last executing test programs: 3m12.78850728s ago: executing program 4 (id=3072): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x9}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000140)=""/39, 0x27, 0x0, &(0x7f0000000380)=""/248, 0xf8}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@ptr={0xc}, @restrict={0xf, 0x0, 0x0, 0xb, 0x3}, @const={0xf, 0x0, 0x0, 0xa, 0x5}, @var={0x9, 0x0, 0x0, 0xe, 0x5, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x5}]}, @float={0x7, 0x0, 0x0, 0x10, 0x2}, @volatile={0x6, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x30]}}, &(0x7f00000005c0)=""/116, 0x7b, 0x74, 0x0, 0x7}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1e, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) socket(0x2, 0x80805, 0x3) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r10, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r9}, 0x20) recvmmsg(r9, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) syz_emit_ethernet(0xe6, &(0x7f0000000780)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x37, 0x2, [{0x0, 0xd, "5e00020000020000000000"}, {0x0, 0x12, "4e71d172cdeca03ba0f2ef7d4e321fff"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x26}, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b3defc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "4e2a31fac86b0b249e8e0c1a000000"}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x9, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) bind$tipc(r11, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x88, 0x30, 0xb, 0x5, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0xffffffffffffffff}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 3m12.566140988s ago: executing program 4 (id=3074): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/pid\x00') mount_setattr(0xffffffffffffff9c, 0x0, 0x1800, &(0x7f00000017c0)={0x10008b, 0x0, 0x0, {r0}}, 0x20) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r2 = getegid() chown(&(0x7f0000000000)='./file0\x00', 0x0, r2) getgroups(0x2, &(0x7f00000003c0)=[r1, r2]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb18000000000000, 0x54a623}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x101}}, {@mblk_io_submit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@minixdf}, {@nodiscard}, {@nomblk_io_submit}, {@acl}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") 3m12.048697413s ago: executing program 4 (id=3077): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 3m6.766696501s ago: executing program 4 (id=3086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000cc0)={{r1, &(0x7f0000000140)='$-:&\x00', 0x100, &(0x7f0000000200)={@align=0x6, {0x4, 0xfffb, 0xade7, 0x7}}, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x1}, 0x3, &(0x7f0000000c40)=[{0x3, 0x9, &(0x7f00000002c0)=',#\\/,!}&{$*\x00', &(0x7f0000000340)="389c5123ba80dad0058a199df6d95de77f186a8b32e7fcfee837acb501a46c59a3bb3aa4cd3974992e71baa29ee5746a77aa378431abdd43feb21dfc3ec3723a66bfe4b1092d942b04b4e03b2177b9317704e2f44658ba023c8197713c198cabba9a00d27ff4d21d47e4d24947b78b3429344f8db48b4004cfffa122645e363deeb0f53f8daee63ef2b418d41e", 0x8d, 0x31}, {0x3, 0xfffffffe, &(0x7f0000000400)='.:-', &(0x7f0000000440)="6a5120e483a9cfcf79e0094d2b3d99cb64d2a18febdcec46fbb13f95b7962bd6ceebee6734359e1fbe39", 0x2a, 0x12}, {0x1, 0x1ff, &(0x7f0000000480)='noauto_da_alloc', &(0x7f0000000b80)="032252ce1ea7fde93d6f693e4322866272f66201e2a9140c39c60ac6dda78683b0e16bf6ffa98d3957ffcd0da7d8a1bbcb677f30625e177772fcaaf3de2801fd934c6b22466ec292a518bfd20e1d94857b7af8397b5ad2e108d3e7e5759523dfe368358bb14f93b857b1f9d2455b2aeb292e8a562d6b4e04ea74ec2513ae4bdba6b0c77250eb26669c26c0fcb6cf940eb25560773a0041e18c723b5ce9d46509b59115", 0xa3, 0x22}]}) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0/../file0\x00') sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c00000002060108000000000000000000000000050005000a0000dce28e1eb67c4a740005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000001c000780080008400000001008001240000025410800064000000001"], 0x6c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$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") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = fspick(r3, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r5, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x46) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) sendto$inet6(r2, 0x0, 0x0, 0x8910, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3m4.037546938s ago: executing program 4 (id=3096): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111d00000000000c6000000009500"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000002000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000003000000000000000040a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000010000000033000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000030000000000000000000000000000000000000000000000feffffffffffffff0200000000000000fefffffffffffbff0000000000000000960700000000000000000000000000028a0000000000000000000000b1a001000000"], 0xf8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff02000000000000000000000000000164010100000000000000000000000000ffff0000000000000000002002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000002b000000fc0000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000240700000000000000014000e00fc010000000100"/188], 0x104}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x201400, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES32], 0x0, 0x2c4, &(0x7f0000000c00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r6, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket(0x80000000000000a, 0x2, 0x0) 3m3.013240871s ago: executing program 4 (id=3098): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r5 = socket(0x24, 0x2, 0x6) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r10 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) sendmsg$AUDIT_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x8, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008054}, 0x80) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, 0x0, 0x4c041) accept(r5, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f00000003c0)=0x80) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 3m3.012767891s ago: executing program 32 (id=3098): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r5 = socket(0x24, 0x2, 0x6) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r10 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) sendmsg$AUDIT_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x8, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008054}, 0x80) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, 0x0, 0x4c041) accept(r5, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f00000003c0)=0x80) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 2m31.807462591s ago: executing program 3 (id=3187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 2m31.779972072s ago: executing program 3 (id=3189): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x40103, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000400)=@assoc_value, &(0x7f00000004c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) close(0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0xc, 0x3, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000380), &(0x7f0000000500)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r7 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") prlimit64(r1, 0x5, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x26052, r7, 0xd16a4000) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r8, 0x0, 0x0, 0x200000c0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) getuid() io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0x76be, 0x200, 0x3, 0x20002f7}) 2m27.938703914s ago: executing program 3 (id=3192): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x1, 0x1, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x18, 0x37, 0x9, 0x0, 0x0, {0x1}, [@nested={0x4, 0x82}]}, 0x18}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 2m27.773378309s ago: executing program 3 (id=3193): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") r1 = open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x801) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000012}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000080)={0x40002003}) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x10f, &(0x7f00000009c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @void, {@ipv4={0x800, @tcp={{0x30, 0x4, 0x0, 0x5, 0x101, 0x66, 0x0, 0x30, 0x6, 0x0, @rand_addr=0x64010101, @loopback, {[@rr={0x7, 0x7, 0xf3, [@multicast1]}, @rr={0x7, 0x7, 0x8a, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0xb, 0xff, [@multicast1, @broadcast]}, @ssrr={0x89, 0x23, 0x67, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010101, @multicast2, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}]}, @generic={0x94, 0x10, "32b15a05ca16e8212991d1cd2583"}, @cipso={0x86, 0x35, 0x1, [{0x5, 0x7, "9e8e4d1588"}, {0x1, 0xb, "e8f4444496b6d43e64"}, {0x7, 0xc, "af6e18860ac68e7702bb"}, {0x1, 0x8, "17db45ac065b"}, {0x2, 0x9, "1da2d6341dcaa7"}]}, @lsrr={0x83, 0xb, 0xf, [@broadcast, @local]}, @timestamp={0x44, 0xc, 0x2d, 0x0, 0x3, [0x4, 0x400]}, @generic={0x7, 0x11, "e23e2b76de2815ba00a1617717079e"}]}}, {{0x4e23, 0x4e23, 0x41424344, r4, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x6, {[@nop, @window={0x3, 0x3, 0x81}]}}, {"90fd7a4ac462002c505074243f0260e262143ca215f36b9637de74ebfd694694a162c07f5841444758"}}}}}}, &(0x7f0000000780)={0x1, 0x3, [0x65e, 0x360c, 0x71, 0xb8c]}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCFLSH(r5, 0x540b, 0x2) r6 = open(&(0x7f0000000000)='./bus\x00', 0xc000, 0xa0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x414, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd19e030000ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036cc5c620d1cbf7966d61fdcf334063bd7a0abdc2542ded0b000000caef001d00000100", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r7 = socket$nl_route(0x10, 0x3, 0x0) listen(r1, 0x4) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6014d71800280600fe8000000000000000000000000000aafe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00201011309c2ed1a6074fe07f98932d008000000e940759363668d0000000000"], 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYRES16=r6, @ANYRES64=r0, @ANYRESDEC=r3, @ANYRES32=r2, @ANYBLOB="08003f000502", @ANYRESOCT, @ANYBLOB="c62ef96d039f3cb3d66826f25ca72b5712d47eb3c538b47ab0f2dc2eb7d079b465491aa60486dbd27b2dc8f28bc9da173e8d3d24781794d6884969a354438d6e16632e03d5169a39ef8dc6542d17449b13184846438ef29197e14c96077fdb5cba86770ac77dfbcc0a7ec811213504e38c4a19d9ba1afb38efa3043742a88fb56bded3481096c0bd0421bdf2bf9cb670"], 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) 2m27.205096337s ago: executing program 3 (id=3197): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r5 = socket(0x24, 0x2, 0x6) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x4030000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) sendmsg$AUDIT_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x8, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008054}, 0x80) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4c041) accept(r5, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f00000003c0)=0x80) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 2m26.825631589s ago: executing program 3 (id=3199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 2m26.783679381s ago: executing program 33 (id=3199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 6.757318466s ago: executing program 2 (id=4152): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x20, 0x4855}, 0x24000052) unshare(0x2040600) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x8001, 0x37}, 0x1112, 0x2, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000cbffffff00000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000500)="580000001400192340834b80043f679a10ff3d425f85b4141691c148c61bcdf1e4220000000001008048244a48fb6cfbe939ca28f23457e792945f64009400050028925aaa000000c600480000000000feff2c707f8f00ff", 0x58}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd707ee800000003000000400001802c000400740801003f000000ac14140f00000000000000001400020002000000ffffffff00002100000000000d000100756473797a3200000000"], 0x54}}, 0x0) mmap(&(0x7f00008ed000/0x1000)=nil, 0x1000, 0xb, 0x30, r3, 0xb57bd000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0xfe, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x103264, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendto(r2, &(0x7f0000000240)="4cb7eb2fb1d268df317cdcb83b6274beaa49b17069b8604c1e8ebf206e1c0e189cd34c4a5d31dad4a9b84d77bc286b0d7c7fc221647360b5fa9b864c9d1a28652d5f57741ab8d157f7825bf11e8f3bec72106c5080edcc54f98a0f9ae56578d7fc03a8e54d68c43cf4f6173bff7df074df7f24080f3fed4445094d578946b6648515cce9ef86ad48cd62977da4d0426ef58b27e50cc89679cab37db47f", 0x9d, 0x8000, &(0x7f0000000440)=@x25, 0x80) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x2000) 6.086322407s ago: executing program 2 (id=4154): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) ppoll(&(0x7f0000001680)=[{0xffffffffffffffff, 0x4480}], 0x1, 0x0, 0x0, 0x0) 5.065105019s ago: executing program 5 (id=4156): r0 = socket$inet(0xa, 0x801, 0x84) socket$kcm(0x21, 0x2, 0x2) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0x1ff, 0x3, 0x42, 0x1, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xbfffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000680)=ANY=[@ANYRESHEX=r6, @ANYBLOB=',wfdno', @ANYRESHEX=r7, @ANYBLOB="2c0014b6465185d4278eddd5411721b3218ef383baeb46d91a339a47e36f6d0fd43e160bd8693593404900454c947635010000000f"]) semget(0x1, 0x4, 0x3c4) unshare(0x48020400) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000002100)=[{{&(0x7f0000000080)={0xa, 0x0, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000001e00)=[{&(0x7f0000000300)="bc", 0x1}], 0x1}}], 0x1, 0x4) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000440)=@sack_info={0x0, 0x0, 0x4598}, 0xc) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e24, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10001}, 0x1c) r9 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) 2.52299696s ago: executing program 5 (id=4160): syz_read_part_table(0x1052, &(0x7f0000000000)="$eJzsz72NwjAAx9G/40suqW66mweyDqMwCWxAgWRkkooBgOK9wrJ/8occPmqZkyFJeenDc6yZx9+9nH/KsWRqh8ytt7psfb2OSfurqX01bqfLpdWpz+5tbUlutT8x7TuG/cr6f3rLJwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgyz0CAAD//2rNDh0=") r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001b40)=@mangle={'mangle\x00', 0x10, 0x6, 0xf18, 0xc40, 0xd80, 0x0, 0xc40, 0x0, 0xe70, 0xe70, 0xe70, 0xe70, 0xe70, 0x6, 0x0, {[{{@uncond, 0x0, 0x8b8, 0x8e0, 0x0, {0x7a00000000000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x959, 0x1}, {0x3}, {}, {0x8, 0x3}, {0xffffffff, 0x3}, {0x7fff, 0x2}, {0x7}, {0xb}, {0x1, 0x2}, {0x9, 0x1}, {0x8001, 0x2}], [{0x9, 0x401}, {0x3, 0x6}, {0x3, 0x5}, {0x3, 0x4}, {0x7, 0xa5}, {0x5, 0x400}, {0x8, 0x101}, {0x0, 0x4}, {0x5, 0x70000}, {0x1, 0xc10}, {0x80000001, 0x7}], 0x2, 0x6}, {[{0x5e23, 0x1}, {0xc04, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0xfffffffe, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x8, 0x2}, {0x0, 0x3}, {0x7, 0x2}, {0x3, 0x3}], [{0x7ff, 0x9}, {0x5, 0xfffff12e}, {0x167f, 0x81}, {0x2, 0xe}, {0x7, 0xffff}, {0x5, 0x9}, {0x73d, 0x9}, {0x3, 0xdb}, {0x3, 0xffffffff}, {0x1, 0x8}, {0x7, 0x9}], 0x2, 0x5}, {[{0x1ff, 0x1}, {0x3, 0x3}, {0xb, 0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x3}, {0x2, 0x3}, {0xffff8001, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x3, 0x1}], [{0x4}, {0x7, 0x7}, {0x32, 0x6a1}, {0x9, 0x8001}, {0xafc, 0x5}, {0x1e0000, 0x3}, {0x2, 0xc86}, {0x9, 0x7}, {0x8, 0x4}, {0x1, 0x1}, {0x8, 0x2d1d}], 0x5, 0x2}, {[{0x6, 0x1}, {0x8, 0x2}, {0x1, 0x1}, {0x7f, 0x2}, {0x4, 0x2}, {0x549, 0x2}, {0xfffffa2f, 0x1}, {0xa55, 0x2}, {0x8, 0x1}, {0xfff}, {0x3, 0x2}], [{0xa22}, {0x7, 0x8001}, {0xfff, 0x5675}, {0x5, 0x7}, {0xfffffff8, 0x9}, {0x3, 0x8}, {0x9, 0x5}, {0x1, 0x1}, {0x3, 0x7f}, {0x5, 0x7}], 0x3, 0x6}, {[{0x39, 0x1}, {0x6, 0x1}, {0x8}, {0xffff, 0x2}, {0x7, 0x1}, {0x3}, {0x2, 0x3}, {0xb, 0x3}, {0x800, 0x1}, {0x1, 0x3}, {0x50, 0x3}], [{0x40, 0x9}, {0x10000, 0x825}, {0x8, 0x3}, {0x1, 0x4}, {0x6, 0x30}, {0x200, 0xd}, {0x8, 0xffffff7f}, {0x3, 0x7}, {0x80000000, 0x1}, {}, {0xfffffff7, 0x400}], 0x6, 0x6}, {[{0xd5bf, 0x3}, {0x6, 0x1}, {0x6, 0x2}, {0x0, 0x1}, {0x4}, {0x0, 0x3}, {0x7fffffff, 0x3}, {0xb}, {0x4d, 0x3}, {0x1, 0x13103fd830a8255d}, {0x8, 0x2}], [{0x1b6}, {0xfffffff9, 0x56d2}, {0x0, 0x80000000}, {0x1, 0x9}, {0x400, 0x3}, {0x9, 0x40}, {0x6, 0x8}, {0x23, 0xffff}, {0x3ff, 0xc0}, {0x800, 0x8}, {0x4a, 0xf91a}], 0x9, 0x8}, {[{0x0, 0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x4}, {0x3a55, 0x1}, {0x0, 0x3}, {0x8, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x8, 0x2}, {0x8000}], [{0x6, 0x54}, {0x6}, {0x715d, 0xbb}, {0xe60e, 0xab43}, {0x10, 0x1}, {0x10, 0x6}, {0x3, 0x4}, {0x6, 0x6}, {0x40000000, 0x7}, {0x80000001, 0x19}, {0x4, 0x2}], 0x7, 0x7}, {[{0x1, 0x1}, {}, {}, {0x8}, {0x7, 0x1}, {0x2}, {0x6}, {0x7, 0x2}, {0x6c31b608}, {0x81, 0x1}, {0x7ff, 0x3}], [{0x200, 0x7}, {0x1, 0xd3}, {0x80000, 0x9}, {0xc, 0x9}, {0x8, 0xa91}, {0x7fffffff, 0xfffffffa}, {0xfffffffe, 0x4}, {0x3, 0x93}, {0x400, 0x6}, {0x420f, 0x6}, {0xb1, 0x3ff}], 0x9, 0x8}, {[{0x7}, {0xf793, 0x2}, {0xf}, {0x6, 0x3}, {0x5, 0x3}, {0x9, 0x3}, {0x10000, 0x5}, {0xa1, 0x1}, {0x4, 0x2}, {0x6, 0x2}, {0xb9}], [{0x8, 0x5}, {0x2, 0xc}, {0x7, 0x401}, {0x3, 0xa8}, {0x8, 0x2}, {0x7, 0xab09}, {0x8001, 0xfffffe01}, {}, {0x7, 0x5}, {0x7, 0x7}, {0x3, 0x80000000}], 0x1, 0x4}, {[{0x4, 0x2}, {0x1000}, {0x6, 0x1}, {0x4, 0x3}, {0x0, 0x2}, {0x1969, 0x2}, {0x0, 0x1}, {0x8, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0xd, 0x2}], [{0x6, 0x3}, {0x9, 0x486a}, {0x24, 0xb4b}, {0x1, 0x4}, {0x81, 0x8}, {0xffffffff, 0xfffffff1}, {0xe3eb, 0x9}, {0x100, 0x3}, {0x8, 0xffffffff}, {0x1, 0x35c08c74}, {0x4, 0x7358}], 0xff, 0xb}, {[{0x4, 0x3}, {0xfffffff9}, {0x75, 0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x2}, {0x10001}, {0x7, 0x3}, {0xd, 0x1}, {0xffff0000, 0x1}, {0x7, 0x1}], [{0x1000, 0x5}, {0x4, 0x4}, {0x480000, 0x48d7}, {0x8, 0x6}, {0xff, 0x6}, {0x3ff, 0x4}, {0xfffffff7, 0x6}, {0x1, 0xfffffffa}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0x3}], 0xb, 0x9}], 0x7, 0x1}}, @common=@srh={{0x30}, {0x3c, 0x8, 0xcd, 0x9, 0x5, 0x800, 0x820}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x2e29, 0x1}}}, {{@uncond, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x80, 0x40}, {0x5}}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@mcast1, 0x37, 0x33}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@local, 0x10}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x17}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@private=0xa010101}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'erspan0\x00', {0xff}, {}, 0x3c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xf78) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 