last executing test programs: 1m40.72960834s ago: executing program 2 (id=6427): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 1m40.637848722s ago: executing program 2 (id=6430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="ffbfffff", @ANYRES16=r1, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x8000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x7, 0x0, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") openat(r3, &(0x7f0000000180)='./file0\x00', 0x5ad200, 0x114) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000000400)) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x400}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x6) socket$netlink(0x10, 0x3, 0xc) syz_clone3(&(0x7f0000000080)={0x500000080, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x104) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) 1m38.704252693s ago: executing program 2 (id=6437): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a80), r0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2e, &(0x7f0000000140)=0x5, 0x4) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x12) syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={0x0, 0x1c}}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) perf_event_open$cgroup(&(0x7f0000000a80)={0x2, 0x80, 0x5, 0xb, 0xff, 0x6, 0x0, 0x7ff, 0xe02c0, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x4}, 0x10000, 0x3, 0x100, 0x0, 0x2, 0x3, 0x4700, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffffffffffff, 0x1781) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000000300)={0x4b5a9da54893e123, 0x3, 0x1c, 0x1}, 0x8, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x301, &(0x7f0000001780)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @gre_packet={0xc, 0x6, "b6d683", 0x2cb, 0x2f, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "e75e6c1da3cd67ed802fb698670095bcebc060127aa4324372d484ab1980cb83439dfb89ec53b9f97432cdff9e71588594e81e30adeabbb77d7a7217af79d773c341be7f27fe467027c222b0b49974cec3f1e07c57735aad25a2fa76665a539b227e9d929a9a8db5bd69011e65fa87b7cd998f471dcdbfd5b5c1569d13f47c1165e385e0eaeff1b5ec3795b3e47204bcafbc1015ebde1e85dcca595733e7066f357e00f058e6d55b27de6698165056aa40197aa5148157b85d120d8701f202fd28c44745880859ddf9ac3f2f0b9e48a2bf8d1999c62b6ce9d216fb2301eca40d29156f1ea7a25a35096b68e9cbfd32883aeb324ea5a0ff788ed50b2d6e532ab734f47a12fc1f6c8217561ca86fa7211573930f7c7b33448fb3b3cb647764a785146ab21b733051106091f8856a2d5bbe5f240354604ee8513ca8a6e428a4d7a6ff5a3158f0e62dcc6afd49e9534c072f2197be3b31c6a42aa9354c7f1058569b6012f8d006604917d6a6d22a90c1888e494a55e3e701c5c02d914274c552cdf353ccf7585dbaf5e79cfc12df755f5a569ca7f429b77ba1839bdd1641a670745f2130265fb3969009bdeae240605c83681ba8bab8b3bf0a53b65d9b0ff634792886dced33faafd604882dd8e352b84fc920f6a7c44cab140e8c21f7516dbb4e70255621fb9ed10f6b631e74eaa1cf82e47c46eda34836df578c9879488023ad8e05d3487596b2cdd1c10f0c862bbe954bef8eae18eaa6f0b6a566b4a5291db227a45707856febca839f6055fb15164009e907e2485b117ae54360c8bb2453e93700c10e458546f4c28561b7b369b588a2c77c51f49c419e4094d8e6abbdb8baee8e8eb5610998b4255a5fcdb37fa614425bc125727439a3bcec5a51ecaa5c45cb2c44d34237a0fb"}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0xd, 0x1, 0x7, 0x3, 0x0, 0x0, 0x4, 0xf0}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x6, 0x5}, 0x2, {0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r11, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) 1m38.444127479s ago: executing program 2 (id=6440): r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file7\x00', 0x200008, &(0x7f0000000340)=ANY=[], 0x1, 0x1d3, &(0x7f0000000100)="$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") pipe2(0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x40100) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x9) 1m38.418702759s ago: executing program 2 (id=6441): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x24, 0x140f, 0x200, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24002000) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000024000005000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020082395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 1m38.058130867s ago: executing program 2 (id=6444): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)={0xa0c8, 0x5, 0x75dd, 0x30a, 0x5}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000500)={0x7fffffffffffffff, 0x8000000a, 0x5, 0x8, 0x9, 0x0, [{0x6, 0x2, 0x4, '\x00', 0x81}, {0x19, 0x4, 0x1000, '\x00', 0x1}, {0xed8, 0x8, 0x5, '\x00', 0x290b}, {0xfc4, 0x6, 0x5, '\x00', 0x1000}, {0x57, 0x9, 0x9, '\x00', 0x880}, {0x1ff, 0x8, 0x2, '\x00', 0xa}, {0x1ff, 0xc2, 0x1, '\x00', 0x804}, {0x4, 0x4, 0x2, '\x00', 0x3200}, {0x4, 0x8001, 0x1ff, '\x00', 0x181}]}) r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x83) fchdir(r1) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x379, 0x8}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, r3, 0xa}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0x1b, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x3ff, 0xac, &(0x7f00000003c0)=""/172, 0x41000, 0x1, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0x3, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r4, 0x1], 0x0, 0x10, 0x2800}, 0x94) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x4, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r6, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETSW(r6, 0x5403, &(0x7f00000000c0)={0xb4, 0x201, 0x6, 0x1, 0x3, "7f0700c29b67661c0196011d42d7d7cf39f600"}) syz_open_pts(r6, 0x0) r7 = syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) ptrace(0x10, r7) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x40000000) wait4(r7, 0x0, 0x80000000, 0x0) 1m23.064799856s ago: executing program 32 (id=6444): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)={0xa0c8, 0x5, 0x75dd, 0x30a, 0x5}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000500)={0x7fffffffffffffff, 0x8000000a, 0x5, 0x8, 0x9, 0x0, [{0x6, 0x2, 0x4, '\x00', 0x81}, {0x19, 0x4, 0x1000, '\x00', 0x1}, {0xed8, 0x8, 0x5, '\x00', 0x290b}, {0xfc4, 0x6, 0x5, '\x00', 0x1000}, {0x57, 0x9, 0x9, '\x00', 0x880}, {0x1ff, 0x8, 0x2, '\x00', 0xa}, {0x1ff, 0xc2, 0x1, '\x00', 0x804}, {0x4, 0x4, 0x2, '\x00', 0x3200}, {0x4, 0x8001, 0x1ff, '\x00', 0x181}]}) r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x83) fchdir(r1) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x379, 0x8}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, r3, 0xa}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0x1b, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x3ff, 0xac, &(0x7f00000003c0)=""/172, 0x41000, 0x1, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0x3, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r4, 0x1], 0x0, 0x10, 0x2800}, 0x94) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x4, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r6, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETSW(r6, 0x5403, &(0x7f00000000c0)={0xb4, 0x201, 0x6, 0x1, 0x3, "7f0700c29b67661c0196011d42d7d7cf39f600"}) syz_open_pts(r6, 0x0) r7 = syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) ptrace(0x10, r7) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x40000000) wait4(r7, 0x0, 0x80000000, 0x0) 3.559677654s ago: executing program 0 (id=7673): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x407, 0x20800) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, r1, 0x0, 0x0, 0x3}]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) futex(0x0, 0x80, 0x1, 0x0, 0x0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000000300)) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x9, 0x4}, 0x2010, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'geneve1\x00', @random='\x00\x00\x00\x00\x00 '}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x20000, &(0x7f0000000280)={[{@bh}]}, 0x4, 0x4c1, &(0x7f0000000a00)="$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") open(0x0, 0x24100, 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e0, &(0x7f0000000080)="c69f63cf273bdeb57965ccc0249eedad026463d203ecda01ce3fc59617a1d9a77149f27f18aa5134750b417542149c4d6b69bfb4997595e3f1358cfdecb872c9530279d56af9ee1e009b6143697bd1341ca1ebfb") sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000570a00000000002000000007000000050000000000000700000000000000000100000d00000000020000000100000000005f30616100"], 0x0, 0x3f, 0x0, 0x1, 0x8}, 0x28) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") 3.452537247s ago: executing program 3 (id=7675): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80540, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x813) r1 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf32(r2, 0x0, 0x858) pread64(r2, &(0x7f0000000080)=""/234, 0xea, 0x2) 3.430899197s ago: executing program 3 (id=7677): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x221, &(0x7f00000008c0)="$eJzs3D9vG2UcB/DHjk1iECgTEiw8ggWWA7KwMAShICEsgQAj/kwXxQHLxpZyHuyIwTNTX0dVqUulblXfQF5Dl25RpShThqpXpbbjOE2a9I+dKv18Fv/8+95jP4/POlln+3a/vvZvczNLNtNuKC0VQnE1DMJBISyHYhgbhM9u/r7//y9//PnDN9Xq2s/lUT/G9z6689d/Nz6+233nt1uHnUIIYW/l/s77Ox/sPvr1n0YWG1lsd7oxjeudTjddb9XjRiNrJjH+1KqnWT022ll9ayrfbHUmTx3qWRbTdj826/3Y7cTuVj+mf6eNdkySJC4FXkrt+kGeh708z/PFQcjz/AJjVo/fKcxubszD8+9/rpKjg3o8PJo+GPRqvdrwdph/93117Yv4xPJk1H6vV1s4yr8c5nE6L4e3R/nKqflb4dNPhvlh9u2P1RN5JWw8Pd2H3qEAAAAAAHC+JB459fx+kpyVD6tj3w+cOH9fCh+WJp2F2S8FAAAAOEPW326mrY3y1rBo1Y8X5RDCdGeGxWKY7nx1ezTF84Z/fu/8bWZUvDsqwgs+TiWEcPY2xTDn5VxWMf4d+agz/n/BxYaXXtU0Kq/JqzEulsJpUSVsNxfns1MAAICrZfKh/8JDijOdEAAAAAAAAAAAAAAAAAAAALyB5nExs8teIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAszwOAAD//xYfV3E=") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@allocspi={0x1a4, 0x16, 0x1, 0x0, 0x80, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x1, 0xfffffffffffffffe}, {0x0, 0x6, 0x796}, 0x0, 0x3507, 0x0, 0x3, 0x2, 0x2}, 0x0, 0x1a0b1}, [@policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@broadcast, 0x4e21, 0x3, 0x4e22, 0x7ff, 0xa, 0x20, 0xe0, 0x2b, 0x0, 0xee00}, {0x8, 0xd20, 0x0, 0x100000001, 0x1, 0x5, 0x5, 0x1}, {0x3, 0x1, 0x6, 0x800000000}, 0x5, 0x6e6bb1}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4005}, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x1000040, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x0, 0x203, 0x3, 0x1c}, &(0x7f0000000380)=0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc00) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x50) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) 3.377491149s ago: executing program 3 (id=7678): socket$nl_route(0x10, 0x3, 0x0) alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80340, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x10681, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x6c190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x6, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xa976a000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 2.712770863s ago: executing program 0 (id=7684): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x48) timer_create(0x0, 0x0, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xf}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, 0x0, 0x4020845) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa}}], {0x14}}, 0xcc}}, 0x40810) socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x100000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) 2.588487115s ago: executing program 4 (id=7685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @empty}}}}}}, 0x26) (fail_nth: 2) 2.585040675s ago: executing program 0 (id=7686): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_sfeatures}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x192, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = syz_io_uring_setup(0x363, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r5, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) tee(r4, r6, 0xfffffffffffffc01, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@dellinkprop={0x330, 0x6d, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x80, 0x18e02}, [@IFLA_MTU={0x8, 0x4, 0x2}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_VFINFO_LIST={0x2cc, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0xced9, 0x15}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7ff, 0xfff}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x42}}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @multicast}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x80}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x109, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0xbd3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x5524}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xa00000, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x38, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x4}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @local}}, @IFLA_VF_MAC={0x28, 0x1, {0xffffc7b5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x100}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x30b0}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0xa88, 0x8, 0x88a8}}, {0x14, 0x1, {0x401, 0xa1b, 0x17, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xe3b, 0xd22, 0x8, 0x8100}}, {0x14, 0x1, {0x4, 0x40, 0x0, 0x8100}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @random="034c8fb5351d"}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0xfff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1ff, 0x1}}]}, {0xb4, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0xdb0}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0xfffffffe}}, @IFLA_VF_VLAN={0x10, 0x2, {0xe, 0x30f, 0x4}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x5}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x603, 0x706e, 0x8100}}, {0x14, 0x1, {0x9, 0x946, 0x5, 0x88a8}}, {0x14, 0x1, {0x2, 0x7dc, 0x8, 0x8100}}, {0x14, 0x1, {0x82, 0xe9f, 0x2, 0x88a8}}, {0x14, 0x1, {0xe, 0xd14, 0x8, 0x88a8}}, {0x14, 0x1, {0x5, 0xf, 0x9, 0x8100}}]}]}]}, @IFLA_EVENT={0x8, 0x2c, 0x7}, @IFLA_EXT_MASK={0x8, 0x1d, 0x204000}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_MASTER={0x8}]}, 0x330}, 0x1, 0x0, 0x0, 0x4044010}, 0x4000840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.512268627s ago: executing program 4 (id=7687): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) clock_gettime(0x8, &(0x7f0000000280)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SVE_GET_VL(0x33, 0x1e6b7) creat(0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x1) 2.320215771s ago: executing program 4 (id=7688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x801a1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x5}, 0xc068, 0x400002, 0xfffffffd, 0x0, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0xc0002011}) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r6) poll(0x0, 0x0, 0xb) r8 = syz_pidfd_open(0x0, 0x0) setns(r8, 0x24020000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007"], 0x18) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r9}, 0x14) lseek(r0, 0xe6b8, 0x1) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 1.85464385s ago: executing program 1 (id=7690): pipe(&(0x7f00000001c0)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x9, 0x6, 0xc7a0, 0x9, 0x8, 0xb62}) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x1ff, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x8, 0x0, 0xc96, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) unshare(0x24060400) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x95}, 0x40000) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000000c0)}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x2, 0x2, "e5d5d01bee270008"}) (fail_nth: 2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x85, 0xbffff034}, {0x6, 0x0, 0xfd, 0xff}]}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r5, 0x11a, 0x3, &(0x7f0000000000)=0x3f9, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) 1.648428155s ago: executing program 3 (id=7691): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0x30}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311200000000000851000000200000085000000af00000095000000000000009500a505"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r0, 0x0, 0x40000c0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)=""/218, 0x14d, 0xda, 0x1, 0xff}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1e00000081000000090000000900000080800000", @ANYRES32=0x1, @ANYBLOB="0500000083200000000000000000000000000000b54b8fe4402c19f738fb2a2b687b5ee3fb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000050000000d00000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x10000, 0x3, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x36, 0x0, 0x0) r5 = io_uring_setup(0x3450, &(0x7f0000000480)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.178224095s ago: executing program 5 (id=7693): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7, 0x3ff}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xf}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40810) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000003680)={{0xffffffffffffffff, 0x0, 0x200000, 0x0, 0x6, 0x0, 0x0}, 0x0, 0x0}) socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x100000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x50) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) 1.105704907s ago: executing program 0 (id=7694): pipe(&(0x7f00000001c0)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x9, 0x6, 0xc7a0, 0x9, 0x8, 0xb62}) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x1ff, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x8, 0x0, 0xc96, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) unshare(0x24060400) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x95}, 0x40000) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000000c0)}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x2, 0x2, "e5d5d01bee270008"}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x85, 0xbffff034}, {0x6, 0x0, 0xfd, 0xff}]}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r5, 0x11a, 0x3, &(0x7f0000000000)=0x3f9, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) 1.104741407s ago: executing program 5 (id=7695): pipe(&(0x7f00000001c0)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x9, 0x6, 0xc7a0, 0x9, 0x8, 0xb62}) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x1ff, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x8, 0x0, 0xc96, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) unshare(0x24060400) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x95}, 0x40000) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000000c0)}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x2, 0x2, "e5d5d01bee270008"}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x85, 0xbffff034}, {0x86, 0x0, 0xfd, 0xff}]}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r5, 0x11a, 0x3, &(0x7f0000000000)=0x3f9, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) 1.039600208s ago: executing program 5 (id=7696): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x48) timer_create(0x0, 