last executing test programs: 9.201989152s ago: executing program 4 (id=2595): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000)={[{@debug}, {}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0xfffffffffffffffb}, {0x0, 0x3ffffffffffffd, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) ptrace(0x11, r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r6 = syz_open_pts(0xffffffffffffffff, 0x40000) dup3(r6, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7ffff000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) connect$nfc_raw(r5, &(0x7f00000001c0)={0x27, r7, 0x0, 0x4}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="880000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000024000e800c000280040001009307000014000180080001"], 0x88}}, 0x0) 9.102734813s ago: executing program 4 (id=2597): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000)={[{@debug}, {}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0xfffffffffffffffb}, {0x0, 0x3ffffffffffffd, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) ptrace(0x11, r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r5, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r6 = syz_open_pts(r5, 0x40000) dup3(r6, r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) connect$nfc_raw(r4, &(0x7f00000001c0)={0x27, r7, 0x0, 0x4}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="880000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000024000e800c000280040001009307000014000180080001"], 0x88}}, 0x0) 8.245441952s ago: executing program 4 (id=2600): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x250f, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000018000902000000000000000002000000080000000000000010001e80"], 0x2c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000540)={r2, 0x1, 0xff80}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000440)={r2, 0x1, 0x4}, &(0x7f00000000c0)=0x8) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) io_setup(0x239f, &(0x7f0000000380)) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f0000000680)={0xc80a4000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x3c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xd}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xd}, @TCA_PIE_LIMIT={0x8, 0x2, 0x2}, @TCA_PIE_ECN={0x8}, @TCA_PIE_BETA={0x8, 0x5, 0x20}, @TCA_PIE_ALPHA={0x8, 0x4, 0x17}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x68}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000003c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x275b, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f00000001c0)=0x6a, 0x4) recvmmsg(r6, &(0x7f0000006580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/17, 0x11}, 0x5}], 0x1, 0x45833af92e4a39ff, 0x0) 8.196256012s ago: executing program 3 (id=2602): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c400000019000100feffff056663d600e000000200000000108da341c7120711363300a68e3600"/58, @ANYRES32=0x0, @ANYRES32=r3, @ANYRESOCT=r0], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 7.212902673s ago: executing program 4 (id=2607): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000)={[{@debug}, {}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0xfffffffffffffffb}, {0x0, 0x3ffffffffffffd, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) ptrace(0x11, r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r6 = syz_open_pts(0xffffffffffffffff, 0x40000) dup3(r6, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7ffff000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) connect$nfc_raw(r5, &(0x7f00000001c0)={0x27, r7, 0x0, 0x4}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="880000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000024000e800c000280040001009307000014000180080001"], 0x88}}, 0x0) 7.050669905s ago: executing program 4 (id=2609): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x250f, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000018000902000000000000000002000000080000000000000010001e80"], 0x2c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000540)={r2, 0x1, 0xff80}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000440)={r2, 0x1, 0x4}, &(0x7f00000000c0)=0x8) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) io_setup(0x239f, &(0x7f0000000380)) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f0000000680)={0xc80a4000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x3c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xd}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xd}, @TCA_PIE_LIMIT={0x8, 0x2, 0x2}, @TCA_PIE_ECN={0x8}, @TCA_PIE_BETA={0x8, 0x5, 0x20}, @TCA_PIE_ALPHA={0x8, 0x4, 0x17}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x68}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000003c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x275b, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f00000001c0)=0x6a, 0x4) recvmmsg(r6, &(0x7f0000006580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/17, 0x11}, 0x5}], 0x1, 0x45833af92e4a39ff, 0x0) 5.64907751s ago: executing program 4 (id=2613): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c400000019000100feffff056663d600e000000200000000108da341c7120711363300a68e360000000000000000000000000000000000000000008700"/77, @ANYRES32=r3, @ANYRESOCT=r0], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 2.744304671s ago: executing program 0 (id=2625): syslog(0x2, &(0x7f0000000000)=""/10, 0xa) syslog(0x2, &(0x7f0000000040)=""/149, 0x95) syslog(0x2, &(0x7f0000000100)=""/1, 0x1) syslog(0x4, &(0x7f0000000140)=""/59, 0x3b) syslog(0xa, &(0x7f0000000180)=""/95, 0x5f) syslog(0x1, 0x0, 0x0) syslog(0x9, &(0x7f0000000240)=""/220, 0xdc) syslog(0x4, &(0x7f0000000340)=""/153, 0x99) syslog(0x2, &(0x7f0000000400)=""/151, 