2.464425891s ago: executing program 6 (id=4161): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x4, 0x6, 0x14c, 0x1}, 0x48) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xa, 0x40, 0x3, 0x41}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, &(0x7f0000000000), 0x0}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) 2.372976884s ago: executing program 2 (id=4162): prctl$PR_SET_SECUREBITS(0x1c, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001280)=""/143) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x240, 0x4, 0x0, 0x1, [{0x23c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x22c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'cgroup\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x214, 0x3, "06275c852770226714b06026799504d26462d0f7a66ead44d6899e1445d97832ad457d06138b69af69d529be95f1911eab1846eb51bda151a6b0736302fdfb9f2c903fa06bb26b5a1ce76b17878e8174d345499079f1da597f0326854d62b1f5d97f2de35a9cb60da0764d08dbaf74939de34af914a3ea3f02ca57df07e9ed10aecb90bdbabcfcdd62e3ef6913b29a63fd42d9276dc54b68f9bc26a02bfec3c72f303f719fe6ca141e405417118a3316ef2a473417d47a2c37cecc2f4333caf9b5d8096a71bc60c57dd3fc882043377d4140b7f4580a622043a0da245a977be1af6ec12bf2ec5c7ed50e1b4f9e144fe641036e5673089a6707b709515c62734ab864914ef7e6e82143b0f6a3a6ec884fb0ecb0567dff30ef656a1316898954a71db76db8b74d4749e35b33481ad897934c4c5b1ca2f8b7e93e8dadaa1d2c96c5f1e9ce253fc6f3335b981003f183afc65a3618d2ac05c2a557154862dc7805bf408ec8c74aef836fff2e2caf6925c8bb1f460cc68d410733bd2ff5d15c60bfd8c080839e416b589d51e18c402e0282aa1918d13aadca89120112ba089e9925a0b4cbf9441a2e63268c0b2fc90c38b840eb48e9800d6f4d731051bcae4924d5a7176d83d5951cf4dbd6108032b6a35b67d6c585ee1c047b1fea250f941fccce0210922b1d9f6c6a0da7e9bf3704c31afdf08438c1021cbe05fb24ec20dc9630f8c92a4f833f431b8ac1b0cc0a19fbf942"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x294}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2.285276317s ago: executing program 6 (id=4164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4800000010003904fffffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0198000013130000050011000600000008001b000b000000180012800e0001007769726567756172640000000400028033c856a261265b3d74effb02631b59fd77ae896ca2ff87147ab0d26549cce2eada39d72daab6276e90481187350efb2454f89740abbe374c5db805073847dbb906e2ff5bb3688fe4bfb3dde2ce0500006bf0baa6ffd2de3051965ccab83579cbf56d313f1e08c1a38f00bf80559891fe29896fd5035ee713e6fbc9f9987ecd7b4bf330e136289cfba621c5d9b13ee6b1855be72ba97c2bc4f9bb4fb03df9e83694e2f403aeb234c11b184b7503dd4827baee5affd97801384d41043848c64beb7d27eb490873968c6bbc1a090650165b612dc5781ff10a2713f45ca77ec3b65147d248e520b8a4cadce25ba2152723381e"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4044000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x6008811}, 0x20000040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8044) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$eJzs3c9rG1ceAPDvSJZjJ951sizLJuyyhj0ksMSxsmGz7aVJemgOgQaaQyk9xMR2aqL8IHagdgNxoIcWWiil11Jy6T/Qe8m9t1Joe+u5kJaS0pa2RGWkkSPLki1sS0o8nw/ImvfeWO99NX6aNzN+mgByayL9UYg4GPHoYhIx3lQ2FvXCiWy9hz/cvpQ+kqhWX/o+iSTLa6yfZM/7ssRIRHx+JuIvxfX1LiwtX5muVOvuRBxbvHrj2MLS8tH5q9OXZy/PXisf//+Jk1PPlE+UdyTOfdnz2XMv/uPdN1/739wXlaNJnIoLpTdmoiWOnTIRE/EoC7E5fygiTqYLbd6Xp80uCCHXitnfYyki/hbjUayl6sZj/p2BNg7oqWoxogrkVKL/Q041xgGNY/vujoMv9HhU0j8PTtcPgNbHP1Q/NxIjtWOjvQ+TpiOjodq5jf07UH9ax++3D32YPmLNeYifV7fO0A7U08nK3Yj4e7v4k1rb9tciTeMvrGlHEhFTETGcte/5bbQhaVruxXmYjWw1/kJEnMqe0/wzW6x/oiXd7/gByKf7p7Md+Uqaerz/S8cejfFPrBv/1K8Nte67tmLQ+7/O47/G/n6kdo680DIOS8cs59u/ZKk145u3z77fqf7m8V/6SOtvjAX74cHdiEMt8b+VBpuNf9L4kzbbP13l4qnu6njhy+/OdiobdPzVexGH2x7/PB6Vpkut1ydHs7LyifKxufnK7FT9Z9s6Pv3s1Y871T/o+NPtv7dD/E3bv9D6e+l7cqPLOj45f+9qp7KxTeMvfDuc1I83h7Oc16cXF2+WI4aTc9kq9QtZtfzjG7elsU7jNdL4j/y7ff9f8/d/d+3rjDY+Mrtw4+UrDzuVbWX7N11MflTtsg2dpPHPbL791/X/NO+91dSdDev46ZVb/+xUtlH8o9uMDQAAAAAAAPKmULsGmxQmV5cLhcnJ+nzZv8beQuX6wuJ/5q7fujYTcaT2/5ClQuNK93g9naTpcvb/sI308Zb0fyPiQER8UBytpScvXa/MDDp4AAAAAAAAAAAAAAAAAAAAeELsy+b/N+5T/WOxPv8fyIle3mAOeLLp/5Bftf6/7hZPQB7Y/0N+6f+QX/o/5Jf+D/ml/0N+6f+QX/o/5Jf+DwAAAAC70oF/3f86iYiVZ0drj9RwVmZGEOxupUE3ABiY4qAbAAzM6qV/g33Ina7G/79mXw7Y++YAA5C0y6wNDqobd/77bX8TAAAAAAAAAAAAAOiBwwfbz/9PzA2GXc+0P8ivbcz/99UB8JTz1f+QX47xgc1m8Y90KjD/HwAAAAAAAAAAAAD6Zqz2SAqT2VzgsSgUJicj/hQR+6OUzM1XZqci4s8R8VWxtCdNlwfdaAAAAAAAAAAAAAAAAAAAANhlFpaWr0xXKrM3mxd+W5ezuxcad0HtQ13PRdcrN2651v+3ZTSttZFTiui+zb1e2JO9J9t5naGFpeXkl2pNErEST06AbeKKkQG1Z9OPjuGefSgBAAAAAAAAAAAAAAAAAEBONc09bu/QR31uEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD03+P7//duYdAxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPpz8CAAD//6kMOeE=") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x10}, r9}}, 0x30) semget$private(0x0, 0x6, 0x0) readv(r6, &(0x7f0000000900)=[{&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000680)=""/145, 0x91}, {0x0}, {&(0x7f0000000780)=""/17, 0x11}, {&(0x7f00000007c0)=""/137, 0x89}, {&(0x7f0000000880)=""/96, 0x60}], 0x6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r9, 0x9dff7ffc}}, 0x4d) 2.18724386s ago: executing program 5 (id=4165): syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x603}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x1, &(0x7f00000038c0)) io_setup(0x1000, &(0x7f0000000040)) io_setup(0x4, &(0x7f0000003b00)) io_setup(0x800, &(0x7f0000000500)) io_setup(0x202, &(0x7f0000000200)) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x8, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}}, 0x0) 2.095764913s ago: executing program 1 (id=4167): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020400000a0000000000008000000000030006002b0000000200000400400000000000000000000002000100000000000000fb0200000000030005003200000002004e247f0000010000000000000000"], 0x50}, 0x1, 0x7}, 0x0) get_mempolicy(0x0, 0x0, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611150000000000085000000a0000000950000000000000047"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2c, 0x5, 0x1, 0x0, 0x0, 0x9, 0x46864, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x4, @perf_bp={0x0}, 0x11a0d, 0x0, 0x43a1bd76, 0x8, 0x9, 0x5, 0x3, 0x0, 0x200000, 0x0, 0x200c}, r1, 0x0, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f0000000440)={[{@init_itable_val={'init_itable', 0x3d, 0x40000000000000}}]}, 0x45, 0x76a, &(0x7f0000000fc0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) setresgid(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140), 0x1000, &(0x7f0000000c40)=ANY=[@ANYBLOB="6c60c3a013c8d8c50f7472606e730000642c7266746e6f3d", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9p2000.L,fscache,nodevmap,smackfsdef=-(\',defcontext=system_u,defcontext=unconfined_u,dont_hash']) sync() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sync() sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") 2.095192803s ago: executing program 6 (id=4168): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0x1d) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) 1.978149737s ago: executing program 0 (id=4169): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x1, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) 1.977727787s ago: executing program 6 (id=4170): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xffffffffffffffff}]}}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) socket(0xa, 0x3, 0x3a) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x110) fadvise64(r5, 0x10001, 0x6, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x1000000010, 0x80002, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2044099, &(0x7f0000000980)={[{@nolazytime}, {@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@auto_da_alloc}, {@lazytime}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@commit={'commit', 0x3d, 0x5}}, {@mb_optimize_scan}, {@barrier}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@dax_inode}, {@dax_never}, {@dioread_lock}], [{@uid_eq}, {@dont_appraise}, {@permit_directio}, {@measure}, {@appraise}]}, 0x1, 0x560, &(0x7f0000000b00)="$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") ppoll(0x0, 0x0, 0x0, 0x0, 0x0) symlink(0x0, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_route(0x10, 0x3, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0x9, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r6, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/63, 0x328000, 0x800, 0x4}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c010000100001002cbc700000000000ff020000000000000000000000000001200100000000000000000000000000000000ecdf000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}}, 0x44050) 1.971711317s ago: executing program 0 (id=4171): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) prctl$PR_MCE_KILL(0x4e, 0x1000000, 0x1000000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x4a7) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x3, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x2000, 0x7, 0x1000, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) sched_getscheduler(r1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000000)=0x40) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8922, &(0x7f0000000280)={'dummy0\x00'}) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x21c004, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 1.668896527s ago: executing program 5 (id=4172): io_uring_setup(0x40003b80, &(0x7f0000000040)={0x0, 0xf, 0x4, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1e, 0x1}, {0xfff1, 0x1}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400c7}, 0x2400c800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x50383, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r2, 0x0, 0x44040) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x271) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 1.54598044s ago: executing program 0 (id=4173): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.54557052s ago: executing program 0 (id=4174): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x4, 0x6, 0x14c, 0x1}, 0x48) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xa, 0x40, 0x3, 0x41}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, &(0x7f0000000000), 0x0}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) 1.409419255s ago: executing program 0 (id=4175): io_uring_setup(0x4a89, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f0000000380), 0x5}, 0x5, 0xfffffffffffffffa, 0xfffffffe, 0x0, 0x100, 0x10010, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc79f, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106000000"], 0x18}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x1000, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x20, 0x0, 0x22, 0x5c441, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x2098, 0x3, 0x9, 0x0, 0x10, 0x2, 0x4007, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x11009, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, r0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$TIOCSWINSZ(r4, 0x5414, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x4080) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000840)={0x0, @aes128, 0x0, @desc2}) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f00000014c0)={0x0, 0xff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) 1.360224606s ago: executing program 5 (id=4176): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)="00000102", 0x4, r6) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffe) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0x10c000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0xa) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x113) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}, 0x1, 0x0, 0x0, 0xf9612d57cd99e519}, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:tmp_t:s0\x00', 0x1b, 0x3) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_emit_ethernet(0x8a, &(0x7f0000000280)={@random="cd1242bdc9ea", @empty, @void, {@ipv4={0x800, @icmp={{0x18, 0x4, 0x0, 0x0, 0x7c, 0x4, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @broadcast, {[@ssrr={0x89, 0x7, 0x79, [@broadcast]}, @generic={0x94, 0x8, "67331aa638c4"}, @rr={0x7, 0x1b, 0x87, [@local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast, @loopback]}, @ssrr={0x89, 0x1f, 0x30, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local, @rand_addr=0x64010101, @rand_addr=0x6, @multicast2]}]}}, @dest_unreach={0x3, 0x8, 0x0, 0x0, 0x6, 0x7f43, {0x5, 0x4, 0x3, 0x5, 0xfdf, 0x65, 0xb9f9, 0xf5, 0x29, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x4}}}}}}}, 0x0) 1.341673497s ago: executing program 1 (id=4177): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x160, 0x4c, 0x1a, 0x0, 0x73, 0x250, 0x258, 0x258, 0x250, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x5, 0x576, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x380) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x28, 0x3, 0x5c}, 0x2c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) rseq(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netstat\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(0x0, r5) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14, r6, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x8000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r5) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000980)='veth0_to_bridge\x00') ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000019c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="c1342bbd7000fddbdf2507000000080005000200000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB="0c00170000000080000000000c0017000203aaaaaaaaaaaa0a0004007770616e34000000a3e29c079edcbf304eeff72a49246e861827c27dcaeef7d208d8d6c6af8e6bde5dbc2d44a761bf57ba1c155a89593e7dad142909c1477a532f0c996310da72897c2c8f764bd50cee50814f29f655bd4d344fff0a47e972fa3c4478726da4da093e09d482ae0165c9ac5f9311f7279db12e7470d831157c641053"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000540)={0x2ec, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x2bc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e967c840381a64611dcea24b95b6b10e24c8513a98452112fc27b43e544a9440"}, @NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_ID={0x84, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd}]}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7237b2e6ce0576cb5a0c16afdb8f1e763796a45b4121b0bc6f9738a584ede393"}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6844c60a301db6f6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x90}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x20000}, 0x40) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000040)='.\x02\x00', 0x4000, &(0x7f0000010300)=ANY=[], 0x1, 0x11f0, &(0x7f0000001b00)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x2) 1.180015112s ago: executing program 1 (id=4178): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="100000001a1401"], 0x10}}, 0x40) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fgetxattr(r2, &(0x7f0000000780)=@known='security.selinux\x00', &(0x7f0000000880)=""/138, 0xffffffffffffff98) (async) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000380)={{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000640)=0xe8) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003900)=[{0x9, 0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000001c0)=""/143, 0x93}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/121, 0x79}, {&(0x7f0000001300)=""/155, 0xfffffe65}, {&(0x7f00000013c0)=""/65, 0x41}, {&(0x7f0000001440)=""/205, 0xcd}, {&(0x7f0000001540)=""/218, 0xda}, {&(0x7f0000001640)=""/164, 0xa4}, {&(0x7f0000001700)=""/184, 0xb8}], &(0x7f0000001880)=[0x2, 0x8, 0x8]}, {0x6, 0x1, 0x0, &(0x7f0000002b40)=[{&(0x7f00000018c0)=""/144, 0x90}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/69, 0x45}, {&(0x7f0000002a00)=""/180, 0xb4}, {&(0x7f0000002ac0)=""/52, 0x34}, {&(0x7f0000002b00)=""/6, 0x6}], &(0x7f0000002bc0)=[0xffffffffffffff00, 0x9, 0x7]}, {0x3, 0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002c00)=""/210, 0xd2}, {&(0x7f0000002d00)=""/73, 0x49}, {&(0x7f0000002d80)=""/67, 0x43}], &(0x7f0000002e40)=[0x2, 0x5, 0x4f348ce1, 0x0, 0x81]}, {0x4, 0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/92, 0x5c}, {&(0x7f0000002f00)=""/48, 0x30}, {&(0x7f0000002f40)=""/101, 0x65}, {&(0x7f0000002fc0)=""/125, 0x7d}], &(0x7f0000003080)=[0x50, 0x0]}, {0x4, 0x1, 0x0, &(0x7f00000033c0)=[{&(0x7f00000030c0)=""/133, 0x85}, {&(0x7f0000003180)=""/40, 0x28}, {&(0x7f00000031c0)=""/208, 0xd0}, {&(0x7f00000032c0)=""/209, 0xd1}], &(0x7f0000003400)=[0xe]}, {0x3, 0x1, 0x0, &(0x7f0000003600)=[{&(0x7f0000003440)=""/56, 0x38}, {&(0x7f0000003480)=""/137, 0x89}, {&(0x7f0000003540)=""/176, 0xb0}], &(0x7f0000003640)=[0x8000000000000001, 0x0, 0x9, 0x2724, 0xffffffffffffffff, 0xfffffffffffffb41, 0x8, 0x64, 0x1, 0x7fffffff]}, {0x2, 0x0, 0x0, &(0x7f0000003880)=[{&(0x7f00000036c0)=""/130, 0x82}, {&(0x7f0000003780)=""/203, 0xcb}], &(0x7f00000038c0)=[0x3, 0x0, 0x8, 0x9, 0x3]}], 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28c21}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) (async, rerun: 32) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000000100000000000000", @ANYRES32=r3, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000edffffffff"], 0x48}}, 0x0) (async, rerun: 32) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x7, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x4, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x600a8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0xfe}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x24008040) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r2, r2, r2, r0, r2], 0x5) 1.153796753s ago: executing program 2 (id=4179): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x0, 0x5, 0x7fff}, {0x3, 0x3f, 0x2, 0xffff}, {0x5, 0x5, 0x1, 0x9}]}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@ptr={0x13, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x2e, 0x51, 0xf]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, r1, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYRES8=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x2, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x94}, 0x1, 0x7a00}, 0x0) 1.097481135s ago: executing program 1 (id=4180): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0x1d) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) 863.136162ms ago: executing program 1 (id=4181): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x1, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) 826.263713ms ago: executing program 1 (id=4182): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r5 = socket(0x24, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x4030000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) sendmsg$AUDIT_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x8, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008054}, 0x80) sendmsg$NFT_BATCH(r8, 0x0, 0x4c041) accept(r5, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f00000003c0)=0x80) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 107.864096ms ago: executing program 0 (id=4183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffff7fffffffd, 