0x0, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xf}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, 0x0, 0x4020845) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa}}], {0x14}}, 0xcc}}, 0x40810) socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x100000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) 1.036916088s ago: executing program 0 (id=7697): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) inotify_init() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[], [], 0x2c}, 0x84, 0x4f8, &(0x7f0000001340)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) close(r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.011610988s ago: executing program 5 (id=7698): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$eJzs3bFra1UcB/DfTdMkT5FEcBLBCzo4PV7f6pIifVDMpGRQBy22BUmCkEKhVYydXF0cXV0Ewc1/wsX/QHAV3CxYuHKTe03SpiFB06rv81l6eu755vzOyS0lQ8794KVB7zCN44tPf45GI4lKO9pxmUQrKlH6POa0vwwA4L/sMsvit2xinVwSEY3NlQUAbNDa//+/33hJAMCGvf3Ou2/udjp7b6VpI54Mvjjt5p/s858RDyJi9zg+in4cxaNoxlVE9pdJ+0mWZaNqmmvFq4PRaTdPDt7/sXj93V8bMc7vRDNa4675/H5nbyedmMmP8jqeKeZv5/nH0YwXFsy/39l7vCAf3Vq89spM/Q+jGT99GB9HPw7HRUzyUYn4bCdN38i++v2T9/Ly8nwyOu3Wx+Omsq27f3cAAAAAAAAAAAAAAAAAAAAAAPi/elicnVOP8fk9eVdx/s7WVf7LdqSl1vz5PJN8Ur7QtfOBRll8XZ7P8yhN06wYOM1X48VqVO9n1QAAAAAAAAAAAAAAAAAAAPDvcnJ23jvo94+G/0ijPA2g/Fr/qvGLaz3tmTEvx/J4fTpXpWgumSu2yjFJxNLC8kWsvPY/imMPVt2oasz2PH9bzd9+t/Jb8M3ta38wf2l72f78jUatmObsvFfeXb2DZPEe1qPsaZQ3yQ+zY2qx6qS3XcrWuP2GJ7WFl5prb0Lt2XFjtGRMJMsKe/2Xyc6d9w6e6x8Nk+urqI13dWF8u2gU8ZtjGqvfz/lfyg2J0zoAAAAAAAAAAAAAAAAAAGCjpl/6neuePK7/Ymm0ktU3WxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3JXp8//XaIyK8AqDazE8ueclAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BT4MwAA//9YnFw0") r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) clock_gettime(0x8, &(0x7f0000000280)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SVE_GET_VL(0x33, 0x1e6b7) creat(0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x1) 924.38912ms ago: executing program 5 (id=7699): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x2, 'vlan0\x00', {0x7}, 0x2}) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_sfeatures}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x192, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x560f, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x20000000000000}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000100)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3189, 0x13080, 0xffffffff, 0x2b7, 0x0, r4}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r6, &(0x7f0000000040)=ANY=[], 0xffffff6a) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 924.00808ms ago: executing program 1 (id=7700): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) socket(0x1e, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r1, 0x6b7a1000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 758.864734ms ago: executing program 4 (id=7701): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) socket(0x1e, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 675.785046ms ago: executing program 3 (id=7702): perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x3, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe5a}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) r5 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r5, 0x30}) keyctl$setperm(0x5, r5, 0x60200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) r7 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x6a, 0x10, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100030000001400048005000300050000000500030080000000080002000200000021214ea852cd8e6984e7283ba56e0c7e60b86f7dccc8e57239542e02771ced417fcc795abc32fe8b5584d36b94fbc32dbf3b99863eb11ddb5404bd0e06d4b0281a5a5c84e528d47bbc92a157e261b9388f9274da5aa945f076463fe2af10eca0d120cf7dbd59ccda753f6c7e82e5647e0ea3e55bede40bc6e2450521dc5fed014e6c0ff3bf17fadfd2212893021e281ef45d2abd0004803ebc110f02acd0da407c857d5bb6d6a0e7e00244b074a364d10d1cca672cecd5ec0db1a86422eb4f63f018868349dd2c"], 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0x4080) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="020000003542983551ee2c03a762d540836df7abec6ce0fcf1c87d73c1159eadbab639a5793c473adc04d5c947804dd8cc5abcdbd78db2473746577ffc45c806fdd40adba31858255bbbde44b6e1136b1bb55f7e737e7d8447db7556817c9632d1a2e1555af52b2d3d76de7ae0b2dac5f327c2f725c2442b5cc857148e39ae852109ef70dd468cc7567fa22d6822375e33e58ce9158efacd5fc95aaaacb92d867b4bca0603fdf3a56b7f8885c551", @ANYRES16=r8, @ANYBLOB="00002bbd7000ffdbdf251e00000038002f800c0002000002000000000000280003800c0005000a00000000000000080001000100000008000100000000000800040062a5000008000300", @ANYRES32=r9, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x4000050) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000208000b400000000070000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000003800018008000100636d70002c00028018000380090001009c979b32261fbabdae20b34f870e0000080001400000000208000240000000000900010073797a30"], 0x10c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r11 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r11, 0x80104592, &(0x7f00000000c0)={0x2b9173a34e8fe2d, 0x0, 0x0}) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="06000910", @ANYRES16=r12, @ANYBLOB="00082dbd7000fedbdf250900000005001d001a000000080014000b00000005001300050000000500130002000000050015000d00000005001d001300000005001500000000000800140012000000"], 0x54}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000001) 576.132208ms ago: executing program 4 (id=7703): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x100) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x400) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x509, &(0x7f0000001100)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x41) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x0, 0x4, 0x1000000000000}) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="141700001000010000000000000000000500001950000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31fffffc08000340000007140c00098008000140000000811400000011f8000000000000000000000100000a000000000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x44) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x20000001, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@flowinfo={{0x14, 0x29, 0xb, 0x7f}}], 0x18}, 0x101) 498.01827ms ago: executing program 4 (id=7704): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_sfeatures}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x192, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = syz_io_uring_setup(0x363, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r5, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) tee(r4, r6, 0xfffffffffffffc01, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@dellinkprop={0x330, 0x6d, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x80, 0x18e02}, [@IFLA_MTU={0x8, 0x4, 0x2}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_VFINFO_LIST={0x2cc, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0xced9, 0x15}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7ff, 0xfff}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x42}}, @IFLA_VF_MAC={0x28, 0x1, {0x2, @multicast}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x80}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x109, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0xbd3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x5524}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xa00000, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x38, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x4}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @local}}, @IFLA_VF_MAC={0x28, 0x1, {0xffffc7b5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x100}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x30b0}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0xa88, 0x8, 0x88a8}}, {0x14, 0x1, {0x401, 0xa1b, 0x17, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xe3b, 0xd22, 0x8, 0x8100}}, {0x14, 0x1, {0x4, 0x40, 0x0, 0x8100}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @random="034c8fb5351d"}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0xfff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1ff, 0x1}}]}, {0xb4, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0xdb0}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0xfffffffe}}, @IFLA_VF_VLAN={0x10, 0x2, {0xe, 0x30f, 0x4}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x5}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x603, 0x706e, 0x8100}}, {0x14, 0x1, {0x9, 0x946, 0x5, 0x88a8}}, {0x14, 0x1, {0x2, 0x7dc, 0x8, 0x8100}}, {0x14, 0x1, {0x82, 0xe9f, 0x2, 0x88a8}}, {0x14, 0x1, {0xe, 0xd14, 0x8, 0x88a8}}, {0x14, 0x1, {0x5, 0xf, 0x9, 0x8100}}]}]}]}, @IFLA_EVENT={0x8, 0x2c, 0x7}, @IFLA_EXT_MASK={0x8, 0x1d, 0x204000}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_MASTER={0x8}]}, 0x330}, 0x1, 0x0, 0x0, 0x4044010}, 0x4000840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) socket$netlink(0x10, 0x3, 0x0) 472.59259ms ago: executing program 3 (id=7705): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x2, 'vlan0\x00', {0x7}, 0x2}) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_sfeatures}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x192, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3189, 0x13080, 0xffffffff, 0x2b7, 0x0, r2}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000040)=ANY=[], 0xffffff6a) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 471.34112ms ago: executing program 1 (id=7706): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7, 0x3ff}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xf}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40810) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000003680)={{0xffffffffffffffff, 0x0, 0x200000, 0x0, 0x6, 0x0, 0x0}, 0x0, 0x0}) socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x100000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x50) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) 413.880091ms ago: executing program 1 (id=7707): prctl$PR_GET_SECCOMP(0x15) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x802700, &(0x7f0000000380), 0x1, 0x46d, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh/9bmKtH61Vo0UIikmTVu3Bi6IgUlHQQz3GZFtCt400UWwtNhXxJEhBz+JR9C/wJoKoJ8GrJ09SKNpLW0+RmZ1pN9tsYs2mE7O/H+zmfWfe3XmezNe777sbQNcayp6SiO0R8VtEDDSqixsMNf5cu3Ju8vqVc5NJLCy8/meSt7t65dxk2bR83baiMpxGpB8lxUYWmz1z9sREvV47XdRH506+PTp75uyT756cOF47Xjs1fvjwoYNjzzw9/lRH8szyurr3g5l9e1568+Irk0cvvvXTN1m824v1zXl0ylCW+F8LudZ1j3V6YxXb0VROeisMhNvSExHZ7urLz/+B6ImbO28gXvyw0uCANZXdmza1Xz2/AGxgSVQdAVCN8kafff4tH3eo67EuXH6u8QEoy/ta8Wis6Y20aNPX8vm2k4Yi4uj8319kj1ijcQgAgGafTH5+pD8i3r/+9ctZ32MgIsrxoHvz59/z563FHMpgRNwVEbsi4u6I2B0R9xRt74uI+1cZz639n/TSKt9yWVn/79libmtx/6/s/cVgT1HbkefflxybrtcORMTOiBiOvk1ZfWyZbXz3wq+ftlvX3P/LHtn2y75gEcel3pYBuqmJuYm8U9oBly9E7O1dKv/kxkxAEhF7ImLv7b31zrIw/fhX+9o1Wjn/ZXRgnmnhyyy9+Sz/+WjJv5Q0z09O3zI/Obo56rUDo+VRcauff/n4tXbbX1X+HXC51vjbtP9bmwwmzfO1s53d/n88/tP+5I18nrm/WPbexNzc6bGI/uRIXl+0fPzma8t62T47/of3L33+7ypek+X/QERkB/GDEfFQRDxcxP5IRDwaEfuXyfHH51fOP9KK9v+FiKklr383jv+W/X/7hZ4TP3zbbvv/bv8fykvDxZL8+reCpcLJLhetAa7mfwcAAAD/F2n+HfgkHblRTtORkcZ3+HfH1rQ+Mzv3xLGZd05NNb4rPxh9aTnSNVCMh9an67WxZL54x8b46HgxVlyOlx4sxo0/69mS10cmZ+pTFecO3W5bm/M/80dP1dEBa2zLkkvH++94IEAFWufR08XV86+GiwFsVH6vDd1rhfO/+XcwwAbj/g/da6nz/3xL3VwAbEzu/9C9nP/QpdLvq44AqJD7P3Sl1fyufw0Lm9dHGNUU1utOyQsRZSFdF/EorFGh6isTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wTAAD//6MS5oc=") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x49) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x4}}, 0x10) (fail_nth: 1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 363.819722ms ago: executing program 1 (id=7708): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x48) timer_create(0x0, 0x0, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xf}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, 0x0, 0x4020845) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa}}], {0x14}}, 0xcc}}, 0x40810) socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x100000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) 362.883762ms ago: executing program 1 (id=7709): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)={0x2bc, 0x14, 0x8, 0x70bd2d, 0x25dfdbfe, {0x3, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "1f9ff1c76ff7b3f83649fdd75714ed8ed8e32307ea9faed78098457a6af64d09c0f3ce2937576776c7fa2b782592d006fc86839149138b01ef9e2aba8cdcd2aa1f849bfdc19effc44257d5a6b669123f1eb0b110c156a613f269a0aba2b1103824bd7a533e7d18d7c41301fcb564a6d7a1bae03454b62bf9358d1490e6c14529e37666ccf6dd789829d76e7963d03421738fc182a649197403c206f748ab9f1b58b5712c6cdabe4d679d35a6dd6c1ed25b3fb8b56362ee209042c8592c2f99645da6f521d3306bc22df3013840a0f5a7f32571313844a94085"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "30fc0fefc26367d91cc276ad4608abf75dbdf1a0a5"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "21d8b47d661f67b15f878e2d78d8b0ac8eeab89a4fb50ffb70bcabc1d811738a9257e486e6f6d71d0c00c85a4e929fd389cb10659e3521a30f0922fd55f0d38590c9aa62f09ab8a35dbaab063a3ca67225fd66882e48e78440c93fe1ae507c90b367d940ff5872cb717625843d9edd73505c6af5a9a7dc8fc1fb7fd86e750088f1438e01db43ee74aa685dc75b8e906b384d3fbf10e4b4d1e17ab78b0e95b4e8fe228b51af844eb3846717e116a440cfa1b2fffb2b8664ce38d206ea1c7dd342af7dfe8005a193ab879da512509a1fca8043b3f1c7ae71657398332536fcae63495a702dd3cd"}, @INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "bb37ed5d9f28851f3795dfcb2aa3e85e64fee849862c5db2ce202912ab3874f6e47d4151030b1eaa762297d2f8653dd7a6f1fd6bf0155d1d265ff44a8d18b3f3dbc5f4c8ae5e45b82d6d7471f4deb1ea96be16d4ff6cc8215ffcb63f6a043d9d6adb3cba96c6e2f5b5b2a47bc11034502b53de99aefa9b10624de7d84cb0c0f3d9e49a7a670a7cc7ced83c95d25c16d35bbe3622eeba52b8ff699babb8f952e7"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "d65f07d7ca7206f37ce8c84b2dbb25c529126a306850cf"}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x10}, 0x800) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) open$dir(&(0x7f0000000180)='./file0\x00', 0x17e, 0x0) io_uring_setup(0x5755, &(0x7f00000001c0)={0x0, 0xf463, 0x40, 0x1, 0x1a9}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) close(0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000600", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="100006000000000020"], 0x54, 0x1) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8c0001, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x7}}, {@gid={'gid', 0x3d, r2}}, {@gid}, {@mode={'mode', 0x3d, 0x100000000}}], [{@subj_user={'subj_user', 0x3d, '\xbb\xbb\xbb\xbb\xbb\xbb'}}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fsopen(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_emit_ethernet(0x41, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "001863"}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) 96.319438ms ago: executing program 0 (id=7710): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$usbfs(0x0, 0x77, 0x1013c1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0xffffffff, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0x7555}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x9}, {}, {}, {0x7}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {0x0, 0x0, 0xfffffffd}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x80}, {}, {0x10000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x304, &(0x7f0000000040)="b90703600000f007049e0ff065581fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28) 0s ago: executing program 5 (id=7711): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, r0, 0x25, 0x0, @void}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x118, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x48000) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) syz_io_uring_complete(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000002f80)={0x38, 0x0, 0x7, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000004000000e6ffffff02000000020000f8666ad707fdd912dbc80765d0d041865b7442783ec27c6284e8cb7d98ee8354fcdb72a9b2d5df839bce62d071d60926d36ba18aecfccff04a8dd9d4f6d60e78c074b8f7781ce876bc6e41bac832ea8473eae3cb53db8ca5bae8de945070190588a3e76986cdb4d6fa89a839cda0807c1ee7acab802c9403f62d2b991f08c2d0351907cf280b76967500"/166, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() syz_pidfd_open(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES64, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x101, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x291, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1d, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x6, 0x9, 0x1, {0x22, 0xb66}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3, 0x10}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0xc, 0x2, 0x0, 0x8, 0x9}, 0x45, &(0x7f0000000240)={0x5, 0xf, 0x45, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0x47}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x3ff, 0xf01e, 0x5}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0xff00, 0x1, [0x0, 0xc0c0, 0xc000, 0x21]}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc0, 0xd, 0x6c, 0x1cb7, 0x4}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x82c}}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x8, 0x0, 0x1, 0x8000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58010000100013070000050000000000e0000001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00050000000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0ffffffffffffff00000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d6163286165732900000000000000"], 0x158}}, 0x0) kernel console output (not intermixed with test programs): ate_parse: 20 callbacks suppressed [ 663.848639][T22948] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6267'. [ 663.869526][ T68] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 663.877689][ T68] ip6gre1 (unregistering): left promiscuous mode [ 663.913086][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.923759][ T68] bond0 (unregistering): Released all slaves [ 663.931775][ T68] bond1 (unregistering): Released all slaves [ 663.940701][ T68] bond2 (unregistering): Released all slaves [ 663.951796][ T68] bond3 (unregistering): Released all slaves [ 663.961417][ T68] bond4 (unregistering): Released all slaves [ 663.971900][ T68] bond5 (unregistering): Released all slaves [ 663.983159][ T68] bond6 (unregistering): Released all slaves [ 663.992978][ T68] bond7 (unregistering): Released all slaves [ 664.002763][ T68] bond8 (unregistering): Released all slaves [ 664.012567][ T68] bond9 (unregistering): Released all slaves [ 664.022322][ T68] bond10 (unregistering): Released all slaves [ 664.033571][ T68] bond11 (unregistering): Released all slaves [ 664.043606][ T68] bond12 (unregistering): Released all slaves [ 664.052752][ T68] bond13 (unregistering): Released all slaves [ 664.115948][T22958] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22958 comm=syz.2.6269 [ 664.119936][T22961] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6270'. [ 664.215210][ T28] audit: type=1400 