last executing test programs: 7m59.538457549s ago: executing program 32 (id=91): msgget(0x0, 0x6dd) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x1000, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000001000)=""/249, 0xf9}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 7m55.98362342s ago: executing program 33 (id=101): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x10000}, 0x1c) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x13c, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}]}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3c6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfe9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x85}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x18}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 7m53.710200606s ago: executing program 34 (id=116): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@newtclass={0x40, 0x28, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x9}, {0x5, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xce, 0x24}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x5}}}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x103830, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xa, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x50) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x8e) fchdir(r5) chdir(&(0x7f0000000080)='./sys\x00') pivot_root(&(0x7f0000000000)='./debug\x00', &(0x7f00000000c0)='./debug\x00') r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="f00000000308010300000000000000000000000724000480080001400000000908000140000000010800014000000004080001400000800005000300060000000600024000f500000600024088be00003c000480080003400000007f0800054000000001080005400000000108000340000010000800024000000400080002400000000008000340000000ca05000300840000000600024088ca00000900010073797a30000000000900010073797a30000000003c0004800800024000000008080001400000000508000240000100000800014000000007080001400000000408000140000000040800020007"], 0xf0}, 0x1, 0x0, 0x0, 0x4010}, 0x24008890) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000f2717ca8bfa400000000000007"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x8, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) 7m52.378954691s ago: executing program 35 (id=126): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000980)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406040016c008685c400400027c035c0461c1d67f6f94007134cf6efb8000a007a27de9cd3d89b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bba3760c780300000000000000e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f00000001c0)=""/133, 0x85, 0x0, &(0x7f0000000400)=""/129, 0x81}}, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xa, &(0x7f0000000140)=@framed={{}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @exit, @generic={0x85, 0x0, 0x1, 0x0, 0x35}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m50.558421256s ago: executing program 36 (id=129): r0 = syz_open_dev$usbfs(&(0x7f0000001740), 0x206, 0x82) syz_open_dev$usbfs(&(0x7f0000000000), 0x2c, 0x400000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000003c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r4, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) epoll_create1(0x80000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = gettid() r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000140)) wait4(0x0, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0x12, 0x8}, 0x20) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r9, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) (fail_nth: 5) clock_getres(0x66d6bffb91a6ff55, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000380)={0x1f, 0x6, 0x300, 0xeb7, 0x16, 0xc27, 0x0}) 7m47.321400856s ago: executing program 37 (id=133): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x17, 0x88, 0xfa00, {0x0, 0x10, 0x0, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0x14}}}}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000d00)={r3, 0x6}, 0x8) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='system_u:object_r:xconsole_device_t:s0\x00', 0x27, 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1145b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x6) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e02177", 0xae, 0x81, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0xffffffffffffffed}, 0x103831, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) unshare(0x22020400) r5 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r5, &(0x7f0000000040)=""/4109, 0x100d) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc61}}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) getpgid(0x0) 7m42.029148144s ago: executing program 38 (id=143): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1, 0x0, 0x0, 0x80fe}}], 0x1, 0x4c040) 7m39.784568782s ago: executing program 39 (id=153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7f, @empty, 0x4}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000140)=""/172, 0x97}], 0x1, 0xffffffff, 0x19) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) listen(r0, 0x81) socket$netlink(0x10, 0x3, 0x4) 7m37.469936937s ago: executing program 40 (id=164): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r0 = socket(0x2, 0x805, 0x0) setns(0xc9, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000300000000000700000a20000000000a0103000000000000000001db00000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000020a010300000000000000000000000614000000110001"], 0xfc}}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x1, 0x80000001}, 0x0) 7m11.797971826s ago: executing program 41 (id=308): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x130, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x8, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendto$inet(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000900)={0x2, 0x22b8, @loopback}, 0x10) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x18) 7m11.37505062s ago: executing program 42 (id=312): lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000100)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x80010000) 6m58.171744256s ago: executing program 43 (id=351): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008042, &(0x7f0000000940)={[{@journal_dev}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nomblk_io_submit}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}, {@noauto_da_alloc}]}, 0xfa, 0x49e, &(0x7f0000001300)="$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") openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x3, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x9, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x2, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0xc, 0x9, 0x0, 0x8, 0x20005}, 0x0, 0xd, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000000206059b868a100000000000070000001c0007800800114000000000080012400000ffff08000640000100000500010006000000050005000200000005000400000000000900020073797a300000000010000300686173683a69702c6d6163"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x4004084) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0xef, 0x0, 0x0, 0x4f, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x0, 0x101}, 0x114905, 0x3, 0x0, 0x5, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200008001}, 0x0, 0x20000000000000, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) socket(0x1d, 0x80000, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ptrace(0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x0, 0x2e0, 0x210, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x10], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x4}], 0x2, 0xb, 0x7fffffe}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'hsr0\x00', 'pim6reg1\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x42c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x32, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000001c0)={0x3, 0x8, 0x9, 0xd}) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 5m8.966314072s ago: executing program 44 (id=793): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x3, 0x0, '\x00', @empty, @empty}}}}}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000007f781850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000001c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@nombcache}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\xff\x87I[\xa8z>\x1cgB\xf5z\x06\a\xa4\xf2\xa3\x80\x14L\xc2\xb7\xee\xefO\x17pC11\xea)\xc5\xa2\xe9t\x82\\\x8d(\xe6\xd4\xb0L\x1e\x80\xe2Q\xd4=\xe9\xab\x01\xe3\x87hG\x98nR\xd4\x0f\x1a\xfa\xe4\xc3y\xa5\xdf$h\xb3\xe8\xb4*\xbf\x1d\xbce\xd2V%F\xc2\xde=\xfc\xfa\x99\x87\xf6\xab\xa1\xa2\xfc\xaaU\xf5\xb1\x1b\x98\xee\xd8\x8b@;\xc2\x15\xdc\xef0x0}) (async) r6 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 32) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040055}, 0x240008c1) (async) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', 0x800}) sendmsg$nl_route_sched(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e00080000"], 0x1c) (async, rerun: 64) sendmsg$nl_route_sched(r4, 0x0, 0x0) (async, rerun: 64) close(r3) ftruncate(0xffffffffffffffff, 0x3) (async) close(r6) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f00000003c0)={0x8001, 0x8, '\x00', 0x0, &(0x7f00000000c0)=[0x0]}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='vegas', 0x5) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080), 0xff, 0x49e, &(0x7f0000000f40)="$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") 4m30.308962989s ago: executing program 46 (id=982): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x82, 0xc7) socket$tipc(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000da22839d7e2b47d00000735b690200000000000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r1, &(0x7f0000001600), &(0x7f0000001700)=@udp=r0}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, 'bridge_slave_1\x00'}}, 0x1e) 4m29.112912005s ago: executing program 47 (id=984): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write(r2, &(0x7f0000000440)="a4ddd4c0291229db7857ba96a3e1c581acdffdad00f76844838f2d4492f591814424a99173f05900ddc977d45adb52a7c8dd0f0fb461c0186d4a11de5122b6a6a19e5f046ba270e6c14e09440509c40cc566e9dad28b56ce33e3bcbe1aaead276c7fc3aa33c7a4e361953810ccda0350b70d8436942fe3907cb730542dc682daf97523411b2994167502e40c1d5818c490eb3414d8187d48c07fdbe8668e1f154adf7c550972051fd80a8031557f515a2b4608b1c757ff10007c6b750c", 0xbd) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x2404c0c6}, 0x40041) process_vm_readv(0x0, &(0x7f0000000280)=[{&(0x7f0000010a00)=""/255, 0xa00}], 0x1, &(0x7f0000000100)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 4m15.216290845s ago: executing program 48 (id=1014): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x80000001) sendmsg(r0, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0x9}, 0x114434, 0x8, 0x100, 0x1, 0x5, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer=relative']) r1 = socket(0x1, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x80002017}) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9}, 0x38) 4m4.072134534s ago: executing program 49 (id=1060): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x80000000, r0, 0xfdffff7f00000000}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 4m2.337081009s ago: executing program 50 (id=1073): mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x501000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x9902) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timerfd_create(0x1, 0x80000) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x21, 0x2, 0xa) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000940)="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", 0x559, r1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r2}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ioperm(0x3, 0x5, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x180c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) 3m59.057745509s ago: executing program 51 (id=1092): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8cc, 0xff, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x7fffffff}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x7, 0x197, 0x4, 0x4, 0x0, 0x2}, [@TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x2}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400d5}, 0xc010) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) listns(&(0x7f0000000b80)={0x20, 0x0, 0x4, 0x8000000}, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x180c8, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESDEC], 0x1, 0x250, &(0x7f0000000300)="$eJzs3cFqE0EYB/DPJG1jL/YsHha8eArqyWuQCmJAiOSgJwPVSyvC9rJ62sfwGXwkH6On3lbaXZq2xl50M+3u7wdhPvgTZgZCJodvsh8ffTk8+Hr8ufr1I8bjLEYRZVVF7MUghlG714yD83o7LisDALhr5vPlNPUaaFeeT5dbEbHzR7L4mWRBAAAAAAAAAAAA/LN1/f9xqv8fALpM/38XDG9M83y63G1+v12l/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABI57SqHlQ3vFKvDwD4/5z/ANA/zn8A6B/nPwD0z7v3H95MZ7P9eZaNI07KYlEs6rHOX72e7T/Nzu2t3nVSFIvhRf6szrOr+VbsNvnztfl2PHlc52fZy7eza/lOHLS/fQAAAAAAAAAAAAAAAAAAALgVJtmFtff7J5O/5XV16f8Brt3fH8XD0ca2AQAAAAAAAAAAAAAAAAAAAHfa8bfvh8ujo0+5ojNFvGh9ikHz8bktWz4rIjY+6f1IMOmGisRfTAAAAAAAAAAAAAAAAAAA0EOrS7+pVwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6aye/99eERFlVUu9XQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDfgcAAP//wzuVuw==") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) syz_open_procfs$namespace(r4, &(0x7f0000000140)='ns/net\x00') setrlimit(0x0, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x182) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0) fallocate(r6, 0x10, 0x1, 0x434f) fallocate(r5, 0x2000000000000000, 0xbf5, 0x2000402) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 3m51.713378022s ago: executing program 52 (id=1100): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) dup(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000007000000010001000b94000001000000", @ANYRES32=0x1, @ANYBLOB="f8ffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140)=0x131, 0x4) 3m41.084353806s ago: executing program 8 (id=1130): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a, &(0x7f0000000340)=[r0, r0, r0, r0], 0x0, 0x10, 0x4}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)'], 0x28}, 0x922bac8576bdadce) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, &(0x7f0000000340)=r1, 0x38) 3m40.906748845s ago: executing program 8 (id=1133): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/set_event\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x9, 0x80000001, 0x3, 0x4, 0xffff, 0x0, 0x300000}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d30783030303030303030303b3030346532342c000d9766917c5083d51eaf9426504a8027a27e292bf98b4fc85a30ef542dc472d100c3fb24e9c0b5a605616188eee9a644d26716b7a1d645c7e778fd483ebc393445c13ab414ace4618a74af1e2032f905e1795c164b76cd5c4be7acea948cbd1fd7aa3f10bd8fa7a939abc4635611c9b29850d46bab21439510a6f9bfe6cac935483c856b8b9277e0452ef0da327a39c55912afbd9cee3314baac719bce77f0fe7060b45a94d8f57379d7f4cfbf57b1a3eb4ecda7d440f016214f4087501a2189b89b7dcc6bbdedb0"]) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setns(0xffffffffffffffff, 0x20000) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e1f, 0x3, 'lc\x00', 0x5, 0xa, 0x77}, {@broadcast, 0x4e20, 0x2, 0xcd, 0x0, 0x8000000}}, 0x44) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xff) socket$vsock_stream(0x28, 0x1, 0x0) 3m39.006371698s ago: executing program 8 (id=1139): r0 = socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) syz_clone(0x246111, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newqdisc={0x15c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x12c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xac, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xb}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x401}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x80000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x400}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3c}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4a1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0x7, 0x9, 0xf, 0x0, 0xc, 0x3, 0x6, 0x0, 0xd, 0x10, 0x7, 0x4, 0x10, 0x1, 0x2, 0x6], 0x1, [0xf8bd, 0x9, 0x8000, 0x0, 0x0, 0x101, 0x5, 0xd, 0x6, 0x7, 0x7fff, 0x8, 0x5, 0x6278, 0x1, 0x8], [0x3, 0x5, 0x400, 0xfff, 0x5, 0x81, 0x4, 0x5, 0x1, 0x92, 0x9, 0x6f9, 0xe, 0x4, 0x1, 0x8]}}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=@newchain={0x4c, 0x64, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x6, 0x1}, {0x10, 0xfff1}, {0x8, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x5, 0xb5}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x4c}}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x1, 0x10, 0x51b4, 0x6, {{0x28, 0x4, 0x0, 0x2, 0xa0, 0x65, 0x0, 0x9, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x13}, {[@cipso={0x86, 0x20, 0x2, [{0x2, 0x5, "76ff60"}, {0x2, 0x2}, {0x4, 0xd, "c4f36c8e9ebdf80d9f31df"}, {0x1, 0x6, "5efb7661"}]}, @generic={0x94, 0xc, "c41949a338fc1d05c342"}, @ssrr={0x89, 0x1b, 0xbb, [@broadcast, @remote, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}]}, @end, @lsrr={0x83, 0x1b, 0xf1, [@loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, @broadcast]}, @ssrr={0x89, 0x27, 0xea, [@local, @loopback, @multicast2, @remote, @multicast2, @multicast1, @remote, @remote, @remote]}, @noop, @noop]}}}}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000280)=[{0x3, 0x3, 0x7a, 0x2}]}) sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000006a0000042bbd7000fedbdf2500000000000000000400090008000100000000000400090004000b0008000500", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB="0400040009000000"], 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x41) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001340)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x6, 0x100, 0x8, 0x2, 0x11b8, 0x7}}, {0x4}}]}, @qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40000810) 3m38.004393471s ago: executing program 8 (id=1141): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000140)}, 0xb093, 0x800000, 