0xffffffff00000001) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x5d1, &(0x7f0000000600)="$eJzs0z9InGccB/Dn1GsgGbJkytIkQ4a2S0LG3JCGu0tCAsdFl9AhgYQQvOkE4aQHghb0BsUbxNFFhFv8QwfPG5wUBWcRB4vg4NKiFAQX36I+LQ5tsa0UA58PPO+P93m+z/t7nuENfNbawi9JkqRCCMm1P08kf7O7q5HNPb9TeFLsDCF1mvz6h84fT1ZS8ZEkyekH7sUd27HL1OT11vDBs3Rj6/Xh/bfLtba43h/Hjelm18n7uUP9On3u1FwNM5mVmwOD5fxIJfNpM1/dHdpYfzW7ny02X9bqcy/ST9/H3GqsHbH2hEroC93hXSiFUvgQypfUf6Kx8+D4dr6x8PHxUa41uvQw5gr/8Z4X7d97d+xNvZrqn781/qiyuFbcaz/Llf7i7wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GqZyazcHBgs50cqmU+b+eru0Mb6q9n9bLH5slafe5F++j7mVmPtiLUnVEJf6A7vQimkwodQvqT+E42dB8e3842Fj4+Pcq3RpYcxV/h9w5f//q4X6d97d+xNvfrtN/O3xh9VFteKe+1nuS9CCO2X2xoAAAAAAAAAAAAAAAAAAAD+kM09v1N4UuwMIRW+Cx3hq5+/bzuZT66dradi7l6s23F+avJ6a/jgWbqx9frw/tvl2k9xvj+OG9PNrv/9MvxjvwUAAP//lyqbLA==") getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x80) 107.368776ms ago: executing program 2 (id=4184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x802) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r4, 0x104, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4040) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)) inotify_add_watch(r1, &(0x7f00000001c0)='./file1\x00', 0x40000400) 106.008917ms ago: executing program 6 (id=4185): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x8054}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) msgget$private(0x0, 0x1c0) sendto$packet(r3, &(0x7f0000000240)="09000000e7001400000000803500df8000000088a8000800274e88a800000000", 0x20, 0x4044800, &(0x7f00000000c0)={0x11, 0x9, 0x0, 0x1, 0xc, 0x6, @multicast}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000009500"/24], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0), 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast}}}], 0x20}, 0x400c804) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000180)="f7", 0x1, 0x200980) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000040), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x2b1e}, 0x2004c000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0), &(0x7f0000000280)=0x8) perf_event_open(&(0x7f0000000940)={0x4, 0x80, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x4d31, 0x100, 0xff2b647d45d36f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000640), 0x4}, 0x5004, 0x2, 0x2, 0x8, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000100)={0x89e1, 0x8d}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) 1.289ms ago: executing program 6 (id=4186): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = socket(0x22, 0x800, 0xffffffff) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2e, 0x3, 'fo\x00', 0x11, 0x10000004, 0x8}, 0x2c) (async) r3 = socket$kcm(0xa, 0x2, 0x0) (async, rerun: 32) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) (async) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xc}, {}, {0x2, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x66}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc5}, 0x40010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@local}, 0x14) (async) socket$inet6(0xa, 0x2, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) (async) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000c40)={[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_lt}]}, 0x2, 0x251, &(0x7f0000000c80)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) (async, rerun: 64) mkdir(0x0, 0x3) (async, rerun: 64) r8 = openat$cgroup_ro(r7, &(0x7f0000000840)='cgroup.kill\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb23d6952ca8c7d304e30fe23790e96baf5716107d5f92"]) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000000000)="$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") 506.62µs ago: executing program 2 (id=4187): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020400000a0000000000008000000000030006002b0000000200000400400000000000000000000002000100000000000000fb0200000000030005003200000002004e247f0000010000000000000000"], 0x50}, 0x1, 0x7}, 0x0) get_mempolicy(0x0, 0x0, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611150000000000085000000a0000000950000000000000047"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2c, 0x5, 0x1, 0x0, 0x0, 0x9, 0x46864, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x4, @perf_bp={0x0}, 0x11a0d, 0x0, 0x43a1bd76, 0x8, 0x9, 0x5, 0x3, 0x0, 0x200000, 0x0, 0x200c}, r1, 0x0, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f0000000440)={[{@init_itable_val={'init_itable', 0x3d, 0x40000000000000}}]}, 0x45, 0x76a, &(0x7f0000000fc0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) setresgid(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140), 0x1000, &(0x7f0000000c40)=ANY=[@ANYBLOB="6c60c3a013c8d8c50f7472606e730000642c7266746e6f3d", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9p2000.L,fscache,nodevmap,smackfsdef=-(\',defcontext=system_u,defcontext=unconfined_u,dont_hash']) sync() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sync() sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") 0s ago: executing program 5 (id=4188): socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000340)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x274) fsync(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000300)={[{@oldalloc}, {@quota}, {@quota}, {@usrjquota}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000e40)='./bus\x00', 0x19) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x20, 0x22, 0x0, 0x6}) kernel console output (not intermixed with test programs): " path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=49429 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 618.203523][ T28] audit: type=1400 audit(1781403463.611:5068): avc: denied { create } for pid=15233 comm="syz.2.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 618.260441][ T28] audit: type=1400 audit(1781403463.611:5069): avc: denied { ioctl } for pid=15233 comm="syz.2.3437" path="socket:[49446]" dev="sockfs" ino=49446 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 618.270478][T15227] netlink: 'syz.5.3434': attribute type 13 has an invalid length. [ 618.291195][ T28] audit: type=1400 audit(1781403463.671:5070): avc: denied { getopt } for pid=15226 comm="syz.5.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 618.304705][T15227] netlink: 'syz.5.3434': attribute type 17 has an invalid length. [ 618.338587][T15227] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 618.387393][ T28] audit: type=1400 audit(1781403463.791:5071): avc: denied { create } for pid=15236 comm="syz.1.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 618.506880][ T28] audit: type=1400 audit(1781403463.911:5072): avc: denied { map } for pid=15252 comm="syz.6.3445" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 618.564029][ T28] audit: type=1400 audit(1781403463.911:5073): avc: denied { execute } for pid=15252 comm="syz.6.3445" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 618.729901][ T28] audit: type=1326 audit(1781403464.121:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.6.3447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f023270ce59 code=0x0 [ 619.507345][T15287] netlink: 380 bytes leftover after parsing attributes in process `syz.1.3453'. [ 619.544926][T15286] -1: renamed from syzkaller0 [ 619.749480][T15294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.773104][T15294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.794329][T15296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3456'. [ 619.803539][T15294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.825715][T15294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.926658][T15303] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.933878][T15303] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.936683][T15287] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3453'. [ 619.967902][T15304] xt_hashlimit: size too large, truncated to 1048576 [ 620.082257][T15303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.091473][T15303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.285951][T15320] netlink: 'syz.5.3459': attribute type 21 has an invalid length. [ 620.397740][T15323] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 620.536153][T15287] netdevsim0€: renamed from ip6tnl0 (while UP) [ 620.546031][T15287] netdevsim0€: entered allmulticast mode [ 620.566983][T15306] batadv_slave_1: entered promiscuous mode [ 620.575728][T15305] batadv_slave_1: left promiscuous mode [ 620.582729][ T3439] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.601926][ T3439] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.623146][ T3439] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.641860][ T3439] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.653155][T15326] netlink: 'syz.1.3464': attribute type 1 has an invalid length. [ 620.676636][T15326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 621.063324][T15344] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 621.228540][T15359] FAULT_INJECTION: forcing a failure. [ 621.228540][T15359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.246980][T15359] CPU: 1 UID: 0 PID: 15359 Comm: syz.0.3475 Not tainted syzkaller #0 PREEMPT(lazy) [ 621.247080][T15359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 621.247093][T15359] Call Trace: [ 621.247101][T15359] [ 621.247110][T15359] __dump_stack+0x1d/0x30 [ 621.247136][T15359] dump_stack_lvl+0x95/0xd0 [ 621.247159][T15359] dump_stack+0x15/0x1b [ 621.247179][T15359] should_fail_ex+0x25e/0x270 [ 621.247233][T15359] should_fail+0xb/0x20 [ 621.247251][T15359] should_fail_usercopy+0x1a/0x20 [ 621.247274][T15359] _copy_from_iter+0xcc/0xe70 [ 621.247362][T15359] ? __alloc_skb+0x362/0x690 [ 621.247385][T15359] ? __alloc_skb+0x4f6/0x690 [ 621.247404][T15359] ? avc_has_perm+0x101/0x190 [ 621.247447][T15359] pfkey_sendmsg+0x121/0x970 [ 621.247489][T15359] ? avc_has_perm+0x101/0x190 [ 621.247527][T15359] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 621.247639][T15359] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 621.247687][T15359] ____sys_sendmsg+0x532/0x580 [ 621.247716][T15359] ___sys_sendmsg+0x195/0x1e0 [ 621.247760][T15359] __x64_sys_sendmsg+0xd4/0x160 [ 621.247789][T15359] x64_sys_call+0x194c/0x3020 [ 621.247814][T15359] do_syscall_64+0x136/0x3c0 [ 621.247917][T15359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.247941][T15359] RIP: 0033:0x7f339c48ce59 [ 621.247964][T15359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.247983][T15359] RSP: 002b:00007f339aedf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.248012][T15359] RAX: ffffffffffffffda RBX: 00007f339c705fa0 RCX: 00007f339c48ce59 [ 621.248026][T15359] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 621.248040][T15359] RBP: 00007f339aedf090 R08: 0000000000000000 R09: 0000000000000000 [ 621.248056][T15359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.248070][T15359] R13: 00007f339c706038 R14: 00007f339c705fa0 R15: 00007ffccee79f88 [ 621.248090][T15359] [ 621.553117][T15362] usb usb7: usbfs: process 15362 (syz.0.3477) did not claim interface 0 before use [ 622.384483][T15397] pim6reg: entered allmulticast mode [ 622.391575][T15397] pim6reg: left allmulticast mode [ 623.078606][T15434] vlan2: entered promiscuous mode [ 623.085272][T15434] bridge0: entered promiscuous mode [ 623.111140][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 623.111158][ T28] audit: type=1326 audit(1781403468.521:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15435 comm="syz.2.3503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 623.145424][ T28] audit: type=1326 audit(1781403468.521:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15435 comm="syz.2.3503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 623.175312][ T28] audit: type=1326 audit(1781403468.521:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15435 comm="syz.2.3503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 623.202231][ T28] audit: type=1326 audit(1781403468.521:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15435 comm="syz.2.3503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 623.230030][ T28] audit: type=1326 audit(1781403468.521:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15435 comm="syz.2.3503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 623.256195][ T28] audit: type=1326 audit(1781403468.521:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15435 comm="syz.2.3503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff25bb0cbc2 code=0x7ffc0000 [ 623.265819][T15444] xt_CT: You must specify a L4 protocol and not use inversions on it [ 623.292604][ T28] audit: type=1326 audit(1781403468.521:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15435 comm="syz.2.3503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff25bacd68e code=0x7ffc0000 [ 623.370505][ T9881] IPVS: starting estimator thread 0... [ 623.401989][ T28] audit: type=1326 audit(1781403468.521:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15435 comm="syz.2.3503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff25bb0cc87 code=0x7ffc0000 [ 623.427831][ T28] audit: type=1326 audit(1781403468.521:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15435 comm="syz.2.3503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff25bacd68e code=0x7ffc0000 [ 623.515751][ T28] audit: type=1326 audit(1781403468.521:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15435 comm="syz.2.3503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff25bacd68e code=0x7ffc0000 [ 623.924709][T15448] IPVS: using max 2832 ests per chain, 141600 per kthread [ 628.113725][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3525'. [ 628.236296][T15519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 628.883649][T15529] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 628.955303][ T28] kauditd_printk_skb: 375 callbacks suppressed [ 628.955323][ T28] audit: type=1400 audit(1781403474.361:5463): avc: denied { map } for pid=15527 comm="syz.6.3529" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 629.984084][ T28] audit: type=1326 audit(1781403474.921:5464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15549 comm="syz.2.3535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 630.106373][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3537'. [ 630.121168][ T28] audit: type=1326 audit(1781403474.921:5465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15549 comm="syz.2.3535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 630.223878][ T28] audit: type=1326 audit(1781403474.931:5466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15549 comm="syz.2.3535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 630.311348][ T28] audit: type=1326 audit(1781403474.931:5467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15549 comm="syz.2.3535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 630.541431][ T28] audit: type=1326 audit(1781403474.931:5468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15549 comm="syz.2.3535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 630.774849][ T28] audit: type=1326 audit(1781403474.941:5469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15549 comm="syz.2.3535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff25bb0cbc2 code=0x7ffc0000 [ 630.803520][ T28] audit: type=1326 audit(1781403475.171:5470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15549 comm="syz.2.3535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff25bacd68e code=0x7ffc0000 [ 630.829514][ T28] audit: type=1326 audit(1781403475.261:5471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15549 comm="syz.2.3535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff25bb0cc87 code=0x7ffc0000 [ 630.908166][ T28] audit: type=1326 audit(1781403475.271:5472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15549 comm="syz.2.3535" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff25bacd68e code=0x7ffc0000 [ 630.915456][T15582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3545'. [ 631.217867][T15600] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3553'. [ 631.234503][T15600] gretap0: entered promiscuous mode [ 631.277932][T15595] xt_socket: unknown flags 0x48 [ 631.320726][T15600] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3553'. [ 631.348534][T15600] 0ªî{X¹¦: renamed from gretap0 [ 631.387210][T15600] 0ªî{X¹¦: left promiscuous mode [ 631.392300][T15600] 0ªî{X¹¦: entered allmulticast mode [ 631.398318][T15600] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 632.392404][T15637] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 633.319747][T15657] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3572'. [ 633.369719][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3572'. [ 633.394334][T15660] xt_hashlimit: size too large, truncated to 1048576 [ 633.402926][T15657] macvtap1: entered allmulticast mode [ 633.413245][T15657] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 633.428057][T15657] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 633.456631][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3572'. [ 633.481135][T15663] team0: Port device team_slave_0 removed [ 633.742810][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3574'. [ 633.989336][T15674] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 634.410206][T15679] random: crng reseeded on system resumption [ 634.420437][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 634.420472][ T28] audit: type=1400 audit(1781403479.821:5580): avc: denied { read write } for pid=15678 comm="syz.2.3578" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 634.532441][T15683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3579'. [ 634.564576][ T28] audit: type=1400 audit(1781403479.821:5581): avc: denied { ioctl open } for pid=15678 comm="syz.2.3578" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 635.974611][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3588'. [ 636.127504][ T28] audit: type=1326 audit(1781403481.531:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.5.3587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53f77ce59 code=0x7ffc0000 [ 636.153185][ T28] audit: type=1326 audit(1781403481.531:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.5.3587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53f77ce59 code=0x7ffc0000 [ 636.180602][ T28] audit: type=1326 audit(1781403481.531:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.5.3587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53f77ce59 code=0x7ffc0000 [ 636.820499][ T28] audit: type=1326 audit(1781403481.531:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.5.3587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53f77ce59 code=0x7ffc0000 [ 637.107354][ T28] audit: type=1326 audit(1781403481.531:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.5.3587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa53f77ce59 code=0x7ffc0000 [ 637.154182][T15725] FAULT_INJECTION: forcing a failure. [ 