audit(1782686157.775:4377): avc: denied { connect } for pid=22968 comm="syz.0.6271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 664.239882][ T28] audit: type=1400 audit(1782686157.775:4378): avc: denied { read } for pid=22968 comm="syz.0.6271" laddr=172.20.20.170 lport=58527 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 664.269440][T22958] bond2: entered allmulticast mode [ 664.274856][T22958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 664.315098][ T28] audit: type=1400 audit(1782686157.855:4379): avc: denied { write } for pid=22953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.343140][ T68] hsr_slave_0: left promiscuous mode [ 664.353339][ T68] hsr_slave_1: left promiscuous mode [ 664.364643][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.379989][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.395629][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.404097][ T28] audit: type=1400 audit(1782686157.955:4380): avc: denied { write } for pid=22983 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 664.415739][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.451886][ T68] veth1_macvtap: left promiscuous mode [ 664.458315][ T68] veth0_macvtap: left promiscuous mode [ 664.469268][ T68] veth1_vlan: left promiscuous mode [ 664.480327][ T68] veth0_vlan: left promiscuous mode [ 664.500103][ T28] audit: type=1326 audit(1782686158.035:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22988 comm="syz.4.6276" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02af2fce59 code=0x0 [ 664.621200][ T68] team0 (unregistering): Port device team_slave_1 removed [ 664.637424][ T68] team0 (unregistering): Port device team_slave_0 removed [ 664.680264][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 664.782196][T23000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6277'. [ 665.080288][ T28] audit: type=1400 audit(1782686158.355:4382): avc: denied { getopt } for pid=22991 comm="syz.0.6277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 665.159121][T23003] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23003 comm=syz.2.6280 [ 665.199981][ T28] audit: type=1400 audit(1782686158.755:4383): avc: denied { audit_read } for pid=23004 comm="syz.3.6281" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 665.239859][T23003] bond3: entered allmulticast mode [ 665.245383][T23003] 8021q: adding VLAN 0 to HW filter on device bond3 [ 665.267171][T23008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6282'. [ 665.277656][T23008] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6282'. [ 665.315538][T23008] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 665.358371][T23008] bond1 (unregistering): Released all slaves [ 665.406410][ T28] audit: type=1400 audit(1782686158.955:4384): avc: denied { write } for pid=23009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.448494][T23025] 9p: Bad value for 'rfdno' [ 665.477282][ T28] audit: type=1400 audit(1782686158.995:4385): avc: denied { write } for pid=23023 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 665.513074][T23027] syzkaller0: entered promiscuous mode [ 665.532244][ T28] audit: type=1400 audit(1782686158.995:4386): avc: denied { ioctl } for pid=23026 comm="syz.2.6284" path="socket:[82845]" dev="sockfs" ino=82845 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 665.557940][T23027] syzkaller0: entered allmulticast mode [ 665.594248][T22860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 665.604030][T22860] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 665.612181][T22860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 665.621174][T22860] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 665.630217][T22860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 665.642935][T22860] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 665.655753][T22860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 665.664858][T22860] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 665.770368][ T68] IPVS: stop unused estimator thread 0... [ 665.873203][T22860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.887215][T22860] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.897023][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.904212][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.918188][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.925294][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.988127][T23069] FAULT_INJECTION: forcing a failure. [ 665.988127][T23069] name failslab, interval 1, probability 0, space 0, times 0 [ 666.000787][T23069] CPU: 1 UID: 0 PID: 23069 Comm: syz.2.6292 Not tainted syzkaller #0 PREEMPT(lazy) [ 666.000815][T23069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 666.000831][T23069] Call Trace: [ 666.000839][T23069] [ 666.000895][T23069] __dump_stack+0x1d/0x30 [ 666.000925][T23069] dump_stack_lvl+0x95/0xd0 [ 666.000946][T23069] dump_stack+0x15/0x1b [ 666.000966][T23069] should_fail_ex+0x25e/0x270 [ 666.001010][T23069] should_failslab+0x8c/0xb0 [ 666.001037][T23069] __kmalloc_node_track_caller_noprof+0xd5/0x4c0 [ 666.001143][T23069] ? netlink_realloc_groups+0xf1/0x210 [ 666.001170][T23069] ? netlink_realloc_groups+0xf1/0x210 [ 666.001210][T23069] krealloc_node_align_noprof+0x117/0x2d0 [ 666.001265][T23069] netlink_realloc_groups+0xf1/0x210 [ 666.001291][T23069] netlink_bind+0x164/0x920 [ 666.001312][T23069] __sys_bind+0x1d0/0x290 [ 666.001396][T23069] __x64_sys_bind+0x3f/0x50 [ 666.001418][T23069] x64_sys_call+0x2b30/0x3020 [ 666.001477][T23069] do_syscall_64+0x136/0x3c0 [ 666.001513][T23069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.001535][T23069] RIP: 0033:0x7f647bffce59 [ 666.001552][T23069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.001635][T23069] RSP: 002b:00007f647aa4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 666.001734][T23069] RAX: ffffffffffffffda RBX: 00007f647c275fa0 RCX: 00007f647bffce59 [ 666.001748][T23069] RDX: 000000000000000c RSI: 0000200000000000 RDI: 0000000000000004 [ 666.001760][T23069] RBP: 00007f647aa4f090 R08: 0000000000000000 R09: 0000000000000000 [ 666.001773][T23069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.001785][T23069] R13: 00007f647c276038 R14: 00007f647c275fa0 R15: 00007fff05f399b8 [ 666.001804][T23069] [ 666.357999][T22860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.502495][T22860] veth0_vlan: entered promiscuous mode [ 666.522086][T22860] veth1_vlan: entered promiscuous mode [ 666.554603][T22860] veth0_macvtap: entered promiscuous mode [ 666.570508][T22860] veth1_macvtap: entered promiscuous mode [ 666.593695][T22860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.688242][T22860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.707080][ T6974] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.716042][ T6974] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.735111][ T6974] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.744353][ T6974] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.795021][T23168] FAULT_INJECTION: forcing a failure. [ 667.795021][T23168] name failslab, interval 1, probability 0, space 0, times 0 [ 667.833277][T23168] CPU: 1 UID: 0 PID: 23168 Comm: syz.0.6311 Not tainted syzkaller #0 PREEMPT(lazy) [ 667.833312][T23168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 667.833342][T23168] Call Trace: [ 667.833350][T23168] [ 667.833360][T23168] __dump_stack+0x1d/0x30 [ 667.833387][T23168] dump_stack_lvl+0x95/0xd0 [ 667.833443][T23168] dump_stack+0x15/0x1b [ 667.833466][T23168] should_fail_ex+0x25e/0x270 [ 667.833499][T23168] should_failslab+0x8c/0xb0 [ 667.833527][T23168] __kmalloc_noprof+0xd4/0x4a0 [ 667.833629][T23168] ? bpf_test_init+0x86/0x130 [ 667.833669][T23168] ? bpf_test_init+0x86/0x130 [ 667.833693][T23168] bpf_test_init+0x86/0x130 [ 667.833712][T23168] bpf_prog_test_run_xdp+0x303/0x9e0 [ 667.833792][T23168] ? __rcu_read_unlock+0x4e/0x70 [ 667.833822][T23168] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 667.833888][T23168] bpf_prog_test_run+0x208/0x340 [ 667.833927][T23168] __sys_bpf+0x8da/0xc30 [ 667.833969][T23168] ? vfs_write+0x7a0/0x990 [ 667.834070][T23168] __x64_sys_bpf+0x69/0x80 [ 667.834106][T23168] x64_sys_call+0x10cb/0x3020 [ 667.834184][T23168] do_syscall_64+0x136/0x3c0 [ 667.834217][T23168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.834323][T23168] RIP: 0033:0x7f06ecccce59 [ 667.834338][T23168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.834355][T23168] RSP: 002b:00007f06eb727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 667.834378][T23168] RAX: ffffffffffffffda RBX: 00007f06ecf45fa0 RCX: 00007f06ecccce59 [ 667.834426][T23168] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 667.834441][T23168] RBP: 00007f06eb727090 R08: 0000000000000000 R09: 0000000000000000 [ 667.834456][T23168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.834471][T23168] R13: 00007f06ecf46038 R14: 00007f06ecf45fa0 R15: 00007fff21129d08 [ 667.834495][T23168] [ 668.038712][T23145] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6308'. [ 668.313666][T23179] sctp: [Deprecated]: syz.1.6314 (pid 23179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 668.313666][T23179] Use struct sctp_sack_info instead [ 669.522032][T23219] bond2: entered allmulticast mode [ 669.528018][T23219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 669.580070][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6330'. [ 669.588589][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 669.588631][ T28] audit: type=1326 audit(1782686163.145:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23225 comm="syz.1.6331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe64d84ce59 code=0x0 [ 670.064353][T23240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6333'. [ 670.831985][T23258] 8021q: adding VLAN 0 to HW filter on device bond4 [ 670.852225][T23258] bond0: (slave bond4): Enslaving as an active interface with an up link [ 671.286530][ T28] audit: type=1326 audit(1782686164.845:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23273 comm="syz.2.6346" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f647bffce59 code=0x0 [ 671.359973][T23274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6344'. [ 671.935787][T23295] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 672.791859][T23315] bond1: entered allmulticast mode [ 672.819222][T23315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 673.288773][ T28] audit: type=1326 audit(1782686166.855:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23334 comm="syz.1.6362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe64d84ce59 code=0x0 [ 673.353150][T23343] netlink: 'syz.4.6364': attribute type 1 has an invalid length. [ 673.368844][T23343] bond2: entered promiscuous mode [ 673.374109][T23343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 673.420989][T23346] netlink: 'syz.0.6365': attribute type 1 has an invalid length. [ 673.589288][T23346] bond3: entered promiscuous mode [ 673.594600][T23346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 674.558910][T23373] sctp: [Deprecated]: syz.1.6372 (pid 23373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 674.558910][T23373] Use struct sctp_sack_info instead [ 675.092949][ T28] audit: type=1326 audit(1782686168.655:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23390 comm="syz.2.6380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f647bffce59 code=0x0 [ 675.592856][T23401] netlink: 'syz.0.6383': attribute type 1 has an invalid length. [ 675.618308][T23401] bond4: entered promiscuous mode [ 675.632051][T23401] 8021q: adding VLAN 0 to HW filter on device bond4 [ 676.384487][T23422] 9p: Bad value for 'rfdno' [ 676.407787][T23425] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6391'. [ 676.842295][ T28] audit: type=1326 audit(1782686170.405:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23439 comm="syz.4.6396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02af2fce59 code=0x0 [ 677.025248][T23449] 9p: Bad value for 'wfdno' [ 677.102783][T23452] netlink: 'syz.2.6399': attribute type 1 has an invalid length. [ 677.171629][T23452] bond5: entered promiscuous mode [ 677.182939][T23452] 8021q: adding VLAN 0 to HW filter on device bond5 [ 677.658708][T23463] sctp: [Deprecated]: syz.1.6401 (pid 23463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 677.658708][T23463] Use struct sctp_sack_info instead [ 677.863869][T23471] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 678.121346][T23474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23474 comm=syz.2.6405 [ 678.192625][T23474] bond6: entered allmulticast mode [ 678.210262][T23474] 8021q: adding VLAN 0 to HW filter on device bond6 [ 678.645898][T23490] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23490 comm=syz.2.6410 [ 678.717033][T23490] bond7: entered allmulticast mode [ 678.727550][T23490] 8021q: adding VLAN 0 to HW filter on device bond7 [ 679.012368][T23510] netlink: 'syz.2.6416': attribute type 1 has an invalid length. [ 679.026573][T23510] bond8: entered promiscuous mode [ 679.032224][T23510] 8021q: adding VLAN 0 to HW filter on device bond8 [ 679.105093][T23513] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6417'. [ 680.044817][ T28] audit: type=1326 audit(1782686173.595:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23527 comm="syz.3.6421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa23effce59 code=0x0 [ 681.420084][T23565] netlink: 'syz.1.6433': attribute type 1 has an invalid length. [ 681.521776][T23565] bond1: entered promiscuous mode [ 681.542561][T23565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 682.296470][T23582] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 682.637404][ T28] audit: type=1400 audit(1782686176.145:4403): avc: denied { remount } for pid=23593 comm="syz.2.6441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 682.685771][T23596] netlink: 'syz.3.6442': attribute type 1 has an invalid length. [ 682.706541][T23596] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6442'. [ 682.897705][ T28] audit: type=1400 audit(1782686176.435:4404): avc: denied { unmount } for pid=21568 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 683.422864][T23622] netlink: 'syz.0.6449': attribute type 1 has an invalid length. [ 683.438121][T23622] bond5: entered promiscuous mode [ 683.443332][T23622] 8021q: adding VLAN 0 to HW filter on device bond5 [ 683.534697][T23625] FAULT_INJECTION: forcing a failure. [ 683.534697][T23625] name failslab, interval 1, probability 0, space 0, times 0 [ 683.591865][T23625] CPU: 1 UID: 0 PID: 23625 Comm: syz.3.6450 Not tainted syzkaller #0 PREEMPT(lazy) [ 683.591901][T23625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 683.591916][T23625] Call Trace: [ 683.591923][T23625] [ 683.591930][T23625] __dump_stack+0x1d/0x30 [ 683.592009][T23625] dump_stack_lvl+0x95/0xd0 [ 683.592035][T23625] dump_stack+0x15/0x1b [ 683.592058][T23625] should_fail_ex+0x25e/0x270 [ 683.592152][T23625] should_failslab+0x8c/0xb0 [ 683.592244][T23625] __kvmalloc_node_noprof+0x15b/0x590 [ 683.592276][T23625] ? listxattr+0x60/0x280 [ 683.592311][T23625] ? listxattr+0x60/0x280 [ 683.592368][T23625] listxattr+0x60/0x280 [ 683.592399][T23625] __x64_sys_flistxattr+0xc7/0x120 [ 683.592463][T23625] x64_sys_call+0xf1e/0x3020 [ 683.592493][T23625] do_syscall_64+0x136/0x3c0 [ 683.592539][T23625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.592604][T23625] RIP: 0033:0x7fa23effce59 [ 683.592624][T23625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.592641][T23625] RSP: 002b:00007fa23da4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 683.592659][T23625] RAX: ffffffffffffffda RBX: 00007fa23f275fa0 RCX: 00007fa23effce59 [ 683.592672][T23625] RDX: 0000000000000044 RSI: 0000200000003900 RDI: 0000000000000006 [ 683.592687][T23625] RBP: 00007fa23da4f090 R08: 0000000000000000 R09: 0000000000000000 [ 683.592746][T23625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.592758][T23625] R13: 00007fa23f276038 R14: 00007fa23f275fa0 R15: 00007ffddbe8ba88 [ 683.592775][T23625] [ 684.545875][T23650] FAULT_INJECTION: forcing a failure. [ 684.545875][T23650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.560146][T23650] CPU: 0 UID: 0 PID: 23650 Comm: syz.0.6460 Not tainted syzkaller #0 PREEMPT(lazy) [ 684.560178][T23650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 684.560191][T23650] Call Trace: [ 684.560198][T23650] [ 684.560209][T23650] __dump_stack+0x1d/0x30 [ 684.560272][T23650] dump_stack_lvl+0x95/0xd0 [ 684.560292][T23650] dump_stack+0x15/0x1b [ 684.560310][T23650] should_fail_ex+0x25e/0x270 [ 684.560336][T23650] should_fail+0xb/0x20 [ 684.560432][T23650] should_fail_usercopy+0x1a/0x20 [ 684.560466][T23650] _copy_from_user+0x1c/0xb0 [ 684.560504][T23650] ____sys_sendmsg+0x1c1/0x580 [ 684.560543][T23650] ___sys_sendmsg+0x195/0x1e0 [ 684.560654][T23650] ? terminate_walk+0x1d5/0x200 [ 684.560693][T23650] __sys_sendmmsg+0x185/0x320 [ 684.560883][T23650] __x64_sys_sendmmsg+0x57/0x70 [ 684.560920][T23650] x64_sys_call+0x27aa/0x3020 [ 684.560951][T23650] do_syscall_64+0x136/0x3c0 [ 684.561065][T23650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.561094][T23650] RIP: 0033:0x7f06ecccce59 [ 684.561109][T23650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.561195][T23650] RSP: 002b:00007f06eb727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 684.561219][T23650] RAX: ffffffffffffffda RBX: 00007f06ecf45fa0 RCX: 00007f06ecccce59 [ 684.561232][T23650] RDX: 0000000000000001 RSI: 0000200000000c00 RDI: 0000000000000003 [ 684.561245][T23650] RBP: 00007f06eb727090 R08: 0000000000000000 R09: 0000000000000000 [ 684.561261][T23650] R10: 00000000000048c5 R11: 0000000000000246 R12: 0000000000000001 [ 684.561276][T23650] R13: 00007f06ecf46038 R14: 00007f06ecf45fa0 R15: 00007fff21129d08 [ 684.561340][T23650] [ 684.574435][T23636] syz.3.6455 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 684.760291][T23636] CPU: 0 UID: 0 PID: 23636 Comm: syz.3.6455 Not tainted syzkaller #0 PREEMPT(lazy) [ 684.760376][T23636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 684.760395][T23636] Call Trace: [ 684.760404][T23636] [ 684.760414][T23636] __dump_stack+0x1d/0x30 [ 684.760518][T23636] dump_stack_lvl+0x95/0xd0 [ 684.760557][T23636] dump_stack+0x15/0x1b [ 684.760582][T23636] dump_header+0x80/0x240 [ 684.760604][T23636] oom_kill_process+0x295/0x350 [ 684.760663][T23636] out_of_memory+0x981/0xbc0 [ 684.760700][T23636] try_charge_memcg+0x621/0xa00 [ 684.760744][T23636] ? __rcu_read_unlock+0x4e/0x70 [ 684.760861][T23636] __memcg_kmem_charge_page+0x199/0x3a0 [ 684.760901][T23636] __alloc_frozen_pages_noprof+0x18a/0x350 [ 684.760959][T23636] alloc_pages_mpol+0xa9/0x1d0 [ 684.760991][T23636] alloc_pages_noprof+0x8f/0x140 [ 684.761022][T23636] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 684.761066][T23636] __kvmalloc_node_noprof+0x3a0/0x590 [ 684.761099][T23636] ? futex_hash_allocate+0x192/0x920 [ 684.761126][T23636] ? futex_hash_allocate+0x192/0x920 [ 684.761167][T23636] ? futex_hash_allocate+0x192/0x920 [ 684.761199][T23636] futex_hash_allocate+0x192/0x920 [ 684.761228][T23636] ? cap_task_prctl+0x13f/0x6b0 [ 684.761262][T23636] futex_hash_prctl+0xd8/0xf0 [ 684.761335][T23636] __se_sys_prctl+0x4f4/0x13b0 [ 684.761366][T23636] __x64_sys_prctl+0x67/0x80 [ 684.761442][T23636] x64_sys_call+0x2533/0x3020 [ 684.761464][T23636] do_syscall_64+0x136/0x3c0 [ 684.761574][T23636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.761601][T23636] RIP: 0033:0x7fa23effce59 [ 684.761669][T23636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.761728][T23636] RSP: 002b:00007fa23da4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 684.761754][T23636] RAX: ffffffffffffffda RBX: 00007fa23f275fa0 RCX: 00007fa23effce59 [ 684.761768][T23636] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 684.761780][T23636] RBP: 00007fa23f092e6f R08: 0000000000000000 R09: 0000000000000000 [ 684.761793][T23636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.761875][T23636] R13: 00007fa23f276038 R14: 00007fa23f275fa0 R15: 00007ffddbe8ba88 [ 684.761899][T23636] [ 684.761920][T23636] memory: usage 307200kB, limit 307200kB, failcnt 2609 [ 684.995192][T23636] memory+swap: usage 338932kB, limit 9007199254740988kB, failcnt 0 [ 685.003164][T23636] kmem: usage 253068kB, limit 9007199254740988kB, failcnt 0 [ 685.010556][T23636] Memory cgroup stats for /syz3: [ 685.010831][T23636] cache 55164928 [ 685.019387][T23636] rss 225280 [ 685.022607][T23636] shmem 55164928 [ 685.026188][T23636] mapped_file 11755520 [ 685.030324][T23636] dirty 0 [ 685.033281][T23636] writeback 0 [ 685.036581][T23636] workingset_refault_anon 139 [ 685.041358][T23636] workingset_refault_file 6369 [ 685.046189][T23636] swap 32493568 [ 685.079897][T23636] swapcached 129527808 [ 685.087752][T23636] pgpgin 1058292 [ 685.091341][T23636] pgpgout 1044769 [ 685.095004][T23636] pgfault 930298 [ 685.098574][T23636] pgmajfault 101 [ 685.102211][T23636] inactive_anon 11812864 [ 685.106477][T23636] active_anon 43577344 [ 685.110566][T23636] inactive_file 0 [ 685.114233][T23636] active_file 0 [ 685.117715][T23636] unevictable 0 [ 685.121191][T23636] hierarchical_memory_limit 314572800 [ 685.126596][T23636] hierarchical_memsw_limit 9223372036854771712 [ 685.132817][T23636] total_cache 55164928 [ 685.136896][T23636] total_rss 225280 [ 685.140631][T23636] total_shmem 55164928 [ 685.144750][T23636] total_mapped_file 11755520 [ 685.149367][T23636] total_dirty 0 [ 685.152845][T23636] total_writeback 0 [ 685.156673][T23636] total_workingset_refault_anon 139 [ 685.161918][T23636] total_workingset_refault_file 6369 [ 685.167227][T23636] total_swap 32493568 [ 685.171227][T23636] total_swapcached 129527808 [ 685.175836][T23636] total_pgpgin 1058292 [ 685.179929][T23636] total_pgpgout 1044769 [ 685.184102][T23636] total_pgfault 930298 [ 685.209404][T23636] total_pgmajfault 101 [ 685.213551][T23636] total_inactive_anon 11812864 [ 685.218364][T23636] total_active_anon 43577344 [ 685.222991][T23636] total_inactive_file 0 [ 685.227217][T23636] total_active_file 0 [ 685.231218][T23636] total_unevictable 0 [ 685.235332][T23636] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6455,pid=23635,uid=0 [ 685.250128][T23636] Memory cgroup out of memory: Killed process 23635 (syz.3.6455) total-vm:94228kB, anon-rss:1412kB, file-rss:22280kB, shmem-rss:11480kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 686.405597][T23677] netlink: 'syz.0.6469': attribute type 1 has an invalid length. [ 686.420653][T23677] bond6: entered promiscuous mode [ 686.425899][T23677] 8021q: adding VLAN 0 to HW filter on device bond6 [ 686.890420][T23685] xt_hashlimit: size too large, truncated to 1048576 [ 686.897154][T23685] xt_hashlimit: max too large, truncated to 1048576 [ 686.904942][T23689] xt_hashlimit: size too large, truncated to 1048576 [ 686.911630][T23689] xt_hashlimit: max too large, truncated to 1048576 [ 687.136951][T23700] xt_hashlimit: size too large, truncated to 1048576 [ 687.143836][T23700] xt_hashlimit: max too large, truncated to 1048576 [ 687.176009][T23702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.757344][ T28] audit: type=1400 audit(1782686181.315:4405): avc: denied { watch_reads } for pid=23709 comm="syz.1.6481" path="/33" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 687.893949][T23713] netlink: 'syz.1.6482': attribute type 10 has an invalid length. [ 687.902122][T23713] team0: Device ipvlan0 is up. Set it down before adding it as a team port [ 688.085949][T23722] xt_hashlimit: size too large, truncated to 1048576 [ 688.092684][T23722] xt_hashlimit: max too large, truncated to 1048576 [ 688.402190][T23730] netlink: 'syz.4.6489': attribute type 1 has an invalid length. [ 688.441962][T23730] bond3: entered promiscuous mode [ 688.447184][T23730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 689.078710][T23741] FAULT_INJECTION: forcing a failure. [ 689.078710][T23741] name failslab, interval 1, probability 0, space 0, times 0 [ 689.098106][T23741] CPU: 0 UID: 0 PID: 23741 Comm: syz.1.6492 Not tainted syzkaller #0 PREEMPT(lazy) [ 689.098138][T23741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 689.098155][T23741] Call Trace: [ 689.098163][T23741] [ 689.098172][T23741] __dump_stack+0x1d/0x30 [ 689.098202][T23741] dump_stack_lvl+0x95/0xd0 [ 689.098226][T23741] dump_stack+0x15/0x1b [ 689.098249][T23741] should_fail_ex+0x25e/0x270 [ 689.098282][T23741] should_failslab+0x8c/0xb0 [ 689.098308][T23741] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 689.098333][T23741] ? vm_area_dup+0x33/0x2c0 [ 689.098358][T23741] ? vm_area_dup+0x33/0x2c0 [ 689.098387][T23741] vm_area_dup+0x33/0x2c0 [ 689.098415][T23741] __split_vma+0xe9/0x640 [ 689.098438][T23741] vms_gather_munmap_vmas+0x176/0x7f0 [ 689.098470][T23741] ? mas_find+0x336/0x450 [ 689.098499][T23741] mmap_region+0x7e3/0x20c0 [ 689.098536][T23741] ? __hrtimer_rearm_deferred+0x571/0x650 [ 689.098574][T23741] ? perf_prepare_sample+0xd7/0x11d0 [ 689.098604][T23741] ? irqentry_exit+0x58f/0x610 [ 689.098631][T23741] ? clockevents_program_event+0x2fd/0x340 [ 689.098673][T23741] do_mmap+0x970/0xbc0 [ 689.098704][T23741] ? selinux_mmap_file+0x5d/0x70 [ 689.098746][T23741] vm_mmap_pgoff+0x183/0x2d0 [ 689.098792][T23741] ksys_mmap_pgoff+0x250/0x310 [ 689.098825][T23741] x64_sys_call+0x14df/0x3020 [ 689.098849][T23741] do_syscall_64+0x136/0x3c0 [ 689.098884][T23741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.098912][T23741] RIP: 0033:0x7fe64d84ce59 [ 689.098933][T23741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.098971][T23741] RSP: 002b:00007fe64c286028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 689.098991][T23741] RAX: ffffffffffffffda RBX: 00007fe64dac6090 RCX: 00007fe64d84ce59 [ 689.099005][T23741] RDX: 0000000001000001 RSI: 0000000000003000 RDI: 0000200000007000 [ 689.099028][T23741] RBP: 00007fe64c286090 R08: 0000000000000007 R09: ffffffffffffc000 [ 689.099047][T23741] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 689.099064][T23741] R13: 00007fe64dac6128 R14: 00007fe64dac6090 R15: 00007ffe7f777348 [ 689.099091][T23741] [ 689.504877][T23752] xt_hashlimit: size too large, truncated to 1048576 [ 689.511627][T23752] xt_hashlimit: max too large, truncated to 1048576 [ 689.822558][ T28] audit: type=1400 audit(1782686183.385:4406): avc: denied { bind } for pid=23758 comm="syz.0.6500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 690.662188][T23774] netlink: 'syz.3.6505': attribute type 1 has an invalid length. [ 690.680459][T23777] FAULT_INJECTION: forcing a failure. [ 690.680459][T23777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.690018][T23774] bond2: entered promiscuous mode [ 690.693615][T23777] CPU: 0 UID: 0 PID: 23777 Comm: syz.4.6506 Not tainted syzkaller #0 PREEMPT(lazy) [ 690.693722][T23777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.693848][T23777] Call Trace: [ 690.693868][T23777] [ 690.693896][T23777] __dump_stack+0x1d/0x30 [ 690.693986][T23777] dump_stack_lvl+0x95/0xd0 [ 690.694052][T23777] dump_stack+0x15/0x1b [ 690.694159][T23777] should_fail_ex+0x25e/0x270 [ 690.694286][T23777] should_fail+0xb/0x20 [ 690.694364][T23777] should_fail_usercopy+0x1a/0x20 [ 690.694466][T23777] _copy_from_user+0x1c/0xb0 [ 690.694613][T23777] vmemdup_user+0x5e/0xd0 [ 690.694717][T23777] map_lookup_and_delete_elem+0x275/0x720 [ 690.694790][T23777] ? security_bpf+0x2b/0x90 [ 690.694876][T23777] __sys_bpf+0xa47/0xc30 [ 690.695018][T23777] ? vfs_write+0x7a0/0x990 [ 690.695086][T23777] __x64_sys_bpf+0x69/0x80 [ 690.695130][T23777] x64_sys_call+0x10cb/0x3020 [ 690.695308][T23777] do_syscall_64+0x136/0x3c0 [ 690.695400][T23777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.695502][T23777] RIP: 0033:0x7f02af2fce59 [ 690.695552][T23777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.695611][T23777] RSP: 002b:00007f02add4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 690.695678][T23777] RAX: ffffffffffffffda RBX: 00007f02af575fa0 RCX: 00007f02af2fce59 [ 690.695795][T23777] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000015 [ 690.695857][T23777] RBP: 00007f02add4f090 R08: 0000000000000000 R09: 0000000000000000 [ 690.695901][T23777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.695939][T23777] R13: 00007f02af576038 R14: 00007f02af575fa0 R15: 00007fff5013e6d8 [ 690.696005][T23777] [ 690.889403][T23774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 691.057661][T23781] xt_hashlimit: size too large, truncated to 1048576 [ 691.068881][T23781] xt_hashlimit: max too large, truncated to 1048576 [ 691.416258][T23796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6512'. [ 691.554487][T23796] FAULT_INJECTION: forcing a failure. [ 691.554487][T23796] name failslab, interval 1, probability 0, space 0, times 0 [ 691.567137][T23796] CPU: 1 UID: 0 PID: 23796 Comm: syz.4.6512 Not tainted syzkaller #0 PREEMPT(lazy) [ 691.567165][T23796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.567182][T23796] Call Trace: [ 691.567191][T23796] [ 691.567202][T23796] __dump_stack+0x1d/0x30 [ 691.567258][T23796] dump_stack_lvl+0x95/0xd0 [ 691.567285][T23796] dump_stack+0x15/0x1b [ 691.567380][T23796] should_fail_ex+0x25e/0x270 [ 691.567493][T23796] should_failslab+0x8c/0xb0 [ 691.567540][T23796] __kvmalloc_node_noprof+0x15b/0x590 [ 691.567567][T23796] ? __rhashtable_init_noprof+0x320/0x490 [ 691.567683][T23796] ? __rhashtable_init_noprof+0x320/0x490 [ 691.567724][T23796] __rhashtable_init_noprof+0x320/0x490 [ 691.567767][T23796] rhtab_map_alloc+0x18e/0x240 [ 691.567819][T23796] ? __pfx_rhtab_hashfn_long+0x10/0x10 [ 691.567853][T23796] ? __pfx_rhtab_key_cmp_long+0x10/0x10 [ 691.567875][T23796] map_create+0xaf9/0xff0 [ 691.567918][T23796] __sys_bpf+0x99a/0xc30 [ 691.568021][T23796] ? vfs_write+0x7a0/0x990 [ 691.568051][T23796] __x64_sys_bpf+0x69/0x80 [ 691.568088][T23796] x64_sys_call+0x10cb/0x3020 [ 691.568128][T23796] do_syscall_64+0x136/0x3c0 [ 691.568165][T23796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.568187][T23796] RIP: 0033:0x7f02af2fce59 [ 691.568211][T23796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.568235][T23796] RSP: 002b:00007f02add4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 691.568314][T23796] RAX: ffffffffffffffda RBX: 00007f02af575fa0 RCX: 00007f02af2fce59 [ 691.568349][T23796] RDX: 0000000000000048 RSI: 0000200000000840 RDI: 0000000000000000 [ 691.568366][T23796] RBP: 00007f02add4f090 R08: 0000000000000000 R09: 0000000000000000 [ 691.568384][T23796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.568407][T23796] R13: 00007f02af576038 R14: 00007f02af575fa0 R15: 00007fff5013e6d8 [ 691.568431][T23796] [ 691.896065][T23817] FAULT_INJECTION: forcing a failure. [ 691.896065][T23817] name failslab, interval 1, probability 0, space 0, times 0 [ 691.900385][T23815] sctp: [Deprecated]: syz.4.6518 (pid 23815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 691.900385][T23815] Use struct sctp_sack_info instead [ 691.909132][T23817] CPU: 0 UID: 0 PID: 23817 Comm: syz.0.6519 Not tainted syzkaller #0 PREEMPT(lazy) [ 691.909256][T23817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.909296][T23817] Call Trace: [ 691.909316][T23817] [ 691.909338][T23817] __dump_stack+0x1d/0x30 [ 691.909428][T23817] dump_stack_lvl+0x95/0xd0 [ 691.909497][T23817] dump_stack+0x15/0x1b [ 691.909557][T23817] should_fail_ex+0x25e/0x270 [ 691.909689][T23817] should_failslab+0x8c/0xb0 [ 691.909738][T23817] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 691.909766][T23817] ? do_getname+0x2e/0x1c0 [ 691.909835][T23817] ? do_getname+0x2e/0x1c0 [ 691.909908][T23817] do_getname+0x2e/0x1c0 [ 691.910031][T23817] __se_sys_rename+0x20/0x1c0 [ 691.910112][T23817] __x64_sys_rename+0x31/0x40 [ 691.910296][T23817] x64_sys_call+0x2b3/0x3020 [ 691.910392][T23817] do_syscall_64+0x136/0x3c0 [ 691.910508][T23817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.910635][T23817] RIP: 0033:0x7f06ecccce59 [ 691.910682][T23817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.910795][T23817] RSP: 002b:00007f06eb727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 691.910858][T23817] RAX: ffffffffffffffda RBX: 00007f06ecf45fa0 RCX: 00007f06ecccce59 [ 691.910925][T23817] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000080 [ 691.910978][T23817] RBP: 00007f06eb727090 R08: 0000000000000000 R09: 0000000000000000 [ 691.911086][T23817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.911130][T23817] R13: 00007f06ecf46038 R14: 00007f06ecf45fa0 R15: 00007fff21129d08 [ 691.911204][T23817] [ 692.192180][T23815] syz.4.6518 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 692.202097][T23815] CPU: 0 UID: 0 PID: 23815 Comm: syz.4.6518 Not tainted syzkaller #0 PREEMPT(lazy) [ 692.202134][T23815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 692.202152][T23815] Call Trace: [ 692.202159][T23815] [ 692.202221][T23815] __dump_stack+0x1d/0x30 [ 692.202253][T23815] dump_stack_lvl+0x95/0xd0 [ 692.202281][T23815] dump_stack+0x15/0x1b [ 692.202387][T23815] dump_header+0x80/0x240 [ 692.202409][T23815] oom_kill_process+0x295/0x350 [ 692.202443][T23815] out_of_memory+0x981/0xbc0 [ 692.202474][T23815] try_charge_memcg+0x621/0xa00 [ 692.202575][T23815] charge_memcg+0x6d/0x120 [ 692.202646][T23815] __mem_cgroup_charge+0x28/0xb0 [ 692.202690][T23815] shmem_get_folio_gfp+0x49f/0xd90 [ 692.202754][T23815] shmem_fault+0xf6/0x250 [ 692.202780][T23815] handle_mm_fault+0x167a/0x2da0 [ 692.202833][T23815] __get_user_pages+0x129c/0x1f10 [ 692.202927][T23815] __mm_populate+0x242/0x390 [ 692.202969][T23815] vm_mmap_pgoff+0x23b/0x2d0 [ 692.203048][T23815] ksys_mmap_pgoff+0xc1/0x310 [ 692.203075][T23815] ? __x64_sys_mmap+0x49/0x70 [ 692.203116][T23815] x64_sys_call+0x14df/0x3020 [ 692.203169][T23815] do_syscall_64+0x136/0x3c0 [ 692.203211][T23815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.203252][T23815] RIP: 0033:0x7f02af2fce59 [ 692.203274][T23815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.203298][T23815] RSP: 002b:00007f02add2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 692.203354][T23815] RAX: ffffffffffffffda RBX: 00007f02af576090 RCX: 00007f02af2fce59 [ 692.203454][T23815] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 692.203472][T23815] RBP: 00007f02af392e6f R08: ffffffffffffffff R09: 00000000fffff000 [ 692.203502][T23815] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 692.203519][T23815] R13: 00007f02af576128 R14: 00007f02af576090 R15: 00007fff5013e6d8 [ 692.203621][T23815] [ 692.203631][T23815] memory: usage 307200kB, limit 307200kB, failcnt 1920 [ 692.418137][T23815] memory+swap: usage 345160kB, limit 9007199254740988kB, failcnt 0 [ 692.426942][T23815] kmem: usage 266496kB, limit 9007199254740988kB, failcnt 0 [ 692.434515][T23815] Memory cgroup stats for /syz4: [ 692.434720][T23815] cache 40886272 [ 692.443322][T23815] rss 745472 [ 692.446556][T23815] shmem 40886272 [ 692.450145][T23815] mapped_file 1433600 [ 692.454172][T23815] dirty 0 [ 692.457138][T23815] writeback 0 [ 692.460474][T23815] workingset_refault_anon 185 [ 692.465174][T23815] workingset_refault_file 2405 [ 692.470147][T23815] swap 38875136 [ 692.473698][T23815] swapcached 94949376 [ 692.477688][T23815] pgpgin 980456 [ 692.481209][T23815] pgpgout 970281 [ 692.484808][T23815] pgfault 923669 [ 692.488379][T23815] pgmajfault 140 [ 692.491968][T23815] inactive_anon 237568 [ 692.496054][T23815] active_anon 41439232 [ 692.500137][T23815] inactive_file 0 [ 692.503791][T23815] active_file 0 [ 692.507292][T23815] unevictable 0 [ 692.510770][T23815] hierarchical_memory_limit 314572800 [ 692.516163][T23815] hierarchical_memsw_limit 9223372036854771712 [ 692.522359][T23815] total_cache 40886272 [ 692.526443][T23815] total_rss 745472 [ 692.565721][T23821] xt_hashlimit: size too large, truncated to 1048576 [ 692.581646][T23821] xt_hashlimit: max too large, truncated to 1048576 [ 692.605972][T23815] total_shmem 40886272 [ 692.613757][T23815] total_mapped_file 1433600 [ 692.654562][T23815] total_dirty 0 [ 692.664526][T23815] total_writeback 0 [ 692.674416][T23815] total_workingset_refault_anon 185 [ 692.696501][T23815] total_workingset_refault_file 2405 [ 692.707529][T23815] total_swap 38875136 [ 692.715514][T23815] total_swapcached 94949376 [ 692.740733][T23815] total_pgpgin 980456 [ 692.746582][T23815] total_pgpgout 970281 [ 692.762932][T23815] total_pgfault 923669 [ 692.789477][T23815] total_pgmajfault 140 [ 692.797889][T23815] total_inactive_anon 237568 [ 692.803110][T23815] total_active_anon 41439232 [ 692.808405][T23815] total_inactive_file 0 [ 692.813115][T23815] total_active_file 0 [ 692.818794][T23815] total_unevictable 0 [ 692.824292][T23815] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6518,pid=23812,uid=0 [ 692.841293][T23815] Memory cgroup out of memory: Killed process 23812 (syz.4.6518) total-vm:94168kB, anon-rss:1416kB, file-rss:22284kB, shmem-rss:1400kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 692.878001][T23831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6525'. [ 692.887058][T23831] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6525'. [ 692.896104][T23831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6525'. [ 692.905131][T23831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6525'. [ 692.914098][T23831] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6525'. [ 692.923171][T23831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6525'. [ 692.970621][T23831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6525'. [ 692.999221][T23831] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6525'. [ 693.014891][T23831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6525'. [ 693.612019][T23850] netlink: 'syz.1.6531': attribute type 1 has an invalid length. [ 693.989915][T23850] bond2: entered promiscuous mode [ 693.995236][T23850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 694.410585][ T28] audit: type=1400 audit(1782686187.955:4407): avc: denied { write } for pid=23859 