1] value changed: 0x00301de39903054a -> 0x0030aad1b87cbcfc [ 332.245787][ C1] [ 332.245793][ C1] Reported by Kernel Concurrency Sanitizer on: [ 332.245806][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(lazy) [ 332.245836][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.245851][ C1] ================================================================== [ 335.255041][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 335.427872][ T29] kauditd_printk_skb: 4544 callbacks suppressed [ 335.427893][ T29] audit: type=1400 audit(1791492641.753:382794): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.429418][ T29] audit: type=1400 audit(1791492641.762:382795): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.429451][ T29] audit: type=1400 audit(1791492641.762:382796): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.432537][ T29] audit: type=1400 audit(1791492641.762:382797): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.434076][ T29] audit: type=1400 audit(1791492641.762:382798): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.434138][ T29] audit: type=1400 audit(1791492641.762:382799): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.435605][ T29] audit: type=1400 audit(1791492641.762:382800): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.437187][ T29] audit: type=1400 audit(1791492641.762:382801): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.438691][ T29] audit: type=1400 audit(1791492641.762:382802): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.438758][ T29] audit: type=1400 audit(1791492641.762:382803): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 336.128561][ T1797] team0 (unregistering): Port device team_slave_1 removed [ 336.411878][ T1797] team0 (unregistering): Port device team_slave_0 removed [ 339.163613][ T3676] tipc: Resetting bearer [ 339.379349][ T3676] tipc: Disabling bearer [ 339.395968][ T6464] tipc: Resetting bearer [ 339.738246][ T6464] tipc: Disabling bearer [ 339.746938][T11385] tipc: Resetting bearer [ 340.020278][T11385] tipc: Disabling bearer [ 340.029180][T11371] tipc: Resetting bearer [ 340.187131][T11371] tipc: Disabling bearer [ 340.666069][ T1797] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.666168][ T1797] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.852349][ T29] kauditd_printk_skb: 4969 callbacks suppressed [ 340.852367][ T29] audit: type=1400 audit(1791492646.768:387773): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.854557][ T29] audit: type=1400 audit(1791492646.768:387774): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.854910][ T29] audit: type=1400 audit(1791492646.768:387775): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.855358][ T29] audit: type=1400 audit(1791492646.768:387776): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.855808][ T29] audit: type=1400 audit(1791492646.768:387777): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.857843][ T29] audit: type=1400 audit(1791492646.768:387778): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.858251][ T29] audit: type=1400 audit(1791492646.768:387779): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.858859][ T29] audit: type=1400 audit(1791492646.768:387780): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.860842][ T29] audit: type=1400 audit(1791492646.768:387781): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.861179][ T29] audit: type=1400 audit(1791492646.768:387782): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 341.064258][ T1797] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.064296][ T1797] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.416131][ T1797] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.416229][ T1797] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.714360][ T1797] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.714399][ T1797] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.069939][ T1797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.070054][ T1797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0