637.154182][T15725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.167397][T15725] CPU: 0 UID: 0 PID: 15725 Comm: syz.0.3594 Not tainted syzkaller #0 PREEMPT(lazy) [ 637.167424][T15725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 637.167493][T15725] Call Trace: [ 637.167502][T15725] [ 637.167511][T15725] __dump_stack+0x1d/0x30 [ 637.167540][T15725] dump_stack_lvl+0x95/0xd0 [ 637.167612][T15725] dump_stack+0x15/0x1b [ 637.167630][T15725] should_fail_ex+0x25e/0x270 [ 637.167763][T15725] should_fail+0xb/0x20 [ 637.167779][T15725] should_fail_usercopy+0x1a/0x20 [ 637.167799][T15725] _copy_from_user+0x1c/0xb0 [ 637.167854][T15725] map_update_elem+0x3fa/0x6d0 [ 637.167882][T15725] __sys_bpf+0x5e1/0x7e0 [ 637.167912][T15725] __x64_sys_bpf+0x41/0x50 [ 637.167937][T15725] x64_sys_call+0x10cb/0x3020 [ 637.167994][T15725] do_syscall_64+0x136/0x3c0 [ 637.168031][T15725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.168064][T15725] RIP: 0033:0x7f339c48ce59 [ 637.168081][T15725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.168144][T15725] RSP: 002b:00007f339aedf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 637.168169][T15725] RAX: ffffffffffffffda RBX: 00007f339c705fa0 RCX: 00007f339c48ce59 [ 637.168186][T15725] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000002 [ 637.168210][T15725] RBP: 00007f339aedf090 R08: 0000000000000000 R09: 0000000000000000 [ 637.168226][T15725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.168241][T15725] R13: 00007f339c706038 R14: 00007f339c705fa0 R15: 00007ffccee79f88 [ 637.168264][T15725] [ 637.419178][ T28] audit: type=1326 audit(1781403481.531:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.5.3587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa53f77cbc2 code=0x7ffc0000 [ 638.021077][ T28] audit: type=1326 audit(1781403481.541:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.5.3587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa53f73d68e code=0x7ffc0000 [ 638.046424][ T28] audit: type=1326 audit(1781403481.541:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.5.3587" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa53f77cc87 code=0x7ffc0000 [ 638.122714][T15739] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 638.404526][T15749] program syz.0.3601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 638.885279][T15770] bond0: Error: CAN devices cannot be enslaved [ 639.400561][T15786] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 639.487724][T15779] xt_hashlimit: size too large, truncated to 1048576 [ 639.649066][T15784] xt_hashlimit: size too large, truncated to 1048576 [ 639.922961][T15775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.932237][T15775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.975780][ T360] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.984685][ T360] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.993559][ T360] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.008778][ T360] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.199927][T15799] netlink: 'syz.2.3617': attribute type 10 has an invalid length. [ 640.228455][T15799] team0 (unregistering): Port device team_slave_0 removed [ 640.249507][T15799] team0 (unregistering): Port device team_slave_1 removed [ 640.812458][T15837] program syz.5.3630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 640.823101][T15837] ucma_write: process 289 (syz.5.3630) changed security contexts after opening file descriptor, this is not allowed. [ 640.841432][T10163] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 641.091201][T15847] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 641.322206][T15879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3637'. [ 641.482641][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3641'. [ 641.566831][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 642.301003][T15920] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 642.442039][T15928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3661'. [ 642.574051][T15937] nftables ruleset with unbound set [ 642.597787][T15935] tipc: Started in network mode [ 642.623826][T15935] tipc: Node identity ac14140f, cluster identity 4711 [ 642.642676][T15935] tipc: New replicast peer: 255.255.255.255 [ 642.662649][T15935] tipc: Enabled bearer , priority 10 [ 642.877757][T15948] FAULT_INJECTION: forcing a failure. [ 642.877757][T15948] name failslab, interval 1, probability 0, space 0, times 0 [ 642.927684][T15948] CPU: 1 UID: 0 PID: 15948 Comm: syz.0.3669 Not tainted syzkaller #0 PREEMPT(lazy) [ 642.927720][T15948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 642.927810][T15948] Call Trace: [ 642.927816][T15948] [ 642.927824][T15948] __dump_stack+0x1d/0x30 [ 642.927852][T15948] dump_stack_lvl+0x95/0xd0 [ 642.927884][T15948] dump_stack+0x15/0x1b [ 642.927904][T15948] should_fail_ex+0x25e/0x270 [ 642.927939][T15948] should_failslab+0x8c/0xb0 [ 642.927970][T15948] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 642.928089][T15948] ? register_pidns_sysctls+0x46/0x130 [ 642.928114][T15948] kmemdup_noprof+0x2b/0x70 [ 642.928142][T15948] register_pidns_sysctls+0x46/0x130 [ 642.928164][T15948] copy_pid_ns+0x396/0x640 [ 642.928218][T15948] create_new_namespaces+0x168/0x420 [ 642.928248][T15948] unshare_nsproxy_namespaces+0x115/0x150 [ 642.928278][T15948] ksys_unshare+0x411/0x760 [ 642.928388][T15948] __x64_sys_unshare+0x1f/0x30 [ 642.928412][T15948] x64_sys_call+0x1cef/0x3020 [ 642.928483][T15948] do_syscall_64+0x136/0x3c0 [ 642.928515][T15948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.928538][T15948] RIP: 0033:0x7f339c48ce59 [ 642.928556][T15948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.928651][T15948] RSP: 002b:00007f339aedf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 642.928675][T15948] RAX: ffffffffffffffda RBX: 00007f339c705fa0 RCX: 00007f339c48ce59 [ 642.928690][T15948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 642.928703][T15948] RBP: 00007f339aedf090 R08: 0000000000000000 R09: 0000000000000000 [ 642.928717][T15948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.928731][T15948] R13: 00007f339c706038 R14: 00007f339c705fa0 R15: 00007ffccee79f88 [ 642.928761][T15948] [ 643.176380][T15957] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 643.220828][T15961] netlink: 'syz.6.3672': attribute type 16 has an invalid length. [ 643.305202][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3674'. [ 643.730048][ T9881] tipc: Node number set to 2886997007 [ 643.864230][T15981] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 643.900440][T15979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=15979 comm=syz.6.3677 [ 644.162170][T15996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 644.185722][T15996] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 645.050369][T16004] netlink: 'syz.6.3683': attribute type 16 has an invalid length. [ 645.247502][T16008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.255970][T16008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.292328][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 645.292346][ T28] audit: type=1400 audit(1781403490.651:5658): avc: denied { write } for pid=16007 comm="syz.6.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 645.333847][ T28] audit: type=1326 audit(1781403490.701:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.0.3686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 645.386855][ T28] audit: type=1326 audit(1781403490.771:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.0.3686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 645.413748][ T28] audit: type=1326 audit(1781403490.771:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.0.3686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 645.531515][ T28] audit: type=1326 audit(1781403490.771:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.0.3686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f339c44d68e code=0x7ffc0000 [ 645.569749][T16014] vti0: entered allmulticast mode [ 645.692155][ T28] audit: type=1326 audit(1781403490.771:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.0.3686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 645.720207][ T28] audit: type=1326 audit(1781403490.771:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.0.3686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 645.745874][ T28] audit: type=1326 audit(1781403490.771:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.0.3686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 645.773019][ T28] audit: type=1326 audit(1781403490.771:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.0.3686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 645.798600][ T28] audit: type=1326 audit(1781403490.851:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.0.3686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 646.159391][T16022] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 646.358676][T16038] can0: slcan on ttyS3. [ 646.420366][T16041] can0 (unregistered): slcan off ttyS3. [ 646.593158][ T3439] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.602072][ T3439] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.611058][ T3439] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.620218][ T3439] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.689409][T16059] vhci_hcd vhci_hcd.0: default hub control req: 0406 v000c i0000 l0 [ 646.907112][T16061] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 647.626078][T16106] netlink: 'syz.1.3719': attribute type 1 has an invalid length. [ 647.647100][T16106] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3719'. [ 647.720028][T16104] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 647.801834][T16119] FAULT_INJECTION: forcing a failure. [ 647.801834][T16119] name failslab, interval 1, probability 0, space 0, times 0 [ 647.818829][T16122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3725'. [ 647.823948][T16119] CPU: 1 UID: 0 PID: 16119 Comm: syz.0.3724 Not tainted syzkaller #0 PREEMPT(lazy) [ 647.824083][T16119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 647.824096][T16119] Call Trace: [ 647.824103][T16119] [ 647.824112][T16119] __dump_stack+0x1d/0x30 [ 647.824138][T16119] dump_stack_lvl+0x95/0xd0 [ 647.824173][T16119] dump_stack+0x15/0x1b [ 647.824201][T16119] should_fail_ex+0x25e/0x270 [ 647.824235][T16119] should_failslab+0x8c/0xb0 [ 647.824309][T16119] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 647.824400][T16119] ? __alloc_skb+0x2d6/0x690 [ 647.824430][T16119] __alloc_skb+0x2d6/0x690 [ 647.824450][T16119] ? __alloc_skb+0x200/0x690 [ 647.824469][T16119] rtmsg_fib+0x99/0x230 [ 647.824502][T16119] fib_table_delete+0x68f/0x740 [ 647.824537][T16119] fib_magic+0x233/0x270 [ 647.824565][T16119] fib_del_ifaddr+0x908/0xa90 [ 647.824597][T16119] ? addr_event+0x235/0x270 [ 647.824665][T16119] fib_inetaddr_event+0x76/0x1e0 [ 647.824691][T16119] ? __pfx_fib_inetaddr_event+0x10/0x10 [ 647.824717][T16119] blocking_notifier_call_chain+0x9b/0x1e0 [ 647.824776][T16119] __inet_del_ifa+0x45d/0x710 [ 647.824801][T16119] devinet_ioctl+0xe38/0xfa0 [ 647.824887][T16119] inet_ioctl+0x2f8/0x3a0 [ 647.824916][T16119] sock_do_ioctl+0x73/0x230 [ 647.824956][T16119] sock_ioctl+0x439/0x610 [ 647.825040][T16119] ? mutex_lock+0x57/0x90 [ 647.825064][T16119] ? __pfx_sock_ioctl+0x10/0x10 [ 647.825090][T16119] __se_sys_ioctl+0xce/0x140 [ 647.825119][T16119] __x64_sys_ioctl+0x43/0x50 [ 647.825203][T16119] x64_sys_call+0x1563/0x3020 [ 647.825228][T16119] do_syscall_64+0x136/0x3c0 [ 647.825258][T16119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.825303][T16119] RIP: 0033:0x7f339c48ce59 [ 647.825320][T16119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.825416][T16119] RSP: 002b:00007f339aedf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.825438][T16119] RAX: ffffffffffffffda RBX: 00007f339c705fa0 RCX: 00007f339c48ce59 [ 647.825453][T16119] RDX: 0000200000000040 RSI: 0000000000008918 RDI: 0000000000000003 [ 647.825467][T16119] RBP: 00007f339aedf090 R08: 0000000000000000 R09: 0000000000000000 [ 647.825481][T16119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.825496][T16119] R13: 00007f339c706038 R14: 00007f339c705fa0 R15: 00007ffccee79f88 [ 647.825516][T16119] [ 648.488312][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa41800: rx timeout, send abort [ 648.889325][T16153] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3734'. [ 648.987975][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881022dac00: rx timeout, send abort [ 648.997999][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa41800: abort rx timeout. Force session deactivation [ 649.190496][T16149] 9p: Bad value for 'rfdno' [ 649.383688][T16172] netlink: 'syz.6.3740': attribute type 1 has an invalid length. [ 649.398962][T16172] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3740'. [ 649.496263][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881022dac00: abort rx timeout. Force session deactivation [ 649.531883][T16167] xt_hashlimit: size too large, truncated to 1048576 [ 649.611347][T16164] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 650.044526][T16184] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1107 sclass=netlink_xfrm_socket pid=16184 comm=syz.5.3745 [ 650.070037][T16196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.075296][T16184] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1011 sclass=netlink_xfrm_socket pid=16184 comm=syz.5.3745 [ 650.078539][T16196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.121632][T16210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3751'. [ 651.415785][T16217] FAULT_INJECTION: forcing a failure. [ 651.415785][T16217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.437980][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3753'. [ 651.505540][T16217] CPU: 0 UID: 0 PID: 16217 Comm: syz.1.3754 Not tainted syzkaller #0 PREEMPT(lazy) [ 651.505588][T16217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 651.505603][T16217] Call Trace: [ 651.505610][T16217] [ 651.505619][T16217] __dump_stack+0x1d/0x30 [ 651.505643][T16217] dump_stack_lvl+0x95/0xd0 [ 651.505684][T16217] dump_stack+0x15/0x1b [ 651.505707][T16217] should_fail_ex+0x25e/0x270 [ 651.505819][T16217] should_fail+0xb/0x20 [ 651.505835][T16217] should_fail_usercopy+0x1a/0x20 [ 651.505928][T16217] _copy_from_iter+0xcc/0xe70 [ 651.506029][T16217] ? __alloc_skb+0x4f6/0x690 [ 651.506052][T16217] ? __alloc_skb+0x200/0x690 [ 651.506140][T16217] netlink_sendmsg+0x4a4/0x6f0 [ 651.506171][T16217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.506243][T16217] ____sys_sendmsg+0x532/0x580 [ 651.506271][T16217] ___sys_sendmsg+0x195/0x1e0 [ 651.506416][T16217] __x64_sys_sendmsg+0xd4/0x160 [ 651.506441][T16217] x64_sys_call+0x194c/0x3020 [ 651.506491][T16217] do_syscall_64+0x136/0x3c0 [ 651.506560][T16217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.506584][T16217] RIP: 0033:0x7ffb7a0fce59 [ 651.506603][T16217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.506623][T16217] RSP: 002b:00007ffb78b4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.506644][T16217] RAX: ffffffffffffffda RBX: 00007ffb7a375fa0 RCX: 00007ffb7a0fce59 [ 651.506713][T16217] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 651.506729][T16217] RBP: 00007ffb78b4f090 R08: 0000000000000000 R09: 0000000000000000 [ 651.506744][T16217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.506759][T16217] R13: 00007ffb7a376038 R14: 00007ffb7a375fa0 R15: 00007ffeadfa2f68 [ 651.506782][T16217] [ 651.731469][T16214] bond1: option resend_igmp: invalid value (18446744073702249343) [ 651.739562][T16214] bond1: option resend_igmp: allowed values 0 - 255 [ 651.758197][T16214] bond1 (unregistering): Released all slaves [ 652.387354][T16237] xt_hashlimit: size too large, truncated to 1048576 [ 652.915898][T16259] random: crng reseeded on system resumption [ 653.331984][T16277] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3771'. [ 653.358494][T16279] tmpfs: Unknown parameter 'rootcontext—|Ñ' [ 653.428645][T16286] xt_CT: You must specify a L4 protocol and not use inversions on it [ 653.456211][T16288] FAULT_INJECTION: forcing a failure. [ 653.456211][T16288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.477956][T16288] CPU: 0 UID: 0 PID: 16288 Comm: syz.5.3773 Not tainted syzkaller #0 PREEMPT(lazy) [ 653.477986][T16288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 653.477998][T16288] Call Trace: [ 653.478004][T16288] [ 653.478012][T16288] __dump_stack+0x1d/0x30 [ 653.478036][T16288] dump_stack_lvl+0x95/0xd0 [ 653.478127][T16288] dump_stack+0x15/0x1b [ 653.478220][T16288] should_fail_ex+0x25e/0x270 [ 653.478255][T16288] should_fail+0xb/0x20 [ 653.478275][T16288] should_fail_usercopy+0x1a/0x20 [ 653.478332][T16288] _copy_from_user+0x1c/0xb0 [ 653.478355][T16288] do_ipt_set_ctl+0x39e/0x8d0 [ 653.478378][T16288] ? _raw_spin_lock_bh+0x56/0xb0 [ 653.478418][T16288] nf_setsockopt+0x199/0x1b0 [ 653.478495][T16288] ip_setsockopt+0x102/0x110 [ 653.478523][T16288] tcp_setsockopt+0x98/0xb0 [ 653.478555][T16288] sock_common_setsockopt+0x69/0x80 [ 653.478592][T16288] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 653.478698][T16288] __sys_setsockopt+0x184/0x200 [ 653.478724][T16288] __x64_sys_setsockopt+0x64/0x80 [ 653.478751][T16288] x64_sys_call+0x2327/0x3020 [ 653.478779][T16288] do_syscall_64+0x136/0x3c0 [ 653.478809][T16288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.478886][T16288] RIP: 0033:0x7fa53f77ce59 [ 653.478906][T16288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.478928][T16288] RSP: 002b:00007fa53e1ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 653.478953][T16288] RAX: ffffffffffffffda RBX: 00007fa53f9f6090 RCX: 00007fa53f77ce59 [ 653.479030][T16288] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 653.479045][T16288] RBP: 00007fa53e1ae090 R08: 0000000000000480 R09: 0000000000000000 [ 653.479061][T16288] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 653.479076][T16288] R13: 00007fa53f9f6128 R14: 00007fa53f9f6090 R15: 00007fff6d9c9428 [ 653.479099][T16288] [ 653.506153][ T9876] IPVS: starting estimator thread 0... [ 653.517294][T16286] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 653.629992][T16293] IPVS: using max 2736 ests per chain, 136800 per kthread [ 653.805319][T16300] veth1_to_bond: entered allmulticast mode [ 653.829382][T16305] FAULT_INJECTION: forcing a failure. [ 653.829382][T16305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.853958][T16305] CPU: 0 UID: 0 PID: 16305 Comm: syz.0.3779 Not tainted syzkaller #0 PREEMPT(lazy) [ 653.854054][T16305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 653.854140][T16305] Call Trace: [ 653.854148][T16305] [ 653.854156][T16305] __dump_stack+0x1d/0x30 [ 653.854183][T16305] dump_stack_lvl+0x95/0xd0 [ 653.854216][T16305] dump_stack+0x15/0x1b [ 653.854234][T16305] should_fail_ex+0x25e/0x270 [ 653.854318][T16305] should_fail+0xb/0x20 [ 653.854337][T16305] should_fail_usercopy+0x1a/0x20 [ 653.854362][T16305] _copy_from_user+0x1c/0xb0 [ 653.854460][T16305] packet_setsockopt+0x76e/0xfd0 [ 653.854496][T16305] ? __pfx_packet_setsockopt+0x10/0x10 [ 653.854570][T16305] __sys_setsockopt+0x184/0x200 [ 653.854597][T16305] __x64_sys_setsockopt+0x64/0x80 [ 653.854623][T16305] x64_sys_call+0x2327/0x3020 [ 653.854694][T16305] do_syscall_64+0x136/0x3c0 [ 653.854727][T16305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.854789][T16305] RIP: 0033:0x7f339c48ce59 [ 653.854809][T16305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.854830][T16305] RSP: 002b:00007f339aebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 653.854854][T16305] RAX: ffffffffffffffda RBX: 00007f339c706090 RCX: 00007f339c48ce59 [ 653.854941][T16305] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 653.854956][T16305] RBP: 00007f339aebe090 R08: 0000000000000010 R09: 0000000000000000 [ 653.854970][T16305] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 653.854983][T16305] R13: 00007f339c706128 R14: 00007f339c706090 R15: 00007ffccee79f88 [ 653.855001][T16305] [ 653.856206][T16299] veth1_to_bond: left allmulticast mode [ 654.348560][T16319] syzkaller0: entered promiscuous mode [ 654.368688][T16319] syzkaller0: entered allmulticast mode [ 654.541932][T16323] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 654.587966][ T28] kauditd_printk_skb: 203 callbacks suppressed [ 654.588054][ T28] audit: type=1400 audit(1781403499.991:5871): avc: denied { create } for pid=16327 comm="syz.2.3786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 654.623693][ T28] audit: type=1400 audit(1781403500.031:5872): avc: denied { remount } for pid=16312 comm="syz.5.3781" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 654.663607][T16337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16337 comm=syz.1.3788 [ 654.688012][T16337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16337 comm=syz.1.3788 [ 654.702607][T16337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16337 comm=syz.1.3788 [ 654.872740][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3788'. [ 654.946722][ T28] audit: type=1400 audit(1781403500.351:5873): avc: denied { read } for pid=16344 comm="syz.2.