comm="syz.4.6533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 694.778017][T23871] sctp: [Deprecated]: syz.3.6537 (pid 23871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 694.778017][T23871] Use struct sctp_sack_info instead [ 694.798672][ T28] audit: type=1400 audit(1782686188.365:4408): avc: denied { read } for pid=23872 comm="syz.1.6538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 694.849541][T23873] sctp: [Deprecated]: syz.1.6538 (pid 23873) Use of int in max_burst socket option. [ 694.849541][T23873] Use struct sctp_assoc_value instead [ 694.864356][ T28] audit: type=1400 audit(1782686188.415:4409): avc: denied { setopt } for pid=23872 comm="syz.1.6538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 695.052467][T23878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23878 comm=syz.4.6539 [ 695.186672][T23880] bond4: entered allmulticast mode [ 695.192894][T23880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 695.523193][T23874] syz.3.6537 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 695.533072][T23874] CPU: 0 UID: 0 PID: 23874 Comm: syz.3.6537 Not tainted syzkaller #0 PREEMPT(lazy) [ 695.533107][T23874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 695.533168][T23874] Call Trace: [ 695.533178][T23874] [ 695.533188][T23874] __dump_stack+0x1d/0x30 [ 695.533220][T23874] dump_stack_lvl+0x95/0xd0 [ 695.533248][T23874] dump_stack+0x15/0x1b [ 695.533274][T23874] dump_header+0x80/0x240 [ 695.533344][T23874] oom_kill_process+0x295/0x350 [ 695.533394][T23874] out_of_memory+0x981/0xbc0 [ 695.533438][T23874] try_charge_memcg+0x621/0xa00 [ 695.533629][T23874] charge_memcg+0x6d/0x120 [ 695.533683][T23874] __mem_cgroup_charge+0x28/0xb0 [ 695.533781][T23874] shmem_get_folio_gfp+0x49f/0xd90 [ 695.533818][T23874] shmem_fault+0xf6/0x250 [ 695.533845][T23874] handle_mm_fault+0x167a/0x2da0 [ 695.533886][T23874] __get_user_pages+0x129c/0x1f10 [ 695.533973][T23874] __mm_populate+0x242/0x390 [ 695.534016][T23874] vm_mmap_pgoff+0x23b/0x2d0 [ 695.534054][T23874] ksys_mmap_pgoff+0xc1/0x310 [ 695.534079][T23874] ? __x64_sys_mmap+0x49/0x70 [ 695.534151][T23874] x64_sys_call+0x14df/0x3020 [ 695.534231][T23874] do_syscall_64+0x136/0x3c0 [ 695.534324][T23874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.534347][T23874] RIP: 0033:0x7fa23effce59 [ 695.534363][T23874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.534383][T23874] RSP: 002b:00007fa23da0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 695.534403][T23874] RAX: ffffffffffffffda RBX: 00007fa23f276180 RCX: 00007fa23effce59 [ 695.534501][T23874] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 695.534515][T23874] RBP: 00007fa23f092e6f R08: ffffffffffffffff R09: 00000000fffff000 [ 695.534529][T23874] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 695.534543][T23874] R13: 00007fa23f276218 R14: 00007fa23f276180 R15: 00007ffddbe8ba88 [ 695.534563][T23874] [ 695.534573][T23874] memory: usage 307192kB, limit 307200kB, failcnt 2694 [ 695.746526][T23874] memory+swap: usage 374856kB, limit 9007199254740988kB, failcnt 0 [ 695.754851][T23874] kmem: usage 289812kB, limit 9007199254740988kB, failcnt 0 [ 695.762477][T23874] Memory cgroup stats for /syz3: [ 695.762828][T23874] cache 16326656 [ 695.772075][T23874] rss 233472 [ 695.775445][T23874] shmem 16326656 [ 695.779230][T23874] mapped_file 10948608 [ 695.783442][T23874] dirty 0 [ 695.794105][T23874] writeback 0 [ 695.812118][T23874] workingset_refault_anon 139 [ 695.821499][T23874] workingset_refault_file 6688 [ 695.837359][T23874] swap 69279744 [ 695.840872][T23874] swapcached 167559168 [ 695.844955][T23874] pgpgin 1083889 [ 695.868840][T23874] pgpgout 1079542 [ 695.872575][T23874] pgfault 962554 [ 695.876133][T23874] pgmajfault 104 [ 695.888083][T23874] inactive_anon 10878976 [ 695.893807][T23874] active_anon 6926336 [ 695.930490][T23874] inactive_file 0 [ 695.937814][T23874] active_file 0 [ 695.967264][T23874] unevictable 0 [ 695.970843][T23874] hierarchical_memory_limit 314572800 [ 695.976243][T23874] hierarchical_memsw_limit 9223372036854771712 [ 695.982416][T23874] total_cache 16326656 [ 695.986511][T23874] total_rss 233472 [ 695.990246][T23874] total_shmem 16326656 [ 695.994331][T23874] total_mapped_file 10948608 [ 695.999006][T23874] total_dirty 0 [ 696.002481][T23874] total_writeback 0 [ 696.006327][T23874] total_workingset_refault_anon 139 [ 696.011585][T23874] total_workingset_refault_file 6688 [ 696.016922][T23874] total_swap 69279744 [ 696.020919][T23874] total_swapcached 167559168 [ 696.025523][T23874] total_pgpgin 1083889 [ 696.029661][T23874] total_pgpgout 1079542 [ 696.033879][T23874] total_pgfault 962554 [ 696.037976][T23874] total_pgmajfault 104 [ 696.042109][T23874] total_inactive_anon 10878976 [ 696.222556][T23874] total_active_anon 6926336 [ 696.228856][T23874] total_inactive_file 0 [ 696.284955][T23874] total_active_file 0 [ 696.297154][T23874] total_unevictable 0 [ 696.307909][T23874] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6537,pid=23869,uid=0 [ 696.538797][T23874] Memory cgroup out of memory: Killed process 23869 (syz.3.6537) total-vm:94300kB, anon-rss:1420kB, file-rss:22280kB, shmem-rss:10692kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 697.016193][T23911] netlink: 'syz.1.6548': attribute type 1 has an invalid length. [ 697.093289][T23911] bond3: entered promiscuous mode [ 697.098665][T23911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 697.799742][ T28] audit: type=1400 audit(1782686191.325:4410): avc: denied { ioctl } for pid=23923 comm="syz.0.6553" path="/dev/usbmon3" dev="devtmpfs" ino=151 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 697.925987][T23927] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23927 comm=syz.1.6554 [ 698.014533][T23927] bond4: entered allmulticast mode [ 698.020475][T23927] 8021q: adding VLAN 0 to HW filter on device bond4 [ 698.596087][T23931] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.603449][T23931] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.611445][T23931] bridge_slave_0: entered allmulticast mode [ 698.619119][T23931] bridge_slave_0: entered promiscuous mode [ 698.627916][T23931] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.636773][T23931] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.645503][T23931] bridge_slave_1: entered allmulticast mode [ 698.661619][T23931] bridge_slave_1: entered promiscuous mode [ 698.686260][T23931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.696844][T23931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.712760][ T28] audit: type=1326 audit(1782686192.225:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23956 comm="syz.0.6560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06ecccce59 code=0x0 [ 698.722941][T23931] team0: Port device team_slave_0 added [ 698.744772][T23931] team0: Port device team_slave_1 added [ 698.761316][T23931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.776208][T23931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.802271][T23931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.813682][T23931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.820643][T23931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.846544][T23931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.875688][T23931] hsr_slave_0: entered promiscuous mode [ 698.882023][T23931] hsr_slave_1: entered promiscuous mode [ 698.887994][T23931] debugfs: 'hsr0' already exists in 'hsr' [ 698.893982][T23931] Cannot create hsr debugfs directory [ 698.916433][T23967] netlink: 'syz.1.6564': attribute type 1 has an invalid length. [ 698.977332][T23967] bond5: entered promiscuous mode [ 698.982701][T23967] 8021q: adding VLAN 0 to HW filter on device bond5 [ 699.001638][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.061279][T23931] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 699.070042][T23931] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 699.078160][T23931] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 699.088643][T23931] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 699.096581][T23931] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 699.105552][T23931] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 699.114028][T23931] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 699.132627][T23931] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 699.155963][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.181202][T23931] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.188308][T23931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.195652][T23931] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.202705][T23931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.231814][T23931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.244256][T22916] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.252030][T22916] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.267640][T23931] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.284155][T22916] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.291275][T22916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.301418][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.308496][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.381270][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.420254][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.437723][T23931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.535387][ T30] bridge_slave_1: left allmulticast mode [ 699.547313][ T30] bridge_slave_1: left promiscuous mode [ 699.556705][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.566150][ T30] bridge_slave_0: left allmulticast mode [ 699.571951][ T30] bridge_slave_0: left promiscuous mode [ 699.577745][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.668176][ T28] audit: type=1400 audit(1782686193.225:4412): avc: denied { write } for pid=24002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.721800][ T28] audit: type=1400 audit(1782686193.285:4413): avc: denied { write } for pid=24019 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.752435][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.859353][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.881440][ T30] bond0 (unregistering): (slave bond4): Releasing backup interface [ 699.902815][ T30] bond0 (unregistering): Released all slaves [ 699.914086][ T30] bond1 (unregistering): Released all slaves [ 699.923399][ T30] bond2 (unregistering): Released all slaves [ 699.941437][ T30] bond3 (unregistering): Released all slaves [ 699.951817][ T30] bond4 (unregistering): Released all slaves [ 699.960854][T24028] program syz.0.6571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 699.962979][ T30] bond5 (unregistering): Released all slaves [ 699.980050][ T30] bond6 (unregistering): Released all slaves [ 699.989441][ T30] bond7 (unregistering): Released all slaves [ 699.999401][ T30] bond8 (unregistering): Released all slaves [ 700.014892][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 700.320636][ T30] hsr_slave_0: left promiscuous mode [ 700.326399][ T30] hsr_slave_1: left promiscuous mode [ 700.335145][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.348727][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.377891][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.385335][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.396851][ T30] veth1_macvtap: left promiscuous mode [ 700.402728][ T30] veth0_macvtap: left promiscuous mode [ 700.408316][ T30] veth1_vlan: left promiscuous mode [ 700.413666][ T30] veth0_vlan: left promiscuous mode [ 700.493323][ T28] audit: type=1400 audit(1782686194.055:4414): avc: denied { write } for pid=24047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.553873][ T30] team0 (unregistering): Port device team_slave_1 removed [ 700.567137][ T28] audit: type=1400 audit(1782686194.125:4415): avc: denied { write } for pid=24059 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.589351][ T30] team0 (unregistering): Port device team_slave_0 removed [ 700.629158][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 700.650300][T23931] veth0_vlan: entered promiscuous mode [ 700.658081][T23931] veth1_vlan: entered promiscuous mode [ 700.701112][T23931] veth0_macvtap: entered promiscuous mode [ 700.720617][T23931] veth1_macvtap: entered promiscuous mode [ 700.750293][T23931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.770685][T23931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.789932][T22916] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.805718][T22916] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.820519][ T28] audit: type=1326 audit(1782686194.385:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24070 comm="syz.4.6577" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02af2fce59 code=0x0 [ 700.846279][T22916] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.855195][T22916] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.864395][T24074] sctp: [Deprecated]: syz.3.6576 (pid 24074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 700.864395][T24074] Use struct sctp_sack_info instead [ 700.960361][ T28] audit: type=1400 audit(1782686194.515:4417): avc: denied { write } for pid=24062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.006223][T24086] netlink: 'syz.1.6579': attribute type 1 has an invalid length. [ 701.028394][ T28] audit: type=1400 audit(1782686194.525:4418): avc: denied { write } for pid=24088 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.043174][T24086] bond6: entered promiscuous mode [ 701.055622][T24086] 8021q: adding VLAN 0 to HW filter on device bond6 [ 701.059595][T24069] syz.3.6576 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 701.153235][T24069] CPU: 0 UID: 0 PID: 24069 Comm: syz.3.6576 Not tainted syzkaller #0 PREEMPT(lazy) [ 701.153283][T24069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 701.153298][T24069] Call Trace: [ 701.153306][T24069] [ 701.153317][T24069] __dump_stack+0x1d/0x30 [ 701.153347][T24069] dump_stack_lvl+0x95/0xd0 [ 701.153369][T24069] dump_stack+0x15/0x1b [ 701.153396][T24069] dump_header+0x80/0x240 [ 701.153418][T24069] oom_kill_process+0x295/0x350 [ 701.153506][T24069] out_of_memory+0x981/0xbc0 [ 701.153558][T24069] try_charge_memcg+0x621/0xa00 [ 701.153675][T24069] ? __rcu_read_unlock+0x4e/0x70 [ 701.153706][T24069] __memcg_kmem_charge_page+0x199/0x3a0 [ 701.153736][T24069] __alloc_frozen_pages_noprof+0x18a/0x350 [ 701.153878][T24069] alloc_pages_mpol+0xa9/0x1d0 [ 701.153987][T24069] alloc_pages_noprof+0x8f/0x140 [ 701.154017][T24069] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 701.154052][T24069] __kvmalloc_node_noprof+0x3a0/0x590 [ 701.154110][T24069] ? futex_hash_allocate+0x192/0x920 [ 701.154136][T24069] ? futex_hash_allocate+0x192/0x920 [ 701.154156][T24069] ? futex_hash_allocate+0x192/0x920 [ 701.154178][T24069] futex_hash_allocate+0x192/0x920 [ 701.154277][T24069] ? cap_task_prctl+0x13f/0x6b0 [ 701.154322][T24069] futex_hash_prctl+0xd8/0xf0 [ 701.154422][T24069] __se_sys_prctl+0x4f4/0x13b0 [ 701.154458][T24069] __x64_sys_prctl+0x67/0x80 [ 701.154496][T24069] x64_sys_call+0x2533/0x3020 [ 701.154528][T24069] do_syscall_64+0x136/0x3c0 [ 701.154564][T24069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.154669][T24069] RIP: 0033:0x7fa23effce59 [ 701.154686][T24069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.154725][T24069] RSP: 002b:00007fa23da4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 701.154751][T24069] RAX: ffffffffffffffda RBX: 00007fa23f275fa0 RCX: 00007fa23effce59 [ 701.154770][T24069] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 701.154783][T24069] RBP: 00007fa23f092e6f R08: 0000000000000000 R09: 0000000000000000 [ 701.154796][T24069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.154863][T24069] R13: 00007fa23f276038 R14: 00007fa23f275fa0 R15: 00007ffddbe8ba88 [ 701.154940][T24069] [ 701.154999][T24069] memory: usage 166020kB, limit 307200kB, failcnt 2963 [ 701.268670][T24093] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24093 comm=syz.5.6580 [ 701.277882][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 701.467173][T24069] memory+swap: usage 83412kB, limit 9007199254740988kB, failcnt 0 [ 701.475352][T24069] kmem: usage 988kB, limit 9007199254740988kB, failcnt 0 [ 701.482525][T24069] Memory cgroup stats for /syz3: [ 701.482899][T24069] cache 13959168 [ 701.491464][T24069] rss 233472 [ 701.494752][T24069] shmem 13955072 [ 701.498431][T24069] mapped_file 8949760 [ 701.504123][T24069] dirty 4096 [ 701.512878][T24069] writeback 0 [ 701.520690][T24069] workingset_refault_anon 139 [ 701.534926][T24069] workingset_refault_file 6753 [ 701.536792][T24093] bond1: entered allmulticast mode [ 701.544477][T24069] swap 70463488 [ 701.545208][T24093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 701.548546][T24069] swapcached 167927808 [ 701.570191][T24069] pgpgin 1090842 [ 701.573830][T24069] pgpgout 1087272 [ 701.577765][T24069] pgfault 971878 [ 701.581447][T24069] pgmajfault 105 [ 701.585065][T24069] inactive_anon 1536000 [ 701.589291][T24069] active_anon 12976128 [ 701.593408][T24069] inactive_file 0 [ 701.597111][T24069] active_file 4096 [ 701.600960][T24069] unevictable 0 [ 701.604489][T24069] hierarchical_memory_limit 314572800 [ 701.613164][T24069] hierarchical_memsw_limit 9223372036854771712 [ 701.626827][T24069] total_cache 13959168 [ 701.631105][T24069] total_rss 233472 [ 701.634889][T24069] total_shmem 13955072 [ 701.639027][T24069] total_mapped_file 8949760 [ 701.643648][T24069] total_dirty 4096 [ 701.647437][T24069] total_writeback 0 [ 701.651301][T24069] total_workingset_refault_anon 139 [ 701.656619][T24069] total_workingset_refault_file 6753 [ 701.661983][T24069] total_swap 70463488 [ 701.666056][T24069] total_swapcached 167927808 [ 701.670766][T24069] total_pgpgin 1090842 [ 701.674952][T24069] total_pgpgout 1087272 [ 701.679535][T24069] total_pgfault 971878 [ 701.683715][T24069] total_pgmajfault 105 [ 701.688004][T24069] total_inactive_anon 1536000 [ 701.693079][T24069] total_active_anon 12976128 [ 701.713209][T24069] total_inactive_file 0 [ 701.724649][T24069] total_active_file 4096 [ 701.735248][T24069] total_unevictable 0 [ 701.756628][ T28] audit: type=1400 audit(1782686195.315:4419): avc: denied { write } for pid=24097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.786458][T24069] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6576,pid=24068,uid=0 [ 701.809730][ T28] audit: type=1400 audit(1782686195.375:4420): avc: denied { write } for pid=24112 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.827419][T24069] Memory cgroup out of memory: Killed process 24069 (syz.3.6576) total-vm:94300kB, anon-rss:1420kB, file-rss:22352kB, shmem-rss:11480kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 701.864368][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 701.983157][T24119] xt_hashlimit: size too large, truncated to 1048576 [ 701.989891][T24119] xt_hashlimit: max too large, truncated to 1048576 [ 702.605911][T24149] netlink: 'syz.5.6594': attribute type 1 has an invalid length. [ 703.116340][T24155] xt_hashlimit: size too large, truncated to 1048576 [ 703.123303][T24155] xt_hashlimit: max too large, truncated to 1048576 [ 703.265362][T24157] sctp: [Deprecated]: syz.4.6596 (pid 24157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 703.265362][T24157] Use struct sctp_sack_info instead [ 703.401174][ T28] audit: type=1400 audit(1782686196.965:4421): avc: denied { open } for pid=24163 comm="syz.3.6599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 703.449297][T24167] xt_hashlimit: size too large, truncated to 1048576 [ 703.456130][T24167] xt_hashlimit: max too large, truncated to 1048576 [ 703.473412][T24157] syz.4.6596 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 703.483289][T24157] CPU: 1 UID: 0 PID: 24157 Comm: syz.4.6596 Not tainted syzkaller #0 PREEMPT(lazy) [ 703.483318][T24157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 703.483406][T24157] Call Trace: [ 703.483413][T24157] [ 703.483421][T24157] __dump_stack+0x1d/0x30 [ 703.483446][T24157] dump_stack_lvl+0x95/0xd0 [ 703.483471][T24157] dump_stack+0x15/0x1b [ 703.483508][T24157] dump_header+0x80/0x240 [ 703.483634][T24157] oom_kill_process+0x295/0x350 [ 703.483677][T24157] out_of_memory+0x981/0xbc0 [ 703.483708][T24157] try_charge_memcg+0x621/0xa00 [ 703.483821][T24157] charge_memcg+0x6d/0x120 [ 703.483855][T24157] __mem_cgroup_charge+0x28/0xb0 [ 703.483889][T24157] shmem_get_folio_gfp+0x49f/0xd90 [ 703.484002][T24157] shmem_fault+0xf6/0x250 [ 703.484034][T24157] handle_mm_fault+0x167a/0x2da0 [ 703.484073][T24157] __get_user_pages+0x129c/0x1f10 [ 703.484169][T24157] __mm_populate+0x242/0x390 [ 703.484200][T24157] vm_mmap_pgoff+0x23b/0x2d0 [ 703.484246][T24157] ksys_mmap_pgoff+0xc1/0x310 [ 703.484329][T24157] ? __x64_sys_mmap+0x49/0x70 [ 703.484370][T24157] x64_sys_call+0x14df/0x3020 [ 703.484450][T24157] do_syscall_64+0x136/0x3c0 [ 703.484485][T24157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.484577][T24157] RIP: 0033:0x7f02af2fce59 [ 703.484598][T24157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.484618][T24157] RSP: 002b:00007f02add2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 703.484637][T24157] RAX: ffffffffffffffda RBX: 00007f02af576090 RCX: 00007f02af2fce59 [ 703.484655][T24157] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 703.484672][T24157] RBP: 00007f02af392e6f R08: ffffffffffffffff R09: 00000000fffff000 [ 703.484690][T24157] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 703.484804][T24157] R13: 00007f02af576128 R14: 00007f02af576090 R15: 00007fff5013e6d8 [ 703.484877][T24157] [ 703.484884][T24157] memory: usage 307200kB, limit 307200kB, failcnt 2085 [ 703.713068][T24157] memory+swap: usage 235296kB, limit 9007199254740988kB, failcnt 0 [ 703.722710][T24157] kmem: usage 156356kB, limit 9007199254740988kB, failcnt 0 [ 703.751259][T24157] Memory cgroup stats for /syz4: [ 703.757394][T24157] cache 68169728 [ 703.766254][T24157] rss 745472 [ 703.769484][T24157] shmem 68169728 [ 703.773054][T24157] mapped_file 733184 [ 703.776966][T24157] dirty 0 [ 703.779952][T24157] writeback 0 [ 703.783261][T24157] workingset_refault_anon 185 [ 703.787961][T24157] workingset_refault_file 4069 [ 703.792765][T24157] swap 651264 [ 703.796122][T24157] swapcached 94904320 [ 703.800271][T24157] pgpgin 1012059 [ 703.803874][T24157] pgpgout 995234 [ 703.807486][T24157] pgfault 934885 [ 703.811099][T24157] pgmajfault 155 [ 703.814725][T24157] inactive_anon 68087808 [ 703.818984][T24157] active_anon 827392 [ 703.822989][T24157] inactive_file 0 [ 703.826638][T24157] active_file 0 [ 703.830144][T24157] unevictable 0 [ 703.833617][T24157] hierarchical_memory_limit 314572800 [ 703.839006][T24157] hierarchical_memsw_limit 9223372036854771712 [ 703.845179][T24157] total_cache 68169728 [ 703.849267][T24157] total_rss 745472 [ 703.853014][T24157] total_shmem 68169728 [ 703.857129][T24157] total_mapped_file 733184 [ 703.889367][T24157] total_dirty 0 [ 703.893471][T24157] total_writeback 0 [ 703.984965][T24157] total_workingset_refault_anon 185 [ 703.990481][T24157] total_workingset_refault_file 4069 [ 703.995794][T24157] total_swap 651264 [ 703.999625][T24157] total_swapcached 94904320 [ 704.004249][T24157] total_pgpgin 1012059 [ 704.008522][T24157] total_pgpgout 995234 [ 704.012617][T24157] total_pgfault 934885 [ 704.016693][T24157] total_pgmajfault 155 [ 704.020778][T24157] total_inactive_anon 68087808 [ 704.025551][T24157] total_active_anon 827392 [ 704.052071][T24157] total_inactive_file 0 [ 704.056281][T24157] total_active_file 0 [ 704.060290][T24157] total_unevictable 0 [ 704.064286][T24157] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6596,pid=24152,uid=0 [ 704.079107][T24157] Memory cgroup out of memory: Killed process 24152 (syz.4.6596) total-vm:94168kB, anon-rss:1416kB, file-rss:22288kB, shmem-rss:716kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 704.283162][T24183] __nla_validate_parse: 21 callbacks suppressed [ 704.283178][T24183] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6606'. [ 704.298742][T24183] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6606'. [ 704.349406][T24190] xt_hashlimit: size too large, truncated to 1048576 [ 704.356252][T24190] xt_hashlimit: max too large, truncated to 1048576 [ 705.498798][T24227] xt_hashlimit: size too large, truncated to 1048576 [ 705.506182][T24227] xt_hashlimit: max too large, truncated to 1048576 [ 705.548789][T24231] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24231 comm=syz.4.6622 [ 705.587496][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 705.587514][ T28] audit: type=1400 audit(1782686199.155:4424): avc: denied { write } for pid=24232 comm="syz.5.6623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 705.624660][T24231] bond5: entered allmulticast mode [ 705.630743][T24231] 8021q: adding VLAN 0 to HW filter on device bond5 [ 707.092681][T24280] bond2: entered allmulticast mode [ 707.098166][T24280] 8021q: adding VLAN 0 to HW filter on device bond2 [ 707.208515][T24286] xt_hashlimit: size too large, truncated to 1048576 [ 707.215221][T24286] xt_hashlimit: max too large, truncated to 1048576 [ 707.576082][T24301] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24301 comm=syz.0.6647 [ 707.596694][T24301] bond7: entered allmulticast mode [ 707.602020][T24301] 8021q: adding VLAN 0 to HW filter on device bond7 [ 707.739773][T24312] sctp: [Deprecated]: syz.1.6650 (pid 24312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 707.739773][T24312] Use struct sctp_sack_info instead [ 707.984092][T24309] syz.1.6650 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 708.031573][T24309] CPU: 1 UID: 0 PID: 24309 Comm: syz.1.6650 Not tainted syzkaller #0 PREEMPT(lazy) [ 708.031611][T24309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 708.031625][T24309] Call Trace: [ 708.031635][T24309] [ 708.031646][T24309] __dump_stack+0x1d/0x30 [ 708.031676][T24309] dump_stack_lvl+0x95/0xd0 [ 708.031714][T24309] dump_stack+0x15/0x1b [ 708.031740][T24309] dump_header+0x80/0x240 [ 708.031769][T24309] oom_kill_process+0x295/0x350 [ 708.031805][T24309] out_of_memory+0x981/0xbc0 [ 708.031857][T24309] try_charge_memcg+0x621/0xa00 [ 708.031906][T24309] __memcg_kmem_charge_page+0x199/0x3a0 [ 708.031954][T24309] __alloc_frozen_pages_noprof+0x18a/0x350 [ 708.031992][T24309] alloc_pages_mpol+0xa9/0x1d0 [ 708.032023][T24309] alloc_pages_noprof+0x8f/0x140 [ 708.032060][T24309] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 708.032160][T24309] __kvmalloc_node_noprof+0x3a0/0x590 [ 708.032239][T24309] ? futex_hash_allocate+0x192/0x920 [ 708.032260][T24309] ? futex_hash_allocate+0x192/0x920 [ 708.032278][T24309] ? futex_hash_allocate+0x192/0x920 [ 708.032302][T24309] futex_hash_allocate+0x192/0x920 [ 708.032392][T24309] ? cap_task_prctl+0x13f/0x6b0 [ 708.032462][T24309] futex_hash_prctl+0xd8/0xf0 [ 708.032485][T24309] __se_sys_prctl+0x4f4/0x13b0 [ 708.032527][T24309] __x64_sys_prctl+0x67/0x80 [ 708.032597][T24309] x64_sys_call+0x2533/0x3020 [ 708.032628][T24309] do_syscall_64+0x136/0x3c0 [ 708.032711][T24309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.032732][T24309] RIP: 0033:0x7fe64d84ce59 [ 708.032748][T24309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.032793][T24309] RSP: 002b:00007fe64c2a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 708.032819][T24309] RAX: ffffffffffffffda RBX: 00007fe64dac5fa0 RCX: 00007fe64d84ce59 [ 708.032936][T24309] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 708.032953][T24309] RBP: 00007fe64d8e2e6f R08: 0000000000000000 R09: 0000000000000000 [ 708.032969][T24309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.032981][T24309] R13: 00007fe64dac6038 R14: 00007fe64dac5fa0 R15: 00007ffe7f777348 [ 708.033003][T24309] [ 708.036986][T24309] memory: usage 307200kB, limit 307200kB, failcnt 10251 [ 708.326127][T24309] memory+swap: usage 224900kB, limit 9007199254740988kB, failcnt 0 [ 708.372562][T24309] kmem: usage 184752kB, limit 9007199254740988kB, failcnt 0 [ 708.433765][T24309] Memory cgroup stats for /syz1: [ 708.434119][T24309] cache 557056 [ 708.561732][T24309] rss 4096 [ 708.572855][T24309] shmem 32768 [ 708.627582][T24309] mapped_file 86016 [ 708.631651][T24309] dirty 0 [ 708.636753][T24309] writeback 0 [ 708.647492][T24309] workingset_refault_anon 467 [ 708.661765][T24309] workingset_refault_file 7515 [ 708.676272][T24309] swap 487424 [ 708.686597][T24309] swapcached 100130816 [ 708.699056][T24309] pgpgin 1031637 [ 708.708010][T24333] netlink: 'syz.3.6656': attribute type 1 has an invalid length. [ 708.723163][T24309] pgpgout 1031487 [ 708.733189][T24309] pgfault 879722 [ 708.744101][T24309] pgmajfault 333 [ 708.757110][T24309] inactive_anon 90112 [ 708.773751][T24309] active_anon 0 [ 708.785992][T24309] inactive_file 253952 [ 708.797541][T24309] active_file 0 [ 708.801103][T24309] unevictable 0 [ 708.804773][T24309] hierarchical_memory_limit 314572800 [ 708.810587][T24309] hierarchical_memsw_limit 9223372036854771712 [ 708.810881][T24333] bond3: entered promiscuous mode [ 708.817686][T24309] total_cache 557056 [ 708.822169][T24333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 708.826668][T24309] total_rss 4096 [ 708.836272][T24309] total_shmem 32768 [ 708.840338][T24309] total_mapped_file 86016 [ 708.844805][T24309] total_dirty 0 [ 708.848650][T24309] total_writeback 0 [ 708.852552][T24309] total_workingset_refault_anon 467 [ 708.857960][T24309] total_workingset_refault_file 7515 [ 708.863395][T24309] total_swap 487424 [ 708.867470][T24309] total_swapcached 100130816 [ 708.872165][T24309] total_pgpgin 1031637 [ 708.876287][T24309] total_pgpgout 1031487 [ 708.880850][T24309] total_pgfault 879722 [ 708.885040][T24309] total_pgmajfault 333 [ 708.889309][T24309] total_inactive_anon 90112 [ 708.893996][T24309] total_active_anon 0 [ 708.900844][T24309] total_inactive_file 253952 [ 708.905566][T24309] total_active_file 0 [ 708.909660][T24309] total_unevictable 0 [ 708.913676][T24309] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6650,pid=24307,uid=0 [ 708.938889][T24309] Memory cgroup out of memory: Killed process 24307 (syz.1.6650) total-vm:94300kB, anon-rss:1368kB, file-rss:22224kB, shmem-rss:11024kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 709.793795][T24354] xt_hashlimit: size too large, truncated to 1048576 [ 709.813521][T24354] xt_hashlimit: max too large, truncated to 1048576 [ 710.274188][T24370] sctp: [Deprecated]: syz.1.6667 (pid 24370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 710.274188][T24370] Use struct sctp_sack_info instead [ 710.398267][T24366] syz.1.6667 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 710.412543][T24366] CPU: 1 UID: 0 PID: 24366 Comm: syz.1.6667 Not tainted syzkaller #0 PREEMPT(lazy) [ 710.412578][T24366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 710.412662][T24366] Call Trace: [ 710.412669][T24366] [ 710.412678][T24366] __dump_stack+0x1d/0x30 [ 710.412760][T24366] dump_stack_lvl+0x95/0xd0 [ 710.412784][T24366] dump_stack+0x15/0x1b [ 710.412801][T24366] dump_header+0x80/0x240 [ 710.412823][T24366] oom_kill_process+0x295/0x350 [ 710.412900][T24366] out_of_memory+0x981/0xbc0 [ 710.412941][T24366] try_charge_memcg+0x621/0xa00 [ 710.413051][T24366] __memcg_kmem_charge_page+0x199/0x3a0 [ 710.413144][T24366] __alloc_frozen_pages_noprof+0x18a/0x350 [ 710.413225][T24366] alloc_pages_bulk_noprof+0x4c3/0x550 [ 710.413259][T24366] ? policy_nodemask+0x417/0x5e0 [ 710.413302][T24366] alloc_pages_bulk_mempolicy_noprof+0x358/0xe90 [ 710.413403][T24366] ? alloc_pages_mpol+0xd9/0x1d0 [ 710.413442][T24366] __vmalloc_node_range_noprof+0x88e/0x11e0 [ 710.413482][T24366] __kvmalloc_node_noprof+0x3a0/0x590 [ 710.413548][T24366] ? futex_hash_allocate+0x192/0x920 [ 710.413574][T24366] ? futex_hash_allocate+0x192/0x920 [ 710.413599][T24366] ? futex_hash_allocate+0x192/0x920 [ 710.413623][T24366] futex_hash_allocate+0x192/0x920 [ 710.413651][T24366] ? cap_task_prctl+0x13f/0x6b0 [ 710.413764][T24366] futex_hash_prctl+0xd8/0xf0 [ 710.413790][T24366] __se_sys_prctl+0x4f4/0x13b0 [ 710.413854][T24366] __x64_sys_prctl+0x67/0x80 [ 710.413886][T24366] x64_sys_call+0x2533/0x3020 [ 710.413916][T24366] do_syscall_64+0x136/0x3c0 [ 710.413987][T24366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.414008][T24366] RIP: 0033:0x7fe64d84ce59 [ 710.414025][T24366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.414045][T24366] RSP: 002b:00007fe64c2a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 710.414148][T24366] RAX: ffffffffffffffda RBX: 00007fe64dac5fa0 RCX: 00007fe64d84ce59 [ 710.414166][T24366] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 710.414183][T24366] RBP: 00007fe64d8e2e6f R08: 0000000000000000 R09: 0000000000000000 [ 710.414199][T24366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.414215][T24366] R13: 00007fe64dac6038 R14: 00007fe64dac5fa0 R15: 00007ffe7f777348 [ 710.414301][T24366] [ 710.414309][T24366] memory: usage 307200kB, limit 307200kB, failcnt 10374 [ 710.659050][T24366] memory+swap: usage 307712kB, limit 9007199254740988kB, failcnt 0 [ 710.671131][T24366] kmem: usage 307064kB, limit 9007199254740988kB, failcnt 0 [ 710.682370][T24366] Memory cgroup stats for /syz1: [ 710.682687][T24366] cache 122880 [ 710.692922][T24366] rss 0 [ 710.695821][T24366] shmem 0 [ 710.698887][T24366] mapped_file 0 [ 710.702426][T24366] dirty 0 [ 710.705415][T24366] writeback 0 [ 710.711911][T24366] workingset_refault_anon 514 [ 710.723914][T24366] workingset_refault_file 7545 [ 710.751421][T24366] swap 532480 [ 710.756344][T24366] swapcached 100339712 [ 710.798560][T24366] pgpgin 1041136 [ 710.802346][T24366] pgpgout 1041102 [ 710.806264][T24366] pgfault 893583 [ 710.810155][T24366] pgmajfault 353 [ 710.813978][T24366] inactive_anon 0 [ 710.817882][T24366] active_anon 0 [ 710.821599][T24366] inactive_file 81920 [ 710.825890][T24366] active_file 40960 [ 710.831394][T24366] unevictable 0 [ 710.837708][T24366] hierarchical_memory_limit 314572800 [ 710.843304][T24366] hierarchical_memsw_limit 9223372036854771712 [ 710.849545][T24366] total_cache 122880 [ 710.853499][T24366] total_rss 0 [ 710.856877][T24366] total_shmem 0 [ 710.860404][T24366] total_mapped_file 0 [ 710.864520][T24366] total_dirty 0 [ 710.868041][T24366] total_writeback 0 [ 710.871894][T24366] total_workingset_refault_anon 514 [ 710.877168][T24366] total_workingset_refault_file 7545 [ 710.882756][T24366] total_swap 532480 [ 710.886585][T24366] total_swapcached 100339712 [ 710.891293][T24366] total_pgpgin 1041136 [ 710.895461][T24366] total_pgpgout 1041102 [ 710.899717][T24366] total_pgfault 893583 [ 710.903817][T24366] total_pgmajfault 353 [ 710.908056][T24366] total_inactive_anon 0 [ 710.912316][T24366] total_active_anon 0 [ 710.916313][T24366] total_inactive_file 81920 [ 710.920897][T24366] total_active_file 40960 [ 710.925413][T24366] total_unevictable 0 [ 710.958342][T24366] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6667,pid=24365,uid=0 [ 710.996299][T24366] Memory cgroup out of memory: Killed process 24365 (syz.1.6667) total-vm:94168kB, anon-rss:1228kB, file-rss:22220kB, shmem-rss:8924kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 711.627612][T24407] netlink: 'syz.5.6682': attribute type 1 has an invalid length. [ 711.818091][T24409] sctp: [Deprecated]: syz.0.6681 (pid 24409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 711.818091][T24409] Use struct sctp_sack_info instead [ 712.558272][T24426] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6688'. [ 712.773186][ T28] audit: type=1400 audit(1782686206.325:4425): avc: denied { write } for pid=24428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.828233][ T28] audit: type=1400 audit(1782686206.385:4426): avc: denied { write } for pid=24444 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.089145][ T28] audit: type=1400 audit(1782686206.655:4427): avc: denied { write } for pid=24452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.184763][ T28] audit: type=1400 audit(1782686206.695:4428): avc: denied { write } for pid=24467 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.307722][T24465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6693'. [ 713.316840][T24465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6693'. [ 713.510326][T24487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24487 comm=syz.5.6697 [ 713.557491][ T28] audit: type=1400 audit(1782686207.125:4429): avc: denied { write } for pid=24478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.571959][T24487] bond3: entered allmulticast mode [ 713.585991][T24487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 713.668372][ T28] audit: type=1400 audit(1782686207.225:4430): avc: denied { write } for pid=24500 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.920842][ T28] audit: type=1400 audit(1782686207.485:4431): avc: denied { write } for pid=24513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.988934][ T28] audit: type=1400 audit(1782686207.535:4432): avc: denied { write } for pid=24536 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.877262][T24580] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24580 comm=syz.1.6723 [ 714.937756][T24580] bond7: entered allmulticast mode [ 714.943911][T24580] 8021q: adding VLAN 0 to HW filter on device bond7 [ 715.632872][ T28] audit: type=1400 audit(1782686209.195:4433): avc: denied { create } for pid=24616 comm="syz.4.6736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 715.634665][T24617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6736'. [ 715.854723][T24621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6738'. [ 715.863843][T24621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6738'. [ 716.481691][T24649] bond8: entered allmulticast mode [ 716.487688][T24649] 8021q: adding VLAN 0 to HW filter on device bond8 [ 716.728025][T24657] sctp: [Deprecated]: syz.4.6750 (pid 24657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 