0x1000002, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x3, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000340)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) file_getattr(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x18, 0x1000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b52, &(0x7f0000000100)={0xfffffffffffffcf0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x16e) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x1004044, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) execve(&(0x7f0000000000)='./proc/sys/kernel/sem\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0xa, @private1, 0x5}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x1a0, 0x7, 0x5, 0x8}, 0x10) r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20) acct(&(0x7f00000001c0)='./file0\x00') 3m33.73740335s ago: executing program 8 (id=1157): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20040405) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$packet(0x11, 0x3, 0x300) r1 = fsopen(&(0x7f0000000300)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 3m32.818835834s ago: executing program 8 (id=1163): r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x9]}, 0x8, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000005fc0)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_mpls={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x54}, @TCA_MPLS_PROTO={0xffffffffffffff72, 0x4, 0x17}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x58}}, 0x10) 3m32.517767641s ago: executing program 53 (id=1163): r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x9]}, 0x8, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000005fc0)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_mpls={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x54}, @TCA_MPLS_PROTO={0xffffffffffffff72, 0x4, 0x17}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x58}}, 0x10) 3m28.860731264s ago: executing program 3 (id=1183): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x9, 0x80000001, 0x3, 0x4, 0xffff, 0x0, 0x300000}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d30783030303030303030303b3030346532342c000d9766917c5083d51eaf9426504a8027a27e292bf98b4fc85a30ef542dc472d100c3fb24e9c0b5a605616188eee9a644d26716b7a1d645c7e778fd483ebc393445c13ab414ace4618a74af1e2032f905e1795c164b76cd5c4be7acea948cbd1fd7aa3f10bd8fa7a939abc4635611c9b29850d46bab21439510a6f9bfe6cac935483c856b8b9277e0452ef0da327a39c55912afbd9cee3314baac719bce77f0fe7060b45a94d8f57379d7f4cfbf57b1a3eb4ecda7d440f016214f4087501a2189b89b7dcc6bbdedb0"]) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setns(0xffffffffffffffff, 0x20000) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e1f, 0x3, 'lc\x00', 0x5, 0xa, 0x77}, {@broadcast, 0x4e20, 0x2, 0xcd, 0x0, 0x8000000}}, 0x44) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xff) socket$vsock_stream(0x28, 0x1, 0x0) 3m26.460243038s ago: executing program 3 (id=1187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000440)={0x64, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x50, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mic={0x8c, 0x18, {0xfac, "0000001000", @long="322e981dd4e9e4dccdb2eceabeb57be8"}}, @gcr_ga={0xbd, 0x6}, @measure_req={0x26, 0x25, {0x2, 0x0, 0x6, "31e1fd0ae36d3095053ef898767bed682c1f946d69f24b5fec645a0f3e22ed1536f4"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x24000890) 3m25.988808973s ago: executing program 3 (id=1188): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x21, 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) read(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x41, 0x3, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a8, 0x1f0, 0x1f0, 0x1a8, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0xff000000, 0xff, 'ip6tnl0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x98, 0x100, 0x0, {0x0, 0xffffffffa0028000}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x1000, 0x1, 0x1, 'syz1\x00', 'syz0\x00', {0xaf}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x3, 0x7}, {0x2, 0x5, 0xa}, {0x1, 0x6}, 0x100, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r4 = gettid() timer_create(0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000000c0)=r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000000)={0x76b5, 0x1, [{0x1, 0x1}]}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) close(0x3) write(r5, &(0x7f0000000100)='- 1 0 0', 0x7) waitid$P_PIDFD(0x3, r1, 0x0, 0x40000004, 0x0) select(0x406f205456671cf9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000310000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) 3m24.884728938s ago: executing program 3 (id=1192): syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@oldalloc}]}, 0x3, 0x4ee, &(0x7f0000002080)="$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") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) io_submit(0x0, 0x0, &(0x7f00000005c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x5}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m23.040530148s ago: executing program 3 (id=1203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x19, &(0x7f000001f700)={@broadcast, @remote, @val, {@mpls_uc={0x88a8, {[], @llc={@llc={0x0, 0x0, "0e"}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0xa2, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000006c06fffe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='P'], 0x0) 3m22.660654933s ago: executing program 3 (id=1207): futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 3m22.617673133s ago: executing program 54 (id=1207): futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 3m10.616614541s ago: executing program 6 (id=1262): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) connect$vsock_stream(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x100) migrate_pages(0x0, 0x0, &(0x7f0000000100)=0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000824) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000140), &(0x7f00000001c0), 0x2, 0x0) ioctl$BLKPG(r1, 0xc0c0128e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x2000000, 0x800000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x2, 0x0) tkill(r3, 0x13) socket(0x2, 0xa, 0x7fffffff) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setuid(0xee00) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x541000, 0x40) 3m10.462692965s ago: executing program 6 (id=1265): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x0, 0x0, 0xffffffffffffffff, 0x0) alarm(0x5) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0xf2ea, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r1, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000007c0)="4b000ffd096c1b77cd99b1000009c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c091f7d276305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd0eb9ae865614e2164f43b968c29910de437d051b7e7bd337f3aa414bda48049ba94d11ba32326eb56575bd72b747591396f7c26b28036952ef6cf8adae9acb1649d599f573f089df51d558fdba120e63db65ec3945f1e9e191ce966eb5693281d9c878f6a27ffef79481510bdd44e7cea15a670a713ea3ee8a488a42e0f63a852d23a37f4146e53829ff02555faf815eedb5ce5af9c2de0ab1e4e32b6d31ab4e98a078908ab5d046e4a6196ffe5c55010a4bb8b80dc993c8f94a9fda", 0x1b5}, {&(0x7f0000000380)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88cf1b612298d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e519e8", 0xa7}, {&(0x7f0000000440)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f00000024c0)="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", 0xbd5}, {&(0x7f0000000500)="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", 0x12a}], 0x5}}], 0x1, 0x40c0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r3, r2, 0x0, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000c40)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x7ffffffe, 0x0}, &(0x7f0000000c80)=0x40) keyctl$invalidate(0x15, 0x0) alarm(0x7fffffff) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) 3m9.174088312s ago: executing program 6 (id=1270): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="050000000400000004000000"], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a, &(0x7f0000000340)=[r0, r0, r0, r0], 0x0, 0x10, 0x4}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)'], 0x28}, 0x922bac8576bdadce) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, &(0x7f0000000340)=r1, 0x38) 3m8.369421421s ago: executing program 6 (id=1272): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x130, 0x130, 0x98, 0x130, 0x98, 0x398, 0x398, 0x130, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x81, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) close(0x3) listen(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0x1a9}) io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) ioctl$EXT4_IOC_MIGRATE(r2, 0xff09) 3m7.784501681s ago: executing program 6 (id=1273): mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x40000000001, 0xf60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x2b) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000300210d0000aaa8fa017242ba9380d424", 0x21) 3m7.364683255s ago: executing program 6 (id=1276): unshare(0x68040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0xfe, 0x240480d4}, 0x0) 3m7.171972757s ago: executing program 55 (id=1276): unshare(0x68040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0xfe, 0x240480d4}, 0x0) 3m6.833358903s ago: executing program 1 (id=1281): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20040844) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xef12, @local, 0xd}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x6000}}], 0x400000000000172, 0x4000000) 3m6.100603595s ago: executing program 1 (id=1282): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r1}, 0x38) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4d5, 0x3ff}, 0x0, 0x20000, 0x0, 0x8, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0xc6f40, 0x19b) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000000400)="74b8b8", 0x3) sendfile(r5, r4, 0x0, 0x7fffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0000e108000000820000100000"], 0x0, 0x1a, 0x0, 0x0, 0x3, 0x10000, @value=r5}, 0x28) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x19}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x5, 0x1, 0x4, 0x0, 0xfffe, 0x8, 0x7}, {0x0, 0x0, 0x7f}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@broadcast, 0xc, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0xe0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_OKEY={0x8, 0x5, 0x2}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88840}, 0x20040040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r8, 0x0, 0x0) 3m4.719963583s ago: executing program 1 (id=1287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd0100010000000800"], 0x18}}, 0x2000c01c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='common_pid', 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtclass={0x9c, 0x28, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0x9}, {0xc, 0xffe0}}, [@tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5b, 0x3}}, @TCA_RATE={0x6, 0x5, {0xcb, 0x45}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x2, 0x1, 0x876, 0x18bd, 0xffff, 0x2}, {0xff, 0x0, 0x57e, 0x6, 0xbc4, 0x6}, 0x5, 0x1, 0x800, 0x7, 0x5}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010f1608f1000010000000000000000000000000a2e000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000140000001000010000000000000000000100000ac78327da68b62d6c96503f3dd11bdbbdabeb9b26b69922f9af865cbd9af8e2e2ebae9bc7138f2dc25003a79d8b030e0f2ef45765446a892863527425ede5bab8f0fbe235da2281b8c8"], 0x54}}, 0x0) close_range(r8, r6, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280002, 0x4, 0x10009, 0x8}], 0x10, 0x1}, 0x94) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) futex(&(0x7f00000000c0)=0x2, 0x2, 0x2, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280), 0x2) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x1000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3m2.228527276s ago: executing program 1 (id=1293): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$eJzs3cFrm2UYAPCnadd20zUFRVARXwYevISu/gMrsoFYUOYi04PwzaYakiUjCZUM0eHFq/+B9+HRmyD+Azvo3Zu3XTzuMPZJ8iVd0mWbtbZh+vtB+Z587/t8fb835OPJITx3r353vbHbrexmvShdSFGKiNK9iPVhVFgYHUvDeDkm3Yo3y1d/f+2Djz5+d2t7++LllC5tXXlrM6W09vrPX3z5w7lfes99+OPaTytxZ/2Tu39u/nHnpTsv331w5fN6N9W7aandS1m61m73smvNWtqpdxuVlN5v1rJuLdVb3Vpnany32b5xo5+y1s7ZMzc6tW43Za1+atT6qddOvbV+yj7L6q1UqVTS2TPB01RvX76cbRXx6hPmXTipBXEMOp2tbPAZXnlkpHp7LgsCAObqqPX/8tHq/9Z0/X8quo3KC28Ulz50/d9R/x/SZP3Pf9Wg/l8efX4jIn/4PUD9DwAAAAAAAAAAAAAAz4J7eV7O87w8Pu7/OGD0es7L45g98v4f+Jv3+jheEz/cW41ofrtX3asWx2J8azfq0YxabEQ57g8eC2NFfOmd7YsbaWg9zl7/eph/7teI6uJ0/vkox/rs/PNFftrPj8HxVJyZzN+Mcrw4O39zZv5ybHw/kV+Jcvz2abSjGTvDx9vD/K/Op/T2e9sH8leG8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4f6iksVej6Hu/V404HXuj/v2VhxPWp/vjF/mj/vql2Ihy3J/dn39jZn/+pXhlab73DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABj3f7NRtZs1jonFYx7/g/PLI+Dx2ctFNNvHRg6HdOTV552nb8f5HmeP8jzfGqodKjrnB7d5IyhwZW/WS2GizM7rX9re1cXTvStPEpwKiKeMCcfbeDk0GL8k//1/P4+z5yzEhHHeqdrg6A0/w0/dHDijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MXC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTh4JmsuxmMmPy6Y9z0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//xp0CCU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ea) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='0f', 0x2) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000006, 0x0, @perf_config_ext, 0x100820, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x2, 0x20000) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000000c0)={0x4, 0x6dea, 0x7ce}) bind(r2, &(0x7f0000000500)=@generic={0x2d, "00000100000008010800"}, 0x80) syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x78, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x873a84884f5b3ade, 0x7, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}]}}}}}}}, 0x0) r3 = socket(0x2d, 0x2, 0x0) sendto(r3, &(0x7f0000000600)="0101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101", 0x4a, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800"}, 0x80) 2m57.286145176s ago: executing program 1 (id=1299): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16, @ANYRESOCT], 0x10, 0x121a, &(0x7f00000008c0)="$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") fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x4c040, 0x0) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c050}], 0x1, 0x40) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) getdents(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x1000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x387, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\fJ', 0x2}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 2m50.056694083s ago: executing program 1 (id=1320): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d38, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m49.878155103s ago: executing program 56 (id=1320): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d38, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m41.824238564s ago: executing program 5 (id=1379): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2}) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) 2m41.771141196s ago: executing program 5 (id=1380): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x1, 0xfffffffe, 0x1a, "0038e0079c7f65c5d13c000000f73809630400"}) r2 = syz_open_pts(r1, 0x900) r3 = dup3(r2, r1, 0x80000) socket$nl_route(0x10, 0x3, 0x0) read$watch_queue(r3, 0x0, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) 2m39.905346981s ago: executing program 5 (id=1390): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)="306663353a313232373a62616b7e896f6272a17c5e57392f689417233586bb3099f02334bc59172c", 0x28) 2m39.410610671s ago: executing program 5 (id=1398): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 2m39.049939821s ago: executing program 5 (id=1401): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) 2m37.280575015s ago: executing program 5 (id=1409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000009060500"], 0x44}}, 0x0) 2m36.900459369s ago: executing program 57 (id=1409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000009060500"], 0x44}}, 0x0) 1.436564578s ago: executing program 0 (id=3270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xd}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c12344000402f149b0a0000010a00000204d2"], 0x1c) 1.286900896s ago: executing program 9 (id=3276): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) 1.286238316s ago: executing program 2 (id=3277): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@id, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24004910) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@fallback, 0xffffffffffffffff, 0x3c, 0x4}, 0x20) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000085100020060000004f49800010000000660800000000000018000000000000000000000000000000950000000000000036180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x41000, 0x8}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002130000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0x1103, r2}, 0x38) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000880), 0x531c, r4}, 0x38) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.197482078s ago: executing program 0 (id=3280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x1, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xbc7a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x25d4}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000840) 1.184886842s ago: executing program 9 (id=3281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x48, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29e}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000324c1020000ff8807c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 1.018662784s ago: executing program 7 (id=3283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4015}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f4000000000000", 0x2c}], 0x1}, 0x4005) 1.011461686s ago: executing program 0 (id=3284): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f0000000100)=r0, 0x4) 898.560764ms