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 655.019139][T16353] netlink: 'syz.2.3792': attribute type 10 has an invalid length. [ 655.057453][T16353] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 655.821406][T16368] netlink: 'syz.2.3798': attribute type 1 has an invalid length. [ 655.898179][T16368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 655.931408][T16368] bond1: (slave veth5): Enslaving as an active interface with a down link [ 655.951646][T16368] bond2: entered allmulticast mode [ 655.957510][T16368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 655.966266][T16368] bond1: (slave bond2): Enslaving as an active interface with a down link [ 656.122896][T16392] FAULT_INJECTION: forcing a failure. [ 656.122896][T16392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.146228][T16392] CPU: 1 UID: 0 PID: 16392 Comm: syz.6.3804 Not tainted syzkaller #0 PREEMPT(lazy) [ 656.146261][T16392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 656.146285][T16392] Call Trace: [ 656.146293][T16392] [ 656.146301][T16392] __dump_stack+0x1d/0x30 [ 656.146327][T16392] dump_stack_lvl+0x95/0xd0 [ 656.146350][T16392] dump_stack+0x15/0x1b [ 656.146372][T16392] should_fail_ex+0x25e/0x270 [ 656.146466][T16392] should_fail+0xb/0x20 [ 656.146524][T16392] should_fail_usercopy+0x1a/0x20 [ 656.146547][T16392] _copy_from_user+0x1c/0xb0 [ 656.146594][T16392] __sys_bpf+0x183/0x7e0 [ 656.146629][T16392] __x64_sys_bpf+0x41/0x50 [ 656.146721][T16392] x64_sys_call+0x10cb/0x3020 [ 656.146747][T16392] do_syscall_64+0x136/0x3c0 [ 656.146782][T16392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.146853][T16392] RIP: 0033:0x7f023270ce59 [ 656.146870][T16392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.146887][T16392] RSP: 002b:00007f0231167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 656.146910][T16392] RAX: ffffffffffffffda RBX: 00007f0232985fa0 RCX: 00007f023270ce59 [ 656.146927][T16392] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 000000000000001c [ 656.146943][T16392] RBP: 00007f0231167090 R08: 0000000000000000 R09: 0000000000000000 [ 656.147005][T16392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.147020][T16392] R13: 00007f0232986038 R14: 00007f0232985fa0 R15: 00007ffc7e798988 [ 656.147041][T16392] [ 656.342873][ T28] audit: type=1400 audit(1781403501.491:5874): avc: denied { listen } for pid=16366 comm="syz.0.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 656.469510][T16389] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 657.104386][T16407] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 657.114317][ T28] audit: type=1400 audit(1781403502.511:5875): avc: denied { load_policy } for pid=16401 comm="syz.6.3808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 657.162448][T16407] SELinux: failed to load policy [ 657.598843][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3808'. [ 657.872760][T16425] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 657.957810][ T28] audit: type=1400 audit(1781403503.364:5876): avc: denied { associate } for pid=16424 comm="syz.2.3812" name="cgroup.procs" dev="cgroup" ino=249 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 658.101493][T16438] bridge_slave_0: default FDB implementation only supports local addresses [ 658.201283][T16441] syzkaller0: entered promiscuous mode [ 658.218921][T16441] syzkaller0: entered allmulticast mode [ 658.358949][T16442] sctp: [Deprecated]: syz.5.3815 (pid 16442) Use of int in max_burst socket option deprecated. [ 658.358949][T16442] Use struct sctp_assoc_value instead [ 658.553119][T16447] xt_hashlimit: size too large, truncated to 1048576 [ 658.756513][T16455] FAULT_INJECTION: forcing a failure. [ 658.756513][T16455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.772951][T16455] CPU: 1 UID: 0 PID: 16455 Comm: syz.6.3820 Not tainted syzkaller #0 PREEMPT(lazy) [ 658.772991][T16455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 658.773054][T16455] Call Trace: [ 658.773062][T16455] [ 658.773071][T16455] __dump_stack+0x1d/0x30 [ 658.773179][T16455] dump_stack_lvl+0x95/0xd0 [ 658.773215][T16455] dump_stack+0x15/0x1b [ 658.773294][T16455] should_fail_ex+0x25e/0x270 [ 658.773381][T16455] should_fail+0xb/0x20 [ 658.773453][T16455] should_fail_usercopy+0x1a/0x20 [ 658.773479][T16455] _copy_from_user+0x1c/0xb0 [ 658.773502][T16455] ___sys_sendmsg+0xc1/0x1e0 [ 658.773538][T16455] __sys_sendmmsg+0x185/0x320 [ 658.773603][T16455] __x64_sys_sendmmsg+0x57/0x70 [ 658.773650][T16455] x64_sys_call+0x27aa/0x3020 [ 658.773673][T16455] do_syscall_64+0x136/0x3c0 [ 658.773764][T16455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.773789][T16455] RIP: 0033:0x7f023270ce59 [ 658.773847][T16455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.773870][T16455] RSP: 002b:00007f0231167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 658.773896][T16455] RAX: ffffffffffffffda RBX: 00007f0232985fa0 RCX: 00007f023270ce59 [ 658.773910][T16455] RDX: 0000000000068000 RSI: 0000200000000f40 RDI: 0000000000000003 [ 658.773923][T16455] RBP: 00007f0231167090 R08: 0000000000000000 R09: 0000000000000000 [ 658.774101][T16455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.774117][T16455] R13: 00007f0232986038 R14: 00007f0232985fa0 R15: 00007ffc7e798988 [ 658.774211][T16455] [ 659.208177][T16458] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 659.272563][T16478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 659.281454][T16478] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 659.578297][T16484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3830'. [ 659.937974][T16521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 659.944035][T16523] veth1_to_batadv: entered promiscuous mode [ 659.955773][T16523] veth1_to_batadv (unregistering): left promiscuous mode [ 659.970579][T16521] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 659.982857][T16523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.065219][T16526] syz_tun: entered allmulticast mode [ 660.070731][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3839'. [ 660.106474][T16529] 9p: Bad value for 'rfdno' [ 660.158346][T16525] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 660.280624][T16522] syz_tun: left allmulticast mode [ 660.285786][ T28] audit: type=1400 audit(1781403505.693:5877): avc: denied { write } for pid=16533 comm="syz.5.3845" path="socket:[53221]" dev="sockfs" ino=53221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 660.319285][ T28] audit: type=1400 audit(1781403505.693:5878): avc: denied { nlmsg_read } for pid=16533 comm="syz.5.3845" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 660.351269][ T28] audit: type=1400 audit(1781403505.753:5879): avc: denied { ioctl } for pid=16533 comm="syz.5.3845" path="socket:[53221]" dev="sockfs" ino=53221 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 660.397562][T16541] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 660.403529][ T28] audit: type=1400 audit(1781403505.753:5880): avc: denied { getopt } for pid=16533 comm="syz.5.3845" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 660.448771][ T28] audit: type=1400 audit(1781403505.763:5881): avc: denied { setattr } for pid=16533 comm="syz.5.3845" name="NETLINK" dev="sockfs" ino=53234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 660.451319][T16541] bond3 (unregistering): Released all slaves [ 660.493649][T16544] FAULT_INJECTION: forcing a failure. [ 660.493649][T16544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.508606][ T28] audit: type=1400 audit(1781403505.763:5882): avc: denied { create } for pid=16533 comm="syz.5.3845" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rose_socket permissive=1 [ 660.518441][T16544] CPU: 0 UID: 0 PID: 16544 Comm: syz.0.3846 Not tainted syzkaller #0 PREEMPT(lazy) [ 660.518471][T16544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 660.518484][T16544] Call Trace: [ 660.518490][T16544] [ 660.518498][T16544] __dump_stack+0x1d/0x30 [ 660.518523][T16544] dump_stack_lvl+0x95/0xd0 [ 660.518602][T16544] dump_stack+0x15/0x1b [ 660.518621][T16544] should_fail_ex+0x25e/0x270 [ 660.518677][T16544] should_fail+0xb/0x20 [ 660.518747][T16544] should_fail_usercopy+0x1a/0x20 [ 660.518768][T16544] _copy_from_user+0x1c/0xb0 [ 660.518859][T16544] ___sys_sendmsg+0xc1/0x1e0 [ 660.518910][T16544] __x64_sys_sendmsg+0xd4/0x160 [ 660.518937][T16544] x64_sys_call+0x194c/0x3020 [ 660.518961][T16544] do_syscall_64+0x136/0x3c0 [ 660.518991][T16544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.519028][T16544] RIP: 0033:0x7f339c48ce59 [ 660.519046][T16544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.519141][T16544] RSP: 002b:00007f339aebe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.519174][T16544] RAX: ffffffffffffffda RBX: 00007f339c706090 RCX: 00007f339c48ce59 [ 660.519189][T16544] RDX: 0000000000008000 RSI: 0000200000000500 RDI: 0000000000000006 [ 660.519259][T16544] RBP: 00007f339aebe090 R08: 0000000000000000 R09: 0000000000000000 [ 660.519273][T16544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.519325][T16544] R13: 00007f339c706128 R14: 00007f339c706090 R15: 00007ffccee79f88 [ 660.519345][T16544] [ 661.336194][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3854'. [ 661.378614][T16570] FAULT_INJECTION: forcing a failure. [ 661.378614][T16570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.391801][T16570] CPU: 0 UID: 0 PID: 16570 Comm: syz.2.3856 Not tainted syzkaller #0 PREEMPT(lazy) [ 661.391833][T16570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 661.391845][T16570] Call Trace: [ 661.391852][T16570] [ 661.391930][T16570] __dump_stack+0x1d/0x30 [ 661.391964][T16570] dump_stack_lvl+0x95/0xd0 [ 661.391983][T16570] dump_stack+0x15/0x1b [ 661.392019][T16570] should_fail_ex+0x25e/0x270 [ 661.392064][T16570] should_fail+0xb/0x20 [ 661.392084][T16570] should_fail_usercopy+0x1a/0x20 [ 661.392105][T16570] _copy_from_user+0x1c/0xb0 [ 661.392127][T16570] ___sys_sendmsg+0xc1/0x1e0 [ 661.392241][T16570] __x64_sys_sendmsg+0xd4/0x160 [ 661.392273][T16570] x64_sys_call+0x194c/0x3020 [ 661.392295][T16570] do_syscall_64+0x136/0x3c0 [ 661.392373][T16570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.392396][T16570] RIP: 0033:0x7ff25bb0ce59 [ 661.392416][T16570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.392438][T16570] RSP: 002b:00007ff25a567028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.392592][T16570] RAX: ffffffffffffffda RBX: 00007ff25bd85fa0 RCX: 00007ff25bb0ce59 [ 661.392607][T16570] RDX: 0000000004000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 661.392632][T16570] RBP: 00007ff25a567090 R08: 0000000000000000 R09: 0000000000000000 [ 661.392647][T16570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.392662][T16570] R13: 00007ff25bd86038 R14: 00007ff25bd85fa0 R15: 00007ffdec5ed408 [ 661.392685][T16570] [ 661.702257][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3857'. [ 661.712219][T16576] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3857'. [ 661.944205][T16587] FAULT_INJECTION: forcing a failure. [ 661.944205][T16587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.964450][T16587] CPU: 0 UID: 0 PID: 16587 Comm: syz.2.3862 Not tainted syzkaller #0 PREEMPT(lazy) [ 661.964591][T16587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 661.964604][T16587] Call Trace: [ 661.964611][T16587] [ 661.964619][T16587] __dump_stack+0x1d/0x30 [ 661.964643][T16587] dump_stack_lvl+0x95/0xd0 [ 661.964667][T16587] dump_stack+0x15/0x1b [ 661.964690][T16587] should_fail_ex+0x25e/0x270 [ 661.964747][T16587] should_fail+0xb/0x20 [ 661.964765][T16587] should_fail_usercopy+0x1a/0x20 [ 661.964846][T16587] _copy_from_user+0x1c/0xb0 [ 661.964868][T16587] __sys_bpf+0x183/0x7e0 [ 661.964899][T16587] __x64_sys_bpf+0x41/0x50 [ 661.964924][T16587] x64_sys_call+0x10cb/0x3020 [ 661.964952][T16587] do_syscall_64+0x136/0x3c0 [ 661.965071][T16587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.965097][T16587] RIP: 0033:0x7ff25bb0ce59 [ 661.965118][T16587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.965139][T16587] RSP: 002b:00007ff25a567028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 661.965220][T16587] RAX: ffffffffffffffda RBX: 00007ff25bd85fa0 RCX: 00007ff25bb0ce59 [ 661.965234][T16587] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 661.965296][T16587] RBP: 00007ff25a567090 R08: 0000000000000000 R09: 0000000000000000 [ 661.965309][T16587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.965323][T16587] R13: 00007ff25bd86038 R14: 00007ff25bd85fa0 R15: 00007ffdec5ed408 [ 661.965347][T16587] [ 662.270997][T16590] FAULT_INJECTION: forcing a failure. [ 662.270997][T16590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.299826][T16590] CPU: 0 UID: 0 PID: 16590 Comm: syz.6.3863 Not tainted syzkaller #0 PREEMPT(lazy) [ 662.299858][T16590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 662.299870][T16590] Call Trace: [ 662.299876][T16590] [ 662.299943][T16590] __dump_stack+0x1d/0x30 [ 662.300050][T16590] dump_stack_lvl+0x95/0xd0 [ 662.300070][T16590] dump_stack+0x15/0x1b [ 662.300129][T16590] should_fail_ex+0x25e/0x270 [ 662.300161][T16590] should_fail+0xb/0x20 [ 662.300191][T16590] should_fail_usercopy+0x1a/0x20 [ 662.300218][T16590] _copy_from_user+0x1c/0xb0 [ 662.300244][T16590] ___sys_sendmsg+0xc1/0x1e0 [ 662.300277][T16590] __x64_sys_sendmsg+0xd4/0x160 [ 662.300308][T16590] x64_sys_call+0x194c/0x3020 [ 662.300342][T16590] do_syscall_64+0x136/0x3c0 [ 662.300375][T16590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.300460][T16590] RIP: 0033:0x7f023270ce59 [ 662.300476][T16590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.300498][T16590] RSP: 002b:00007f0231167028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.300527][T16590] RAX: ffffffffffffffda RBX: 00007f0232985fa0 RCX: 00007f023270ce59 [ 662.300584][T16590] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 662.300600][T16590] RBP: 00007f0231167090 R08: 0000000000000000 R09: 0000000000000000 [ 662.300615][T16590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.300631][T16590] R13: 00007f0232986038 R14: 00007f0232985fa0 R15: 00007ffc7e798988 [ 662.300653][T16590] [ 662.738024][T16598] FAULT_INJECTION: forcing a failure. [ 662.738024][T16598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.751373][T16598] CPU: 0 UID: 0 PID: 16598 Comm: syz.6.3865 Not tainted syzkaller #0 PREEMPT(lazy) [ 662.751402][T16598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 662.751415][T16598] Call Trace: [ 662.751422][T16598] [ 662.751431][T16598] __dump_stack+0x1d/0x30 [ 662.751460][T16598] dump_stack_lvl+0x95/0xd0 [ 662.751486][T16598] dump_stack+0x15/0x1b [ 662.751584][T16598] should_fail_ex+0x25e/0x270 [ 662.751670][T16598] should_fail+0xb/0x20 [ 662.751691][T16598] should_fail_usercopy+0x1a/0x20 [ 662.751711][T16598] _copy_from_user+0x1c/0xb0 [ 662.751810][T16598] memdup_user+0x5e/0xd0 [ 662.751889][T16598] __se_sys_kexec_load+0x109/0x160 [ 662.751916][T16598] __x64_sys_kexec_load+0x55/0x70 [ 662.751947][T16598] x64_sys_call+0x16c0/0x3020 [ 662.751976][T16598] do_syscall_64+0x136/0x3c0 [ 662.752008][T16598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.752094][T16598] RIP: 0033:0x7f023270ce59 [ 662.752145][T16598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.752186][T16598] RSP: 002b:00007f0231125028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 662.752285][T16598] RAX: ffffffffffffffda RBX: 00007f0232986180 RCX: 00007f023270ce59 [ 662.752302][T16598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 662.752318][T16598] RBP: 00007f0231125090 R08: 0000000000000000 R09: 0000000000000000 [ 662.752334][T16598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.752350][T16598] R13: 00007f0232986218 R14: 00007f0232986180 R15: 00007ffc7e798988 [ 662.752373][T16598] [ 665.793566][T16610] FAULT_INJECTION: forcing a failure. [ 665.793566][T16610] name failslab, interval 1, probability 0, space 0, times 0 [ 665.819392][T16610] CPU: 1 UID: 0 PID: 16610 Comm: syz.2.3869 Not tainted syzkaller #0 PREEMPT(lazy) [ 665.819421][T16610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 665.819437][T16610] Call Trace: [ 665.819444][T16610] [ 665.819453][T16610] __dump_stack+0x1d/0x30 [ 665.819480][T16610] dump_stack_lvl+0x95/0xd0 [ 665.819514][T16610] dump_stack+0x15/0x1b [ 665.819533][T16610] should_fail_ex+0x25e/0x270 [ 665.819571][T16610] should_failslab+0x8c/0xb0 [ 665.819669][T16610] kmem_cache_alloc_noprof+0x66/0x3f0 [ 665.819764][T16610] ? do_getname+0x2e/0x1c0 [ 665.819835][T16610] ? __fget_files+0x184/0x1c0 [ 665.819857][T16610] do_getname+0x2e/0x1c0 [ 665.819875][T16610] getname_flags+0x1d/0x30 [ 665.819895][T16610] ksys_truncate+0x51/0x140 [ 665.819929][T16610] __x64_sys_truncate+0x31/0x40 [ 665.819999][T16610] x64_sys_call+0x19fb/0x3020 [ 665.820027][T16610] do_syscall_64+0x136/0x3c0 [ 665.820076][T16610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.820118][T16610] RIP: 0033:0x7ff25bb0ce59 [ 665.820147][T16610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.820210][T16610] RSP: 002b:00007ff25a567028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 665.820233][T16610] RAX: ffffffffffffffda RBX: 00007ff25bd85fa0 RCX: 00007ff25bb0ce59 [ 665.820246][T16610] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00002000000000c0 [ 665.820260][T16610] RBP: 00007ff25a567090 R08: 0000000000000000 R09: 0000000000000000 [ 665.820275][T16610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.820291][T16610] R13: 00007ff25bd86038 R14: 00007ff25bd85fa0 R15: 00007ffdec5ed408 [ 665.820360][T16610] [ 666.074569][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3867'. [ 666.383645][T16630] xt_hashlimit: size too large, truncated to 1048576 [ 666.444117][T16634] FAULT_INJECTION: forcing a failure. [ 666.444117][T16634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.512061][T16634] CPU: 0 UID: 0 PID: 16634 Comm: syz.1.3874 Not tainted syzkaller #0 PREEMPT(lazy) [ 666.512143][T16634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 666.512157][T16634] Call Trace: [ 666.512165][T16634] [ 666.512174][T16634] __dump_stack+0x1d/0x30 [ 666.512206][T16634] dump_stack_lvl+0x95/0xd0 [ 666.512226][T16634] dump_stack+0x15/0x1b [ 666.512329][T16634] should_fail_ex+0x25e/0x270 [ 666.512365][T16634] should_fail+0xb/0x20 [ 666.512411][T16634] should_fail_usercopy+0x1a/0x20 [ 666.512435][T16634] _copy_from_user+0x1c/0xb0 [ 666.512457][T16634] ___sys_sendmsg+0xc1/0x1e0 [ 666.512490][T16634] __x64_sys_sendmsg+0xd4/0x160 [ 666.512640][T16634] x64_sys_call+0x194c/0x3020 [ 666.512669][T16634] do_syscall_64+0x136/0x3c0 [ 666.512719][T16634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.512741][T16634] RIP: 0033:0x7ffb7a0fce59 [ 666.512758][T16634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.512779][T16634] RSP: 002b:00007ffb78b2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.512855][T16634] RAX: ffffffffffffffda RBX: 00007ffb7a376090 RCX: 00007ffb7a0fce59 [ 666.512872][T16634] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 666.512888][T16634] RBP: 00007ffb78b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 666.512904][T16634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.512919][T16634] R13: 00007ffb7a376128 R14: 00007ffb7a376090 R15: 00007ffeadfa2f68 [ 666.512937][T16634] [ 666.779401][T16642] xt_hashlimit: size too large, truncated to 1048576 [ 666.850574][T16633] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.890337][T16633] bridge_slave_0 (unregistering): left allmulticast mode [ 666.901527][T16633] bridge_slave_0 (unregistering): left promiscuous mode [ 666.908712][T16633] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.194533][T16653] FAULT_INJECTION: forcing a failure. [ 667.194533][T16653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.207762][T16653] CPU: 1 UID: 0 PID: 16653 Comm: syz.0.3878 Not tainted syzkaller #0 PREEMPT(lazy) [ 667.207793][T16653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 667.207808][T16653] Call Trace: [ 667.207817][T16653] [ 667.207865][T16653] __dump_stack+0x1d/0x30 [ 667.207890][T16653] dump_stack_lvl+0x95/0xd0 [ 667.207909][T16653] dump_stack+0x15/0x1b [ 667.207928][T16653] should_fail_ex+0x25e/0x270 [ 667.208045][T16653] should_fail+0xb/0x20 [ 667.208064][T16653] should_fail_usercopy+0x1a/0x20 [ 667.208088][T16653] _copy_to_user+0x20/0xa0 [ 667.208115][T16653] simple_read_from_buffer+0xb5/0x130 [ 667.208193][T16653] proc_fail_nth_read+0x10e/0x150 [ 667.208224][T16653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 667.208255][T16653] vfs_read+0x18e/0x7c0 [ 667.208349][T16653] ? __rcu_read_unlock+0x4e/0x70 [ 667.208372][T16653] ? __fget_files+0x184/0x1c0 [ 667.208392][T16653] ? mutex_lock+0x57/0x90 [ 667.208417][T16653] ksys_read+0xdc/0x1a0 [ 667.208450][T16653] __x64_sys_read+0x40/0x50 [ 667.208485][T16653] x64_sys_call+0x2886/0x3020 [ 667.208507][T16653] do_syscall_64+0x136/0x3c0 [ 667.208551][T16653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.208604][T16653] RIP: 0033:0x7f339c44d68e [ 667.208689][T16653] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 667.208708][T16653] RSP: 002b:00007f339aedefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 667.208732][T16653] RAX: ffffffffffffffda RBX: 00007f339aedf6c0 RCX: 00007f339c44d68e [ 667.208749][T16653] RDX: 000000000000000f RSI: 00007f339aedf0a0 RDI: 0000000000000004 [ 667.208771][T16653] RBP: 00007f339aedf090 R08: 0000000000000000 R09: 0000000000000000 [ 667.208786][T16653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.208804][T16653] R13: 00007f339c706038 R14: 00007f339c705fa0 R15: 00007ffccee79f88 [ 667.208870][T16653] [ 669.749717][T16686] FAULT_INJECTION: forcing a failure. [ 669.749717][T16686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.762982][T16686] CPU: 1 UID: 0 PID: 16686 Comm: syz.5.3887 Not tainted syzkaller #0 PREEMPT(lazy) [ 669.763013][T16686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 669.763031][T16686] Call Trace: [ 669.763038][T16686] [ 669.763099][T16686] __dump_stack+0x1d/0x30 [ 669.763128][T16686] dump_stack_lvl+0x95/0xd0 [ 669.763152][T16686] dump_stack+0x15/0x1b [ 669.763169][T16686] should_fail_ex+0x25e/0x270 [ 669.763287][T16686] should_fail+0xb/0x20 [ 669.763318][T16686] should_fail_usercopy+0x1a/0x20 [ 669.763344][T16686] _copy_to_user+0x20/0xa0 [ 669.763371][T16686] simple_read_from_buffer+0xb5/0x130 [ 669.763460][T16686] proc_fail_nth_read+0x10e/0x150 [ 669.763492][T16686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 669.763523][T16686] vfs_read+0x18e/0x7c0 [ 669.763623][T16686] ? __rcu_read_unlock+0x4e/0x70 [ 669.763703][T16686] ? __fget_files+0x184/0x1c0 [ 669.763744][T16686] ? mutex_lock+0x57/0x90 [ 669.763824][T16686] ksys_read+0xdc/0x1a0 [ 669.763855][T16686] __x64_sys_read+0x40/0x50 [ 669.763880][T16686] x64_sys_call+0x2886/0x3020 [ 669.763922][T16686] do_syscall_64+0x136/0x3c0 [ 669.763953][T16686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.764026][T16686] RIP: 0033:0x7fa53f73d68e [ 669.764042][T16686] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 669.764059][T16686] RSP: 002b:00007fa53e1cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 669.764082][T16686] RAX: ffffffffffffffda RBX: 00007fa53e1cf6c0 RCX: 00007fa53f73d68e [ 669.764168][T16686] RDX: 000000000000000f RSI: 00007fa53e1cf0a0 RDI: 0000000000000006 [ 669.764181][T16686] RBP: 00007fa53e1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 669.764194][T16686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.764210][T16686] R13: 00007fa53f9f6038 R14: 00007fa53f9f5fa0 R15: 00007fff6d9c9428 [ 669.764229][T16686] [ 670.046058][T16695] netlink: 'syz.1.3891': attribute type 2 has an invalid length. [ 670.069766][ T28] audit: type=1400 audit(1781403515.442:5883): avc: denied { lock } for pid=16694 comm="syz.1.3891" path="socket:[54642]" dev="sockfs" ino=54642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 670.358100][T16703] netlink: 'syz.1.3892': attribute type 29 has an invalid length. [ 670.367053][T16703] netlink: 'syz.1.3892': attribute type 29 has an invalid length. [ 670.376178][T16703] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3892'. [ 670.385390][T16703] unsupported nla_type 58 [ 670.390527][T16703] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 670.415882][ T28] audit: type=1400 audit(1781403515.762:5884): avc: denied { relabelto } for pid=16696 comm="syz.1.3892" name="bus" dev="tmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 670.442565][ T28] audit: type=1400 audit(1781403515.762:5885): avc: denied { associate } for pid=16696 comm="syz.1.3892" name="bus" dev="tmpfs" ino=1077 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 671.504264][T16693] FAULT_INJECTION: forcing a failure. [ 671.504264][T16693] name failslab, interval 1, probability 0, space 0, times 0 [ 671.582685][T16693] CPU: 0 UID: 0 PID: 16693 Comm: syz.5.3890 Not tainted syzkaller #0 PREEMPT(lazy) [ 671.582765][T16693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 671.582780][T16693] Call Trace: [ 671.582787][T16693] [ 671.582795][T16693] __dump_stack+0x1d/0x30 [ 671.582831][T16693] dump_stack_lvl+0x95/0xd0 [ 671.582854][T16693] dump_stack+0x15/0x1b [ 671.582877][T16693] should_fail_ex+0x25e/0x270 [ 671.582975][T16693] should_failslab+0x8c/0xb0 [ 671.583041][T16693] __kvmalloc_node_noprof+0x155/0x640 [ 671.583062][T16693] ? seq_read_iter+0x141/0x8f0 [ 671.583092][T16693] seq_read_iter+0x141/0x8f0 [ 671.583124][T16693] seq_read+0x279/0x2c0 [ 671.583191][T16693] ? __pfx_seq_read+0x10/0x10 [ 671.583218][T16693] proc_reg_read+0x128/0x1c0 [ 671.583319][T16693] ? __pfx_proc_reg_read+0x10/0x10 [ 671.583356][T16693] vfs_readv+0x417/0x6d0 [ 671.583379][T16693] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 671.583430][T16693] __x64_sys_preadv+0xfd/0x1c0 [ 671.583481][T16693] x64_sys_call+0x2915/0x3020 [ 671.583509][T16693] do_syscall_64+0x136/0x3c0 [ 671.583592][T16693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.583667][T16693] RIP: 0033:0x7fa53f77ce59 [ 671.583685][T16693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.583706][T16693] RSP: 002b:00007fa53e1cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 671.583731][T16693] RAX: ffffffffffffffda RBX: 00007fa53f9f5fa0 RCX: 00007fa53f77ce59 [ 671.583820][T16693] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000005 [ 671.583833][T16693] RBP: 00007fa53e1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 671.583846][T16693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.583861][T16693] R13: 00007fa53f9f6038 R14: 00007fa53f9f5fa0 R15: 00007fff6d9c9428 [ 671.583883][T16693] [ 671.909255][T16710] xt_hashlimit: size too large, truncated to 1048576 [ 672.256173][ T28] audit: type=1326 audit(1781403517.662:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.2.3901" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 672.370493][ T28] audit: type=1326 audit(1781403517.662:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.2.3901" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 672.575072][ T28] audit: type=1326 audit(1781403517.662:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.2.3901" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 672.695050][ T28] audit: type=1326 audit(1781403517.662:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.2.3901" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 672.720693][ T28] audit: type=1326 audit(1781403517.662:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.2.3901" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 672.966888][ T28] audit: type=1326 audit(1781403517.662:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.2.3901" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 672.992755][ T28] audit: type=1326 audit(1781403517.662:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16731 comm="syz.2.3901" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25bb0ce59 code=0x7ffc0000 [ 675.145610][T16760] FAULT_INJECTION: forcing a failure. [ 675.145610][T16760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.249687][T16760] CPU: 1 UID: 0 PID: 16760 Comm: syz.0.3909 Not tainted syzkaller #0 PREEMPT(lazy) [ 675.249721][T16760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 675.249735][T16760] Call Trace: [ 675.249742][T16760] [ 675.249751][T16760] __dump_stack+0x1d/0x30 [ 675.249775][T16760] dump_stack_lvl+0x95/0xd0 [ 675.249798][T16760] dump_stack+0x15/0x1b [ 675.249857][T16760] should_fail_ex+0x25e/0x270 [ 675.249911][T16760] should_fail+0xb/0x20 [ 675.249987][T16760] should_fail_usercopy+0x1a/0x20 [ 675.250014][T16760] strncpy_from_user+0x27/0x250 [ 675.250040][T16760] ? __local_bh_enable_ip+0x5f/0x80 [ 675.250078][T16760] mptcp_setsockopt+0x1266/0x24f0 [ 675.250175][T16760] sock_common_setsockopt+0x69/0x80 [ 675.250248][T16760] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 675.250277][T16760] __sys_setsockopt+0x184/0x200 [ 675.250299][T16760] __x64_sys_setsockopt+0x64/0x80 [ 675.250320][T16760] x64_sys_call+0x2327/0x3020 [ 675.250423][T16760] do_syscall_64+0x136/0x3c0 [ 675.250459][T16760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.250485][T16760] RIP: 0033:0x7f339c48ce59 [ 675.250502][T16760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.250587][T16760] RSP: 002b:00007f339aedf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 675.250612][T16760] RAX: ffffffffffffffda RBX: 00007f339c705fa0 RCX: 00007f339c48ce59 [ 675.250636][T16760] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003 [ 675.250651][T16760] RBP: 00007f339aedf090 R08: 0000000000000001 R09: 0000000000000000 [ 675.250666][T16760] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.250679][T16760] R13: 00007f339c706038 R14: 00007f339c705fa0 R15: 00007ffccee79f88 [ 675.250698][T16760] [ 675.568131][T16765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 675.600207][T16765] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 675.966643][T16771] vxcan1: tx drop: invalid sa for name 0x0000000000000005 [ 675.979277][ T28] kauditd_printk_skb: 477 callbacks suppressed [ 675.979296][ T28] audit: type=1400 audit(1781403521.371:6370): avc: denied { connect } for pid=16770 comm="syz.2.3913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 676.042101][T16773] 9p: Bad value for 'rfdno' [ 676.201601][T16777] xt_hashlimit: size too large, truncated to 1048576 [ 676.409336][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3915'. [ 676.516693][T16775] bond3 (unregistering): Released all slaves [ 676.686782][T16791] FAULT_INJECTION: forcing a failure. [ 676.686782][T16791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.704359][T16795] xt_CT: You must specify a L4 protocol and not use inversions on it [ 676.711612][T16791] CPU: 0 UID: 0 PID: 16791 Comm: syz.2.3918 Not tainted syzkaller #0 PREEMPT(lazy) [ 676.711641][T16791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 676.711654][T16791] Call Trace: [ 676.711661][T16791] [ 676.711669][T16791] __dump_stack+0x1d/0x30 [ 676.711695][T16791] dump_stack_lvl+0x95/0xd0 [ 676.711776][T16791] dump_stack+0x15/0x1b [ 676.711796][T16791] should_fail_ex+0x25e/0x270 [ 676.711830][T16791] should_fail+0xb/0x20 [ 676.711847][T16791] should_fail_usercopy+0x1a/0x20 [ 676.711880][T16791] _copy_from_user+0x1c/0xb0 [ 676.711961][T16791] ___sys_sendmsg+0xc1/0x1e0 [ 676.712034][T16791] __x64_sys_sendmsg+0xd4/0x160 [ 676.712062][T16791] x64_sys_call+0x194c/0x3020 [ 676.712087][T16791] do_syscall_64+0x136/0x3c0 [ 676.712170][T16791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.712193][T16791] RIP: 0033:0x7ff25bb0ce59 [ 676.712229][T16791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.712280][T16791] RSP: 002b:00007ff25a567028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.712303][T16791] RAX: ffffffffffffffda RBX: 00007ff25bd85fa0 RCX: 00007ff25bb0ce59 [ 676.712318][T16791] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 676.712332][T16791] RBP: 00007ff25a567090 R08: 0000000000000000 R09: 0000000000000000 [ 676.712376][T16791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.712388][T16791] R13: 00007ff25bd86038 R14: 00007ff25bd85fa0 R15: 00007ffdec5ed408 [ 676.712406][T16791] [ 677.456247][T16813] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 677.706597][T16807] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 678.387866][T16832] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 679.467437][T16849] netlink: 'syz.0.3934': attribute type 29 has an invalid length. [ 680.089298][T16861] FAULT_INJECTION: forcing a failure. [ 680.089298][T16861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.102858][T16861] CPU: 1 UID: 0 PID: 16861 Comm: syz.1.3940 Not tainted syzkaller #0 PREEMPT(lazy) [ 680.102886][T16861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 680.102898][T16861] Call Trace: [ 680.102904][T16861] [ 680.102912][T16861] __dump_stack+0x1d/0x30 [ 680.102985][T16861] dump_stack_lvl+0x95/0xd0 [ 680.103061][T16861] dump_stack+0x15/0x1b [ 680.103080][T16861] should_fail_ex+0x25e/0x270 [ 680.103120][T16861] should_fail+0xb/0x20 [ 680.103140][T16861] should_fail_usercopy+0x1a/0x20 [ 680.103191][T16861] _copy_from_user+0x1c/0xb0 [ 680.103214][T16861] ___sys_sendmsg+0xc1/0x1e0 [ 680.103248][T16861] __x64_sys_sendmsg+0xd4/0x160 [ 680.103344][T16861] x64_sys_call+0x194c/0x3020 [ 680.103368][T16861] do_syscall_64+0x136/0x3c0 [ 680.103469][T16861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.103491][T16861] RIP: 0033:0x7ffb7a0fce59 [ 680.103555][T16861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.103574][T16861] RSP: 002b:00007ffb78b4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.103594][T16861] RAX: ffffffffffffffda RBX: 00007ffb7a375fa0 RCX: 00007ffb7a0fce59 [ 680.103611][T16861] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 680.103693][T16861] RBP: 00007ffb78b4f090 R08: 0000000000000000 R09: 0000000000000000 [ 680.103707][T16861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.103720][T16861] R13: 00007ffb7a376038 R14: 00007ffb7a375fa0 R15: 00007ffeadfa2f68 [ 680.103742][T16861] [ 680.345169][T16865] FAULT_INJECTION: forcing a failure. [ 680.345169][T16865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.363739][T16865] CPU: 0 UID: 0 PID: 16865 Comm: syz.1.3941 Not tainted syzkaller #0 PREEMPT(lazy) [ 680.363878][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 680.363893][T16865] Call Trace: [ 680.363901][T16865] [ 680.363909][T16865] __dump_stack+0x1d/0x30 [ 680.363970][T16865] dump_stack_lvl+0x95/0xd0 [ 680.364063][T16865] dump_stack+0x15/0x1b [ 680.364128][T16865] should_fail_ex+0x25e/0x270 [ 680.364168][T16865] should_fail+0xb/0x20 [ 680.364222][T16865] should_fail_usercopy+0x1a/0x20 [ 680.364269][T16865] _copy_from_user+0x1c/0xb0 [ 680.364296][T16865] ___sys_sendmsg+0xc1/0x1e0 [ 680.364375][T16865] __x64_sys_sendmsg+0xd4/0x160 [ 680.364401][T16865] x64_sys_call+0x194c/0x3020 [ 680.364463][T16865] do_syscall_64+0x136/0x3c0 [ 680.364497][T16865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.364522][T16865] RIP: 0033:0x7ffb7a0fce59 [ 680.364539][T16865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.364585][T16865] RSP: 002b:00007ffb78b4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.364610][T16865] RAX: ffffffffffffffda RBX: 00007ffb7a375fa0 RCX: 00007ffb7a0fce59 [ 680.364626][T16865] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 680.364690][T16865] RBP: 00007ffb78b4f090 R08: 0000000000000000 R09: 0000000000000000 [ 680.364706][T16865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.364720][T16865] R13: 00007ffb7a376038 R14: 00007ffb7a375fa0 R15: 00007ffeadfa2f68 [ 680.364742][T16865] [ 680.835766][ T28] audit: type=1326 audit(1781403526.201:6371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 680.861395][ T28] audit: type=1326 