716.728025][T24657] Use struct sctp_sack_info instead [ 716.801553][T24657] syz.4.6750 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 716.811466][T24657] CPU: 1 UID: 0 PID: 24657 Comm: syz.4.6750 Not tainted syzkaller #0 PREEMPT(lazy) [ 716.811575][T24657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 716.811587][T24657] Call Trace: [ 716.811594][T24657] [ 716.811602][T24657] __dump_stack+0x1d/0x30 [ 716.811625][T24657] dump_stack_lvl+0x95/0xd0 [ 716.811651][T24657] dump_stack+0x15/0x1b [ 716.811676][T24657] dump_header+0x80/0x240 [ 716.811757][T24657] oom_kill_process+0x295/0x350 [ 716.811799][T24657] out_of_memory+0x981/0xbc0 [ 716.811888][T24657] try_charge_memcg+0x621/0xa00 [ 716.811940][T24657] charge_memcg+0x6d/0x120 [ 716.811978][T24657] __mem_cgroup_charge+0x28/0xb0 [ 716.812088][T24657] shmem_get_folio_gfp+0x49f/0xd90 [ 716.812124][T24657] shmem_fault+0xf6/0x250 [ 716.812194][T24657] handle_mm_fault+0x167a/0x2da0 [ 716.812244][T24657] __get_user_pages+0x129c/0x1f10 [ 716.812324][T24657] __mm_populate+0x242/0x390 [ 716.812356][T24657] vm_mmap_pgoff+0x23b/0x2d0 [ 716.812403][T24657] ksys_mmap_pgoff+0xc1/0x310 [ 716.812461][T24657] ? __x64_sys_mmap+0x49/0x70 [ 716.812495][T24657] x64_sys_call+0x14df/0x3020 [ 716.812518][T24657] do_syscall_64+0x136/0x3c0 [ 716.812569][T24657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.812598][T24657] RIP: 0033:0x7f02af2fce59 [ 716.812619][T24657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.812644][T24657] RSP: 002b:00007f02add2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 716.812813][T24657] RAX: ffffffffffffffda RBX: 00007f02af576090 RCX: 00007f02af2fce59 [ 716.812827][T24657] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 716.812877][T24657] RBP: 00007f02af392e6f R08: ffffffffffffffff R09: 00000000fffff000 [ 716.812896][T24657] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 716.812913][T24657] R13: 00007f02af576128 R14: 00007f02af576090 R15: 00007fff5013e6d8 [ 716.812959][T24657] [ 716.812966][T24657] memory: usage 307200kB, limit 307200kB, failcnt 2579 [ 717.037942][T24657] memory+swap: usage 317328kB, limit 9007199254740988kB, failcnt 0 [ 717.047746][T24657] kmem: usage 246360kB, limit 9007199254740988kB, failcnt 0 [ 717.056401][T24657] Memory cgroup stats for /syz4: [ 717.062443][T24657] cache 61550592 [ 717.075281][T24657] rss 745472 [ 717.079839][T24657] shmem 61550592 [ 717.083771][T24657] mapped_file 3837952 [ 717.108357][T24657] dirty 0 [ 717.115304][T24657] writeback 0 [ 717.121884][T24657] workingset_refault_anon 185 [ 717.136326][T24657] workingset_refault_file 4069 [ 717.146128][T24657] swap 10375168 [ 717.251253][T24657] swapcached 104628224 [ 717.261233][T24657] pgpgin 1028933 [ 717.269521][T24657] pgpgout 1013724 [ 717.285373][T24657] pgfault 953816 [ 717.294398][T24657] pgmajfault 156 [ 717.303178][T24657] inactive_anon 3649536 [ 717.326386][T24657] active_anon 58646528 [ 717.339623][T24657] inactive_file 0 [ 717.353343][T24657] active_file 0 [ 717.368392][T24657] unevictable 0 [ 717.381235][T24657] hierarchical_memory_limit 314572800 [ 717.401923][T24657] hierarchical_memsw_limit 9223372036854771712 [ 717.421989][T24657] total_cache 61550592 [ 717.437111][T24657] total_rss 745472 [ 717.450973][T24657] total_shmem 61550592 [ 717.464680][T24657] total_mapped_file 3837952 [ 717.483143][T24657] total_dirty 0 [ 717.491467][T24657] total_writeback 0 [ 717.503243][T24657] total_workingset_refault_anon 185 [ 717.516417][T24657] total_workingset_refault_file 4069 [ 717.523341][T24657] total_swap 10375168 [ 717.528886][T24657] total_swapcached 104628224 [ 717.534283][T24657] total_pgpgin 1028933 [ 717.540117][T24657] total_pgpgout 1013724 [ 717.545087][T24657] total_pgfault 953816 [ 717.550094][T24657] total_pgmajfault 156 [ 717.555199][T24657] total_inactive_anon 3649536 [ 717.560635][T24657] total_active_anon 58646528 [ 717.566476][T24657] total_inactive_file 0 [ 717.571418][T24657] total_active_file 0 [ 717.575743][T24657] total_unevictable 0 [ 717.581265][T24657] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6750,pid=24653,uid=0 [ 717.599845][T24657] Memory cgroup out of memory: Killed process 24653 (syz.4.6750) total-vm:96216kB, anon-rss:1416kB, file-rss:22276kB, shmem-rss:3748kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 718.088936][T24678] xt_hashlimit: size too large, truncated to 1048576 [ 718.095669][T24678] xt_hashlimit: max too large, truncated to 1048576 [ 718.258498][T24684] bond4: entered allmulticast mode [ 718.271256][T24684] 8021q: adding VLAN 0 to HW filter on device bond4 [ 718.410788][T24692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6764'. [ 718.419891][T24692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6764'. [ 718.541556][T24697] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 718.603665][T24700] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6767'. [ 718.931918][T24708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6770'. [ 719.137897][T24716] xt_hashlimit: size too large, truncated to 1048576 [ 719.144650][T24716] xt_hashlimit: max too large, truncated to 1048576 [ 719.206362][T24720] bond8: entered allmulticast mode [ 719.211764][T24720] 8021q: adding VLAN 0 to HW filter on device bond8 [ 719.355626][T24727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6777'. [ 719.364739][T24727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6777'. [ 719.491084][T24732] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6778'. [ 719.786657][T24739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6782'. [ 720.114920][T24747] netlink: 'syz.5.6785': attribute type 1 has an invalid length. [ 720.123301][T24747] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6785'. [ 720.606667][T24755] bond5: entered allmulticast mode [ 720.612663][T24755] 8021q: adding VLAN 0 to HW filter on device bond5 [ 720.646228][ T28] audit: type=1400 audit(1782686214.205:4434): avc: denied { cpu } for pid=24757 comm="syz.3.6789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 720.769236][T24761] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6790'. [ 721.804602][T24787] bond4: entered allmulticast mode [ 721.812854][T24787] 8021q: adding VLAN 0 to HW filter on device bond4 [ 721.849766][ T28] audit: type=1326 audit(1782686215.365:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24792 comm="syz.5.6801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2198d8ce59 code=0x0 [ 722.285592][T24818] bond9: entered allmulticast mode [ 722.292367][T24818] 8021q: adding VLAN 0 to HW filter on device bond9 [ 722.975345][T24850] bond6: entered allmulticast mode [ 722.981310][T24850] 8021q: adding VLAN 0 to HW filter on device bond6 [ 723.145115][ T28] audit: type=1326 audit(1782686216.705:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24863 comm="syz.4.6828" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02af2fce59 code=0x0 [ 723.717077][T24878] bond5: entered allmulticast mode [ 723.724313][T24878] 8021q: adding VLAN 0 to HW filter on device bond5 [ 723.964122][T24894] __nla_validate_parse: 6 callbacks suppressed [ 723.964138][T24894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6839'. [ 723.979425][T24894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6839'. [ 724.235238][T24910] bond6: entered allmulticast mode [ 724.241320][T24910] 8021q: adding VLAN 0 to HW filter on device bond6 [ 724.720999][ T28] audit: type=1400 audit(1782686218.285:4437): avc: denied { read } for pid=24929 comm="syz.0.6853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 724.791563][ T28] audit: type=1400 audit(1782686218.355:4438): avc: denied { setopt } for pid=24929 comm="syz.0.6853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 724.811967][ T28] audit: type=1400 audit(1782686218.385:4439): avc: denied { write } for pid=24929 comm="syz.0.6853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 724.836143][T24930] sctp: [Deprecated]: syz.0.6853 (pid 24930) Use of int in max_burst socket option. [ 724.836143][T24930] Use struct sctp_assoc_value instead [ 724.943496][T24937] bond6: entered allmulticast mode [ 724.949417][T24937] 8021q: adding VLAN 0 to HW filter on device bond6 [ 725.055544][T24945] netlink: 'syz.5.6858': attribute type 1 has an invalid length. [ 725.128954][T24945] bond7: entered promiscuous mode [ 725.134318][T24945] 8021q: adding VLAN 0 to HW filter on device bond7 [ 725.256504][T24953] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6861'. [ 725.536664][T24958] xt_hashlimit: size too large, truncated to 1048576 [ 725.543394][T24958] xt_hashlimit: max too large, truncated to 1048576 [ 725.628665][T24964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6866'. [ 725.802612][T24966] bond7: entered allmulticast mode [ 725.808002][T24966] 8021q: adding VLAN 0 to HW filter on device bond7 [ 726.235787][T24996] bond9: entered allmulticast mode [ 726.242313][T24996] 8021q: adding VLAN 0 to HW filter on device bond9 [ 726.259758][T25004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6883'. [ 726.581943][T25017] netlink: 'syz.4.6888': attribute type 1 has an invalid length. [ 726.641105][T25017] bond8: entered promiscuous mode [ 726.646298][T25017] 8021q: adding VLAN 0 to HW filter on device bond8 [ 727.011017][T25038] bond10: entered allmulticast mode [ 727.017320][T25038] 8021q: adding VLAN 0 to HW filter on device bond10 [ 727.212007][T25049] sctp: [Deprecated]: syz.0.6900 (pid 25049) Use of struct sctp_assoc_value in delayed_ack socket option. [ 727.212007][T25049] Use struct sctp_sack_info instead [ 727.283332][T25049] syz.0.6900 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 727.293363][T25049] CPU: 0 UID: 0 PID: 25049 Comm: syz.0.6900 Not tainted syzkaller #0 PREEMPT(lazy) [ 727.293430][T25049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 727.293443][T25049] Call Trace: [ 727.293453][T25049] [ 727.293463][T25049] __dump_stack+0x1d/0x30 [ 727.293536][T25049] dump_stack_lvl+0x95/0xd0 [ 727.293563][T25049] dump_stack+0x15/0x1b [ 727.293720][T25049] dump_header+0x80/0x240 [ 727.293750][T25049] oom_kill_process+0x295/0x350 [ 727.293790][T25049] out_of_memory+0x981/0xbc0 [ 727.293820][T25049] try_charge_memcg+0x621/0xa00 [ 727.293927][T25049] charge_memcg+0x6d/0x120 [ 727.293964][T25049] __mem_cgroup_charge+0x28/0xb0 [ 727.294038][T25049] shmem_get_folio_gfp+0x49f/0xd90 [ 727.294074][T25049] shmem_fault+0xf6/0x250 [ 727.294098][T25049] handle_mm_fault+0x167a/0x2da0 [ 727.294217][T25049] __get_user_pages+0x129c/0x1f10 [ 727.294305][T25049] __mm_populate+0x242/0x390 [ 727.294346][T25049] vm_mmap_pgoff+0x23b/0x2d0 [ 727.294405][T25049] ksys_mmap_pgoff+0xc1/0x310 [ 727.294429][T25049] ? __x64_sys_mmap+0x49/0x70 [ 727.294460][T25049] x64_sys_call+0x14df/0x3020 [ 727.294513][T25049] do_syscall_64+0x136/0x3c0 [ 727.294543][T25049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.294595][T25049] RIP: 0033:0x7f06ecccce59 [ 727.294613][T25049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.294637][T25049] RSP: 002b:00007f06eb706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 727.294768][T25049] RAX: ffffffffffffffda RBX: 00007f06ecf46090 RCX: 00007f06ecccce59 [ 727.294782][T25049] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 727.294842][T25049] RBP: 00007f06ecd62e6f R08: ffffffffffffffff R09: 00000000fffff000 [ 727.294859][T25049] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 727.294873][T25049] R13: 00007f06ecf46128 R14: 00007f06ecf46090 R15: 00007fff21129d08 [ 727.294894][T25049] [ 727.294902][T25049] memory: usage 307200kB, limit 307200kB, failcnt 6058 [ 727.525066][T25049] memory+swap: usage 331168kB, limit 9007199254740988kB, failcnt 0 [ 727.533765][T25049] kmem: usage 246372kB, limit 9007199254740988kB, failcnt 0 [ 727.554112][T25049] Memory cgroup stats for /syz0: [ 727.558899][T25049] cache 32174080 [ 727.603534][T25049] rss 200704 [ 727.612510][T25049] shmem 32174080 [ 727.618190][T25049] mapped_file 643072 [ 727.642111][T25049] dirty 0 [ 727.653673][T25049] writeback 0 [ 727.665118][T25049] workingset_refault_anon 127 [ 727.684511][T25049] workingset_refault_file 4147 [ 727.693701][T25049] swap 46374912 [ 727.700856][T25049] swapcached 240201728 [ 727.713794][T25049] pgpgin 1293344 [ 727.724096][T25049] pgpgout 1285440 [ 727.741056][T25049] pgfault 1091935 [ 727.745366][T25049] pgmajfault 106 [ 727.753321][T25049] inactive_anon 614400 [ 727.762219][T25049] active_anon 31760384 [ 727.767757][T25049] inactive_file 0 [ 727.772000][T25049] active_file 0 [ 727.789109][T25049] unevictable 0 [ 727.798509][T25049] hierarchical_memory_limit 314572800 [ 727.811746][T25049] hierarchical_memsw_limit 9223372036854771712 [ 727.824797][T25049] total_cache 32174080 [ 727.845293][T25049] total_rss 200704 [ 727.856905][T25049] total_shmem 32174080 [ 727.862617][T25049] total_mapped_file 643072 [ 727.867747][T25049] total_dirty 0 [ 727.871638][T25049] total_writeback 0 [ 727.876041][T25049] total_workingset_refault_anon 127 [ 727.882551][T25049] total_workingset_refault_file 4147 [ 727.891969][T25058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6904'. [ 727.901066][T25058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6904'. [ 727.915599][T25049] total_swap 46374912 [ 727.921400][T25049] total_swapcached 240201728 [ 727.927328][T25049] total_pgpgin 1293344 [ 727.931799][T25049] total_pgpgout 1285440 [ 727.937059][T25049] total_pgfault 1091935 [ 727.941994][T25049] total_pgmajfault 106 [ 727.946743][T25049] total_inactive_anon 614400 [ 727.952062][T25049] total_active_anon 31760384 [ 727.968117][T25049] total_inactive_file 0 [ 728.018906][T25049] total_active_file 0 [ 728.023373][T25049] total_unevictable 0 [ 728.027911][T25049] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6900,pid=25047,uid=0 [ 728.043509][T25049] Memory cgroup out of memory: Killed process 25047 (syz.0.6900) total-vm:96216kB, anon-rss:1416kB, file-rss:22280kB, shmem-rss:628kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 728.208449][T25067] bond10: entered allmulticast mode [ 728.213851][T25067] 8021q: adding VLAN 0 to HW filter on device bond10 [ 728.760087][T25097] sctp: [Deprecated]: syz.3.6918 (pid 25097) Use of int in max_burst socket option. [ 728.760087][T25097] Use struct sctp_assoc_value instead [ 728.810401][T25106] bond9: entered allmulticast mode [ 728.815798][T25106] 8021q: adding VLAN 0 to HW filter on device bond9 [ 728.844995][T25111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6925'. [ 729.274111][T25133] bond10: entered allmulticast mode [ 729.279552][T25133] 8021q: adding VLAN 0 to HW filter on device bond10 [ 729.291591][T25126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6932'. [ 729.300849][T25126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6932'. [ 729.361717][T25141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6938'. [ 729.517894][T25145] bond7: entered allmulticast mode [ 729.523808][T25145] 8021q: adding VLAN 0 to HW filter on device bond7 [ 729.856871][T25160] netlink: 'syz.5.6945': attribute type 1 has an invalid length. [ 729.886545][T25160] bond8: entered promiscuous mode [ 729.891832][T25160] 8021q: adding VLAN 0 to HW filter on device bond8 [ 729.975968][ T28] audit: type=1326 audit(1782686223.525:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25162 comm="syz.3.6946" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa23effce59 code=0x0 [ 730.058946][T25165] bond11: entered allmulticast mode [ 730.065105][T25165] 8021q: adding VLAN 0 to HW filter on device bond11 [ 730.274377][T25178] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6952'. [ 730.313468][T25176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6951'. [ 730.322634][T25176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6951'. [ 730.850192][T25194] bond8: entered allmulticast mode [ 730.855541][T25194] 8021q: adding VLAN 0 to HW filter on device bond8 [ 730.995940][T25205] bond12: entered allmulticast mode [ 730.996428][T25207] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6963'. [ 731.001549][T25205] 8021q: adding VLAN 0 to HW filter on device bond12 [ 731.139058][T25210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6964'. [ 731.148178][T25210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6964'. [ 731.171819][T25218] netlink: 'syz.0.6967': attribute type 1 has an invalid length. [ 731.185216][T25218] bond13: entered promiscuous mode [ 731.190503][T25218] 8021q: adding VLAN 0 to HW filter on device bond13 [ 731.344504][ T28] audit: type=1326 audit(1782686224.905:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25220 comm="syz.1.6968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe64d84ce59 code=0x0 [ 731.375614][T25224] bond9: entered allmulticast mode [ 731.380904][T25224] 8021q: adding VLAN 0 to HW filter on device bond9 [ 732.125060][T25252] bond14: entered allmulticast mode [ 732.130632][T25252] 8021q: adding VLAN 0 to HW filter on device bond14 [ 732.238156][T25263] bond15: entered allmulticast mode [ 732.243621][T25263] 8021q: adding VLAN 0 to HW filter on device bond15 [ 732.331281][T25269] netlink: 'syz.3.6988': attribute type 1 has an invalid length. [ 732.355363][T25269] bond9: entered promiscuous mode [ 732.360602][T25269] 8021q: adding VLAN 0 to HW filter on device bond9 [ 732.596018][T25281] bond11: entered allmulticast mode [ 732.601444][T25281] 8021q: adding VLAN 0 to HW filter on device bond11 [ 732.635130][ T28] audit: type=1326 audit(1782686226.195:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25288 comm="syz.1.6995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe64d84ce59 code=0x0 [ 732.772580][T25293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6997'. [ 732.932494][T25301] bond12: entered allmulticast mode [ 732.937967][T25301] 8021q: adding VLAN 0 to HW filter on device bond12 [ 733.422691][T25321] bond13: entered allmulticast mode [ 733.429525][T25321] 8021q: adding VLAN 0 to HW filter on device bond13 [ 733.792425][T25341] netlink: 'syz.1.7015': attribute type 1 has an invalid length. [ 733.832701][T25341] bond11: entered promiscuous mode [ 733.838046][T25341] 8021q: adding VLAN 0 to HW filter on device bond11 [ 733.882294][T25348] bond14: entered allmulticast mode [ 733.887793][T25348] 8021q: adding VLAN 0 to HW filter on device bond14 [ 734.055364][ T28] audit: type=1326 audit(1782686227.595:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25354 comm="syz.4.7021" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02af2fce59 code=0x0 [ 734.329530][T25368] bond16: entered allmulticast mode [ 734.335314][T25368] 8021q: adding VLAN 0 to HW filter on device bond16 [ 734.419745][T25376] __nla_validate_parse: 3 callbacks suppressed [ 734.419771][T25376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7029'. [ 734.454458][T25376] bond17: entered allmulticast mode [ 734.461121][T25376] 8021q: adding VLAN 0 to HW filter on device bond17 [ 734.616764][T25381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7031'. [ 