ago: executing program 0 (id=3286): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000380)={0x18, 0x0, {0x1, @multicast, 'bridge0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xc0002, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x56a4c5c) pwritev(r1, &(0x7f00000008c0)=[{&(0x7f0000000440)="bb", 0x1}, {&(0x7f0000000540)="75d8", 0x2}], 0x2, 0x1, 0x8) 887.443266ms ago: executing program 4 (id=3287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0xfffc}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 878.388549ms ago: executing program 9 (id=3288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2300000005000000000400000900000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r0}, &(0x7f0000000a80), &(0x7f0000000ac0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 762.938818ms ago: executing program 4 (id=3289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 702.419893ms ago: executing program 9 (id=3290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xd}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}]}, 0x38}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c12344000402f149b0a0000010a00000204d2"], 0x1c) 701.594664ms ago: executing program 2 (id=3291): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000b00875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 674.84124ms ago: executing program 4 (id=3292): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) 644.827758ms ago: executing program 2 (id=3293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 613.513416ms ago: executing program 7 (id=3294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x1, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xbc7a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x25d4}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000840) 545.303973ms ago: executing program 0 (id=3295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, 0x0}, 0x0) 544.967303ms ago: executing program 2 (id=3296): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f0000000100)=r0, 0x4) 536.527025ms ago: executing program 4 (id=3297): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000000600135433f6e31e1712", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 462.855874ms ago: executing program 7 (id=3298): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x17, &(0x7f0000000100), 0x4) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x4e22, 0x7fff, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000002900000036"], 0x18}, 0x1) 413.019836ms ago: executing program 2 (id=3299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0xfffc}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 412.586646ms ago: executing program 4 (id=3300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x1, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0xfdef}], 0x1}, 0x4005) 398.41451ms ago: executing program 9 (id=3301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2300000005000000000400000900000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r0}, &(0x7f0000000a80), &(0x7f0000000ac0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 365.689168ms ago: executing program 2 (id=3302): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@id, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24004910) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@fallback, 0xffffffffffffffff, 0x3c, 0x4}, 0x20) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000085100020060000004f49800010000000660800000000000018000000000000000000000000000000950000000000000036180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x41000, 0x8}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002130000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0x1103, r2}, 0x38) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000880), 0x531c, r4}, 0x38) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) 316.473031ms ago: executing program 7 (id=3303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x13, 0x0, 0x0, 0x810}, 0x20004000) 264.548854ms ago: executing program 9 (id=3304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4015}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f4000000000000", 0x2c}], 0x1}, 0x4005) 245.793848ms ago: executing program 0 (id=3305): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000380)={0x18, 0x0, {0x1, @multicast, 'bridge0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xc0002, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x56a4c5c) pwritev(r1, &(0x7f00000008c0)=[{&(0x7f0000000440)="bb", 0x1}, {&(0x7f0000000540)="75d8", 0x2}], 0x2, 0x1, 0x8) 187.585493ms ago: executing program 7 (id=3306): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000b00875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 107.034713ms ago: executing program 4 (id=3307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x0}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) 0s ago: executing program 7 (id=3308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x1, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xbc7a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x25d4}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000840) kernel console output (not intermixed with test programs): 000-0000-0000-000000000000. [ 390.758789][T13308] FAULT_INJECTION: forcing a failure. [ 390.758789][T13308] name fail_futex, interval 1, probability 0, space 0, times 0 [ 390.758824][T13308] CPU: 1 UID: 0 PID: 13308 Comm: syz.7.1696 Not tainted syzkaller #0 PREEMPT(lazy) [ 390.758851][T13308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.758872][T13308] Call Trace: [ 390.758884][T13308] [ 390.758976][T13308] __dump_stack+0x1d/0x30 [ 390.759008][T13308] dump_stack_lvl+0x95/0xd0 [ 390.759033][T13308] dump_stack+0x15/0x1b [ 390.759069][T13308] should_fail_ex+0x262/0x280 [ 390.759179][T13308] should_fail+0xb/0x20 [ 390.759249][T13308] get_futex_key+0x12d/0xb10 [ 390.759283][T13308] futex_wait_setup+0x49/0x3e0 [ 390.759367][T13308] ? trace_event_buffer_commit+0x174/0x590 [ 390.759568][T13308] __futex_wait+0xa9/0x260 [ 390.759593][T13308] ? __pfx_futex_wake_mark+0x10/0x10 [ 390.759622][T13308] futex_wait+0x98/0x1c0 [ 390.759737][T13308] do_futex+0x391/0x460 [ 390.759851][T13308] __se_sys_futex+0x2f6/0x370 [ 390.759928][T13308] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 390.759958][T13308] __x64_sys_futex+0x78/0x90 [ 390.759995][T13308] x64_sys_call+0x22e2/0x2550 [ 390.760101][T13308] do_syscall_64+0x112/0x360 [ 390.760129][T13308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.760158][T13308] RIP: 0033:0x7f3b4e28e159 [ 390.760175][T13308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.760255][T13308] RSP: 002b:00007f3b4cce70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 390.760284][T13308] RAX: ffffffffffffffda RBX: 00007f3b4e515fa8 RCX: 00007f3b4e28e159 [ 390.760304][T13308] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3b4e515fa8 [ 390.760320][T13308] RBP: 00007f3b4e515fa0 R08: 0000000000000000 R09: 0000000000000000 [ 390.760388][T13308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.760406][T13308] R13: 00007f3b4e516038 R14: 00007ffff47578a0 R15: 00007ffff4757988 [ 390.760430][T13308] [ 391.072333][T13316] FAULT_INJECTION: forcing a failure. [ 391.072333][T13316] name failslab, interval 1, probability 0, space 0, times 0 [ 391.072367][T13316] CPU: 0 UID: 0 PID: 13316 Comm: syz.2.1699 Not tainted syzkaller #0 PREEMPT(lazy) [ 391.072394][T13316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.072442][T13316] Call Trace: [ 391.072452][T13316] [ 391.072464][T13316] __dump_stack+0x1d/0x30 [ 391.072498][T13316] dump_stack_lvl+0x95/0xd0 [ 391.072523][T13316] dump_stack+0x15/0x1b [ 391.072590][T13316] should_fail_ex+0x262/0x280 [ 391.072618][T13316] should_failslab+0x8c/0xb0 [ 391.072649][T13316] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 391.072776][T13316] ? sock_alloc_inode+0x36/0xf0 [ 391.072806][T13316] ? sock_alloc_inode+0x36/0xf0 [ 391.072836][T13316] ? selinux_socket_create+0x86/0x180 [ 391.072941][T13316] ? __pfx_sock_alloc_inode+0x10/0x10 [ 391.072976][T13316] sock_alloc_inode+0x36/0xf0 [ 391.073059][T13316] alloc_inode+0x40/0x170 [ 391.073096][T13316] __sock_create+0x121/0x580 [ 391.073132][T13316] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 391.073254][T13316] sock_create_kern+0x38/0x50 [ 391.073291][T13316] inet_ctl_sock_create+0x58/0x130 [ 391.073323][T13316] igmp6_net_init+0x37/0x260 [ 391.073380][T13316] ops_init+0x22a/0x2e0 [ 391.073418][T13316] setup_net+0x9f/0x230 [ 391.073516][T13316] copy_net_ns+0x333/0x490 [ 391.073549][T13316] create_new_namespaces+0x1f6/0x420 [ 391.073654][T13316] unshare_nsproxy_namespaces+0x115/0x150 [ 391.073696][T13316] ksys_unshare+0x42b/0x710 [ 391.073844][T13316] __x64_sys_unshare+0x1f/0x30 [ 391.073872][T13316] x64_sys_call+0x1e33/0x2550 [ 391.073902][T13316] do_syscall_64+0x112/0x360 [ 391.073964][T13316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.074013][T13316] RIP: 0033:0x7fc8ebd8e159 [ 391.074031][T13316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.074051][T13316] RSP: 002b:00007fc8ea7e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 391.074080][T13316] RAX: ffffffffffffffda RBX: 00007fc8ec015fa0 RCX: 00007fc8ebd8e159 [ 391.074129][T13316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 391.074145][T13316] RBP: 00007fc8ebe2506b R08: 0000000000000000 R09: 0000000000000000 [ 391.074161][T13316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.074179][T13316] R13: 00007fc8ec016038 R14: 00007fc8ec015fa0 R15: 00007ffc8c7e46f8 [ 391.074214][T13316] [ 391.085949][T13317] FAULT_INJECTION: forcing a failure. [ 391.085949][T13317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.085982][T13317] CPU: 0 UID: 0 PID: 13317 Comm: syz.0.1700 Not tainted syzkaller #0 PREEMPT(lazy) [ 391.086054][T13317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.086072][T13317] Call Trace: [ 391.086082][T13317] [ 391.086117][T13317] __dump_stack+0x1d/0x30 [ 391.086142][T13317] dump_stack_lvl+0x95/0xd0 [ 391.086241][T13317] dump_stack+0x15/0x1b [ 391.086266][T13317] should_fail_ex+0x262/0x280 [ 391.086294][T13317] should_fail+0xb/0x20 [ 391.086341][T13317] should_fail_usercopy+0x1a/0x20 [ 391.086423][T13317] strncpy_from_user+0x27/0x250 [ 391.086456][T13317] path_setxattrat+0xeb/0x320 [ 391.086514][T13317] __x64_sys_setxattr+0x6e/0x90 [ 391.086542][T13317] x64_sys_call+0xf6c/0x2550 [ 391.086585][T13317] do_syscall_64+0x112/0x360 [ 391.086689][T13317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.086790][T13317] RIP: 0033:0x7fb915a9e159 [ 391.086840][T13317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.086919][T13317] RSP: 002b:00007fb9144f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 391.086942][T13317] RAX: ffffffffffffffda RBX: 00007fb915d25fa0 RCX: 00007fb915a9e159 [ 391.086958][T13317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 391.086978][T13317] RBP: 00007fb915b3506b R08: 0000000000000003 R09: 0000000000000000 [ 391.086995][T13317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.087029][T13317] R13: 00007fb915d26038 R14: 00007fb915d25fa0 R15: 00007ffdc8cf4528 [ 391.087052][T13317] [ 391.132324][T13316] socket: no more sockets [ 391.132337][T13316] Failed to initialize the IGMP6 control socket (err -23) [ 391.171548][T13319] loop4: detected capacity change from 0 to 1024 [ 391.187299][T13319] EXT4-fs: Ignoring removed oldalloc option [ 391.187334][T13319] EXT4-fs: Ignoring removed orlov option [ 391.245855][T13319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 391.245976][T13319] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.435196][T13325] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.1701: Freeing blocks not in datazone - block = 0, count = 16 [ 391.731968][ T6651] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm kworker/u8:26: bg 0: block 112: padding at end of block bitmap is not set [ 391.736636][ T6651] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 391.736664][ T6651] EXT4-fs (loop4): This should not happen!! Data will be lost [ 391.736664][ T6651] [ 391.736680][ T6651] EXT4-fs (loop4): Total free blocks count 0 [ 391.736695][ T6651] EXT4-fs (loop4): Free/Dirty block details [ 391.736715][ T6651] EXT4-fs (loop4): free_blocks=16 [ 391.736731][ T6651] EXT4-fs (loop4): dirty_blocks=64 [ 391.736746][ T6651] EXT4-fs (loop4): Block reservation details [ 391.736760][ T6651] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 391.748621][ T6651] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 36 with error 28 [ 391.751988][T11995] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 392.564270][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'. [ 393.563120][T13371] FAULT_INJECTION: forcing a failure. [ 393.563120][T13371] name fail_futex, interval 1, probability 0, space 0, times 0 [ 393.563157][T13371] CPU: 0 UID: 0 PID: 13371 Comm: syz.0.1713 Not tainted syzkaller #0 PREEMPT(lazy) [ 393.563258][T13371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.563273][T13371] Call Trace: [ 393.563283][T13371] [ 393.563295][T13371] __dump_stack+0x1d/0x30 [ 393.563342][T13371] dump_stack_lvl+0x95/0xd0 [ 393.563367][T13371] dump_stack+0x15/0x1b [ 393.563395][T13371] should_fail_ex+0x262/0x280 [ 393.563427][T13371] should_fail+0xb/0x20 [ 393.563466][T13371] get_futex_key+0x82d/0xb10 [ 393.563498][T13371] futex_wake_op+0x13e/0xa90 [ 393.563575][T13371] do_futex+0x442/0x460 [ 393.563611][T13371] __se_sys_futex+0x2f6/0x370 [ 393.563643][T13371] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 393.563759][T13371] __x64_sys_futex+0x78/0x90 [ 393.563797][T13371] x64_sys_call+0x22e2/0x2550 [ 393.563871][T13371] do_syscall_64+0x112/0x360 [ 393.563900][T13371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.563928][T13371] RIP: 0033:0x7fb915a9e159 [ 393.563948][T13371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.564050][T13371] RSP: 002b:00007fb9144f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 393.564078][T13371] RAX: ffffffffffffffda RBX: 00007fb915d25fa0 RCX: 00007fb915a9e159 [ 393.564098][T13371] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000020000000cffc [ 393.564116][T13371] RBP: 00007fb915b3506b R08: 0000200000000000 R09: 0000000041000000 [ 393.564135][T13371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.564217][T13371] R13: 00007fb915d26038 R14: 00007fb915d25fa0 R15: 00007ffdc8cf4528 [ 393.564237][T13371] [ 393.864315][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 393.864336][ T29] audit: type=1400 audit(1790960071.727:4790): avc: denied { write } for pid=13362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.064540][ T29] audit: type=1400 audit(1790960073.010:4791): avc: denied { write } for pid=13377 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.532852][T13398] can0: slcan on ttyS3. [ 395.373957][ T29] audit: type=1400 audit(1790960074.280:4792): avc: denied { write } for pid=13395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.423778][T13410] ªªªªªª: renamed from vlan0 (while UP) [ 395.583644][ T29] audit: type=1400 audit(1790960074.520:4793): avc: denied { write } for pid=13417 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.646357][T13398] can0 (unregistered): slcan off ttyS3. [ 395.670430][ T3023] 8021q: adding VLAN 0 to HW filter on device eth17 [ 396.000463][T13442] tipc: Enabled bearer , priority 10 [ 396.083497][T13446] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1735'. [ 396.132060][ T29] audit: type=1400 audit(1790960075.070:4794): avc: denied { write } for pid=13429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.205960][ T29] audit: type=1400 audit(1790960075.150:4795): avc: denied { write } for pid=13456 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.306838][ T29] audit: type=1400 audit(1790960075.250:4796): avc: denied { write } for pid=13450 comm="syz.9.