audit(1781403526.201:6372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x0 [ 680.886411][ T28] audit: type=1326 audit(1781403526.201:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 680.912681][ T28] audit: type=1326 audit(1781403526.201:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 680.938776][ T28] audit: type=1326 audit(1781403526.201:6375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 680.966971][ T28] audit: type=1326 audit(1781403526.201:6376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 680.995694][ T28] audit: type=1326 audit(1781403526.201:6377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 681.021463][ T28] audit: type=1326 audit(1781403526.201:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 681.047196][ T28] audit: type=1326 audit(1781403526.201:6379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 681.053316][T16893] xt_hashlimit: size too large, truncated to 1048576 [ 681.074568][ T28] audit: type=1326 audit(1781403526.201:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 681.108335][ T28] audit: type=1326 audit(1781403526.201:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 681.134026][T16894] FAULT_INJECTION: forcing a failure. [ 681.134026][T16894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.147326][T16894] CPU: 1 UID: 0 PID: 16894 Comm: syz.6.3951 Not tainted syzkaller #0 PREEMPT(lazy) [ 681.147356][T16894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 681.147430][T16894] Call Trace: [ 681.147436][T16894] [ 681.147444][T16894] __dump_stack+0x1d/0x30 [ 681.147470][T16894] dump_stack_lvl+0x95/0xd0 [ 681.147543][T16894] dump_stack+0x15/0x1b [ 681.147562][T16894] should_fail_ex+0x25e/0x270 [ 681.147707][T16894] should_fail+0xb/0x20 [ 681.147723][T16894] should_fail_usercopy+0x1a/0x20 [ 681.147747][T16894] _copy_from_iter+0xcc/0xe70 [ 681.147791][T16894] ? lockref_put_return+0xf7/0x130 [ 681.147818][T16894] ? __rcu_read_unlock+0x4e/0x70 [ 681.147842][T16894] copy_page_from_iter+0x15d/0x1f0 [ 681.147864][T16894] tun_get_user+0xb9b/0x2790 [ 681.147944][T16894] ? _parse_integer+0x27/0x40 [ 681.148008][T16894] ? ref_tracker_alloc+0x1eb/0x2f0 [ 681.148047][T16894] tun_chr_write_iter+0x15a/0x210 [ 681.148083][T16894] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 681.148118][T16894] vfs_write+0x57d/0x9b0 [ 681.148150][T16894] ksys_write+0xdc/0x1a0 [ 681.148232][T16894] __x64_sys_write+0x40/0x50 [ 681.148263][T16894] x64_sys_call+0x27e1/0x3020 [ 681.148289][T16894] do_syscall_64+0x136/0x3c0 [ 681.148385][T16894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.148407][T16894] RIP: 0033:0x7f02326cd68e [ 681.148423][T16894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 681.148454][T16894] RSP: 002b:00007f0231145fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 681.148524][T16894] RAX: ffffffffffffffda RBX: 00007f02311466c0 RCX: 00007f02326cd68e [ 681.148538][T16894] RDX: 0000000000000066 RSI: 0000200000000080 RDI: 00000000000000c8 [ 681.148551][T16894] RBP: 00007f0231146090 R08: 0000000000000000 R09: 0000000000000000 [ 681.148566][T16894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.148578][T16894] R13: 00007f0232986128 R14: 00007f0232986090 R15: 00007ffc7e798988 [ 681.148604][T16894] [ 681.148750][ T28] audit: type=1326 audit(1781403526.201:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 681.376156][ T28] audit: type=1326 audit(1781403526.201:6383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 681.424152][T16900] netlink: 'syz.1.3953': attribute type 17 has an invalid length. [ 681.424317][ T28] audit: type=1326 audit(1781403526.201:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 681.495794][ T28] audit: type=1326 audit(1781403526.201:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 681.555559][ T28] audit: type=1326 audit(1781403526.201:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16886 comm="syz.0.3949" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 681.823917][T16907] netlink: 'syz.6.3952': attribute type 29 has an invalid length. [ 681.832319][T16907] netlink: 'syz.6.3952': attribute type 29 has an invalid length. [ 681.840859][T16907] netlink: 500 bytes leftover after parsing attributes in process `syz.6.3952'. [ 682.371395][T16917] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 684.023033][T16936] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=16936 comm=syz.5.3962 [ 684.120639][T16934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3962'. [ 684.858987][T16942] FAULT_INJECTION: forcing a failure. [ 684.858987][T16942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.894915][T16942] CPU: 1 UID: 0 PID: 16942 Comm: syz.0.3965 Not tainted syzkaller #0 PREEMPT(lazy) [ 684.894948][T16942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 684.894961][T16942] Call Trace: [ 684.894968][T16942] [ 684.894974][T16942] __dump_stack+0x1d/0x30 [ 684.895015][T16942] dump_stack_lvl+0x95/0xd0 [ 684.895040][T16942] dump_stack+0x15/0x1b [ 684.895180][T16942] should_fail_ex+0x25e/0x270 [ 684.895227][T16942] should_fail+0xb/0x20 [ 684.895243][T16942] should_fail_usercopy+0x1a/0x20 [ 684.895305][T16942] _copy_from_user+0x1c/0xb0 [ 684.895489][T16942] ___sys_sendmsg+0xc1/0x1e0 [ 684.895533][T16942] __x64_sys_sendmsg+0xd4/0x160 [ 684.895565][T16942] x64_sys_call+0x194c/0x3020 [ 684.895588][T16942] do_syscall_64+0x136/0x3c0 [ 684.895620][T16942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.895643][T16942] RIP: 0033:0x7f339c48ce59 [ 684.895664][T16942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.895685][T16942] RSP: 002b:00007f339aedf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.895727][T16942] RAX: ffffffffffffffda RBX: 00007f339c705fa0 RCX: 00007f339c48ce59 [ 684.895745][T16942] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 684.895761][T16942] RBP: 00007f339aedf090 R08: 0000000000000000 R09: 0000000000000000 [ 684.895774][T16942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.895787][T16942] R13: 00007f339c706038 R14: 00007f339c705fa0 R15: 00007ffccee79f88 [ 684.895838][T16942] [ 685.497270][T16959] netlink: 'syz.1.3970': attribute type 29 has an invalid length. [ 685.507104][T16959] netlink: 'syz.1.3970': attribute type 29 has an invalid length. [ 685.516829][T16959] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3970'. [ 685.903211][T16954] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 686.173782][T16962] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 686.304723][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 686.304741][ T28] audit: type=1400 audit(1781403531.710:6453): avc: denied { name_bind } for pid=16968 comm="syz.1.3974" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 686.517062][T16975] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 686.524660][ T28] audit: type=1400 audit(1781403531.920:6454): avc: denied { read } for pid=16974 comm="syz.5.3977" dev="sockfs" ino=55678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 686.551906][T16975] pim6reg: entered allmulticast mode [ 686.573766][ T28] audit: type=1400 audit(1781403531.940:6455): avc: denied { ioctl } for pid=16973 comm="syz.1.3978" path="socket:[55696]" dev="sockfs" ino=55696 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 686.798447][T17000] netlink: 23 bytes leftover after parsing attributes in process `syz.5.3984'. [ 686.898297][ T28] audit: type=1400 audit(1781403532.260:6456): avc: denied { write } for pid=16987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.935874][T16977] syz.1.3978 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 686.950009][T16977] CPU: 1 UID: 0 PID: 16977 Comm: syz.1.3978 Not tainted syzkaller #0 PREEMPT(lazy) [ 686.950109][T16977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 686.950121][T16977] Call Trace: [ 686.950129][T16977] [ 686.950138][T16977] __dump_stack+0x1d/0x30 [ 686.950162][T16977] dump_stack_lvl+0x95/0xd0 [ 686.950194][T16977] dump_stack+0x15/0x1b [ 686.950218][T16977] dump_header+0x80/0x240 [ 686.950241][T16977] oom_kill_process+0x295/0x350 [ 686.950269][T16977] out_of_memory+0x981/0xbc0 [ 686.950317][T16977] try_charge_memcg+0x621/0xa00 [ 686.950357][T16977] __memcg_kmem_charge_page+0x199/0x3a0 [ 686.950458][T16977] __alloc_frozen_pages_noprof+0x18a/0x350 [ 686.950557][T16977] alloc_pages_mpol+0xa9/0x1d0 [ 686.950587][T16977] alloc_pages_noprof+0x8f/0x140 [ 686.950616][T16977] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 686.950707][T16977] __kvmalloc_node_noprof+0x3d4/0x640 [ 686.950727][T16977] ? futex_hash_allocate+0x18d/0x960 [ 686.950811][T16977] ? futex_hash_allocate+0x18d/0x960 [ 686.950849][T16977] ? ioctl_has_perm+0x273/0x2c0 [ 686.950924][T16977] futex_hash_allocate+0x18d/0x960 [ 686.950953][T16977] ? cap_task_prctl+0x13f/0x6b0 [ 686.950977][T16977] futex_hash_prctl+0xd8/0xf0 [ 686.951081][T16977] __se_sys_prctl+0x4f4/0x1400 [ 686.951114][T16977] __x64_sys_prctl+0x67/0x80 [ 686.951167][T16977] x64_sys_call+0x2533/0x3020 [ 686.951189][T16977] do_syscall_64+0x136/0x3c0 [ 686.951227][T16977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.951284][T16977] RIP: 0033:0x7ffb7a0fce59 [ 686.951305][T16977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.951323][T16977] RSP: 002b:00007ffb78b4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 686.951472][T16977] RAX: ffffffffffffffda RBX: 00007ffb7a375fa0 RCX: 00007ffb7a0fce59 [ 686.951486][T16977] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 686.951571][T16977] RBP: 00007ffb7a192d6f R08: 0000000000000000 R09: 0000000000000000 [ 686.951584][T16977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.951600][T16977] R13: 00007ffb7a376038 R14: 00007ffb7a375fa0 R15: 00007ffeadfa2f68 [ 686.951624][T16977] [ 686.951633][T16977] memory: usage 307200kB, limit 307200kB, failcnt 73 [ 687.104343][ T28] audit: type=1400 audit(1781403532.430:6457): avc: denied { write } for pid=17013 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.152982][T16977] memory+swap: usage 301432kB, limit 9007199254740988kB, failcnt 0 [ 687.223715][T16977] kmem: usage 289132kB, limit 9007199254740988kB, failcnt 0 [ 687.241505][T16977] Memory cgroup stats for /syz1: [ 687.313793][T16977] cache 524288 [ 687.397582][T16977] rss 110592 [ 687.423166][T16977] shmem 0 [ 687.493888][T16977] mapped_file 65536 [ 687.572776][T16977] dirty 0 [ 687.602604][T16977] writeback 0 [ 687.624234][T16977] workingset_refault_anon 816 [ 687.643756][T16977] workingset_refault_file 141 [ 687.662272][T16977] swap 12406784 [ 687.679780][T16977] swapcached 20762624 [ 687.696731][T16977] pgpgin 714500 [ 687.710449][T16977] pgpgout 714343 [ 687.726146][T16977] pgfault 756729 [ 687.741328][T16977] pgmajfault 75 [ 687.759477][T16977] inactive_anon 8192 [ 687.763489][T16977] active_anon 110592 [ 687.767430][T16977] inactive_file 0 [ 687.771130][T16977] active_file 524288 [ 687.775155][T16977] unevictable 0 [ 687.778656][T16977] hierarchical_memory_limit 314572800 [ 687.784217][T16977] hierarchical_memsw_limit 9223372036854771712 [ 687.790464][T16977] total_cache 524288 [ 687.794536][T16977] total_rss 110592 [ 687.798351][T16977] total_shmem 0 [ 687.801966][T16977] total_mapped_file 65536 [ 687.806486][T16977] total_dirty 0 [ 687.810047][T16977] total_writeback 0 [ 687.813917][T16977] total_workingset_refault_anon 816 [ 687.819180][T16977] total_workingset_refault_file 141 [ 687.836119][T17021] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3986'. [ 687.847954][T16977] total_swap 12406784 [ 687.857715][T16977] total_swapcached 20762624 [ 687.874863][T16977] total_pgpgin 714500 [ 687.887298][T16977] total_pgpgout 714343 [ 687.904340][T16977] total_pgfault 756729 [ 687.911910][T16977] total_pgmajfault 75 [ 687.918070][T17019] tipc: Started in network mode [ 687.920392][T16977] total_inactive_anon 8192 [ 687.926465][T17019] tipc: Node identity ac14142f, cluster identity 4711 [ 687.942580][T16977] total_active_anon 110592 [ 688.021530][T16977] total_inactive_file 0 [ 688.025718][T16977] total_active_file 524288 [ 688.030140][T16977] total_unevictable 0 [ 688.034127][T16977] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3978,pid=16973,uid=0 [ 688.058022][T17019] tipc: New replicast peer: 0.0.0.0 [ 688.063455][T17019] tipc: Enabled bearer , priority 10 [ 688.158925][T16977] Memory cgroup out of memory: Killed process 16977 (syz.1.3978) total-vm:94168kB, anon-rss:1344kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 688.212677][T17024] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac14:1421 [ 688.251002][T17033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3990'. [ 689.358355][ T3399] tipc: Node number set to 2886997039 [ 691.107678][T17081] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 691.214334][T17099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4011'. [ 691.465159][T17104] 9p: Bad value for 'wfdno' [ 691.534293][T17110] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4016'. [ 691.667140][T17108] FAULT_INJECTION: forcing a failure. [ 691.667140][T17108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.680272][T17108] CPU: 1 UID: 0 PID: 17108 Comm: syz.1.4015 Not tainted syzkaller #0 PREEMPT(lazy) [ 691.680306][T17108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.680321][T17108] Call Trace: [ 691.680330][T17108] [ 691.680340][T17108] __dump_stack+0x1d/0x30 [ 691.680366][T17108] dump_stack_lvl+0x95/0xd0 [ 691.680402][T17108] dump_stack+0x15/0x1b [ 691.680420][T17108] should_fail_ex+0x25e/0x270 [ 691.680500][T17108] should_fail+0xb/0x20 [ 691.680521][T17108] should_fail_usercopy+0x1a/0x20 [ 691.680618][T17108] copy_fpstate_to_sigframe+0x61a/0x7b0 [ 691.680651][T17108] ? copy_fpstate_to_sigframe+0xe5/0x7b0 [ 691.680684][T17108] ? x86_task_fpu+0x36/0x60 [ 691.680705][T17108] get_sigframe+0x34f/0x470 [ 691.680729][T17108] ? _raw_spin_unlock_irq+0x9/0x30 [ 691.680800][T17108] x64_setup_rt_frame+0xa7/0x4e0 [ 691.680900][T17108] arch_do_signal_or_restart+0x27c/0x480 [ 691.680931][T17108] exit_to_user_mode_loop+0x6f/0x870 [ 691.680951][T17108] ? fput+0x8f/0xc0 [ 691.681035][T17108] ? ksys_write+0x194/0x1a0 [ 691.681064][T17108] do_syscall_64+0x23c/0x3c0 [ 691.681178][T17108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.681200][T17108] RIP: 0033:0x7ffb7a0fce57 [ 691.681218][T17108] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 691.681312][T17108] RSP: 002b:00007ffb78b4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 691.681335][T17108] RAX: 0000000000000001 RBX: 00007ffb7a375fa0 RCX: 00007ffb7a0fce59 [ 691.681348][T17108] RDX: 0000000000000008 RSI: 0000200000000140 RDI: 0000000000000009 [ 691.681363][T17108] RBP: 00007ffb78b4f090 R08: 0000000000000000 R09: 0000000000000000 [ 691.681386][T17108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.681401][T17108] R13: 00007ffb7a376038 R14: 00007ffb7a375fa0 R15: 00007ffeadfa2f68 [ 691.681422][T17108] [ 692.537737][ T28] audit: type=1400 audit(1781403537.859:6458): avc: denied { write } for pid=17130 comm="syz.1.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 692.604219][T17137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=17137 comm=syz.6.4025 [ 692.663668][ T28] audit: type=1400 audit(1781403537.929:6459): avc: denied { lock } for pid=17132 comm="syz.5.4024" path="socket:[56489]" dev="sockfs" ino=56489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 694.197490][T17168] FAULT_INJECTION: forcing a failure. [ 694.197490][T17168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.317716][T17168] CPU: 1 UID: 0 PID: 17168 Comm: syz.5.4034 Not tainted syzkaller #0 PREEMPT(lazy) [ 694.317748][T17168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 694.317774][T17168] Call Trace: [ 694.317781][T17168] [ 694.317791][T17168] __dump_stack+0x1d/0x30 [ 694.317817][T17168] dump_stack_lvl+0x95/0xd0 [ 694.317850][T17168] dump_stack+0x15/0x1b [ 694.317873][T17168] should_fail_ex+0x25e/0x270 [ 694.317986][T17168] should_fail+0xb/0x20 [ 694.318006][T17168] should_fail_usercopy+0x1a/0x20 [ 694.318069][T17168] fpu__restore_sig+0x12a/0xad0 [ 694.318097][T17168] ? __rcu_read_unlock+0x4e/0x70 [ 694.318121][T17168] ? cgroup1_freezing+0x56/0x60 [ 694.318153][T17168] __ia32_sys_rt_sigreturn+0x29b/0x350 [ 694.318224][T17168] x64_sys_call+0x2823/0x3020 [ 694.318315][T17168] do_syscall_64+0x136/0x3c0 [ 694.318350][T17168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.318457][T17168] RIP: 0033:0x7fa53f77ce59 [ 694.318522][T17168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.318540][T17168] RSP: 002b:00007fa53e1cf028 EFLAGS: 00000246 [ 694.318558][T17168] RAX: fffffffffffffffc RBX: 00007fa53f9f5fa0 RCX: 00007fa53f77ce59 [ 694.318572][T17168] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000003 [ 694.318646][T17168] RBP: 00007fa53e1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 694.318663][T17168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.318676][T17168] R13: 00007fa53f9f6038 R14: 00007fa53f9f5fa0 R15: 00007fff6d9c9428 [ 694.318696][T17168] [ 694.644439][T17172] syzkaller0: entered promiscuous mode [ 694.649959][T17172] syzkaller0: entered allmulticast mode [ 694.865745][T17184] FAULT_INJECTION: forcing a failure. [ 694.865745][T17184] name failslab, interval 1, probability 0, space 0, times 0 [ 694.878480][T17184] CPU: 0 UID: 0 PID: 17184 Comm: syz.6.4039 Not tainted syzkaller #0 PREEMPT(lazy) [ 694.878510][T17184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 694.878524][T17184] Call Trace: [ 694.878532][T17184] [ 694.878540][T17184] __dump_stack+0x1d/0x30 [ 694.878566][T17184] dump_stack_lvl+0x95/0xd0 [ 694.878641][T17184] dump_stack+0x15/0x1b [ 694.878660][T17184] should_fail_ex+0x25e/0x270 [ 694.878694][T17184] should_failslab+0x8c/0xb0 [ 694.878744][T17184] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 694.878779][T17184] ? __alloc_skb+0x2d6/0x690 [ 694.878864][T17184] __alloc_skb+0x2d6/0x690 [ 694.878884][T17184] ? __alloc_skb+0x200/0x690 [ 694.878965][T17184] netlink_alloc_large_skb+0xbf/0xf0 [ 694.878994][T17184] netlink_sendmsg+0x40c/0x6f0 [ 694.879148][T17184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.879178][T17184] ____sys_sendmsg+0x532/0x580 [ 694.879226][T17184] ___sys_sendmsg+0x195/0x1e0 [ 694.879262][T17184] __x64_sys_sendmsg+0xd4/0x160 [ 694.879291][T17184] x64_sys_call+0x194c/0x3020 [ 694.879335][T17184] do_syscall_64+0x136/0x3c0 [ 694.879369][T17184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.879393][T17184] RIP: 0033:0x7f023270ce59 [ 694.879411][T17184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.879495][T17184] RSP: 002b:00007f0231167028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.879518][T17184] RAX: ffffffffffffffda RBX: 00007f0232985fa0 RCX: 00007f023270ce59 [ 694.879535][T17184] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000003 [ 694.879549][T17184] RBP: 00007f0231167090 R08: 0000000000000000 R09: 0000000000000000 [ 694.879564][T17184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.879578][T17184] R13: 00007f0232986038 R14: 00007f0232985fa0 R15: 00007ffc7e798988 [ 694.879598][T17184] [ 696.068252][T17193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 696.125449][T17193] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 698.794196][T17202] xt_hashlimit: size too large, truncated to 1048576 [ 698.815776][T17214] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4048'. [ 699.819773][T17224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 699.884737][T17224] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 699.938874][T17232] netlink: 'syz.0.4054': attribute type 21 has an invalid length. [ 700.323902][T17244] netlink: 324 bytes leftover after parsing attributes in process `syz.0.4056'. [ 700.835657][ T28] audit: type=1400 audit(1781403546.178:6460): avc: denied { write } for pid=17246 comm="syz.6.