0x97) syslog(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800aecb8b121fff26bd70000100000000000000f890d56664a6379696b3db76f68ae6ba80ad8e6e812e55bf9e5d2d8f5845d4974362867fa577e81f6b93", @ANYRES32=0x0, @ANYBLOB="0000000011420100180012800b00010067656e65766500000800028004000600"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syslog(0x3, 0x0, 0x0) syslog(0x2, &(0x7f0000000200)=""/37, 0x25) syslog(0x9, &(0x7f0000000700)=""/200, 0xc8) syslog(0xb7586255, &(0x7f0000000800)=""/87, 0x57) syslog(0x4, &(0x7f0000002d40)=""/18, 0x12) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.743288141s ago: executing program 3 (id=2626): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() r2 = syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000001f80)={0x9, 0x1cc5}, 0xc) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r3 = fsopen(&(0x7f00000000c0)='iso9660\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) io_uring_setup(0x40c1, &(0x7f0000000080)={0x0, 0x9789, 0x800, 0x2, 0x1e3}) 2.631524022s ago: executing program 3 (id=2627): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7201}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r3}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 2.510622713s ago: executing program 3 (id=2629): openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec0000002100010028bd700000000000e000000200000000000000000000000087e9000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b66b6e00000000009c00110000000000000000000000ffff0000000000000000000000000000ffffac1414bbfc020000000000000000000000000000fe880000000000000000000000000101320000000200000002000a0000000000000000000000ffff00000000ff01000000000000000000000000000164010102000000000000000000000000fc0200000000000000000000000000003c000000000000000a000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r5 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x4004e01110e0ab67}, 0x0, 0x8, r5, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x60000726) 2.433462334s ago: executing program 0 (id=2632): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000)={[{@debug}, {}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0xfffffffffffffffb}, {0x0, 0x3ffffffffffffd, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) ptrace(0x11, r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r5, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r6 = syz_open_pts(r5, 0x40000) dup3(r6, r5, 0x0) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) connect$nfc_raw(r4, &(0x7f00000001c0)={0x27, r7, 0x0, 0x4}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="880000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000024000e800c000280040001009307000014000180080001"], 0x88}}, 0x0) 2.398411695s ago: executing program 3 (id=2633): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000002240)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000aa3d07f9d7213c49f804f0639e0aa0a704c0e2110f3e9846eb56f7e300260a78be1c7bb3687e5b3f8e25f35676d9e9b1b91589d771"], 0x50) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 2.287492586s ago: executing program 1 (id=2635): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="bad330fbc9b554000400", 0xa, 0x40, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(r2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000000)={0xffffffffffffffff, r2}) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4048840) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x20000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r4, 0x0, 0x1ba8847c99}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0\x00', r7, &(0x7f0000000500)='./file0\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x321, 0x70bd27, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4040000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @private}, &(0x7f0000000200)=0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{r1, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f40)={&(0x7f00000005c0), 0x0, 0x0, 0x0, 0x4181737d, r8}, 0x38) syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r5) listen(r0, 0x800) ppoll(0x0, 0x0, &(0x7f00000002c0)={0x0, 0x989680}, 0x0, 0x0) io_uring_setup(0x228e, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.286920455s ago: executing program 2 (id=2636): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x4e21, 0x7, 0x4e20, 0xfff7, 0xa, 0xa0, 0x0, 0xff}, {0x9, 0x4, 0x6, 0x5, 0x10, 0x80000001, 0x4, 0x8}, {0x7, 0x80000001, 0x800, 0x2}, 0x5, 0x6e6bb3, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d6, 0x2b}, 0x2, @in6=@loopback, 0x3502, 0x1, 0x0, 0x6, 0x7fffffff, 0x10000, 0x3}}, 0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) syz_clone(0x41000300, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000080)=""/176, 0xb0}, {&(0x7f0000000140)=""/208, 0xd0}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f00000005c0)=""/35, 0x23}, {&(0x7f0000000600)=""/130, 0x82}, {&(0x7f00000006c0)=""/105, 0x69}], 0x8, 0x9, 0x10000) 2.167433817s ago: executing program 3 (id=2637): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c400000019000100feffff056663d600e000000200000000108da341c7120711363300a68e360000000000000000000000000000000000000000008700"/77, @ANYRES32=0x0, @ANYRESOCT=r0], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 2.048538478s ago: executing program 2 (id=2638): r0 = socket(0x400000000010, 0x800, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xf6, 0x31c, &(0x7f0000000780)="$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") sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x60a, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) getsockopt(r2, 0x28, 0x7fff, 0x0, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x2f) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x68, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x583}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xf}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) 1.934829909s ago: executing program 1 (id=2639): socket$kcm(0x10, 0x2, 