734.625862][T25381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7031'. [ 734.982221][T25401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7039'. [ 734.991213][T25401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7039'. [ 735.116929][T25407] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7041'. [ 735.143914][T25409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7042'. [ 735.196084][T25411] netlink: 'syz.0.7043': attribute type 1 has an invalid length. [ 735.232067][T25411] bond18: entered promiscuous mode [ 735.238911][T25411] 8021q: adding VLAN 0 to HW filter on device bond18 [ 735.902713][T25423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7047'. [ 735.911795][T25423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7047'. [ 736.057570][ T28] audit: type=1326 audit(1782686229.615:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25429 comm="syz.5.7050" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2198d8ce59 code=0x0 [ 736.312626][T25441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7053'. [ 736.787595][T25462] netlink: 'syz.3.7061': attribute type 1 has an invalid length. [ 736.807394][T25462] bond10: entered promiscuous mode [ 736.813055][T25462] 8021q: adding VLAN 0 to HW filter on device bond10 [ 736.998887][ T28] audit: type=1326 audit(1782686230.505:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25469 comm="syz.5.7063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2198d8ce59 code=0x0 [ 738.007792][T25518] netlink: 'syz.5.7083': attribute type 1 has an invalid length. [ 738.088739][T25518] bond10: entered promiscuous mode [ 738.095663][T25518] 8021q: adding VLAN 0 to HW filter on device bond10 [ 739.456987][T25567] __nla_validate_parse: 3 callbacks suppressed [ 739.457026][T25567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7102'. [ 739.655494][T25574] netlink: 'syz.5.7104': attribute type 1 has an invalid length. [ 739.670986][T25574] bond11: entered promiscuous mode [ 739.676240][T25574] 8021q: adding VLAN 0 to HW filter on device bond11 [ 740.335403][T25595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7111'. [ 740.344595][T25595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7111'. [ 741.608247][T25638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7127'. [ 741.617348][T25638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7127'. [ 741.694001][T25648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7131'. [ 741.703114][T25648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7131'. [ 742.581682][T25683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7143'. [ 742.590833][T25683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7143'. [ 742.719244][T25694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7147'. [ 742.734797][T25695] netlink: 'syz.3.7146': attribute type 1 has an invalid length. [ 742.777523][T25695] bond11: entered promiscuous mode [ 742.786632][T25695] 8021q: adding VLAN 0 to HW filter on device bond11 [ 744.193609][T25753] netlink: 'syz.5.7169': attribute type 1 has an invalid length. [ 744.210467][T25753] bond12: entered promiscuous mode [ 744.215738][T25753] 8021q: adding VLAN 0 to HW filter on device bond12 [ 744.501353][T25766] __nla_validate_parse: 8 callbacks suppressed [ 744.501441][T25766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7173'. [ 744.516738][T25766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7173'. [ 744.838590][T25786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7181'. [ 744.868130][T25788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7182'. [ 745.440389][T25800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7186'. [ 745.449562][T25800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7186'. [ 745.837101][T25825] netlink: 'syz.1.7195': attribute type 1 has an invalid length. [ 745.902578][T25825] bond12: entered promiscuous mode [ 745.907886][T25825] 8021q: adding VLAN 0 to HW filter on device bond12 [ 746.397713][T25855] bond15: entered allmulticast mode [ 746.403145][T25855] 8021q: adding VLAN 0 to HW filter on device bond15 [ 746.449133][T25860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7207'. [ 746.522683][T25869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7211'. [ 746.936094][T25890] bond13: entered allmulticast mode [ 746.942433][T25890] 8021q: adding VLAN 0 to HW filter on device bond13 [ 747.273591][T25916] netlink: 'syz.5.7227': attribute type 1 has an invalid length. [ 747.305598][T25916] bond14: entered promiscuous mode [ 747.310984][T25916] 8021q: adding VLAN 0 to HW filter on device bond14 [ 747.694713][T25923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7229'. [ 747.703751][T25923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7229'. [ 748.790928][T25977] netlink: 'syz.4.7248': attribute type 1 has an invalid length. [ 750.511916][T26047] netlink: 'syz.0.7274': attribute type 1 has an invalid length. [ 750.720292][T26053] __nla_validate_parse: 7 callbacks suppressed [ 750.720311][T26053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7278'. [ 750.735693][T26053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7278'. [ 751.141590][T26068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7281'. [ 751.150741][T26068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7281'. [ 751.193122][T26077] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7286'. [ 752.351894][T26102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7295'. [ 752.361219][T26102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7295'. [ 752.375884][T26108] netlink: 'syz.4.7298': attribute type 1 has an invalid length. [ 753.690431][T26138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7310'. [ 753.699488][T26138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7310'. [ 754.191215][T26162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7319'. [ 754.373411][T26176] netlink: 'syz.0.7324': attribute type 1 has an invalid length. [ 755.844391][T26208] __nla_validate_parse: 7 callbacks suppressed [ 755.844413][T26208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7335'. [ 755.859850][T26208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7335'. [ 755.964718][T26227] netlink: 'syz.1.7342': attribute type 1 has an invalid length. [ 756.010155][T26221] sctp: [Deprecated]: syz.0.7340 (pid 26221) Use of int in max_burst socket option. [ 756.010155][T26221] Use struct sctp_assoc_value instead [ 756.130113][T26229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7343'. [ 756.139207][T26229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7343'. [ 756.423289][T26235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7345'. [ 756.432641][T26235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7345'. [ 757.119634][T26266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7356'. [ 757.128688][T26266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7356'. [ 757.270528][T26273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7359'. [ 757.279772][T26273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7359'. [ 757.416582][T26283] netlink: 'syz.1.7363': attribute type 1 has an invalid length. [ 757.443954][T26283] bond13: entered promiscuous mode [ 757.449219][T26283] 8021q: adding VLAN 0 to HW filter on device bond13 [ 760.074058][T26395] bond14: entered allmulticast mode [ 760.079477][T26395] 8021q: adding VLAN 0 to HW filter on device bond14 [ 760.517021][T26418] bond12: entered allmulticast mode [ 760.522512][T26418] 8021q: adding VLAN 0 to HW filter on device bond12 [ 760.861479][T26448] __nla_validate_parse: 18 callbacks suppressed [ 760.861573][T26448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7429'. [ 760.920178][T26448] bond13: entered allmulticast mode [ 760.926055][T26448] 8021q: adding VLAN 0 to HW filter on device bond13 [ 760.946881][T26442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7427'. [ 760.955956][T26442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7427'. [ 761.004374][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7434'. [ 761.453469][T26479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7443'. [ 761.491256][T26479] bond14: entered allmulticast mode [ 761.497743][T26479] 8021q: adding VLAN 0 to HW filter on device bond14 [ 761.533028][T26475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7442'. [ 761.542087][T26475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7442'. [ 761.565529][T26473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7440'. [ 761.574579][T26473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7440'. [ 761.629369][T26490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7448'. [ 762.046629][T26509] bond16: entered allmulticast mode [ 762.053220][T26509] 8021q: adding VLAN 0 to HW filter on device bond16 [ 762.258756][T26517] bond17: entered allmulticast mode [ 762.264858][T26517] 8021q: adding VLAN 0 to HW filter on device bond17 [ 763.030281][T26564] bond18: entered allmulticast mode [ 763.045840][T26564] 8021q: adding VLAN 0 to HW filter on device bond18 [ 766.180148][T26704] 9p: Bad value for 'wfdno' [ 766.870051][T26714] __nla_validate_parse: 10 callbacks suppressed [ 766.870069][T26714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7533'. [ 766.885623][T26714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7533'. [ 767.131804][T26725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7536'. [ 767.787512][T26742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7543'. [ 767.796563][T26742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7543'. [ 768.053247][T26751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7546'. [ 768.062387][T26751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7546'. [ 768.279245][T26756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7548'. [ 768.288438][T26756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7548'. [ 768.380981][T26763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7551'. [ 768.709548][T26782] netlink: 'syz.5.7558': attribute type 1 has an invalid length. [ 769.097706][T26792] bond19: entered allmulticast mode [ 769.103173][T26792] 8021q: adding VLAN 0 to HW filter on device bond19 [ 769.973903][T26821] bond19: entered allmulticast mode [ 769.988886][T26821] 8021q: adding VLAN 0 to HW filter on device bond19 [ 770.401890][T26838] bond20: entered allmulticast mode [ 770.419687][T26838] 8021q: adding VLAN 0 to HW filter on device bond20 [ 771.016547][T26852] bond15: entered allmulticast mode [ 771.022552][T26852] 8021q: adding VLAN 0 to HW filter on device bond15 [ 771.044707][T26854] bond15: entered allmulticast mode [ 771.050717][T26854] 8021q: adding VLAN 0 to HW filter on device bond15 [ 771.143807][T26865] 9p: Bad value for 'wfdno' [ 771.998145][T26888] 9p: Bad value for 'wfdno' [ 772.135079][T26891] bond16: entered allmulticast mode [ 772.140428][T26891] 8021q: adding VLAN 0 to HW filter on device bond16 [ 772.289489][T26897] __nla_validate_parse: 9 callbacks suppressed [ 772.289511][T26897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7601'. [ 772.305506][T26897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7601'. [ 772.543094][T26911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7606'. [ 773.158008][T26936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7615'. [ 773.167045][T26936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7615'. [ 773.758224][T26952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7621'. [ 773.767524][T26952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7621'. [ 774.059108][T26964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7626'. [ 774.254193][ T28] audit: type=1400 audit(1782686267.815:4446): avc: denied { setopt } for pid=26971 comm="syz.4.7630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 774.254536][T26972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7630'. [ 774.386089][T26978] 9p: Bad value for 'wfdno' [ 774.468422][T26974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7631'. [ 775.439986][T27025] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.447256][T27025] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.567272][T27025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.599156][T27025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.839156][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.853587][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.948682][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.957937][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.175810][T27057] 9p: Bad value for 'wfdno' [ 778.475569][T27127] 9p: Bad value for 'wfdno' [ 779.293310][T27137] FAULT_INJECTION: forcing a failure. [ 779.293310][T27137] name failslab, interval 1, probability 0, space 0, times 0 [ 779.293359][T27137] CPU: 0 UID: 0 PID: 27137 Comm: syz.1.7690 Not tainted syzkaller #0 PREEMPT(lazy) [ 779.293383][T27137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 779.293458][T27137] Call Trace: [ 779.293467][T27137] [ 779.293476][T27137] __dump_stack+0x1d/0x30 [ 779.293500][T27137] dump_stack_lvl+0x95/0xd0 [ 779.293522][T27137] dump_stack+0x15/0x1b [ 779.293547][T27137] should_fail_ex+0x25e/0x270 [ 779.293640][T27137] should_failslab+0x8c/0xb0 [ 779.293668][T27137] __kmalloc_noprof+0xd4/0x4a0 [ 779.293722][T27137] ? vc_do_resize+0x210/0xdc0 [ 779.293755][T27137] ? vc_do_resize+0x210/0xdc0 [ 779.293845][T27137] vc_do_resize+0x210/0xdc0 [ 779.293953][T27137] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 779.293983][T27137] __vc_resize+0x3c/0x50 [ 779.294014][T27137] vt_resizex+0x356/0x3d0 [ 779.294053][T27137] vt_ioctl+0x1091/0x1900 [ 779.294079][T27137] ? tty_ioctl+0x7c0/0xb80 [ 779.294111][T27137] tty_ioctl+0x7d7/0xb80 [ 779.294165][T27137] ? __pfx_tty_ioctl+0x10/0x10 [ 779.294194][T27137] __se_sys_ioctl+0xce/0x140 [ 779.294295][T27137] __x64_sys_ioctl+0x43/0x50 [ 779.294337][T27137] x64_sys_call+0x1563/0x3020 [ 779.294428][T27137] do_syscall_64+0x136/0x3c0 [ 779.294459][T27137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.294487][T27137] RIP: 0033:0x7fe64d84ce59 [ 779.294507][T27137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.294604][T27137] RSP: 002b:00007fe64c2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.294629][T27137] RAX: ffffffffffffffda RBX: 00007fe64dac5fa0 RCX: 00007fe64d84ce59 [ 779.294643][T27137] RDX: 0000200000001040 RSI: 000000000000560a RDI: 0000000000000006 [ 779.294661][T27137] RBP: 00007fe64c2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 779.294678][T27137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.294754][T27137] R13: 00007fe64dac6038 R14: 00007fe64dac5fa0 R15: 00007ffe7f777348 [ 779.294779][T27137] [ 780.338007][T27167] __nla_validate_parse: 5 callbacks suppressed [ 780.338057][T27167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7702'. [ 780.365963][ T28] audit: type=1400 audit(1782686273.933:4447): avc: denied { sys_module } for pid=27166 comm="syz.3.7702" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 780.440917][T27167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7702'. [ 780.456501][T27167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7702'. [ 780.544870][T27180] 9p: Bad value for 'wfdno' [ 780.560243][T27183] FAULT_INJECTION: forcing a failure. [ 780.560243][T27183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.573354][T27183] CPU: 0 UID: 0 PID: 27183 Comm: syz.1.7707 Not tainted syzkaller #0 PREEMPT(lazy) [ 780.573378][T27183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 780.573473][T27183] Call Trace: [ 780.573479][T27183] [ 780.573486][T27183] __dump_stack+0x1d/0x30 [ 780.573578][T27183] dump_stack_lvl+0x95/0xd0 [ 780.573596][T27183] dump_stack+0x15/0x1b [ 780.573613][T27183] should_fail_ex+0x25e/0x270 [ 780.573658][T27183] should_fail+0xb/0x20 [ 780.573730][T27183] should_fail_usercopy+0x1a/0x20 [ 780.573756][T27183] _copy_from_user+0x1c/0xb0 [ 780.573772][T27183] __sys_connect+0xd0/0x2a0 [ 780.573829][T27183] __x64_sys_connect+0x3f/0x50 [ 780.573849][T27183] x64_sys_call+0x2df0/0x3020 [ 780.573870][T27183] do_syscall_64+0x136/0x3c0 [ 780.573976][T27183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.574071][T27183] RIP: 0033:0x7fe64d84ce59 [ 780.574159][T27183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.574175][T27183] RSP: 002b:00007fe64c2a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 780.574192][T27183] RAX: ffffffffffffffda RBX: 00007fe64dac5fa0 RCX: 00007fe64d84ce59 [ 780.574204][T27183] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000004 [ 780.574215][T27183] RBP: 00007fe64c2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 780.574226][T27183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.574277][T27183] R13: 00007fe64dac6038 R14: 00007fe64dac5fa0 R15: 00007ffe7f777348 [ 780.574294][T27183] [ 780.830001][ T28] audit: type=1400 audit(1782686274.403:4448): avc: denied { mounton } for pid=27186 comm="syz.1.7709" path="/285/file0" dev="tmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 780.978539][T17834] ================================================================== [ 780.986746][T17834] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 780.993798][T17834] [ 780.996115][T17834] read-write to 0xffff888237c2a8e4 of 4 bytes by task 17831 on cpu 0: [ 781.004257][T17834] wq_worker_running+0x9b/0x120 [ 781.009126][T17834] schedule_preempt_disabled+0x10/0x20 [ 781.014581][T17834] __mutex_lock+0x524/0xf40 [ 781.019088][T17834] __mutex_lock_slowpath+0xa/0x10 [ 781.024119][T17834] mutex_lock+0x88/0x90 [ 781.028285][T17834] synchronize_rcu_expedited+0x18a/0x770 [ 781.033918][T17834] synchronize_rcu+0x35/0x2e0 [ 781.038588][T17834] key_garbage_collector+0x786/0x900 [ 781.043876][T17834] process_scheduled_works+0x4d4/0x9a0 [ 781.049339][T17834] worker_thread+0x569/0x750 [ 781.053931][T17834] kthread+0x221/0x270 [ 781.057992][T17834] ret_from_fork+0x146/0x330 [ 781.062596][T17834] ret_from_fork_asm+0x1a/0x30 [ 781.067363][T17834] [ 781.069678][T17834] read to 0xffff888237c2a8e4 of 4 bytes by task 17834 on cpu 1: [ 781.077296][T17834] kick_pool+0x49/0x2d0 [ 781.081469][T17834] __queue_work+0x8e9/0xb90 [ 781.085984][T17834] queue_work_on+0xa9/0x140 [ 781.090497][T17834] process_srcu+0xa39/0xd90 [ 781.095007][T17834] process_scheduled_works+0x4d4/0x9a0 [ 781.100499][T17834] worker_thread+0x569/0x750 [ 781.105098][T17834] kthread+0x221/0x270 [ 781.109158][T17834] ret_from_fork+0x146/0x330 [ 781.114015][T17834] ret_from_fork_asm+0x1a/0x30 [ 781.118782][T17834] [ 781.121100][T17834] value changed: 0x00000000 -> 0x00000001 [ 781.126812][T17834] [ 781.129134][T17834] Reported by Kernel Concurrency Sanitizer on: [ 781.135297][T17834] CPU: 1 UID: 0 PID: 17834 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(lazy) [ 781.144750][T17834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 781.154803][T17834] Workqueue: rcu_gp process_srcu [ 781.159751][T17834] ================================================================== [ 781.178211][T27195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7711'.