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 396.372991][ T3023] 8021q: adding VLAN 0 to HW filter on device eth18 [ 396.513156][T13468] loop4: detected capacity change from 0 to 512 [ 396.560131][T13468] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1741: inode has both inline data and extents flags [ 396.560166][T13468] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 396.561412][T13468] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1741: couldn't read orphan inode 15 (err -117) [ 396.561530][T13468] loop4: lost filesystem error report for type 5 error -117 [ 396.600465][T13468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.612319][ T29] audit: type=1400 audit(1790960075.550:4797): avc: denied { write } for pid=13466 comm="syz.4.1741" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 396.691314][T11995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.981896][T13492] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1748'. [ 397.027912][ T29] audit: type=1400 audit(1790960075.970:4798): avc: denied { write } for pid=13465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.172694][ T29] audit: type=1400 audit(1790960076.110:4799): avc: denied { write } for pid=13504 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.273247][ T3023] 8021q: adding VLAN 0 to HW filter on device eth19 [ 397.289508][T13512] loop7: detected capacity change from 0 to 512 [ 397.323048][T13512] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.1754: inode has both inline data and extents flags [ 397.323076][T13512] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 397.323968][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 397.323989][ C0] EXT4-fs (loop7): initial error at time 1790960076: ext4_orphan_get:1403: inode 15 [ 397.324053][ C0] EXT4-fs (loop7): last error at time 1790960076: ext4_orphan_get:1403: inode 15 [ 397.325401][T13512] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.1754: couldn't read orphan inode 15 (err -117) [ 397.325432][T13512] loop7: lost filesystem error report for type 5 error -117 [ 397.328093][T13512] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.438696][T11270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.906294][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 398.260126][ T3023] 8021q: adding VLAN 0 to HW filter on device eth20 [ 398.282983][T13559] FAULT_INJECTION: forcing a failure. [ 398.282983][T13559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.283012][T13559] CPU: 0 UID: 0 PID: 13559 Comm: syz.9.1769 Not tainted syzkaller #0 PREEMPT(lazy) [ 398.283079][T13559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.283097][T13559] Call Trace: [ 398.283160][T13559] [ 398.283173][T13559] __dump_stack+0x1d/0x30 [ 398.283204][T13559] dump_stack_lvl+0x95/0xd0 [ 398.283233][T13559] dump_stack+0x15/0x1b [ 398.283326][T13559] should_fail_ex+0x262/0x280 [ 398.283374][T13559] should_fail+0xb/0x20 [ 398.283397][T13559] should_fail_usercopy+0x1a/0x20 [ 398.283424][T13559] strncpy_from_user+0x27/0x250 [ 398.283447][T13559] path_setxattrat+0xeb/0x320 [ 398.283552][T13559] __x64_sys_setxattr+0x6e/0x90 [ 398.283627][T13559] x64_sys_call+0xf6c/0x2550 [ 398.283661][T13559] do_syscall_64+0x112/0x360 [ 398.283701][T13559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.283732][T13559] RIP: 0033:0x7f9f9671e159 [ 398.283754][T13559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.283779][T13559] RSP: 002b:00007f9f95177028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 398.283809][T13559] RAX: ffffffffffffffda RBX: 00007f9f969a5fa0 RCX: 00007f9f9671e159 [ 398.283836][T13559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 398.283851][T13559] RBP: 00007f9f967b506b R08: 0000000000000003 R09: 0000000000000000 [ 398.283869][T13559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.283886][T13559] R13: 00007f9f969a6038 R14: 00007f9f969a5fa0 R15: 00007fff5e578be8 [ 398.283964][T13559] [ 398.561374][T13564] ip_tables: iptables: counters copy to user failed while replacing table [ 398.658047][T13569] loop9: detected capacity change from 0 to 512 [ 398.658604][T13569] EXT4-fs: Ignoring removed orlov option [ 398.703759][T13569] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.718598][T13569] ext4 filesystem being mounted at /101/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.842715][T11699] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.164024][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 399.164045][ T29] audit: type=1400 audit(1790960078.070:4808): avc: denied { write } for pid=13598 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.934155][T13597] syzkaller0: entered promiscuous mode [ 399.934179][T13597] syzkaller0: entered allmulticast mode [ 400.264822][ T29] audit: type=1400 audit(1790960079.210:4809): avc: denied { write } for pid=13601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.434939][T13640] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1790'. [ 400.516987][ T29] audit: type=1400 audit(1790960079.460:4810): avc: denied { write } for pid=13641 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.178053][T13682] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1803'. [ 401.432089][ T6651] IPVS: starting estimator thread 0... [ 401.444724][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1806'. [ 401.514217][T13695] IPVS: using max 2256 ests per chain, 112800 per kthread [ 401.923042][T13705] netlink: 'syz.9.1811': attribute type 1 has an invalid length. [ 401.997225][T13705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.299879][T13722] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1818'. [ 403.564155][ T29] audit: type=1400 audit(1790960082.460:4811): avc: denied { write } for pid=13678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.692553][ T29] audit: type=1400 audit(1790960082.630:4812): avc: denied { write } for pid=13738 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.198990][T13763] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1828'. [ 404.258063][T13766] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1829'. [ 404.428608][T13778] ip_tables: iptables: counters copy to user failed while replacing table [ 404.530300][ T29] audit: type=1400 audit(1790960083.470:4813): avc: denied { write } for pid=13756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.609959][ T29] audit: type=1400 audit(1790960083.550:4814): avc: denied { write } for pid=13791 comm="syz.9.1838" name="strings" dev="configfs" ino=20434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 404.637140][ T29] audit: type=1400 audit(1790960083.560:4815): avc: denied { write } for pid=13791 comm="syz.9.1838" name="configs" dev="configfs" ino=20433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 404.637227][ T29] audit: type=1400 audit(1790960083.560:4816): avc: denied { write } for pid=13791 comm="syz.9.1838" name="functions" dev="configfs" ino=20432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 404.637261][ T29] audit: type=1400 audit(1790960083.560:4817): avc: denied { read } for pid=13791 comm="syz.9.1838" name="protocol" dev="configfs" ino=43186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 404.638144][T13793] UDC core: g1: couldn't find an available UDC or it's busy [ 404.728081][ T29] audit: type=1400 audit(1790960083.670:4818): avc: denied { write } for pid=13795 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.874225][T13803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1842'. [ 405.005073][T13810] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1843'. [ 405.619846][T13841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1854'. [ 405.676509][T13843] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1855'. [ 405.717508][ T29] audit: type=1400 audit(1790960084.660:4819): avc: denied { write } for pid=13806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.233909][ T29] audit: type=1400 audit(1790960085.160:4820): avc: denied { write } for pid=13848 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.806066][ T29] audit: type=1326 audit(1790960085.750:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13844 comm="syz.2.1856" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8ebd8e159 code=0x0 [ 406.912187][ T29] audit: type=1400 audit(1790960085.850:4822): avc: denied { write } for pid=13863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.145039][T13888] loop7: detected capacity change from 0 to 512 [ 407.162023][T13888] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 407.442672][T13888] EXT4-fs (loop7): 1 truncate cleaned up [ 407.451106][T13888] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.498892][T13876] loop9: detected capacity change from 0 to 8192 [ 407.654710][T11270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.811835][T13906] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1868'. [ 408.171211][T13926] syzkaller0: entered promiscuous mode [ 408.171232][T13926] syzkaller0: entered allmulticast mode [ 408.584810][T13939] loop4: detected capacity change from 0 to 8192 [ 408.792610][T13959] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1882'. [ 410.220035][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 410.220053][ T29] audit: type=1400 audit(1790960089.160:4829): avc: denied { write } for pid=13981 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.271927][T13991] tipc: Started in network mode [ 410.271955][T13991] tipc: Node identity 7f000001, cluster identity 4711 [ 410.272327][T13991] tipc: Enabled bearer , priority 10 [ 410.735755][T14006] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1896'. [ 410.832680][T14016] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 411.086455][T14026] syzkaller0: entered promiscuous mode [ 411.086480][T14026] syzkaller0: entered allmulticast mode [ 411.331192][ T29] audit: type=1400 audit(1790960090.260:4830): avc: denied { write } for pid=13995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.504766][ T29] audit: type=1400 audit(1790960090.430:4831): avc: denied { write } for pid=14033 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.540905][ T4281] tipc: Node number set to 2130706433 [ 413.146700][T14063] loop4: detected capacity change from 0 to 512 [ 413.253523][T14063] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1913: inode has both inline data and extents flags [ 413.253558][T14063] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 413.253914][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 413.253941][ C0] EXT4-fs (loop4): initial error at time 1790960092: ext4_orphan_get:1403: inode 15 [ 413.253994][ C0] EXT4-fs (loop4): last error at time 1790960092: ext4_orphan_get:1403: inode 15 [ 413.321014][T14063] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1913: couldn't read orphan inode 15 (err -117) [ 413.321049][T14063] loop4: lost filesystem error report for type 5 error -117 [ 413.322177][T14063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.390121][ T29] audit: type=1400 audit(1790960092.330:4832): avc: denied { write } for pid=14058 comm="syz.4.1913" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 413.506843][T11995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.638062][T14077] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1919'. [ 413.844817][ T29] audit: type=1400 audit(1790960092.790:4833): avc: denied { write } for pid=14045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 413.871519][T14092] FAULT_INJECTION: forcing a failure. [ 413.871519][T14092] name failslab, interval 1, probability 0, space 0, times 0 [ 413.871575][T14092] CPU: 1 UID: 0 PID: 14092 Comm: syz.9.1926 Not tainted syzkaller #0 PREEMPT(lazy) [ 413.871621][T14092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.871637][T14092] Call Trace: [ 413.871647][T14092] [ 413.871658][T14092] __dump_stack+0x1d/0x30 [ 413.871687][T14092] dump_stack_lvl+0x95/0xd0 [ 413.871782][T14092] dump_stack+0x15/0x1b [ 413.871806][T14092] should_fail_ex+0x262/0x280 [ 413.871837][T14092] ? sctp_stream_init_ext+0x39/0x130 [ 413.871939][T14092] should_failslab+0x8c/0xb0 [ 413.872039][T14092] __kmalloc_cache_noprof+0x7a/0x400 [ 413.872077][T14092] ? sctp_stream_init_ext+0x39/0x130 [ 413.872109][T14092] sctp_stream_init_ext+0x39/0x130 [ 413.872199][T14092] sctp_sendmsg_to_asoc+0xe5d/0xf00 [ 413.872327][T14092] ? sctp_connect_new_asoc+0x29c/0x3a0 [ 413.872368][T14092] sctp_sendmsg+0x1350/0x1d00 [ 413.872445][T14092] ? __pfx_sctp_sendmsg+0x10/0x10 [ 413.872484][T14092] inet_sendmsg+0xc5/0xd0 [ 413.872515][T14092] ? __pfx_inet_sendmsg+0x10/0x10 [ 413.872587][T14092] ____sys_sendmsg+0x4e8/0x580 [ 413.872615][T14092] ___sys_sendmsg+0x195/0x1e0 [ 413.872683][T14092] __sys_sendmmsg+0x185/0x320 [ 413.872716][T14092] __x64_sys_sendmmsg+0x57/0x70 [ 413.872811][T14092] x64_sys_call+0x1fb4/0x2550 [ 413.872841][T14092] do_syscall_64+0x112/0x360 [ 413.872869][T14092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.872956][T14092] RIP: 0033:0x7f9f9671e159 [ 413.872976][T14092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.873063][T14092] RSP: 002b:00007f9f95177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 413.873088][T14092] RAX: ffffffffffffffda RBX: 00007f9f969a5fa0 RCX: 00007f9f9671e159 [ 413.873106][T14092] RDX: 0000000000000001 RSI: 0000200000002680 RDI: 0000000000000004 [ 413.873128][T14092] RBP: 00007f9f967b506b R08: 0000000000000000 R09: 0000000000000000 [ 413.873167][T14092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.873183][T14092] R13: 00007f9f969a6038 R14: 00007f9f969a5fa0 R15: 00007fff5e578be8 [ 413.873211][T14092] [ 414.042442][T14095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1927'. [ 414.084560][ T29] audit: type=1400 audit(1790960093.020:4834): avc: denied { write } for pid=14101 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.353698][T14113] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1934'. [ 414.511861][T14132] loop7: detected capacity change from 0 to 512 [ 414.525498][ T29] audit: type=1400 audit(1790960093.470:4835): avc: denied { write } for pid=14111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.527737][T14132] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 414.562558][T14132] EXT4-fs (loop7): 1 truncate cleaned up [ 414.563424][T14132] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.640996][ T29] audit: type=1400 audit(1790960093.580:4836): avc: denied { write } for pid=14141 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.799535][T11270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.015745][T14152] syzkaller0: entered promiscuous mode [ 415.015766][T14152] syzkaller0: entered allmulticast mode [ 415.199646][T14166] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1950'. [ 415.329397][ T29] audit: type=1400 audit(1790960094.270:4837): avc: denied { write } for pid=14156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.370032][T14178] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1953'. [ 415.372563][T14179] loop7: detected capacity change from 0 to 512 [ 415.417354][T14179] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.1954: inode has both inline data and extents flags [ 415.417430][T14179] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 415.418713][T14179] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.1954: couldn't read orphan inode 15 (err -117) [ 415.418779][T14179] loop7: lost filesystem error report for type 5 error -117 [ 415.423314][T14179] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.522692][ T29] audit: type=1400 audit(1790960094.460:4838): avc: denied { write } for pid=14177 comm="syz.7.1954" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.573446][ T29] audit: type=1400 audit(1790960094.510:4839): avc: denied { write } for pid=14187 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.613986][T14073] loop4: detected capacity change from 0 to 8192 [ 415.622526][T11270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.941436][T14211] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1963'. [ 416.030792][T14219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1967'. [ 416.153569][ T29] audit: type=1400 audit(1790960095.090:4840): avc: denied { write } for pid=14202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.154711][T14230] loop4: detected capacity change from 0 to 512 [ 416.192100][T14230] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 416.209429][T14230] EXT4-fs (loop4): 1 truncate cleaned up [ 416.213171][T14230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.255538][T14229] syzkaller0: entered promiscuous mode [ 416.255663][T14229] syzkaller0: entered allmulticast mode [ 416.302836][T11995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.326311][ T29] audit: type=1400 audit(1790960095.270:4841): avc: denied { write } for pid=14236 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.395093][T14238] FAULT_INJECTION: forcing a failure. [ 416.395093][T14238] name fail_futex, interval 1, probability 0, space 0, times 0 [ 416.395125][T14238] CPU: 0 UID: 0 PID: 14238 Comm: syz.0.1973 Not tainted syzkaller #0 PREEMPT(lazy) [ 416.395160][T14238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.395179][T14238] Call Trace: [ 416.395189][T14238] [ 416.395279][T14238] __dump_stack+0x1d/0x30 [ 416.395307][T14238] dump_stack_lvl+0x95/0xd0 [ 416.395334][T14238] dump_stack+0x15/0x1b [ 416.395362][T14238] should_fail_ex+0x262/0x280 [ 416.395450][T14238] should_fail+0xb/0x20 [ 416.395479][T14238] get_futex_key+0x12d/0xb10 [ 416.395558][T14238] futex_wait_setup+0x49/0x3e0 [ 416.395584][T14238] ? trace_event_buffer_commit+0x174/0x590 [ 416.395624][T14238] __futex_wait+0xa9/0x260 [ 416.395648][T14238] ? __pfx_futex_wake_mark+0x10/0x10 [ 416.395673][T14238] futex_wait+0x98/0x1c0 [ 416.395703][T14238] do_futex+0x391/0x460 [ 416.395809][T14238] __se_sys_futex+0x2f6/0x370 [ 416.395842][T14238] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 416.395869][T14238] __x64_sys_futex+0x78/0x90 [ 416.395971][T14238] x64_sys_call+0x22e2/0x2550 [ 416.396036][T14238] do_syscall_64+0x112/0x360 [ 416.396061][T14238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.396088][T14238] RIP: 0033:0x7fb915a9e159 [ 416.396109][T14238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.396189][T14238] RSP: 002b:00007fb9144f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 416.396276][T14238] RAX: ffffffffffffffda RBX: 00007fb915d25fa8 RCX: 00007fb915a9e159 [ 416.396295][T14238] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb915d25fa8 [ 416.396334][T14238] RBP: 00007fb915d25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 416.396349][T14238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.396440][T14238] R13: 00007fb915d26038 R14: 00007ffdc8cf4440 R15: 00007ffdc8cf4528 [ 416.396464][T14238] [ 416.771414][T14259] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1979'. [ 416.830627][ T29] audit: type=1400 audit(1790960095.770:4842): avc: denied { write } for pid=14248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.868666][T14269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1981'. [ 416.950746][T14274] loop4: detected capacity change from 0 to 512 [ 416.983354][T14274] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 417.004510][T14274] EXT4-fs (loop4): 1 truncate cleaned up [ 417.006571][ T29] audit: type=1400 audit(1790960095.950:4843): avc: denied { write } for pid=14275 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.017994][T14274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.212014][T11995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.269219][ T29] audit: type=1400 audit(1790960096.200:4844): avc: denied { write } for pid=14283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.325553][ T29] audit: type=1400 audit(1790960096.270:4845): avc: denied { write } for pid=14299 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.386902][T14293] FAULT_INJECTION: forcing a failure. [ 417.386902][T14293] name fail_futex, interval 1, probability 0, space 0, times 0 [ 417.386942][T14293] CPU: 0 UID: 0 PID: 14293 Comm: syz.9.1988 Not tainted syzkaller #0 PREEMPT(lazy) [ 417.386972][T14293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.386991][T14293] Call Trace: [ 417.387001][T14293] [ 417.387013][T14293] __dump_stack+0x1d/0x30 [ 417.387044][T14293] dump_stack_lvl+0x95/0xd0 [ 