0x10) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x101001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r2, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r2, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0xfc, 0x0}}}}}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f00000000c0)) r3 = creat(0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000039, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105000000100000000000000000000003000000000200000002000000c961d230b80cf411c1c8ad99bc3fb48e9532a44279e2a71136ec0000000000000000000000000000004be4e220b0636179f425d4f319b1305b2ff5f872351b2bfe48bc7754144737593fb80ae377fe7dcd00d8ec1d2ee4a9652afc14724c587705a0e80dbcb768d538c7bbdfffec15d4e05e92a20a52c8c6e08f476c26bfcf3bdcd4173cd3ad4dc775d64c0e9be7"], 0x0, 0x53}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000"/253], 0x119) writev(r4, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a070400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(r6, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0xccb}, {0x6, 0xff}]}) ioctl$TIOCL_SELLOADLUT(r6, 0x541c, &(0x7f0000000000)={0x5, 0x5, 0x7, 0x8, 0x7}) writev(r1, &(0x7f0000001240)=[{&(0x7f0000000a40)}, {&(0x7f0000001740)="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", 0x17b}, {&(0x7f0000000500)="2a6dfe6b588f0649b7c62468b77834dbabbd4b954d", 0x15}, {&(0x7f0000001640)="acf5964b4d2aba2c68c363b6bc49a8c7becac3bbb7dfcc8b79d6d4f52be12eeb2b79d208ff301d18aa1e5b70729f3b4aa941103981c5f58d8d4971d20b6aa6c7bc3d371b296f014d7bec9aed7f966e46d306d93dabbef889580d6d6e78ba9c72b644dfe391899db31310e59eb3e734ccda545701b2fc7dbb748af3f4f2f22510c8965985c95e73ec6c46ac80a4a74288351133b2890706681f10d66dec0d89e27fdd35fe7ddfe33b4a8d99acecc1586f6d1d257e22e1bf7e390d6d4dbe967e616ccaba4ce0491838ad8469dbfe3c4280330a5c7fc0192c113affde67d5805e2181281f44c32efa30", 0xe8}, {&(0x7f0000000d00)="35b67d93a84d33eb70ff581e3a9d9d0da6dc5d9e513fd7f0d6a7e1a170a9fd02e1e8ab7be3d54f2942d30bb052ff1db99d44bbba505f4ec35bbda360e6b433a93f22eaa64d7024893d4a99395bd583c81e435a0b3c52004bf44246828d6b76a7bdae3a6cfbb9fb", 0x67}, {&(0x7f0000000d80)="3737510ba7998eb0a92eb479b9ac482e6adde06f82a7ed40961de2f2044db9ddc090c9ad2b99c28af1c0147e8302afcf6fdcf929bec6a1a7739a151623ff9e7b9f32748cb18596b18766bb9ec5d09bce07fd8016aeef37d95a4474f8c7a9299958fe", 0x62}, {0x0}, {&(0x7f0000000c00)="41c7c229ebe174b727f00ec3f1d02a27c4bab19ef5ff046bb5aaec1fa8b6d8b49c4ca80426f1d27aaa0a3a5f74b020a430b1cc1f485e8c9013fdfe42f6f11c3e2686e59c5a7738096c5826f4443b74e6640b8b42e5b049f8dd9b7ef8aca94c0a7f7553c48bca6b78498c8f52bea41749243422a96cabd158f601376639e11bd9acdcca6296ab8f4212d1c47c37329f2aa90197826b918c914e4d11f8a79eaaddf1", 0xa1}, {&(0x7f0000001040)="02e5570de9bd58f3ae924514eb95d3085d5b4ffc3ad1b8cdf7f7086f87dfad4ff604ecaacc625a44eea266710d093ac57e807436b57559bc78129208b4f028c7e81351dfef9e381d85c5d7f74e505af08f656fc416ece1fe515b610553eae1493e", 0x61}], 0x9) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x801) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) socket$inet6(0xa, 0x1, 0x0) 1.83253484s ago: executing program 2 (id=2640): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, 0x0, 0x4000004) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0xa96) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x15402, 0x2, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10) close(r2) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mmap$xdp(&(0x7f000057b000/0x1000)=nil, 0x1000, 0x1, 0x20032, 0xffffffffffffffff, 0x80000000) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000740)={0x1, 0x1, 0xb, 0x0, 0x92, 0x0}) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) socket$nl_route(0x10, 0x3, 0x0) 1.634732333s ago: executing program 1 (id=2641): unshare(0x6a040000) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x72, 0x0, 0xf}]}) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, '%\xa6\\:-+(#]]{{)($\\:*)]:\xa5'}, {0x20, 'cgroup.threads\x00'}, {}], 0xa, "56dfa15a4b7b64602b1b0d54c6d7e6f064bb54a160a4ff9b04a25e476ef3df4f2ede345b018febc89d165074a28f9ada695dcf8455d5160bd87c0d35e1f6f32748b18544a15934a3383c792299c4aae5240fb9cca8"}, 0x88) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000340)=[{0x5, 0x9, 0x0, 0x4}, {0x101, 0x90, 0x2, 0x800}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.550913614s ago: executing program 0 (id=2642): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x40000) 1.399514245s ago: executing program 0 (id=2643): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x1000000, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0xb, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffd84}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000000)=0x2, 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000001b00)={0x1, 0x1, 0x5, 0x0, 0x7}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000080)='vlan0\x00'}) write$binfmt_misc(r2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000ac0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000500)="f98bf57d5ee402b554fb67d061d3e4bc24008d3b898cdf198877bfb8b57d4a77c433e38842", 0x25, r3) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000002c40)={0xfff, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)}, {&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f0000000640)=""/149, 0x95}, {&(0x7f0000000700)=""/131, 0x83}, {&(0x7f00000007c0)=""/120, 0x78}, {&(0x7f0000000840)=""/247, 0xf7}, {&(0x7f0000000940)=""/116, 0x74}, {&(0x7f00000009c0)=""/226, 0xe2}, {&(0x7f0000001b40)=""/4096, 0x1000}], &(0x7f0000002c00)=[0xc, 0xa2a, 0x101, 0x4, 0x200000000, 0x6, 0xd2b, 0x7], 0xa}, 0x20) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 1.226030717s ago: executing program 0 (id=2644): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x414e40, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x108) close(r3) io_uring_setup(0x39a, &(0x7f0000000040)={0x0, 0x15d1, 0x8, 0x2, 0x318}) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async, rerun: 32) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x8, 