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 702.781445][T17270] netlink: 'syz.2.4064': attribute type 29 has an invalid length. [ 702.891106][T17270] netlink: 'syz.2.4064': attribute type 29 has an invalid length. [ 702.900430][T17270] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4064'. [ 703.149850][T17279] xt_hashlimit: size too large, truncated to 1048576 [ 704.155450][T17285] netlink: 'syz.0.4069': attribute type 29 has an invalid length. [ 704.287202][T17282] netlink: 'syz.5.4066': attribute type 29 has an invalid length. [ 704.297648][T17282] netlink: 'syz.5.4066': attribute type 29 has an invalid length. [ 704.308322][T17282] netlink: 500 bytes leftover after parsing attributes in process `syz.5.4066'. [ 705.624635][T17314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4075'. [ 706.120785][T17320] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 706.131465][T17320] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.138654][T17320] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.285774][ T28] audit: type=1400 audit(1781403551.668:6461): avc: denied { accept } for pid=17327 comm="syz.5.4082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 706.364675][T17328] syz.5.4082 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 706.379175][T17328] CPU: 0 UID: 0 PID: 17328 Comm: syz.5.4082 Not tainted syzkaller #0 PREEMPT(lazy) [ 706.379197][T17328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.379205][T17328] Call Trace: [ 706.379278][T17328] [ 706.379366][T17328] __dump_stack+0x1d/0x30 [ 706.379383][T17328] dump_stack_lvl+0x95/0xd0 [ 706.379397][T17328] dump_stack+0x15/0x1b [ 706.379410][T17328] dump_header+0x80/0x240 [ 706.379425][T17328] oom_kill_process+0x295/0x350 [ 706.379523][T17328] out_of_memory+0x981/0xbc0 [ 706.379695][T17328] try_charge_memcg+0x621/0xa00 [ 706.379718][T17328] __memcg_kmem_charge_page+0x199/0x3a0 [ 706.379734][T17328] __alloc_frozen_pages_noprof+0x18a/0x350 [ 706.379806][T17328] alloc_pages_mpol+0xa9/0x1d0 [ 706.379822][T17328] alloc_pages_noprof+0x8f/0x140 [ 706.379842][T17328] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 706.379864][T17328] __kvmalloc_node_noprof+0x3d4/0x640 [ 706.379878][T17328] ? futex_hash_allocate+0x18d/0x960 [ 706.379900][T17328] ? futex_hash_allocate+0x18d/0x960 [ 706.380000][T17328] futex_hash_allocate+0x18d/0x960 [ 706.380020][T17328] ? cap_task_prctl+0x13f/0x6b0 [ 706.380037][T17328] futex_hash_prctl+0xd8/0xf0 [ 706.380130][T17328] __se_sys_prctl+0x4f4/0x1400 [ 706.380160][T17328] __x64_sys_prctl+0x67/0x80 [ 706.380176][T17328] x64_sys_call+0x2533/0x3020 [ 706.380192][T17328] do_syscall_64+0x136/0x3c0 [ 706.380213][T17328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.380301][T17328] RIP: 0033:0x7fa53f77ce59 [ 706.380421][T17328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.380434][T17328] RSP: 002b:00007fa53e1cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 706.380468][T17328] RAX: ffffffffffffffda RBX: 00007fa53f9f5fa0 RCX: 00007fa53f77ce59 [ 706.380478][T17328] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 706.380487][T17328] RBP: 00007fa53f812d6f R08: 0000000000000000 R09: 0000000000000000 [ 706.380496][T17328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.380505][T17328] R13: 00007fa53f9f6038 R14: 00007fa53f9f5fa0 R15: 00007fff6d9c9428 [ 706.380518][T17328] [ 706.380555][T17328] memory: usage 307200kB, limit 307200kB, failcnt 58 [ 706.459575][T17319] sctp: [Deprecated]: syz.6.4077 (pid 17319) Use of struct sctp_assoc_value in delayed_ack socket option. [ 706.459575][T17319] Use struct sctp_sack_info instead [ 706.473325][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4081'. [ 706.681701][T17328] memory+swap: usage 178508kB, limit 9007199254740988kB, failcnt 0 [ 706.689732][T17328] kmem: usage 177952kB, limit 9007199254740988kB, failcnt 0 [ 706.818313][T17328] Memory cgroup stats for /syz5: [ 706.818568][T17328] cache 135168 [ 706.826934][T17328] rss 172032 [ 706.830148][T17328] shmem 135168 [ 706.833539][T17328] mapped_file 12288 [ 706.837365][T17328] dirty 0 [ 706.840322][T17328] writeback 0 [ 706.843623][T17328] workingset_refault_anon 1 [ 706.848203][T17328] workingset_refault_file 0 [ 706.852763][T17328] swap 139264 [ 706.856061][T17328] swapcached 208896 [ 706.860013][T17328] pgpgin 138380 [ 706.863631][T17328] pgpgout 138298 [ 706.867210][T17328] pgfault 156707 [ 706.870851][T17328] pgmajfault 1 [ 706.874233][T17328] inactive_anon 299008 [ 706.878315][T17328] active_anon 36864 [ 706.882136][T17328] inactive_file 0 [ 706.885781][T17328] active_file 0 [ 706.889355][T17328] unevictable 0 [ 706.892872][T17328] hierarchical_memory_limit 314572800 [ 706.898257][T17328] hierarchical_memsw_limit 9223372036854771712 [ 706.904427][T17328] total_cache 135168 [ 706.908355][T17328] total_rss 172032 [ 706.912084][T17328] total_shmem 135168 [ 706.916014][T17328] total_mapped_file 12288 [ 707.059118][T17343] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4086'. [ 707.077286][T17328] total_dirty 0 [ 707.089986][T17328] total_writeback 0 [ 707.093847][T17328] total_workingset_refault_anon 1 [ 707.098883][T17328] total_workingset_refault_file 0 [ 707.156599][T17328] total_swap 139264 [ 707.160481][T17328] total_swapcached 208896 [ 707.164848][T17328] total_pgpgin 138381 [ 707.168976][T17328] total_pgpgout 138299 [ 707.173070][T17328] total_pgfault 156708 [ 707.177240][T17328] total_pgmajfault 1 [ 707.181149][T17328] total_inactive_anon 299008 [ 707.185873][T17328] total_active_anon 36864 [ 707.199188][T17328] total_inactive_file 0 [ 707.203410][T17328] total_active_file 0 [ 707.207401][T17328] total_unevictable 0 [ 707.211451][T17328] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4082,pid=17327,uid=0 [ 707.226146][T17328] Memory cgroup out of memory: Killed process 17327 (syz.5.4082) total-vm:96216kB, anon-rss:1416kB, file-rss:22480kB, shmem-rss:12kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 707.438997][ T28] audit: type=1400 audit(1781403552.808:6462): avc: denied { ioctl } for pid=17362 comm="syz.0.4091" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 707.535930][ T28] audit: type=1400 audit(1781403552.878:6463): avc: denied { write } for pid=17341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.558984][ T28] audit: type=1400 audit(1781403552.918:6464): avc: denied { write } for pid=17371 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.610750][T17361] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 707.669827][T13405] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.678625][T13405] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.687407][T13405] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.696118][T13405] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.983118][ T28] audit: type=1400 audit(1781403553.328:6465): avc: denied { write } for pid=17386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.006253][ T28] audit: type=1400 audit(1781403553.328:6466): avc: denied { write } for pid=17405 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.253605][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4099'. [ 708.291304][T17392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4096'. [ 708.583183][T17425] SELinux: failed to load policy [ 709.538679][T17432] netlink: 'syz.1.4102': attribute type 29 has an invalid length. [ 709.547780][T17432] netlink: 'syz.1.4102': attribute type 29 has an invalid length. [ 709.557227][T17432] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4102'. [ 710.302954][T17446] FAULT_INJECTION: forcing a failure. [ 710.302954][T17446] name failslab, interval 1, probability 0, space 0, times 0 [ 710.315622][T17446] CPU: 1 UID: 0 PID: 17446 Comm: syz.1.4108 Not tainted syzkaller #0 PREEMPT(lazy) [ 710.315662][T17446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 710.315673][T17446] Call Trace: [ 710.315681][T17446] [ 710.315690][T17446] __dump_stack+0x1d/0x30 [ 710.315718][T17446] dump_stack_lvl+0x95/0xd0 [ 710.315751][T17446] dump_stack+0x15/0x1b [ 710.315796][T17446] should_fail_ex+0x25e/0x270 [ 710.315914][T17446] should_failslab+0x8c/0xb0 [ 710.316010][T17446] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 710.316041][T17446] ? __alloc_skb+0x2d6/0x690 [ 710.316112][T17446] __alloc_skb+0x2d6/0x690 [ 710.316134][T17446] ? __alloc_skb+0x200/0x690 [ 710.316230][T17446] netlink_alloc_large_skb+0xbf/0xf0 [ 710.316303][T17446] netlink_sendmsg+0x40c/0x6f0 [ 710.316339][T17446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.316396][T17446] ____sys_sendmsg+0x532/0x580 [ 710.316449][T17446] ___sys_sendmsg+0x195/0x1e0 [ 710.316479][T17446] __x64_sys_sendmsg+0xd4/0x160 [ 710.316505][T17446] x64_sys_call+0x194c/0x3020 [ 710.316530][T17446] do_syscall_64+0x136/0x3c0 [ 710.316634][T17446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.316661][T17446] RIP: 0033:0x7ffb7a0fce59 [ 710.316679][T17446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.316698][T17446] RSP: 002b:00007ffb78b4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.316741][T17446] RAX: ffffffffffffffda RBX: 00007ffb7a375fa0 RCX: 00007ffb7a0fce59 [ 710.316755][T17446] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 710.316768][T17446] RBP: 00007ffb78b4f090 R08: 0000000000000000 R09: 0000000000000000 [ 710.316782][T17446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.316846][T17446] R13: 00007ffb7a376038 R14: 00007ffb7a375fa0 R15: 00007ffeadfa2f68 [ 710.316868][T17446] [ 711.483575][T17465] xt_hashlimit: size too large, truncated to 1048576 [ 711.725188][T17455] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 711.791689][T17480] xt_CT: You must specify a L4 protocol and not use inversions on it [ 711.837414][T17480] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 712.920709][T17489] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4119'. [ 712.946908][T17490] netlink: 'syz.1.4119': attribute type 29 has an invalid length. [ 712.958355][T17503] netlink: 'syz.0.4122': attribute type 29 has an invalid length. [ 712.966870][T17499] netlink: 'syz.1.4119': attribute type 29 has an invalid length. [ 713.163070][ T28] audit: type=1326 audit(1781403558.567:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.6.4125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f023270ce59 code=0x0 [ 713.297359][T17508] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4125'. [ 713.468300][T17516] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 713.475742][T17516] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 713.753407][T17525] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 713.777076][T17521] xt_hashlimit: size too large, truncated to 1048576 [ 713.951171][ T28] audit: type=1400 audit(1781403559.197:6468): avc: denied { setopt } for pid=17526 comm="syz.1.4131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 714.003311][ T28] audit: type=1400 audit(1781403559.197:6469): avc: denied { ioctl } for pid=17526 comm="syz.1.4131" path="socket:[58404]" dev="sockfs" ino=58404 ioctlcmd=0x744b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 714.293157][ T28] audit: type=1400 audit(1781403559.697:6470): avc: denied { getopt } for pid=17547 comm="syz.1.4138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 714.480343][T17552] netlink: 'syz.0.4135': attribute type 29 has an invalid length. [ 714.603733][T17554] xt_hashlimit: size too large, truncated to 1048576 [ 714.822972][ T28] audit: type=1400 audit(1781403559.837:6471): avc: denied { setopt } for pid=17549 comm="syz.2.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 715.092634][T17574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4146'. [ 715.117415][T17574] netlink: 'syz.1.4146': attribute type 13 has an invalid length. [ 715.126040][T17574] netlink: 'syz.1.4146': attribute type 17 has an invalid length. [ 715.194330][T17574] netdevsim0€: left allmulticast mode [ 715.234155][T17574] bridge0: left allmulticast mode [ 715.258589][T17574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.271377][T17574] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.285032][T17574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.317114][ T28] audit: type=1400 audit(1781403560.707:6472): avc: denied { create } for pid=17586 comm="syz.2.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 715.510588][T17574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.527040][T17574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.540593][T17574] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 715.550962][T17574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 715.565315][T17574] veth1_vlan: left promiscuous mode [ 715.571763][T17574] veth0_vlan: left promiscuous mode [ 715.577026][T17574] veth0_vlan: left allmulticast mode [ 715.627215][T17574] veth0_vlan: entered promiscuous mode [ 715.649458][T17574] veth1_vlan: entered promiscuous mode [ 715.664987][T17574] veth1_macvtap: left promiscuous mode [ 715.673375][T17574] veth0_macvtap: left promiscuous mode [ 715.680059][T17598] SELinux: ebitmap: truncated map [ 715.685501][T17598] SELinux: failed to load policy [ 715.692728][T17574] veth0_macvtap: entered promiscuous mode [ 715.706176][T17574] veth1_macvtap: entered promiscuous mode [ 715.715275][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 715.746463][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 715.759142][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 715.771857][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 715.786508][T17574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 715.798137][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.805221][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.814455][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.821527][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.094694][T17602] bridge1: entered promiscuous mode [ 716.225797][T17602] bridge1: entered allmulticast mode [ 720.102590][ T28] audit: type=1400 audit(1781403565.506:6473): avc: denied { write } for pid=17619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.154856][ T28] audit: type=1400 audit(1781403565.546:6474): avc: denied { write } for pid=17656 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.197529][T17662] block device autoloading is deprecated and will be removed. [ 720.219254][ T28] audit: type=1326 audit(1781403565.626:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17664 comm="syz.0.4171" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 720.260109][ T28] audit: type=1326 audit(1781403565.656:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17664 comm="syz.0.4171" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 720.286361][ T28] audit: type=1326 audit(1781403565.656:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17664 comm="syz.0.4171" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 720.311915][ T28] audit: type=1326 audit(1781403565.666:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17664 comm="syz.0.4171" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 720.353882][ T28] audit: type=1326 audit(1781403565.666:6479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17664 comm="syz.0.4171" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 720.379514][ T28] audit: type=1326 audit(1781403565.666:6480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17664 comm="syz.0.4171" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 720.404992][ T28] audit: type=1326 audit(1781403565.666:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17664 comm="syz.0.4171" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 720.430514][ T28] audit: type=1326 audit(1781403565.666:6482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17664 comm="syz.0.4171" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f339c48ce59 code=0x7ffc0000 [ 720.493269][T17665] 9p: Bad value for 'rfdno' [ 720.828493][T17698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 720.843372][T17698] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 720.984259][T17701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.133666][T17712] netlink: 'syz.5.4176': attribute type 29 has an invalid length. [ 721.152737][T17712] netlink: 'syz.5.4176': attribute type 29 has an invalid length. [ 721.173103][T17712] netlink: 500 bytes leftover after parsing attributes in process `syz.5.4176'. [ 722.168012][ T3439] ================================================================== [ 722.176135][ T3439] BUG: KCSAN: data-race in alloc_pid / copy_process [ 722.182737][ T3439] [ 722.185064][ T3439] read-write to 0xffffffff86c5c228 of 4 bytes by task 17735 on cpu 1: [ 722.193213][ T3439] alloc_pid+0x6bb/0x930 [ 722.197466][ T3439] copy_process+0x1206/0x2400 [ 722.202154][ T3439] kernel_clone+0x1c0/0x5f0 [ 722.206660][ T3439] __se_sys_clone3+0x1f5/0x230 [ 722.211428][ T3439] __x64_sys_clone3+0x31/0x40 [ 722.216113][ T3439] x64_sys_call+0x580/0x3020 [ 722.220717][ T3439] do_syscall_64+0x136/0x3c0 [ 722.225329][ T3439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.231323][ T3439] [ 722.233652][ T3439] read to 0xffffffff86c5c228 of 4 bytes by task 3439 on cpu 0: [ 722.241199][ T3439] copy_process+0x1b62/0x2400 [ 722.245882][ T3439] kernel_clone+0x1c0/0x5f0 [ 722.250390][ T3439] user_mode_thread+0x9c/0xd0 [ 722.255072][ T3439] call_usermodehelper_exec_work+0x7a/0x160 [ 722.260997][ T3439] process_scheduled_works+0x4d4/0x9a0 [ 722.266470][ T3439] worker_thread+0x569/0x750 [ 722.271086][ T3439] kthread+0x221/0x270 [ 722.275176][ T3439] ret_from_fork+0x146/0x330 [ 722.279778][ T3439] ret_from_fork_asm+0x1a/0x30 [ 722.284558][ T3439] [ 722.286894][ T3439] value changed: 0x8000010d -> 0x8000010e [ 722.292622][ T3439] [ 722.294958][ T3439] Reported by Kernel Concurrency Sanitizer on: [ 722.301113][ T3439] CPU: 0 UID: 0 PID: 3439 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(lazy) [ 722.310580][ T3439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 722.320640][ T3439] Workqueue: events_unbound call_usermodehelper_exec_work [ 722.327771][ T3439] ================================================================== [ 722.457253][T17737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 722.476431][T17737] IPVS: wlc: UDP 224.0.0.2:0 - no destination available