417.387105][T14293] dump_stack+0x15/0x1b [ 417.387126][T14293] should_fail_ex+0x262/0x280 [ 417.387191][T14293] should_fail+0xb/0x20 [ 417.387216][T14293] get_futex_key+0x12d/0xb10 [ 417.387248][T14293] futex_wait_setup+0x49/0x3e0 [ 417.387301][T14293] ? trace_event_buffer_commit+0x174/0x590 [ 417.387336][T14293] __futex_wait+0xa9/0x260 [ 417.387392][T14293] ? __pfx_futex_wake_mark+0x10/0x10 [ 417.387417][T14293] futex_wait+0x98/0x1c0 [ 417.387457][T14293] do_futex+0x391/0x460 [ 417.387494][T14293] __se_sys_futex+0x2f6/0x370 [ 417.387527][T14293] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 417.387702][T14293] __x64_sys_futex+0x78/0x90 [ 417.387737][T14293] x64_sys_call+0x22e2/0x2550 [ 417.387767][T14293] do_syscall_64+0x112/0x360 [ 417.387796][T14293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.387842][T14293] RIP: 0033:0x7f9f9671e159 [ 417.387859][T14293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.387878][T14293] RSP: 002b:00007f9f951770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 417.387904][T14293] RAX: ffffffffffffffda RBX: 00007f9f969a5fa8 RCX: 00007f9f9671e159 [ 417.388048][T14293] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9f969a5fa8 [ 417.388063][T14293] RBP: 00007f9f969a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 417.388078][T14293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.388096][T14293] R13: 00007f9f969a6038 R14: 00007fff5e578b00 R15: 00007fff5e578be8 [ 417.388118][T14293] [ 417.607840][T14310] ip_tables: iptables: counters copy to user failed while replacing table [ 417.719500][T14318] loop4: detected capacity change from 0 to 7 [ 417.721713][T14318] loop4: [ 417.775075][T14328] loop7: detected capacity change from 0 to 512 [ 417.791962][T14328] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 417.812171][T14328] EXT4-fs (loop7): 1 truncate cleaned up [ 417.813066][T14328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.013750][T11270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.120016][ T29] audit: type=1400 audit(1790960097.060:4846): avc: denied { write } for pid=14302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.965980][T14384] FAULT_INJECTION: forcing a failure. [ 418.965980][T14384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.966016][T14384] CPU: 1 UID: 0 PID: 14384 Comm: syz.4.2016 Not tainted syzkaller #0 PREEMPT(lazy) [ 418.966180][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.966202][T14384] Call Trace: [ 418.966210][T14384] [ 418.966285][T14384] __dump_stack+0x1d/0x30 [ 418.966314][T14384] dump_stack_lvl+0x95/0xd0 [ 418.966347][T14384] dump_stack+0x15/0x1b [ 418.966370][T14384] should_fail_ex+0x262/0x280 [ 418.966452][T14384] should_fail+0xb/0x20 [ 418.966520][T14384] should_fail_usercopy+0x1a/0x20 [ 418.966555][T14384] _copy_from_user+0x1c/0xb0 [ 418.966587][T14384] comm_write+0x74/0x1e0 [ 418.966686][T14384] ? __pfx_comm_write+0x10/0x10 [ 418.966775][T14384] vfs_write+0x254/0x9a0 [ 418.966838][T14384] ? __fget_files+0x184/0x1c0 [ 418.966868][T14384] ? mutex_lock+0x57/0x90 [ 418.966914][T14384] ksys_write+0xdc/0x1a0 [ 418.966970][T14384] __x64_sys_write+0x40/0x50 [ 418.967007][T14384] x64_sys_call+0x154e/0x2550 [ 418.967039][T14384] do_syscall_64+0x112/0x360 [ 418.967142][T14384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.967172][T14384] RIP: 0033:0x7fadb204e159 [ 418.967200][T14384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.967222][T14384] RSP: 002b:00007fadb0aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 418.967251][T14384] RAX: ffffffffffffffda RBX: 00007fadb22d5fa0 RCX: 00007fadb204e159 [ 418.967269][T14384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 418.967283][T14384] RBP: 00007fadb20e506b R08: 0000000000000000 R09: 0000000000000000 [ 418.967297][T14384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.967370][T14384] R13: 00007fadb22d6038 R14: 00007fadb22d5fa0 R15: 00007ffea3021c28 [ 418.967399][T14384] [ 419.574333][T14408] syzkaller0: entered promiscuous mode [ 419.574358][T14408] syzkaller0: entered allmulticast mode [ 419.709390][T14422] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 419.860159][T14429] Set syz1 is full, maxelem 2 reached [ 421.456373][T14445] syzkaller0: entered promiscuous mode [ 421.456398][T14445] syzkaller0: entered allmulticast mode [ 421.871597][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 421.871629][ T29] audit: type=1400 audit(1790960100.810:4850): avc: denied { write } for pid=14448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.973296][T14463] protocol 0000 is buggy, dev veth0_vlan [ 422.091015][ T29] audit: type=1400 audit(1790960101.030:4851): avc: denied { write } for pid=14469 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.120449][T14472] loop4: detected capacity change from 0 to 512 [ 422.133693][T14472] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 422.170446][T14472] EXT4-fs (loop4): 1 truncate cleaned up [ 422.171270][T14472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.281581][T11995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.484227][T11822] kernel write not supported for file /uhid (pid: 11822 comm: kworker/0:9) [ 422.755982][T14498] syzkaller0: entered promiscuous mode [ 422.756006][T14498] syzkaller0: entered allmulticast mode [ 422.882052][ T29] audit: type=1400 audit(1790960101.820:4852): avc: denied { write } for pid=14483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.105485][ T29] audit: type=1400 audit(1790960102.050:4853): avc: denied { write } for pid=14518 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.280853][ T3023] 8021q: adding VLAN 0 to HW filter on device eth21 [ 423.398260][T14538] 9p: Bad value for 'rfdno' [ 423.791885][T14555] syzkaller0: entered promiscuous mode [ 423.791907][T14555] syzkaller0: entered allmulticast mode [ 423.878889][T14560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2074'. [ 423.998197][ T29] audit: type=1400 audit(1790960102.940:4854): avc: denied { write } for pid=14540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.200054][ T29] audit: type=1400 audit(1790960103.140:4855): avc: denied { write } for pid=14571 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.235616][T14575] 9p: Bad value for 'rfdno' [ 424.380165][ T3023] 8021q: adding VLAN 0 to HW filter on device eth22 [ 424.809881][T14600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2086'. [ 425.114066][ T29] audit: type=1400 audit(1790960104.050:4856): avc: denied { write } for pid=14587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.275764][ T29] audit: type=1400 audit(1790960104.220:4857): avc: denied { ioctl } for pid=14603 comm="syz.7.2087" path="socket:[45463]" dev="sockfs" ino=45463 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 425.889900][T14620] 9p: Bad value for 'rfdno' [ 426.287798][ T29] audit: type=1400 audit(1790960105.230:4858): avc: denied { write } for pid=14630 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.505173][T14637] netlink: 'syz.9.2095': attribute type 1 has an invalid length. [ 426.723748][T14643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2098'. [ 426.766970][ T3023] 8021q: adding VLAN 0 to HW filter on device eth23 [ 427.174871][T14657] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 428.645995][T14703] FAULT_INJECTION: forcing a failure. [ 428.645995][T14703] name failslab, interval 1, probability 0, space 0, times 0 [ 428.646088][T14703] CPU: 0 UID: 0 PID: 14703 Comm: syz.2.2117 Not tainted syzkaller #0 PREEMPT(lazy) [ 428.646113][T14703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.646183][T14703] Call Trace: [ 428.646192][T14703] [ 428.646202][T14703] __dump_stack+0x1d/0x30 [ 428.646233][T14703] dump_stack_lvl+0x95/0xd0 [ 428.646316][T14703] dump_stack+0x15/0x1b [ 428.646343][T14703] should_fail_ex+0x262/0x280 [ 428.646427][T14703] should_failslab+0x8c/0xb0 [ 428.646477][T14703] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 428.646517][T14703] ? sock_alloc_inode+0x36/0xf0 [ 428.646615][T14703] ? sock_alloc_inode+0x36/0xf0 [ 428.646644][T14703] ? selinux_socket_create+0xfd/0x180 [ 428.646682][T14703] ? __pfx_sock_alloc_inode+0x10/0x10 [ 428.646759][T14703] sock_alloc_inode+0x36/0xf0 [ 428.646853][T14703] alloc_inode+0x40/0x170 [ 428.646881][T14703] __sock_create+0x121/0x580 [ 428.646916][T14703] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 428.647017][T14703] __sys_socket+0xaf/0x180 [ 428.647049][T14703] __x64_sys_socket+0x3f/0x50 [ 428.647087][T14703] x64_sys_call+0x246e/0x2550 [ 428.647123][T14703] do_syscall_64+0x112/0x360 [ 428.647147][T14703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.647193][T14703] RIP: 0033:0x7fc8ebd8e159 [ 428.647219][T14703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.647245][T14703] RSP: 002b:00007fc8ea7e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 428.647334][T14703] RAX: ffffffffffffffda RBX: 00007fc8ec015fa0 RCX: 00007fc8ebd8e159 [ 428.647354][T14703] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 428.647373][T14703] RBP: 00007fc8ebe2506b R08: 0000000000000000 R09: 0000000000000000 [ 428.647396][T14703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.647428][T14703] R13: 00007fc8ec016038 R14: 00007fc8ec015fa0 R15: 00007ffc8c7e46f8 [ 428.647453][T14703] [ 428.653197][T14703] socket: no more sockets [ 429.067532][T14704] tipc: Resetting bearer [ 429.110728][T14704] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.110963][T14704] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.137774][ T29] audit: type=1400 audit(1790960108.080:4859): avc: denied { write } for pid=14708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.439822][ T29] audit: type=1400 audit(1790960109.380:4860): avc: denied { write } for pid=14741 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.599530][T14704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.635631][T14704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.071202][ T3023] 8021q: adding VLAN 0 to HW filter on device eth24 [ 431.082476][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.096446][ T6640] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.097172][ T6640] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.097298][ T6640] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.283448][ T29] audit: type=1400 audit(1790960110.220:4861): avc: denied { watch_reads } for pid=14760 comm="syz.2.2129" path="/132" dev="tmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 431.487292][ T29] audit: type=1400 audit(1790960110.430:4862): avc: denied { write } for pid=14759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.592735][T14787] tipc: Enabling of bearer rejected, failed to enable media [ 431.650889][T14799] loop9: detected capacity change from 0 to 512 [ 431.652875][T14799] EXT4-fs: test_dummy_encryption option not supported [ 431.672752][ T29] audit: type=1400 audit(1790960110.610:4863): avc: denied { write } for pid=14795 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.860158][T14814] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 431.991237][T14827] tipc: Enabling of bearer rejected, failed to enable media [ 432.117381][T14832] loop9: detected capacity change from 0 to 512 [ 432.134784][T14832] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 432.157821][T14832] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #15: comm syz.9.2153: iget: bad i_size value: 360287970189639680 [ 432.157870][T14832] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 432.158383][T14832] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.2153: couldn't read orphan inode 15 (err -117) [ 432.158410][T14832] loop9: lost filesystem error report for type 5 error -117 [ 432.161901][T14832] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.245809][ T29] audit: type=1400 audit(1790960111.190:4864): avc: denied { write } for pid=14830 comm="syz.9.2153" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 432.247938][T14832] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 432.252269][T14832] EXT4-fs error (device loop9): ext4_find_dest_de:2052: inode #12: block 13: comm syz.9.2153: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=12, rec_len=4096, size=4096 fake=1 [ 432.330302][T14847] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 432.365760][T11699] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.531757][ T29] audit: type=1400 audit(1790960111.470:4865): avc: denied { write } for pid=14836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.695974][ T29] audit: type=1400 audit(1790960111.590:4866): avc: denied { write } for pid=14873 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.735482][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 433.048974][T14887] loop4: detected capacity change from 0 to 7 [ 433.554903][T14898] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 434.513033][T14931] batman_adv: batadv0: Adding interface: syzkaller0 [ 434.513049][T14931] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.513083][T14931] batman_adv: batadv0: Interface activated: syzkaller0 [ 435.179223][T14941] FAULT_INJECTION: forcing a failure. [ 435.179223][T14941] name failslab, interval 1, probability 0, space 0, times 0 [ 435.179259][T14941] CPU: 0 UID: 0 PID: 14941 Comm: syz.4.2180 Not tainted syzkaller #0 PREEMPT(lazy) [ 435.179392][T14941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.179406][T14941] Call Trace: [ 435.179415][T14941] [ 435.179424][T14941] __dump_stack+0x1d/0x30 [ 435.179454][T14941] dump_stack_lvl+0x95/0xd0 [ 435.179477][T14941] dump_stack+0x15/0x1b [ 435.179527][T14941] should_fail_ex+0x262/0x280 [ 435.179560][T14941] ? __proc_create+0x3f1/0x6b0 [ 435.179655][T14941] should_failslab+0x8c/0xb0 [ 435.179724][T14941] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 435.179807][T14941] ? kobject_uevent_env+0x275/0x560 [ 435.179841][T14941] ? __proc_create+0x3f1/0x6b0 [ 435.179874][T14941] __proc_create+0x3f1/0x6b0 [ 435.179919][T14941] proc_create_data+0xa3/0x130 [ 435.180024][T14941] rpc_proc_register+0x88/0xa0 [ 435.180075][T14941] nfs_net_init+0x6a/0xd0 [ 435.180110][T14941] ops_init+0x22a/0x2e0 [ 435.180184][T14941] setup_net+0x9f/0x230 [ 435.180223][T14941] copy_net_ns+0x333/0x490 [ 435.180252][T14941] create_new_namespaces+0x1f6/0x420 [ 435.180296][T14941] unshare_nsproxy_namespaces+0x115/0x150 [ 435.180385][T14941] ksys_unshare+0x42b/0x710 [ 435.180447][T14941] __x64_sys_unshare+0x1f/0x30 [ 435.180529][T14941] x64_sys_call+0x1e33/0x2550 [ 435.180556][T14941] do_syscall_64+0x112/0x360 [ 435.180585][T14941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.180647][T14941] RIP: 0033:0x7fadb204e159 [ 435.180664][T14941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.180684][T14941] RSP: 002b:00007fadb0aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 435.180710][T14941] RAX: ffffffffffffffda RBX: 00007fadb22d5fa0 RCX: 00007fadb204e159 [ 435.180803][T14941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 435.180837][T14941] RBP: 00007fadb20e506b R08: 0000000000000000 R09: 0000000000000000 [ 435.180855][T14941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.180869][T14941] R13: 00007fadb22d6038 R14: 00007fadb22d5fa0 R15: 00007ffea3021c28 [ 435.180889][T14941] [ 435.573742][T14943] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 435.677927][T14943] batman_adv: batadv0: Removing interface: syzkaller0 [ 435.734161][ T29] audit: type=1400 audit(1790960114.640:4867): avc: denied { write } for pid=14880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.034024][ T29] audit: type=1400 audit(1790960114.970:4868): avc: denied { write } for pid=14952 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.229715][T14964] netlink: 'syz.4.2187': attribute type 1 has an invalid length. [ 436.245372][T14955] syzkaller0: entered promiscuous mode [ 436.245393][T14955] syzkaller0: entered allmulticast mode [ 437.740340][ T29] audit: type=1400 audit(1790960116.680:4869): avc: denied { write } for pid=14972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.364378][ T29] audit: type=1400 audit(1790960117.240:4870): avc: denied { write } for pid=15009 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.670708][T15014] FAULT_INJECTION: forcing a failure. [ 438.670708][T15014] name failslab, interval 1, probability 0, space 0, times 0 [ 438.670739][T15014] CPU: 1 UID: 0 PID: 15014 Comm: syz.0.2194 Not tainted syzkaller #0 PREEMPT(lazy) [ 438.670764][T15014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.670780][T15014] Call Trace: [ 438.670791][T15014] [ 438.670802][T15014] __dump_stack+0x1d/0x30 [ 438.670832][T15014] dump_stack_lvl+0x95/0xd0 [ 438.670859][T15014] dump_stack+0x15/0x1b [ 438.670881][T15014] should_fail_ex+0x262/0x280 [ 438.670906][T15014] ? anon_vma_fork+0x60/0x300 [ 438.670925][T15014] should_failslab+0x8c/0xb0 [ 438.670960][T15014] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 438.670996][T15014] ? anon_vma_fork+0x60/0x300 [ 438.671021][T15014] anon_vma_fork+0x60/0x300 [ 438.671040][T15014] dup_mmap+0x547/0x10c0 [ 438.671063][T15014] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 438.671106][T15014] copy_mm+0xf5/0x350 [ 438.671130][T15014] copy_process+0x108a/0x2360 [ 438.671157][T15014] kernel_clone+0x1c0/0x5f0 [ 438.671182][T15014] __x64_sys_clone+0x143/0x180 [ 438.671211][T15014] x64_sys_call+0x2479/0x2550 [ 438.671236][T15014] do_syscall_64+0x112/0x360 [ 438.671267][T15014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.671289][T15014] RIP: 0033:0x7fb915a9e159 [ 438.671305][T15014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.671324][T15014] RSP: 002b:00007fb9144f6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 438.671350][T15014] RAX: ffffffffffffffda RBX: 00007fb915d25fa0 RCX: 00007fb915a9e159 [ 438.671365][T15014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 438.671383][T15014] RBP: 00007fb915b3506b R08: 0000000000000000 R09: 0000000000000000 [ 438.671401][T15014] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 438.671417][T15014] R13: 00007fb915d26038 R14: 00007fb915d25fa0 R15: 00007ffdc8cf4528 [ 438.671435][T15014] [ 440.519267][T15047] FAULT_INJECTION: forcing a failure. [ 440.519267][T15047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.519370][T15047] CPU: 0 UID: 0 PID: 15047 Comm: syz.9.2202 Not tainted syzkaller #0 PREEMPT(lazy) [ 440.519404][T15047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 440.519422][T15047] Call Trace: [ 440.519433][T15047] [ 440.519445][T15047] __dump_stack+0x1d/0x30 [ 440.519506][T15047] dump_stack_lvl+0x95/0xd0 [ 440.519536][T15047] dump_stack+0x15/0x1b [ 440.519661][T15047] should_fail_ex+0x262/0x280 [ 440.519717][T15047] should_fail+0xb/0x20 [ 440.519745][T15047] should_fail_usercopy+0x1a/0x20 [ 440.519780][T15047] _copy_from_user+0x1c/0xb0 [ 440.519867][T15047] comm_write+0x74/0x1e0 [ 440.519970][T15047] ? __pfx_comm_write+0x10/0x10 [ 440.520053][T15047] vfs_write+0x254/0x9a0 [ 440.520088][T15047] ? __fget_files+0x184/0x1c0 [ 440.520174][T15047] ? mutex_lock+0x57/0x90 [ 440.520233][T15047] ksys_write+0xdc/0x1a0 [ 440.520264][T15047] __x64_sys_write+0x40/0x50 [ 440.520321][T15047] x64_sys_call+0x154e/0x2550 [ 440.520353][T15047] do_syscall_64+0x112/0x360 [ 440.520383][T15047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.520486][T15047] RIP: 0033:0x7f9f9671e159 [ 440.520502][T15047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.520522][T15047] RSP: 002b:00007f9f95177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 440.520547][T15047] RAX: ffffffffffffffda RBX: 00007f9f969a5fa0 RCX: 00007f9f9671e159 [ 440.520616][T15047] RDX: 0000000000000020 RSI: 0000200000001bc0 RDI: 0000000000000003 [ 440.520631][T15047] RBP: 00007f9f967b506b R08: 0000000000000000 R09: 0000000000000000 [ 440.520645][T15047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.520660][T15047] R13: 00007f9f969a6038 R14: 00007f9f969a5fa0 R15: 00007fff5e578be8 [ 440.520764][T15047] [ 441.271238][ T29] audit: type=1400 audit(1790960120.210:4871): avc: denied { write } for pid=15023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.600873][ T29] audit: type=1400 audit(1790960120.540:4872): avc: denied { write } for pid=15074 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.771998][T15063] syzkaller0: entered promiscuous mode [ 441.772025][T15063] syzkaller0: entered allmulticast mode [ 441.844370][T15067] loop9: detected capacity change from 0 to 8192 [ 442.127067][T15087] veth0_macvtap: left promiscuous mode [ 442.133607][T15087] FAULT_INJECTION: forcing a failure. [ 442.133607][T15087] name failslab, interval 1, probability 0, space 0, times 0 [ 442.133640][T15087] CPU: 1 UID: 0 PID: 15087 Comm: syz.0.2211 Not tainted syzkaller #0 PREEMPT(lazy) [ 442.133671][T15087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.133688][T15087] Call Trace: [ 442.133730][T15087] [ 442.133822][T15087] __dump_stack+0x1d/0x30 [ 442.133851][T15087] dump_stack_lvl+0x95/0xd0 [ 442.133949][T15087] dump_stack+0x15/0x1b [ 442.133975][T15087] should_fail_ex+0x262/0x280 [ 442.134006][T15087] ? __alloc_skb+0x2e0/0x6f0 [ 442.134101][T15087] should_failslab+0x8c/0xb0 [ 442.134178][T15087] kmem_cache_alloc_node_noprof+0x82/0x400 [ 442.134236][T15087] ? kvm_sched_clock_read+0x11/0x20 [ 442.134273][T15087] ? sched_clock+0x41/0x60 [ 442.134305][T15087] ? __alloc_skb+0x2e0/0x6f0 [ 442.134344][T15087] __alloc_skb+0x2e0/0x6f0 [ 442.134489][T15087] ? __alloc_skb+0x209/0x6f0 [ 442.134538][T15087] __inet6_rt_notify+0x8d/0x1e0 [ 442.134572][T15087] inet6_rt_del_notify+0x2b/0x40 [ 442.134679][T15087] fib6_del+0x7e4/0x910 [ 442.134709][T15087] ? fib6_ifdown+0x1fe/0x340 [ 442.134785][T15087] fib6_clean_node+0x18e/0x2b0 [ 442.134821][T15087] fib6_walk_continue+0x382/0x420 [ 442.134854][T15087] __fib6_clean_all+0x1f5/0x300 [ 442.134928][T15087] ? __pfx_fib6_ifdown+0x10/0x10 [ 442.135017][T15087] ? __pfx_fib6_clean_node+0x10/0x10 [ 442.135053][T15087] ? __pfx_fib6_ifdown+0x10/0x10 [ 442.135118][T15087] ? __pfx_fib6_ifdown+0x10/0x10 [ 442.135153][T15087] fib6_clean_all+0x2a/0x40 [ 442.135187][T15087] rt6_disable_ip+0xb3/0x680 [ 442.135283][T15087] addrconf_ifdown+0x94/0xf70 [ 442.135326][T15087] ? trace_event_buffer_commit+0x174/0x590 [ 442.135398][T15087] ? __pfx_addrconf_notify+0x10/0x10 [ 442.135434][T15087] ? __pfx_addrconf_notify+0x10/0x10 [ 442.135582][T15087] addrconf_notify+0x214/0x8e0 [ 442.135636][T15087] ? __pfx_addrconf_notify+0x10/0x10 [ 442.135675][T15087] raw_notifier_call_chain+0x72/0x1a0 [ 442.135748][T15087] netif_close_many+0x288/0x3a0 [ 442.135779][T15087] __dev_change_net_namespace+0x786/0x16e0 [ 442.135812][T15087] ? ring_buffer_unlock_commit+0x3cc/0x450 [ 442.135932][T15087] ? trace_buffer_unlock_commit_regs+0x115/0x310 [ 442.135969][T15087] ? validate_linkmsg+0x539/0x5b0 [ 442.136026][T15087] do_setlink+0x19a/0x2860 [ 442.136061][T15087] ? pv_queued_spin_unlock_traced+0x2d/0xb0 [ 442.136140][T15087] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 442.136202][T15087] ? __mutex_lock+0xaa2/0xf40 [ 442.136239][T15087] ? __mutex_lock_slowpath+0xa/0x10 [ 442.136350][T15087] rtnl_newlink+0x115a/0x1510 [ 442.136439][T15087] ? ring_buffer_unlock_commit+0x3cc/0x450 [ 442.136478][T15087] ? trace_buffer_unlock_commit_regs+0x115/0x310 [ 442.136579][T15087] ? __rcu_read_unlock+0x4e/0x70 [ 442.136694][T15087] ? avc_has_perm_noaudit+0xac/0x160 [ 442.136727][T15087] ? cred_has_capability+0x224/0x2a0 [ 442.136759][T15087] ? selinux_capable+0x31/0x40 [ 442.136848][T15087] ? security_capable+0x7b/0x90 [ 442.136874][T15087] ? ns_capable+0x80/0xb0 [ 442.136895][T15087] ? __pfx_rtnl_newlink+0x10/0x10 [ 442.137000][T15087] rtnetlink_rcv_msg+0x64b/0x720 [ 442.137062][T15087] netlink_rcv_skb+0x11e/0x220 [ 442.137183][T15087] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 442.137219][T15087] rtnetlink_rcv+0x1c/0x30 [ 442.137252][T15087] netlink_unicast+0x5a9/0x680 [ 442.137399][T15087] netlink_sendmsg+0x5be/0x6f0 [ 442.137466][T15087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.137486][T15087] ____sys_sendmsg+0x532/0x580 [ 442.137513][T15087] ___sys_sendmsg+0x195/0x1e0 [ 442.137646][T15087] __x64_sys_sendmsg+0xd4/0x160 [ 442.137716][T15087] x64_sys_call+0x22ab/0x2550 [ 442.137745][T15087] do_syscall_64+0x112/0x360 [ 442.137769][T15087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.137851][T15087] RIP: 0033:0x7fb915a9e159 [ 442.137873][T15087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.137897][T15087] RSP: 002b:00007fb9144f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.137980][T15087] RAX: ffffffffffffffda RBX: 00007fb915d25fa0 RCX: 00007fb915a9e159 [ 442.138001][T15087] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000004 [ 442.138020][T15087] RBP: 00007fb915b3506b R08: 0000000000000000 R09: 0000000000000000 [ 442.138039][T15087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.138058][T15087] R13: 00007fb915d26038 R14: 00007fb915d25fa0 R15: 00007ffdc8cf4528 [ 442.138130][T15087] [ 442.324825][ T29] audit: type=1400 audit(1790960121.260:4873): avc: denied { write } for pid=15077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.657160][ T29] audit: type=1400 audit(1790960121.600:4874): avc: denied { write } for pid=15108 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.915976][T15116] syzkaller0: entered promiscuous mode [ 442.916002][T15116] syzkaller0: entered allmulticast mode [ 443.138364][T15147] loop4: detected capacity change from 0 to 7 [ 443.144354][ T29] audit: type=1400 audit(1790960122.070:4875): avc: denied { write } for pid=15118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.265654][ T29] audit: type=1400 audit(1790960123.210:4876): avc: denied { write } for pid=15156 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.204629][ T29] audit: type=1400 audit(1790960124.150:4877): avc: denied { write } for pid=15168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.210968][T15198] FAULT_INJECTION: forcing a failure. [ 445.210968][T15198] name failslab, interval 1, probability 0, space 0, times 0 [ 445.211000][T15198] CPU: 0 UID: 0 PID: 15198 Comm: syz.9.2235 Not tainted syzkaller #0 PREEMPT(lazy) [ 445.211078][T15198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.211097][T15198] Call Trace: [ 445.211107][T15198] [ 445.211118][T15198] __dump_stack+0x1d/0x30 [ 445.211144][T15198] dump_stack_lvl+0x95/0xd0 [ 445.211207][T15198] dump_stack+0x15/0x1b [ 445.211234][T15198] should_fail_ex+0x262/0x280 [ 445.211303][T15198] should_failslab+0x8c/0xb0 [ 445.211338][T15198] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 445.211458][T15198] ? kstrdup_const+0x3e/0x50 [ 445.211571][T15198] ? kstrdup_const+0x3e/0x50 [ 445.211670][T15198] kstrdup+0x3e/0xd0 [ 445.211695][T15198] kstrdup_const+0x3e/0x50 [ 445.211720][T15198] __kernfs_new_node+0x42/0x440 [ 445.211744][T15198] ? rb_insert_color+0x6e/0x2a0 [ 445.211845][T15198] ? __rcu_read_unlock+0x4e/0x70 [ 445.211948][T15198] ? __rcu_read_unlock+0x4e/0x70 [ 445.211982][T15198] ? kernfs_activate_one+0x10c/0x140 [ 445.212046][T15198] ? __rcu_read_unlock+0x4e/0x70 [ 445.212158][T15198] ? up_write+0x19/0x60 [ 445.212191][T15198] kernfs_new_node+0xcf/0xf0 [ 445.212216][T15198] kernfs_create_link+0x70/0x130 [ 445.212274][T15198] sysfs_do_create_link_sd+0x6a/0x100 [ 445.212330][T15198] sysfs_create_link+0x51/0x70 [ 445.212370][T15198] device_add_class_symlinks+0x168/0x1d0 [ 445.212402][T15198] device_add+0x359/0x790 [ 445.212498][T15198] netdev_register_kobject+0x127/0x240 [ 445.212523][T15198] register_netdevice+0xaf7/0x11a0 [ 445.212546][T15198] tun_set_iff+0x5fe/0x870 [ 445.212651][T15198] __tun_chr_ioctl+0x682/0x1550 [ 445.212688][T15198] ? selinux_file_ioctl+0x33c/0x3c0 [ 445.212746][T15198] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 445.212783][T15198] tun_chr_ioctl+0x27/0x40 [ 445.212812][T15198] __se_sys_ioctl+0xce/0x140 [ 445.212920][T15198] __x64_sys_ioctl+0x43/0x50 [ 445.213093][T15198] x64_sys_call+0x239d/0x2550 [ 445.213123][T15198] do_syscall_64+0x112/0x360 [ 445.213153][T15198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.213183][T15198] RIP: 0033:0x7f9f9671e159 [ 445.213262][T15198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.213287][T15198] RSP: 002b:00007f9f95177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 445.213316][T15198] RAX: ffffffffffffffda RBX: 00007f9f969a5fa0 RCX: 00007f9f9671e159 [ 445.213361][T15198] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 445.213411][T15198] RBP: 00007f9f967b506b R08: 0000000000000000 R09: 0000000000000000 [ 445.213430][T15198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.213446][T15198] R13: 00007f9f969a6038 R14: 00007f9f969a5fa0 R15: 00007fff5e578be8 [ 445.213524][T15198] [ 445.344055][ T29] audit: type=1400 audit(1790960124.280:4878): avc: denied { write } for pid=15204 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.834855][T15214] netlink: 'syz.4.2239': attribute type 1 has an invalid length. [ 446.027642][T15218] syzkaller0: entered promiscuous mode [ 446.027664][T15218] syzkaller0: entered allmulticast mode [ 446.221074][ T29] audit: type=1400 audit(1790960125.160:4879): avc: denied { write } for pid=15207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.333539][ T29] audit: type=1400 audit(1790960125.270:4880): avc: denied { write } for pid=15249 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.631753][T15245] syzkaller0: entered promiscuous mode [ 446.631808][T15245] syzkaller0: entered allmulticast mode [ 446.673695][T15274] netlink: 'syz.0.2254': attribute type 1 has an invalid length. [ 447.258350][ T29] audit: type=1400 audit(1790960126.200:4881): avc: denied { write } for pid=15259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.459261][ T29] audit: type=1400 audit(1790960126.400:4882): avc: denied { write } for pid=15307 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.491278][T15294] syzkaller0: entered promiscuous mode [ 447.491301][T15294] syzkaller0: entered allmulticast mode [ 447.519965][T15314] netlink: 'syz.9.2266': attribute type 1 has an invalid length. [ 448.072000][ T29] audit: type=1400 audit(1790960127.010:4883): avc: denied { write } for pid=15322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.228147][T15358] netlink: 'syz.9.2278': attribute type 1 has an invalid length. [ 448.265508][ T29] audit: type=1400 audit(1790960127.210:4884): avc: denied { write } for pid=15359 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.293967][ T29] audit: type=1400 audit(1790960129.230:4885): avc: denied { write } for pid=15373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.495846][ T29] audit: type=1400 audit(1790960129.440:4886): avc: denied { write } for pid=15406 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.601480][T15411] netlink: 'syz.0.2291': attribute type 1 has an invalid length. [ 450.822966][T15416] netlink: 'syz.2.2293': attribute type 32 has an invalid length. [ 450.822988][T15416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2293'. [ 450.975535][T15428] loop4: detected capacity change from 0 to 7 [ 451.221628][ T29] audit: type=1400 audit(1790960130.160:4887): avc: denied { connect } for pid=15436 comm="syz.0.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 451.237738][ T29] audit: type=1400 audit(1790960130.170:4888): avc: denied { write } for pid=15420 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.390425][ T29] audit: type=1400 audit(1790960130.330:4889): avc: denied { write } for pid=15444 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.703585][T15457] netlink: 'syz.2.2304': attribute type 1 has an invalid length. [ 452.116676][ T29] audit: type=1400 audit(1790960131.060:4890): avc: denied { write } for pid=15454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.291471][T15483] syzkaller0: entered promiscuous mode [ 452.291568][T15483] syzkaller0: entered allmulticast mode [ 452.302816][ T29] audit: type=1400 audit(1790960131.240:4891): avc: denied { write } for pid=15494 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.496768][T15505] netlink: 'syz.4.2317': attribute type 1 has an invalid length. [ 452.538322][T15503] batman_adv: batadv0: Adding interface: syzkaller0 [ 452.538340][T15503] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.538372][T15503] batman_adv: batadv0: Interface activated: syzkaller0 [ 452.714602][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2318'. [ 452.923314][T15501] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 452.938014][T15501] batman_adv: batadv0: Removing interface: syzkaller0 [ 453.211689][ T29] audit: type=1400 audit(1790960132.150:4892): avc: denied { write } for pid=15508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.389146][ T29] audit: type=1400 audit(1790960132.330:4893): avc: denied { write } for pid=15543 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.452652][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2330'. [ 453.644002][T15553] syzkaller0: entered promiscuous mode [ 453.644075][T15553] syzkaller0: entered allmulticast mode [ 453.763534][T15561] batman_adv: batadv0: Adding interface: syzkaller0 [ 453.763550][T15561] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.763643][T15561] batman_adv: batadv0: Interface activated: syzkaller0 [ 454.986657][T15558] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 454.990598][T15558] batman_adv: batadv0: Removing interface: syzkaller0 [ 455.470382][T15596] syzkaller0: entered promiscuous mode [ 455.470406][T15596] syzkaller0: entered allmulticast mode [ 455.625625][T15592] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2344'. [ 455.746211][T15613] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2349'. [ 456.514666][ T29] audit: type=1400 audit(1790960135.420:4894): avc: denied { write } for pid=15616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.526345][T15635] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.589997][ T29] audit: type=1400 audit(1790960135.530:4895): avc: denied { write } for pid=15638 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.607467][T15639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=15639 comm=syz.4.2356 [ 456.956422][ T29] audit: type=1400 audit(1790960135.900:4896): avc: denied { write } for pid=15641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.060804][ T29] audit: type=1400 audit(1790960136.000:4897): avc: denied { write } for pid=15653 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.401002][ T29] audit: type=1400 audit(1790960136.340:4898): avc: denied { write } for pid=15658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.461380][ T29] audit: type=1400 audit(1790960136.400:4899): avc: denied { write } for pid=15678 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.983615][T15695] loop4: detected capacity change from 0 to 7 [ 458.171787][T15693] syzkaller0: entered promiscuous mode [ 458.171809][T15693] syzkaller0: entered allmulticast mode [ 458.208190][T15698] veth1_macvtap: left promiscuous mode [ 458.250652][ T29] audit: type=1400 audit(1790960137.190:4900): avc: denied { write } for pid=15684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.338500][T15716] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 458.469691][ T29] audit: type=1400 audit(1790960137.410:4901): avc: denied { write } for pid=15717 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.091912][ T29] audit: type=1400 audit(1790960138.030:4902): avc: denied { write } for pid=15723 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.193031][T15735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=15735 comm=syz.2.2371 [ 459.193105][T15735] netlink: 'syz.2.2371': attribute type 29 has an invalid length. [ 459.214671][ T29] audit: type=1400 audit(1790960138.150:4903): avc: denied { write } for pid=15753 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.643630][T15776] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 460.221481][T15813] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 460.374713][T15818] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2391'. [ 461.172633][T15858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2399'. [ 461.564604][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 461.564624][ T29] audit: type=1400 audit(1790960140.510:4910): avc: denied { write } for