0x4) (async, rerun: 32) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005f00010000000000000000000c"], 0x1c}], 0x1}, 0x0) 1.177039918s ago: executing program 0 (id=2645): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYRESOCT=r0], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 884.204871ms ago: executing program 2 (id=2646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x4804800, &(0x7f0000000000)="0b4bfe38c4acfa61ff29502d4a95669f71b6a15fa76eb91f31b6b977e1d754866148589a52f33d015b48b097ba4c98f4f756849466603139ee1d7a10e2dae7a92909e6d6fdfb13457b07da9c47147e47f7e07f594d682d2b985230f0ee0f7d89dedd2fae893abd6839cb352e83afb465d676f6d9558b85310ef70d907710dd76fe59d982b8aa415a16e8ddc84ae1113986e8a46231847dd97a00a888e1528efb8036073829d60a021aa557e529e198ef407034ef022e8f566fc48f4ec9ccdddcc7e7f4615b9976b844", 0xc9, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="ee99e90c7704dd2e11ae0bc3145d7fc3c4e4abf27b1950ca47bb2c195689d9e6d722267e36b370389096ea74ac2366ed2f1f448922ac58cba1f50d739bfe5be96f12ffe0dd7300ffbd62f83ed2e277d558187e9f82b07c1bdddf6971552ece75bc4a96fce5d3b471048b9cd1c0a6074b9bc171638231d20860a9e405ebf2542850b627a7130e18f1657faafa10") ptrace$pokeuser(0x6, r1, 0x3, 0x5) perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x120) setsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x4, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x118, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xd, 0x1e6}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff, 0xffffff00, 0xff000000], 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x1d, 0x8, 0x0, 0x1, 0x5}}}, {{@ipv6={@private0, @loopback, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r3, 0x9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, 0x21e}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x56}, 0x1, 0x0, 0x0, 0x40000}, 0x42) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r3, 0x20, &(0x7f0000000480)={&(0x7f00000002c0)=""/119, 0x77, 0x0, &(0x7f0000000400)=""/70, 0x46}}, 0x10) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 721.882632ms ago: executing program 2 (id=2647): socket$kcm(0x10, 0x2, 0x10) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x101001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r2, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r2, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0xfc, 0x0}}}}}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f00000000c0)) r3 = creat(0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000039, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105000000100000000000000000000003000000000200000002000000c961d230b80cf411c1c8ad99bc3fb48e9532a44279e2a71136ec0000000000000000000000000000004be4e220b0636179f425d4f319b1305b2ff5f872351b2bfe48bc7754144737593fb80ae377fe7dcd00d8ec1d2ee4a9652afc14724c587705a0e80dbcb768d538c7bbdfffec15d4e05e92a20a52c8c6e08f476c26bfcf3bdcd4173cd3ad4dc775d64c0e9be7"], 0x0, 0x53}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000"/253], 0x119) writev(r4, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a070400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(r6, &(0x7f00000029c0)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b3243078b089b3930076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0xccb}, {0x6, 0xff}]}) ioctl$TIOCL_SELLOADLUT(r6, 0x541c, &(0x7f0000000000)={0x5, 0x5, 0x7, 0x8, 0x7}) writev(r1, &(0x7f0000001240)=[{&(0x7f0000000a40)}, {&(0x7f0000001740)="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", 0x17b}, {&(0x7f0000000500)="2a6dfe6b588f0649b7c62468b77834dbabbd4b954d", 0x15}, {&(0x7f0000001640)="acf5964b4d2aba2c68c363b6bc49a8c7becac3bbb7dfcc8b79d6d4f52be12eeb2b79d208ff301d18aa1e5b70729f3b4aa941103981c5f58d8d4971d20b6aa6c7bc3d371b296f014d7bec9aed7f966e46d306d93dabbef889580d6d6e78ba9c72b644dfe391899db31310e59eb3e734ccda545701b2fc7dbb748af3f4f2f22510c8965985c95e73ec6c46ac80a4a74288351133b2890706681f10d66dec0d89e27fdd35fe7ddfe33b4a8d99acecc1586f6d1d257e22e1bf7e390d6d4dbe967e616ccaba4ce0491838ad8469dbfe3c4280330a5c7fc0192c113affde67d5805e2181281f44c32efa30", 0xe8}, {&(0x7f0000000d00)="35b67d93a84d33eb70ff581e3a9d9d0da6dc5d9e513fd7f0d6a7e1a170a9fd02e1e8ab7be3d54f2942d30bb052ff1db99d44bbba505f4ec35bbda360e6b433a93f22eaa64d7024893d4a99395bd583c81e435a0b3c52004bf44246828d6b76a7bdae3a6cfbb9fb", 0x67}, {&(0x7f0000000d80)="3737510ba7998eb0a92eb479b9ac482e6adde06f82a7ed40961de2f2044db9ddc090c9ad2b99c28af1c0147e8302afcf6fdcf929bec6a1a7739a151623ff9e7b9f32748cb18596b18766bb9ec5d09bce07fd8016aeef37d95a4474f8c7a9299958fe", 0x62}, {0x0}, {&(0x7f0000000c00)="41c7c229ebe174b727f00ec3f1d02a27c4bab19ef5ff046bb5aaec1fa8b6d8b49c4ca80426f1d27aaa0a3a5f74b020a430b1cc1f485e8c9013fdfe42f6f11c3e2686e59c5a7738096c5826f4443b74e6640b8b42e5b049f8dd9b7ef8aca94c0a7f7553c48bca6b78498c8f52bea41749243422a96cabd158f601376639e11bd9acdcca6296ab8f4212d1c47c37329f2aa90197826b918c914e4d11f8a79eaaddf1", 0xa1}, {&(0x7f0000001040)="02e5570de9bd58f3ae924514eb95d3085d5b4ffc3ad1b8cdf7f7086f87dfad4ff604ecaacc625a44eea266710d093ac57e807436b57559bc78129208b4f028c7e81351dfef9e381d85c5d7f74e505af08f656fc416ece1fe515b610553eae1493e", 0x61}], 0x9) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x801) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) socket$inet6(0xa, 0x1, 0x0) 659.850143ms ago: executing program 1 (id=2648): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc050) unshare(0x6020400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="41032abd7000fbdfdf25070000004c0002"], 0x60}, 0x1, 0x0, 0x0, 0x20004815}, 0x8014) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x8, 0xb, 0xfffff024}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6, 0xfe, 0x0, 0x2000000}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) fgetxattr(r3, &(0x7f00000003c0)=@known='user.incfs.metadata\x00', &(0x7f0000000840)=""/56, 0x38) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x128, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x4001) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x12, r11, {0x0, 0xe}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x20002, 0x1, 0x8, 0x4}, 0x5, 0x0, 0x2003, 0x1, 0xffff, 0x2, 0xf, 0xa, 0x6, 0x6, {0x7, 0x1ff, 0x249, 0x6, 0x2, 0x3}}}}]}, 0x78}}, 0x4000010) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) r13 = dup(r12) write$UHID_INPUT(r13, &(0x7f0000001040)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3f09719b711b5d30101b080d29428f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cda701d5571f2b68811aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000805b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454de070018b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318266a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b50d8000000000000e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d50000008000000000535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a50c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b90f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f43c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375d3d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c559a5d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54ba094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177508069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b6397cf66df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de2b34406c931620e5313777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f4dd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff71ba460edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934015a24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d32466be2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fcea9fe1e2d75522ee0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f6dcd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc6404454d292a2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903739a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000002000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0xfffffffffffffe01}}, 0x1006) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="4c5afffffcffffff186500000d000000000000000200000085100000f8ffffff104e0d000700000085006eda00570000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000000000060000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r14, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 305.475067ms ago: executing program 2 (id=2649): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x250f, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000018000902000000000000000002000000080000000000000010001e80"], 0x2c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000540)={r2, 0x1, 0xff80}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000440)={r2, 0x1, 0x4}, &(0x7f00000000c0)=0x8) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) io_setup(0x239f, &(0x7f0000000380)) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f0000000680)={0xc80a4000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x3c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xd}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xd}, @TCA_PIE_LIMIT={0x8, 0x2, 0x2}, @TCA_PIE_ECN={0x8}, @TCA_PIE_BETA={0x8, 0x5, 0x20}, @TCA_PIE_ALPHA={0x8, 0x4, 0x17}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x68}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000003c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x275b, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f00000001c0)=0x6a, 0x4) recvmmsg(r6, &(0x7f0000006580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/17, 0x11}, 0x5}], 0x1, 0x45833af92e4a39ff, 0x0) 243.913608ms ago: executing program 1 (id=2650): r0 = syz_clone(0x82000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) pidfd_getfd(0xffffffffffffffff, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0xffffffff, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) msgsnd(0x0, 0x0, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000fe1294", 0x2e}], 0x1}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000100)={&(0x7f00000000c0)=""/40, 0x28}) socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}}, 0x0) 0s ago: executing program 1 (id=2651): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xff, 0x10001}, 0xd, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="f0000000100007000000000000000000ff020000000000000000000000000001ac1414aa0000000000000000000000004e200000000000000000000075000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000100000000000000000000000000000000000000000feffffffffffffff000000000000000000002000000000000700000000000400000000000000000000000400fdffffffe80a000000000000000000000a0004007000000000000000"], 0xf0}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r2 = syz_open_pts(r1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10002}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x4040014) r4 = dup3(r2, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) read$watch_queue(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): 245.101883][ T8488] RBP: 00007fdb8b507090 R08: 0000000000000000 R09: 0000000000000000 [ 245.101899][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.101933][ T8488] R13: 00007fdb8cd26038 R14: 00007fdb8cd25fa0 R15: 00007fff16810768 [ 245.101951][ T8488] [ 245.103696][ T28] audit: type=1400 audit(245.003:10006): avc: denied { open } for pid=8487 comm="syz.0.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 245.351668][ T28] audit: type=1400 audit(245.073:10007): avc: denied { execmem } for pid=8489 comm="syz.1.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 245.388817][ T28] audit: type=1400 audit(245.143:10008): avc: denied { open } for pid=8489 comm="syz.1.