pid=15869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.621411][ T29] audit: type=1400 audit(1790960140.560:4911): avc: denied { write } for pid=15881 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.136495][T15890] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 462.339775][T15902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=15902 comm=syz.0.2406 [ 462.562493][ T29] audit: type=1400 audit(1790960141.500:4912): avc: denied { write } for pid=15884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.578201][T15922] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2413'. [ 462.719858][ T29] audit: type=1400 audit(1790960141.660:4913): avc: denied { write } for pid=15926 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.025304][ T29] audit: type=1400 audit(1790960141.960:4914): avc: denied { write } for pid=15928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.084384][ T29] audit: type=1400 audit(1790960142.020:4915): avc: denied { write } for pid=15939 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.453767][T15954] loop4: detected capacity change from 0 to 7 [ 463.487283][ T29] audit: type=1400 audit(1790960142.430:4916): avc: denied { write } for pid=15941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.607715][T15961] syzkaller0: entered promiscuous mode [ 463.607761][T15961] syzkaller0: entered allmulticast mode [ 463.727048][ T29] audit: type=1400 audit(1790960142.670:4917): avc: denied { write } for pid=15971 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.190282][T15996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2428'. [ 464.644628][T16017] syzkaller0: entered promiscuous mode [ 464.644664][T16017] syzkaller0: entered allmulticast mode [ 464.713043][T16025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2440'. [ 464.713073][T16025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2440'. [ 464.713094][T16025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2440'. [ 465.421856][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 465.421887][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 465.421940][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 465.723428][T16062] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2454'. [ 466.128377][T16066] syzkaller0: entered promiscuous mode [ 466.128402][T16066] syzkaller0: entered allmulticast mode [ 466.614612][T16096] FAULT_INJECTION: forcing a failure. [ 466.614612][T16096] name fail_futex, interval 1, probability 0, space 0, times 0 [ 466.614737][T16096] CPU: 1 UID: 0 PID: 16096 Comm: syz.0.2461 Not tainted syzkaller #0 PREEMPT(lazy) [ 466.614768][T16096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.614786][T16096] Call Trace: [ 466.614796][T16096] [ 466.614808][T16096] __dump_stack+0x1d/0x30 [ 466.614915][T16096] dump_stack_lvl+0x95/0xd0 [ 466.614944][T16096] dump_stack+0x15/0x1b [ 466.614973][T16096] should_fail_ex+0x262/0x280 [ 466.615006][T16096] should_fail+0xb/0x20 [ 466.615109][T16096] get_futex_key+0x12d/0xb10 [ 466.615147][T16096] futex_wake+0x89/0x400 [ 466.615191][T16096] do_futex+0x3f8/0x460 [ 466.615229][T16096] __se_sys_futex+0x2f6/0x370 [ 466.615266][T16096] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 466.615314][T16096] __x64_sys_futex+0x78/0x90 [ 466.615404][T16096] x64_sys_call+0x22e2/0x2550 [ 466.615433][T16096] do_syscall_64+0x112/0x360 [ 466.615463][T16096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.615550][T16096] RIP: 0033:0x7fb915a9e159 [ 466.615569][T16096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.615591][T16096] RSP: 002b:00007fb9144f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 466.615654][T16096] RAX: ffffffffffffffda RBX: 00007fb915d25fa8 RCX: 00007fb915a9e159 [ 466.615674][T16096] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb915d25fac [ 466.615691][T16096] RBP: 00007fb915d25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 466.615709][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.615724][T16096] R13: 00007fb915d26038 R14: 00007ffdc8cf4440 R15: 00007ffdc8cf4528 [ 466.615761][T16096] [ 466.617906][ T29] audit: type=1400 audit(1790960145.560:4918): avc: denied { write } for pid=16073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.763712][ T29] audit: type=1400 audit(1790960145.700:4919): avc: denied { write } for pid=16099 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.970277][ T3023] veth0_macvtap: entered promiscuous mode [ 467.172819][T16123] loop4: detected capacity change from 0 to 7 [ 467.519077][T16136] syzkaller0: entered promiscuous mode [ 467.519102][T16136] syzkaller0: entered allmulticast mode [ 468.560558][T16179] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 468.841210][ T29] audit: type=1400 audit(1790960147.780:4920): avc: denied { write } for pid=16180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.959423][ T29] audit: type=1400 audit(1790960147.900:4921): avc: denied { write } for pid=16202 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.213593][ T29] audit: type=1400 audit(1790960148.150:4922): avc: denied { write } for pid=16205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.299333][ T29] audit: type=1400 audit(1790960148.240:4923): avc: denied { write } for pid=16223 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.399467][T16226] syzkaller0: entered promiscuous mode [ 469.399516][T16226] syzkaller0: entered allmulticast mode [ 469.575640][T16241] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 469.818727][ T29] audit: type=1400 audit(1790960148.760:4924): avc: denied { write } for pid=16227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.015520][ T29] audit: type=1400 audit(1790960148.960:4925): avc: denied { write } for pid=16275 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.458640][ T29] audit: type=1400 audit(1790960149.400:4926): avc: denied { write } for pid=16298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.461930][T16313] netlink: 'syz.9.2507': attribute type 10 has an invalid length. [ 470.546326][ T29] audit: type=1400 audit(1790960149.490:4927): avc: denied { write } for pid=16316 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.097998][T16313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.122607][T16313] team0: Port device netdevsim2 added [ 471.217434][T16347] syzkaller0: entered promiscuous mode [ 471.217458][T16347] syzkaller0: entered allmulticast mode [ 471.738646][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 471.738664][ T29] audit: type=1400 audit(1790960150.680:4933): avc: denied { write } for pid=16384 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.904060][T16399] syzkaller0: entered promiscuous mode [ 471.904111][T16399] syzkaller0: entered allmulticast mode [ 472.118189][ T29] audit: type=1400 audit(1790960151.060:4934): avc: denied { write } for pid=16402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.185585][ T29] audit: type=1400 audit(1790960151.130:4935): avc: denied { write } for pid=16414 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.779858][T16420] syzkaller0: entered promiscuous mode [ 472.779881][T16420] syzkaller0: entered allmulticast mode [ 472.832696][T16423] loop4: detected capacity change from 0 to 7 [ 473.140577][ T29] audit: type=1400 audit(1790960152.080:4936): avc: denied { write } for pid=16421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.306897][ T29] audit: type=1400 audit(1790960152.250:4937): avc: denied { write } for pid=16456 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.459955][T16463] syzkaller0: entered promiscuous mode [ 473.459981][T16463] syzkaller0: entered allmulticast mode [ 473.610090][ T29] audit: type=1400 audit(1790960152.550:4938): avc: denied { write } for pid=16466 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.675486][ T29] audit: type=1400 audit(1790960152.620:4939): avc: denied { write } for pid=16477 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.869805][ T29] audit: type=1400 audit(1790960152.810:4940): avc: denied { write } for pid=16480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.933389][ T29] audit: type=1400 audit(1790960152.870:4941): avc: denied { write } for pid=16491 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.691255][ T29] audit: type=1400 audit(1790960153.630:4942): avc: denied { write } for pid=16510 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.098742][T16559] syzkaller0: entered promiscuous mode [ 475.098769][T16559] syzkaller0: entered allmulticast mode [ 475.199395][T16576] FAULT_INJECTION: forcing a failure. [ 475.199395][T16576] name failslab, interval 1, probability 0, space 0, times 0 [ 475.199432][T16576] CPU: 0 UID: 0 PID: 16576 Comm: syz.9.2565 Not tainted syzkaller #0 PREEMPT(lazy) [ 475.199537][T16576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.199555][T16576] Call Trace: [ 475.199566][T16576] [ 475.199578][T16576] __dump_stack+0x1d/0x30 [ 475.199643][T16576] dump_stack_lvl+0x95/0xd0 [ 475.199748][T16576] dump_stack+0x15/0x1b [ 475.199770][T16576] should_fail_ex+0x262/0x280 [ 475.199808][T16576] ? do_getname+0x2e/0x1c0 [ 475.199835][T16576] should_failslab+0x8c/0xb0 [ 475.199930][T16576] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 475.199961][T16576] ? do_getname+0x2e/0x1c0 [ 475.199985][T16576] do_getname+0x2e/0x1c0 [ 475.200067][T16576] getname_flags+0x1d/0x30 [ 475.200088][T16576] do_sys_openat2+0x6c/0x130 [ 475.200127][T16576] __x64_sys_openat+0xf2/0x120 [ 475.200160][T16576] x64_sys_call+0x1f72/0x2550 [ 475.200231][T16576] do_syscall_64+0x112/0x360 [ 475.200255][T16576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.200318][T16576] RIP: 0033:0x7f9f9671e159 [ 475.200335][T16576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.200391][T16576] RSP: 002b:00007f9f95177028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 475.200420][T16576] RAX: ffffffffffffffda RBX: 00007f9f969a5fa0 RCX: 00007f9f9671e159 [ 475.200440][T16576] RDX: 0000000000048241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 475.200457][T16576] RBP: 00007f9f967b506b R08: 0000000000000000 R09: 0000000000000000 [ 475.200472][T16576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.200536][T16576] R13: 00007f9f969a6038 R14: 00007f9f969a5fa0 R15: 00007fff5e578be8 [ 475.200559][T16576] [ 476.720202][T16665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2577'. [ 477.069365][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 477.069384][ T29] audit: type=1400 audit(1790960156.010:4948): avc: denied { write } for pid=16657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.190096][T16690] syzkaller0: entered promiscuous mode [ 477.190122][T16690] syzkaller0: entered allmulticast mode [ 477.279771][ T29] audit: type=1400 audit(1790960156.220:4949): avc: denied { write } for pid=16698 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.573877][ T29] audit: type=1400 audit(1790960156.510:4950): avc: denied { write } for pid=16700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.642912][ T29] audit: type=1400 audit(1790960156.580:4951): avc: denied { write } for pid=16711 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.879579][ T29] audit: type=1400 audit(1790960156.820:4952): avc: denied { write } for pid=16713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.948950][ T29] audit: type=1400 audit(1790960156.890:4953): avc: denied { write } for pid=16728 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.382961][T16757] FAULT_INJECTION: forcing a failure. [ 478.382961][T16757] name failslab, interval 1, probability 0, space 0, times 0 [ 478.383035][T16757] CPU: 1 UID: 0 PID: 16757 Comm: syz.0.2598 Not tainted syzkaller #0 PREEMPT(lazy) [ 478.383063][T16757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 478.383161][T16757] Call Trace: [ 478.383172][T16757] [ 478.383251][T16757] __dump_stack+0x1d/0x30 [ 478.383278][T16757] dump_stack_lvl+0x95/0xd0 [ 478.383306][T16757] dump_stack+0x15/0x1b [ 478.383399][T16757] should_fail_ex+0x262/0x280 [ 478.383427][T16757] ? do_getname+0x2e/0x1c0 [ 478.383451][T16757] should_failslab+0x8c/0xb0 [ 478.383490][T16757] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 478.383524][T16757] ? do_getname+0x2e/0x1c0 [ 478.383553][T16757] do_getname+0x2e/0x1c0 [ 478.383649][T16757] getname_flags+0x1d/0x30 [ 478.383695][T16757] do_sys_openat2+0x6c/0x130 [ 478.383781][T16757] __x64_sys_openat+0xf2/0x120 [ 478.383811][T16757] x64_sys_call+0x1f72/0x2550 [ 478.383842][T16757] do_syscall_64+0x112/0x360 [ 478.383870][T16757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.383948][T16757] RIP: 0033:0x7fb915a9e159 [ 478.383969][T16757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.383991][T16757] RSP: 002b:00007fb9144f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 478.384019][T16757] RAX: ffffffffffffffda RBX: 00007fb915d25fa0 RCX: 00007fb915a9e159 [ 478.384075][T16757] RDX: 0000000000048241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 478.384169][T16757] RBP: 00007fb915b3506b R08: 0000000000000000 R09: 0000000000000000 [ 478.384188][T16757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.384205][T16757] R13: 00007fb915d26038 R14: 00007fb915d25fa0 R15: 00007ffdc8cf4528 [ 478.384229][T16757] [ 478.782040][ T29] audit: type=1400 audit(1790960157.720:4954): avc: denied { write } for pid=16770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.867161][T16784] syzkaller0: entered promiscuous mode [ 478.867183][T16784] syzkaller0: entered allmulticast mode [ 478.900527][ T29] audit: type=1400 audit(1790960157.840:4955): avc: denied { write } for pid=16788 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.224807][T16815] FAULT_INJECTION: forcing a failure. [ 479.224807][T16815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.224931][T16815] CPU: 1 UID: 0 PID: 16815 Comm: syz.7.2613 Not tainted syzkaller #0 PREEMPT(lazy) [ 479.224962][T16815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.224977][T16815] Call Trace: [ 479.224987][T16815] [ 479.225057][T16815] __dump_stack+0x1d/0x30 [ 479.225089][T16815] dump_stack_lvl+0x95/0xd0 [ 479.225115][T16815] dump_stack+0x15/0x1b [ 479.225145][T16815] should_fail_ex+0x262/0x280 [ 479.225217][T16815] should_fail+0xb/0x20 [ 479.225253][T16815] should_fail_usercopy+0x1a/0x20 [ 479.225286][T16815] strncpy_from_user+0x27/0x250 [ 479.225318][T16815] do_getname+0x59/0x1c0 [ 479.225347][T16815] getname_flags+0x1d/0x30 [ 479.225372][T16815] do_sys_openat2+0x6c/0x130 [ 479.225482][T16815] __x64_sys_openat+0xf2/0x120 [ 479.225514][T16815] x64_sys_call+0x1f72/0x2550 [ 479.225546][T16815] do_syscall_64+0x112/0x360 [ 479.225629][T16815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.225657][T16815] RIP: 0033:0x7f3b4e28e159 [ 479.225689][T16815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.225710][T16815] RSP: 002b:00007f3b4cce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 479.225763][T16815] RAX: ffffffffffffffda RBX: 00007f3b4e515fa0 RCX: 00007f3b4e28e159 [ 479.225782][T16815] RDX: 0000000000048241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 479.225802][T16815] RBP: 00007f3b4e32506b R08: 0000000000000000 R09: 0000000000000000 [ 479.225820][T16815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.225837][T16815] R13: 00007f3b4e516038 R14: 00007f3b4e515fa0 R15: 00007ffff4757988 [ 479.225933][T16815] [ 479.301560][ T29] audit: type=1400 audit(1790960158.240:4956): avc: denied { write } for pid=16790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.465435][ T29] audit: type=1400 audit(1790960158.410:4957): avc: denied { write } for pid=16822 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.287753][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 482.287773][ T29] audit: type=1400 audit(1790960161.230:4980): avc: denied { write } for pid=16974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.413480][T16996] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 482.466387][ T29] audit: type=1400 audit(1790960161.410:4981): avc: denied { write } for pid=16998 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.768143][ T29] audit: type=1400 audit(1790960161.710:4982): avc: denied { write } for pid=17006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.908303][ T29] audit: type=1400 audit(1790960161.850:4983): avc: denied { write } for pid=17036 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.113781][ T29] audit: type=1400 audit(1790960162.050:4984): avc: denied { write } for pid=17041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.177257][ T29] audit: type=1400 audit(1790960162.120:4985): avc: denied { write } for pid=17052 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.376001][ T29] audit: type=1400 audit(1790960162.320:4986): avc: denied { write } for pid=17055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.443536][ T29] audit: type=1400 audit(1790960162.380:4987): avc: denied { write } for pid=17066 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.942599][T17087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2635'. [ 483.992677][T17088] syzkaller0: entered promiscuous mode [ 483.992697][T17088] syzkaller0: entered allmulticast mode [ 485.080851][T17114] syzkaller0: entered promiscuous mode [ 485.080878][T17114] syzkaller0: entered allmulticast mode [ 485.452065][T17137] syzkaller0: entered promiscuous mode [ 485.452088][T17137] syzkaller0: entered allmulticast mode [ 485.795312][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'. [ 485.796158][T17139] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2657'. [ 486.444875][ T29] audit: type=1400 audit(1790960165.380:4988): avc: denied { write } for pid=17163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.525929][T17178] syzkaller0: entered promiscuous mode [ 486.525955][T17178] syzkaller0: entered allmulticast mode [ 486.589015][ T29] audit: type=1400 audit(1790960165.530:4989): avc: denied { write } for pid=17186 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.114592][T17198] syzkaller0: entered promiscuous mode [ 488.114639][T17198] syzkaller0: entered allmulticast mode [ 488.170253][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2673'. [ 488.599746][T17221] loop4: detected capacity change from 0 to 7 [ 488.747436][T17225] syzkaller0: entered promiscuous mode [ 488.747494][T17225] syzkaller0: entered allmulticast mode [ 489.038543][T17240] syzkaller0: entered promiscuous mode [ 489.038594][T17240] syzkaller0: entered allmulticast mode [ 489.069199][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2691'. [ 489.420771][ T29] audit: type=1400 audit(1790960168.360:4990): avc: denied { write } for pid=17246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.671314][ T29] audit: type=1400 audit(1790960168.610:4991): avc: denied { write } for pid=17284 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.762409][T17263] syzkaller0: entered promiscuous mode [ 489.762434][T17263] syzkaller0: entered allmulticast mode [ 490.019549][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2707'. [ 490.071418][T17307] sch_tbf: burst 2 is lower than device batadv_slave_1 mtu (1514) ! [ 490.253701][T17322] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2709'. [ 490.298079][ T29] audit: type=1400 audit(1790960169.240:4992): avc: denied { write } for pid=17306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.413433][T17328] syzkaller0: entered promiscuous mode [ 490.413458][T17328] syzkaller0: entered allmulticast mode [ 490.483224][ T29] audit: type=1400 audit(1790960169.420:4993): avc: denied { write } for pid=17333 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.638906][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2722'. [ 490.742700][T17347] syzkaller0: entered promiscuous mode [ 490.742725][T17347] syzkaller0: entered allmulticast mode [ 491.062112][T17373] syzkaller0: entered promiscuous mode [ 491.062137][T17373] syzkaller0: entered allmulticast mode [ 491.243249][T17384] syzkaller0: entered promiscuous mode [ 491.243270][T17384] syzkaller0: entered allmulticast mode [ 491.356031][T17395] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2737'. [ 491.408009][T17400] syzkaller0: entered promiscuous mode [ 491.408033][T17400] syzkaller0: entered allmulticast mode [ 492.048836][T17434] syzkaller0: entered promiscuous mode [ 492.048859][T17434] syzkaller0: entered allmulticast mode [ 492.329394][ T29] audit: type=1400 audit(1790960171.270:4994): avc: denied { write } for pid=17428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.374485][T17449] syzkaller0: entered promiscuous mode [ 492.374584][T17449] syzkaller0: entered allmulticast mode [ 492.417107][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2758'. [ 492.469811][ T29] audit: type=1400 audit(1790960171.410:4995): avc: denied { write } for pid=17466 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.508998][T17467] loop4: detected capacity change from 0 to 7 [ 493.375250][T17515] sch_tbf: burst 2 is lower than device batadv_slave_1 mtu (1514) ! [ 493.475516][T17518] loop4: detected capacity change from 0 to 7 [ 493.491388][ T29] audit: type=1400 audit(1790960172.430:4996): avc: denied { write } for pid=17489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.670651][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'. [ 493.688823][ T29] audit: type=1400 audit(1790960172.630:4997): avc: denied { write } for pid=17534 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.917358][T17527] syzkaller0: entered promiscuous mode [ 493.917392][T17527] syzkaller0: entered allmulticast mode [ 494.212821][T17568] loop4: detected capacity change from 0 to 7 [ 494.738798][T17589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2794'. [ 494.918818][T17600] syzkaller0: entered promiscuous mode [ 494.918843][T17600] syzkaller0: entered allmulticast mode [ 494.985530][T17605] loop4: detected capacity change from 0 to 7 [ 495.792527][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2811'. [ 496.064869][T17648] syzkaller0: entered promiscuous mode [ 496.064904][T17648] syzkaller0: entered allmulticast mode [ 496.665593][T17669] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2825'. [ 496.997438][T17689] loop4: detected capacity change from 0 to 7 [ 497.048200][T17687] syzkaller0: entered promiscuous mode [ 497.048222][T17687] syzkaller0: entered allmulticast mode [ 497.534928][ T29] audit: type=1400 audit(1790960176.470:4998): avc: denied { write } for pid=17690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.547876][T17732] loop4: detected capacity change from 0 to 7 [ 497.666520][ T29] audit: type=1400 audit(1790960176.610:4999): avc: denied { write } for pid=17738 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.823418][T17745] syzkaller0: entered promiscuous mode [ 497.823467][T17745] syzkaller0: entered allmulticast mode [ 498.140251][ T29] audit: type=1400 audit(1790960177.080:5000): avc: denied { write } for pid=17751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.325427][ T29] audit: type=1400 audit(1790960177.270:5001): avc: denied { write } for pid=17792 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.592104][T17809] syzkaller0: entered promiscuous mode [ 498.592132][T17809] syzkaller0: entered allmulticast mode [ 498.782981][ T29] audit: type=1400 audit(1790960177.720:5002): avc: denied { write } for pid=17807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.907373][T17829] syzkaller0: entered promiscuous mode [ 498.907398][T17829] syzkaller0: entered allmulticast mode [ 498.990321][ T29] audit: type=1400 audit(1790960177.930:5003): avc: denied { write } for pid=17837 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.261813][ T29] audit: type=1400 audit(1790960178.200:5004): avc: denied { write } for pid=17843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.351577][ T29] audit: type=1400 audit(1790960178.290:5005): avc: denied { write } for pid=17859 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.822936][T17872] syzkaller0: entered promiscuous mode [ 499.822957][T17872] syzkaller0: entered allmulticast mode [ 500.276341][T17907] syzkaller0: entered promiscuous mode [ 500.276366][T17907] syzkaller0: entered allmulticast mode [ 500.488031][T17921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2912'. [ 500.532679][T17922] netlink: 'syz.2.2911': attribute type 1 has an invalid length. [ 500.532704][T17922] netlink: 'syz.2.2911': attribute type 2 has an invalid length. [ 501.127964][ T29] audit: type=1400 audit(1790960180.070:5006): avc: denied { write } for pid=17933 comm="syz.7.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 501.257135][T17937] syzkaller0: entered promiscuous mode [ 501.257161][T17937] syzkaller0: entered allmulticast mode [ 501.471421][ T29] audit: type=1400 audit(1790960180.410:5007): avc: denied { write } for pid=17935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.675260][T17968] syzkaller0: entered promiscuous mode [ 501.675284][T17968] syzkaller0: entered allmulticast mode [ 501.964833][T17981] syzkaller0: entered promiscuous mode [ 501.964915][T17981] syzkaller0: entered allmulticast mode [ 502.083744][T17991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2935'. [ 502.756037][T18017] syzkaller0: entered promiscuous mode [ 502.756061][T18017] syzkaller0: entered allmulticast mode [ 503.130646][T18039] syzkaller0: entered promiscuous mode [ 503.130670][T18039] syzkaller0: entered allmulticast mode [ 503.209632][T18049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2957'. [ 503.209663][T18049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2957'. [ 503.348684][T18064] syzkaller0: entered promiscuous mode [ 503.348706][T18064] syzkaller0: entered allmulticast mode [ 503.498220][T18060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2963'. [ 503.806041][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2974'. [ 503.806071][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2974'. [ 503.963996][T18092] syzkaller0: entered promiscuous mode [ 503.964022][T18092] syzkaller0: entered allmulticast mode [ 504.005457][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 504.005477][ T29] audit: type=1400 audit(1790960182.940:5009): avc: denied { write } for pid=18079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.073855][ T29] audit: type=1400 audit(1790960183.010:5010): avc: denied { write } for pid=18104 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.338572][ T29] audit: type=1400 audit(1790960183.280:5011): avc: denied { write } for pid=18110 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.406438][ T29] audit: type=1400 audit(1790960183.350:5012): avc: denied { write } for pid=18122 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.567683][T18130] syzkaller0: entered promiscuous mode [ 504.567703][T18130] syzkaller0: entered allmulticast mode [ 504.914641][T18152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2987'. [ 504.914670][T18152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2987'. [ 505.015034][T18157] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2990'. [ 505.435336][ T29] audit: type=1400 audit(1790960184.380:5013): avc: denied { write } for pid=18156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.553727][T18185] syzkaller0: entered promiscuous mode [ 505.553753][T18185] syzkaller0: entered allmulticast mode [ 505.590594][ T29] audit: type=1400 audit(1790960184.530:5014): avc: denied { write } for pid=18186 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.942507][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 506.229812][ T29] audit: type=1400 audit(1790960185.170:5015): avc: denied { write } for pid=18196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.428049][ T29] audit: type=1400 audit(1790960185.370:5016): avc: denied { write } for pid=18234 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.624599][T18244] syzkaller0: entered promiscuous mode [ 506.624621][T18244] syzkaller0: entered allmulticast mode [ 506.727276][T18248] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3017'. [ 506.746794][T18249] syzkaller0: entered promiscuous mode [ 506.746816][T18249] syzkaller0: entered allmulticast mode [ 507.363636][T18265] syzkaller0: entered promiscuous mode [ 507.363697][T18265] syzkaller0: entered allmulticast mode [ 507.670438][T18276] syzkaller0: entered promiscuous mode [ 507.670459][T18276] syzkaller0: entered allmulticast mode [ 507.693761][T18281] syzkaller0: entered promiscuous mode [ 507.693780][T18281] syzkaller0: entered allmulticast mode [ 508.189570][T18303] syzkaller0: entered promiscuous mode [ 508.189591][T18303] syzkaller0: entered allmulticast mode [ 508.413602][T18312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3043'. [ 508.523261][T18319] syzkaller0: entered promiscuous mode [ 508.523286][T18319] syzkaller0: entered allmulticast mode [ 508.909489][T18338] syzkaller0: entered promiscuous mode [ 508.909514][T18338] syzkaller0: entered allmulticast mode [ 508.958374][ T29] audit: type=1400 audit(1790960187.900:5017): avc: denied { write } for pid=18318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.173058][ T29] audit: type=1400 audit(1790960188.110:5018): avc: denied { write } for pid=18354 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.512970][T18353] syzkaller0: entered promiscuous mode [ 509.513049][T18353] syzkaller0: entered allmulticast mode [ 509.815932][ T29] audit: type=1400 audit(1790960188.760:5019): avc: denied { write } for pid=18364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.956093][ T29] audit: type=1400 audit(1790960188.900:5020): avc: denied { write } for pid=18392 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.171013][T18402] syzkaller0: entered promiscuous mode [ 510.171150][T18402] syzkaller0: entered allmulticast mode [ 510.532401][T18413] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3076'. [ 510.671436][T18419] syzkaller0: entered promiscuous mode [ 510.671457][T18419] syzkaller0: entered allmulticast mode [ 510.789887][T18421] syzkaller0: entered promiscuous mode [ 510.789912][T18421] syzkaller0: entered allmulticast mode [ 511.167044][T18440] syzkaller0: entered promiscuous mode [ 511.167064][T18440] syzkaller0: entered allmulticast mode [ 511.360467][T18451] syzkaller0: entered promiscuous mode [ 511.360487][T18451] syzkaller0: entered allmulticast mode [ 511.641873][T18455] syzkaller0: entered promiscuous mode [ 511.641899][T18455] syzkaller0: entered allmulticast mode [ 511.793259][T18469] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3102'. [ 511.820380][T18477] syzkaller0: entered promiscuous mode [ 511.820453][T18477] syzkaller0: entered allmulticast mode [ 512.070597][T18488] syzkaller0: entered promiscuous mode [ 512.070619][T18488] syzkaller0: entered allmulticast mode [ 512.378303][T18503] syzkaller0: entered promiscuous mode [ 512.378329][T18503] syzkaller0: entered allmulticast mode [ 512.443237][T18506] syzkaller0: entered promiscuous mode [ 512.443262][T18506] syzkaller0: entered allmulticast mode [ 512.967573][T18518] syzkaller0: entered promiscuous mode [ 512.967598][T18518] syzkaller0: entered allmulticast mode [ 513.567594][T18560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3136'. [ 513.637165][T18551] syzkaller0: entered promiscuous mode [ 513.637241][T18551] syzkaller0: entered allmulticast mode [ 513.641819][T18565] syzkaller0: entered promiscuous mode [ 513.641843][T18565] syzkaller0: entered allmulticast mode [ 514.527428][T18590] syzkaller0: entered promiscuous mode [ 514.527457][T18590] syzkaller0: entered allmulticast mode [ 514.828236][T18605] syzkaller0: entered promiscuous mode [ 514.828260][T18605] syzkaller0: entered allmulticast mode [ 515.095901][T18622] syzkaller0: entered promiscuous mode [ 515.095927][T18622] syzkaller0: entered allmulticast mode [ 515.253200][T18635] syzkaller0: entered promiscuous mode [ 515.253225][T18635] syzkaller0: entered allmulticast mode [ 515.829435][T18652] syzkaller0: entered promiscuous mode [ 515.829461][T18652] syzkaller0: entered allmulticast mode [ 515.920697][T18675] syzkaller0: entered promiscuous mode [ 515.920722][T18675] syzkaller0: entered allmulticast mode [ 516.290466][T18696] syzkaller0: entered promiscuous mode [ 516.290488][T18696] syzkaller0: entered allmulticast mode [ 516.776079][T18722] syzkaller0: entered promiscuous mode [ 516.776105][T18722] syzkaller0: entered allmulticast mode [ 517.020695][T18737] syzkaller0: entered promiscuous mode [ 517.020731][T18737] syzkaller0: entered allmulticast mode [ 517.046438][T18738] syzkaller0: entered promiscuous mode [ 517.046464][T18738] syzkaller0: entered allmulticast mode [ 517.545303][T18765] syzkaller0: entered promiscuous mode [ 517.545329][T18765] syzkaller0: entered allmulticast mode [ 517.716477][T18779] syzkaller0: entered promiscuous mode [ 517.716497][T18779] syzkaller0: entered allmulticast mode [ 517.835564][T18791] syzkaller0: entered promiscuous mode [ 517.835585][T18791] syzkaller0: entered allmulticast mode [ 518.180173][T18808] syzkaller0: entered promiscuous mode [ 518.180235][T18808] syzkaller0: entered allmulticast mode [ 518.341649][T18817] syzkaller0: entered promiscuous mode [ 518.341675][T18817] syzkaller0: entered allmulticast mode [ 518.429062][T18827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3240'. [ 518.498754][T18831] syzkaller0: entered promiscuous mode [ 518.498776][T18831] syzkaller0: entered allmulticast mode [ 519.051197][T18863] syzkaller0: entered promiscuous mode [ 519.051239][T18863] syzkaller0: entered allmulticast mode [ 519.880213][T18883] syzkaller0: entered promiscuous mode [ 519.880289][T18883] syzkaller0: entered allmulticast mode [ 519.936681][T18896] syzkaller0: entered promiscuous mode [ 519.936707][T18896] syzkaller0: entered allmulticast mode [ 520.282237][T18930] syzkaller0: entered promiscuous mode [ 520.282262][T18930] syzkaller0: entered allmulticast mode [ 520.385065][T18937] syzkaller0: entered promiscuous mode [ 520.385149][T18937] syzkaller0: entered allmulticast mode [ 520.548925][T18943] syzkaller0: entered promiscuous mode [ 520.548948][T18943] syzkaller0: entered allmulticast mode [ 521.012922][T18969] syzkaller0: entered promiscuous mode [ 521.012943][T18969] syzkaller0: entered allmulticast mode [ 521.198970][T18980] syzkaller0: entered promiscuous mode [ 521.198995][T18980] syzkaller0: entered allmulticast mode [ 521.320599][T18988] syzkaller0: entered promiscuous mode [ 521.320620][T18988] syzkaller0: entered allmulticast mode [ 521.420476][T18983] ================================================================== [ 521.420513][T18983] BUG: KCSAN: data-race in bpf_obj_memcpy / bpf_obj_memcpy [ 521.420550][T18983] [ 521.420560][T18983] write to 0xffff888132a2e018 of 4866 bytes by task 18986 on cpu 1: [ 521.420583][T18983] bpf_obj_memcpy+0x16a/0x190 [ 521.420610][T18983] rhtab_map_update_elem+0xec/0xf40 [ 521.420635][T18983] bpf_map_update_value+0x4ee/0x570 [ 521.420656][T18983] generic_map_update_batch+0x4d7/0x700 [ 521.420677][T18983] bpf_map_do_batch+0x25b/0x380 [ 521.420710][T18983] __sys_bpf+0xa8e/0xc30 [ 521.420740][T18983] __x64_sys_bpf+0x69/0x80 [ 521.420767][T18983] x64_sys_call+0xf26/0x2550 [ 521.420802][T18983] do_syscall_64+0x112/0x360 [ 521.420828][T18983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.420852][T18983] [ 521.420859][T18983] write to 0xffff888132a2e018 of 4866 bytes by task 18983 on cpu 0: [ 521.420876][T18983] bpf_obj_memcpy+0x16a/0x190 [ 521.420899][T18983] rhtab_map_update_elem+0xec/0xf40 [ 521.420921][T18983] bpf_map_update_value+0x4ee/0x570 [ 521.420947][T18983] generic_map_update_batch+0x4d7/0x700 [ 521.420967][T18983] bpf_map_do_batch+0x25b/0x380 [ 521.420995][T18983] __sys_bpf+0xa8e/0xc30 [ 521.421018][T18983] __x64_sys_bpf+0x69/0x80 [ 521.421042][T18983] x64_sys_call+0xf26/0x2550 [ 521.421073][T18983] do_syscall_64+0x112/0x360 [ 521.421099][T18983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.421123][T18983] [ 521.421128][T18983] Reported by Kernel Concurrency Sanitizer on: [ 521.421141][T18983] CPU: 0 UID: 0 PID: 18983 Comm: syz.2.3302 Not tainted syzkaller #0 PREEMPT(lazy) [ 521.421172][T18983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 521.421188][T18983] ==================================================================