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 245.527504][ T8503] netlink: 'syz.4.1602': attribute type 1 has an invalid length. [ 245.559084][ T8503] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.761778][ T8510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1605'. [ 246.302255][ T8522] FAULT_INJECTION: forcing a failure. [ 246.302255][ T8522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.345919][ T8522] CPU: 0 UID: 0 PID: 8522 Comm: syz.2.1608 Tainted: G W syzkaller #0 PREEMPT(full) [ 246.346000][ T8522] Tainted: [W]=WARN [ 246.346009][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.346032][ T8522] Call Trace: [ 246.346040][ T8522] [ 246.346052][ T8522] __dump_stack+0x1d/0x30 [ 246.346080][ T8522] dump_stack_lvl+0x95/0xd0 [ 246.346103][ T8522] dump_stack+0x15/0x1b [ 246.346170][ T8522] should_fail_ex+0x263/0x280 [ 246.346203][ T8522] should_fail+0xb/0x20 [ 246.346233][ T8522] should_fail_usercopy+0x1a/0x20 [ 246.346326][ T8522] _copy_to_user+0x20/0xa0 [ 246.346387][ T8522] simple_read_from_buffer+0xb5/0x130 [ 246.346433][ T8522] proc_fail_nth_read+0x10e/0x150 [ 246.346501][ T8522] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.346528][ T8522] vfs_read+0x1ab/0x7f0 [ 246.346570][ T8522] ? __rcu_read_unlock+0x4e/0x70 [ 246.346597][ T8522] ? __fget_files+0x184/0x1c0 [ 246.346617][ T8522] ? mutex_lock+0x57/0x90 [ 246.346639][ T8522] ksys_read+0xdc/0x1a0 [ 246.346702][ T8522] __x64_sys_read+0x40/0x50 [ 246.346741][ T8522] x64_sys_call+0x2886/0x3020 [ 246.346800][ T8522] do_syscall_64+0x12c/0x3b0 [ 246.346834][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.346943][ T8522] RIP: 0033:0x7fcdd28bd60e [ 246.346963][ T8522] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 246.346987][ T8522] RSP: 002b:00007fcdd1356fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.347011][ T8522] RAX: ffffffffffffffda RBX: 00007fcdd13576c0 RCX: 00007fcdd28bd60e [ 246.347033][ T8522] RDX: 000000000000000f RSI: 00007fcdd13570a0 RDI: 0000000000000003 [ 246.347046][ T8522] RBP: 00007fcdd1357090 R08: 0000000000000000 R09: 0000000000000000 [ 246.347064][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.347076][ T8522] R13: 00007fcdd2b76038 R14: 00007fcdd2b75fa0 R15: 00007ffe52dfd8c8 [ 246.347095][ T8522] [ 247.020138][ T8530] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1611'. [ 247.213702][ T8536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1613'. [ 247.620565][ T8543] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 247.678104][ T8543] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.270105][ T8558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1620'. [ 249.784329][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 249.784343][ T28] audit: type=1400 audit(249.743:10128): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.860159][ T28] audit: type=1400 audit(249.803:10129): avc: denied { create } for pid=8562 comm="syz.3.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 249.912153][ T28] audit: type=1400 audit(249.803:10130): avc: denied { create } for pid=8562 comm="syz.3.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 249.962765][ T28] audit: type=1400 audit(249.803:10131): avc: denied { bpf } for pid=8562 comm="syz.3.1621" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 250.019218][ T28] audit: type=1400 audit(249.963:10132): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.082216][ T28] audit: type=1400 audit(249.983:10133): avc: denied { read } for pid=8564 comm="syz.4.1622" dev="nsfs" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 250.131992][ T28] audit: type=1400 audit(250.013:10134): avc: denied { read } for pid=8564 comm="syz.4.1622" dev="nsfs" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 250.188527][ T28] audit: type=1400 audit(250.013:10135): avc: denied { open } for pid=8564 comm="syz.4.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 250.229179][ T28] audit: type=1400 audit(250.073:10136): avc: denied { create } for pid=8562 comm="syz.3.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 250.289158][ T28] audit: type=1400 audit(250.083:10137): avc: denied { create } for pid=8562 comm="syz.3.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 251.109380][ T8581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1627'. [ 252.111231][ T8611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1636'. [ 252.387596][ T8620] syzkaller0: entered promiscuous mode [ 252.407651][ T8620] syzkaller0: entered allmulticast mode [ 253.825442][ T8642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1645'. [ 254.800304][ T28] kauditd_printk_skb: 139 callbacks suppressed [ 254.800322][ T28] audit: type=1400 audit(254.763:10277): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.862043][ T28] audit: type=1400 audit(254.813:10278): avc: denied { append } for pid=8652 comm="syz.3.1648" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 254.908400][ T28] audit: type=1400 audit(254.853:10279): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.962961][ T28] audit: type=1400 audit(254.893:10280): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 255.011881][ T28] audit: type=1400 audit(254.893:10281): avc: denied { create } for pid=8654 comm="syz.1.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 255.011915][ T28] audit: type=1400 audit(254.903:10282): avc: denied { write } for pid=8654 comm="syz.1.1649" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=0 [ 255.012007][ T28] audit: type=1400 audit(254.963:10283): avc: denied { bpf } for pid=8654 comm="syz.1.1649" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 255.012036][ T28] audit: type=1400 audit(254.963:10284): avc: denied { read write } for pid=8654 comm="syz.1.1649" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0 [ 255.259384][ T28] audit: type=1400 audit(255.223:10285): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 255.313664][ T28] audit: type=1400 audit(255.263:10286): avc: denied { open } for pid=8661 comm="syz.1.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 255.822559][ T8677] netlink: 'syz.3.1656': attribute type 7 has an invalid length. [ 255.868169][ T122] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.876974][ T122] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.885761][ T8677] netlink: 'syz.3.1656': attribute type 7 has an invalid length. [ 255.904125][ T122] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.925999][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.425082][ T8711] xt_TCPMSS: Only works on TCP SYN packets [ 257.457401][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1666'. [ 257.511110][ T8717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8717 comm=syz.0.1666 [ 257.833518][ T8723] netlink: 'syz.2.1670': attribute type 1 has an invalid length. [ 259.090927][ T8753] FAULT_INJECTION: forcing a failure. [ 259.090927][ T8753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.137432][ T8753] CPU: 0 UID: 0 PID: 8753 Comm: syz.4.1679 Tainted: G W syzkaller #0 PREEMPT(full) [ 259.137474][ T8753] Tainted: [W]=WARN [ 259.137483][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.137496][ T8753] Call Trace: [ 259.137502][ T8753] [ 259.137563][ T8753] __dump_stack+0x1d/0x30 [ 259.137660][ T8753] dump_stack_lvl+0x95/0xd0 [ 259.137686][ T8753] dump_stack+0x15/0x1b [ 259.137707][ T8753] should_fail_ex+0x263/0x280 [ 259.137810][ T8753] should_fail+0xb/0x20 [ 259.137845][ T8753] should_fail_usercopy+0x1a/0x20 [ 259.137875][ T8753] _copy_from_user+0x1c/0xb0 [ 259.137962][ T8753] do_semtimedop+0x152/0x220 [ 259.138014][ T8753] __x64_sys_semtimedop+0xc8/0xf0 [ 259.138051][ T8753] x64_sys_call+0x2e5e/0x3020 [ 259.138079][ T8753] do_syscall_64+0x12c/0x3b0 [ 259.138115][ T8753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.138180][ T8753] RIP: 0033:0x7f2daafccdd9 [ 259.138199][ T8753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.138217][ T8753] RSP: 002b:00007f2da9a27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 259.138237][ T8753] RAX: ffffffffffffffda RBX: 00007f2dab245fa0 RCX: 00007f2daafccdd9 [ 259.138251][ T8753] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000000 [ 259.138264][ T8753] RBP: 00007f2da9a27090 R08: 0000000000000000 R09: 0000000000000000 [ 259.138328][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.138342][ T8753] R13: 00007f2dab246038 R14: 00007f2dab245fa0 R15: 00007ffc5525f048 [ 259.138361][ T8753] [ 259.509740][ T8759] netlink: 'syz.3.1681': attribute type 1 has an invalid length. [ 259.807518][ T28] kauditd_printk_skb: 234 callbacks suppressed [ 259.807534][ T28] audit: type=1400 audit(259.773:10521): avc: denied { create } for pid=8761 comm="syz.3.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 259.848720][ T28] audit: type=1400 audit(259.803:10522): avc: denied { create } for pid=8761 comm="syz.3.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 259.888699][ T28] audit: type=1400 audit(259.843:10523): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 259.944268][ T28] audit: type=1400 audit(259.903:10524): avc: denied { create } for pid=8764 comm="syz.0.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 259.984606][ T28] audit: type=1400 audit(259.923:10525): avc: denied { write } for pid=8764 comm="syz.0.1683" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=0 [ 260.057835][ T28] audit: type=1400 audit(260.023:10526): avc: denied { bpf } for pid=8764 comm="syz.0.1683" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 260.105895][ T28] audit: type=1400 audit(260.043:10527): avc: denied { read write } for pid=8764 comm="syz.0.1683" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0 [ 260.218134][ T28] audit: type=1400 audit(260.183:10528): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 260.281957][ T28] audit: type=1400 audit(260.213:10529): avc: denied { prog_load } for pid=8767 comm="syz.4.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 260.320280][ T28] audit: type=1400 audit(260.233:10530): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 260.674013][ T8784] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1690'. [ 260.727545][ T8789] netlink: 'syz.1.1692': attribute type 1 has an invalid length. [ 261.564233][ T8803] FAULT_INJECTION: forcing a failure. [ 261.564233][ T8803] name failslab, interval 1, probability 0, space 0, times 0 [ 261.621380][ T8803] CPU: 1 UID: 0 PID: 8803 Comm: syz.3.1695 Tainted: G W syzkaller #0 PREEMPT(full) [ 261.621467][ T8803] Tainted: [W]=WARN [ 261.621476][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.621491][ T8803] Call Trace: [ 261.621500][ T8803] [ 261.621510][ T8803] __dump_stack+0x1d/0x30 [ 261.621615][ T8803] dump_stack_lvl+0x95/0xd0 [ 261.621636][ T8803] dump_stack+0x15/0x1b [ 261.621660][ T8803] should_fail_ex+0x263/0x280 [ 261.621696][ T8803] should_failslab+0x8c/0xb0 [ 261.621755][ T8803] kmem_cache_alloc_noprof+0x66/0x3f0 [ 261.621796][ T8803] ? security_inode_alloc+0x37/0x100 [ 261.621838][ T8803] security_inode_alloc+0x37/0x100 [ 261.621866][ T8803] inode_init_always_gfp+0x4a0/0x4e0 [ 261.621906][ T8803] alloc_inode+0x58/0x170 [ 261.621948][ T8803] path_from_stashed+0xec/0x330 [ 261.621976][ T8803] ? __pfx_proc_ns_get_link+0x10/0x10 [ 261.622011][ T8803] ns_get_path+0x62/0x80 [ 261.622096][ T8803] proc_ns_get_link+0x80/0x160 [ 261.622131][ T8803] pick_link+0x4b1/0x8e0 [ 261.622162][ T8803] step_into_slowpath+0x36a/0x4c0 [ 261.622195][ T8803] path_openat+0x15d0/0x2050 [ 261.622295][ T8803] do_file_open+0x16c/0x290 [ 261.622340][ T8803] do_sys_openat2+0x94/0x130 [ 261.622370][ T8803] __x64_sys_openat+0xf2/0x120 [ 261.622424][ T8803] x64_sys_call+0x1e39/0x3020 [ 261.622451][ T8803] do_syscall_64+0x12c/0x3b0 [ 261.622483][ T8803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.622534][ T8803] RIP: 0033:0x7f7bafd7d60e [ 261.622609][ T8803] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 261.622631][ T8803] RSP: 002b:00007f7bae80eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 261.622708][ T8803] RAX: ffffffffffffffda RBX: 00007f7bae80f6c0 RCX: 00007f7bafd7d60e [ 261.622725][ T8803] RDX: 0000000000000002 RSI: 00007f7bae80ef90 RDI: ffffffffffffff9c [ 261.622778][ T8803] RBP: 00007f7bae80f090 R08: 0000000000000000 R09: 0000000000000000 [ 261.622860][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.622875][ T8803] R13: 00007f7bb0036038 R14: 00007f7bb0035fa0 R15: 00007ffc82f39118 [ 261.622899][ T8803] [ 261.966082][ T8809] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1698'. [ 262.406937][ T8825] netlink: 'syz.0.1703': attribute type 1 has an invalid length. [ 262.496349][ T8825] 8021q: adding VLAN 0 to HW filter on device bond11 [ 262.930001][ T8841] netlink: 'syz.3.1707': attribute type 30 has an invalid length. [ 263.688345][ T8852] netlink: 'syz.4.1709': attribute type 30 has an invalid length. [ 264.166266][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'. [ 264.885621][ T28] kauditd_printk_skb: 162 callbacks suppressed [ 264.885677][ T28] audit: type=1400 audit(264.843:10693): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 264.962286][ T28] audit: type=1400 audit(264.923:10694): avc: denied { open } for pid=8867 comm="syz.4.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 265.002854][ T8868] netlink: 'syz.4.1715': attribute type 1 has an invalid length. [ 265.108539][ T8868] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.219293][ T28] audit: type=1400 audit(265.183:10695): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 265.273522][ T28] audit: type=1400 audit(265.233:10696): avc: denied { module_request } for pid=8872 comm="syz.3.1716" kmod="ipt_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 265.332661][ T28] audit: type=1400 audit(265.233:10697): avc: denied { create } for pid=8872 comm="syz.3.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 265.396455][ T28] audit: type=1400 audit(265.273:10698): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 265.460237][ T28] audit: type=1400 audit(265.283:10699): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 265.524117][ T28] audit: type=1400 audit(265.293:10700): avc: denied { open } for pid=8877 comm="syz.4.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 265.578152][ T28] audit: type=1400 audit(265.293:10701): avc: denied { create } for pid=8877 comm="syz.4.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 265.629956][ T28] audit: type=1400 audit(265.293:10702): avc: denied { create } for pid=8877 comm="syz.4.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 266.603169][ T8888] netlink: 'syz.4.1720': attribute type 30 has an invalid length. [ 266.690074][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'. [ 266.724354][ T8890] FAULT_INJECTION: forcing a failure. [ 266.724354][ T8890] name failslab, interval 1, probability 0, space 0, times 0 [ 266.787045][ T8890] CPU: 0 UID: 0 PID: 8890 Comm: syz.0.1721 Tainted: G W syzkaller #0 PREEMPT(full) [ 266.787136][ T8890] Tainted: [W]=WARN [ 266.787143][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.787155][ T8890] Call Trace: [ 266.787161][ T8890] [ 266.787169][ T8890] __dump_stack+0x1d/0x30 [ 266.787268][ T8890] dump_stack_lvl+0x95/0xd0 [ 266.787306][ T8890] dump_stack+0x15/0x1b [ 266.787330][ T8890] should_fail_ex+0x263/0x280 [ 266.787365][ T8890] should_failslab+0x8c/0xb0 [ 266.787507][ T8890] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 266.787551][ T8890] ? __alloc_skb+0x2d6/0x690 [ 266.787573][ T8890] ? __rtnl_unlock+0x95/0xb0 [ 266.787647][ T8890] __alloc_skb+0x2d6/0x690 [ 266.787664][ T8890] ? __alloc_skb+0x200/0x690 [ 266.787792][ T8890] netlink_ack+0xfd/0x500 [ 266.787881][ T8890] netlink_rcv_skb+0x192/0x220 [ 266.787915][ T8890] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 266.787961][ T8890] rtnetlink_rcv+0x1c/0x30 [ 266.787986][ T8890] netlink_unicast+0x5a8/0x680 [ 266.788089][ T8890] netlink_sendmsg+0x5c8/0x6f0 [ 266.788126][ T8890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.788154][ T8890] ____sys_sendmsg+0x563/0x5b0 [ 266.788184][ T8890] ___sys_sendmsg+0x195/0x1e0 [ 266.788245][ T8890] __x64_sys_sendmsg+0xd4/0x160 [ 266.788279][ T8890] x64_sys_call+0x194c/0x3020 [ 266.788311][ T8890] do_syscall_64+0x12c/0x3b0 [ 266.788349][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.788378][ T8890] RIP: 0033:0x7fdb8caacdd9 [ 266.788398][ T8890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.788422][ T8890] RSP: 002b:00007fdb8b507028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.788442][ T8890] RAX: ffffffffffffffda RBX: 00007fdb8cd25fa0 RCX: 00007fdb8caacdd9 [ 266.788492][ T8890] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 266.788567][ T8890] RBP: 00007fdb8b507090 R08: 0000000000000000 R09: 0000000000000000 [ 266.788579][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.788591][ T8890] R13: 00007fdb8cd26038 R14: 00007fdb8cd25fa0 R15: 00007fff16810768 [ 266.788615][ T8890] [ 267.232777][ T8901] netlink: 'syz.2.1724': attribute type 30 has an invalid length. [ 267.377267][ T8909] netlink: 'syz.1.1727': attribute type 1 has an invalid length. [ 267.434160][ T8909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.509460][ T8937] FAULT_INJECTION: forcing a failure. [ 268.509460][ T8937] name failslab, interval 1, probability 0, space 0, times 0 [ 268.565541][ T8937] CPU: 0 UID: 0 PID: 8937 Comm: syz.2.1735 Tainted: G W syzkaller #0 PREEMPT(full) [ 268.565582][ T8937] Tainted: [W]=WARN [ 268.565591][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 268.565607][ T8937] Call Trace: [ 268.565616][ T8937] [ 268.565663][ T8937] __dump_stack+0x1d/0x30 [ 268.565693][ T8937] dump_stack_lvl+0x95/0xd0 [ 268.565713][ T8937] dump_stack+0x15/0x1b [ 268.565737][ T8937] should_fail_ex+0x263/0x280 [ 268.565774][ T8937] should_failslab+0x8c/0xb0 [ 268.565831][ T8937] kmem_cache_alloc_noprof+0x66/0x3f0 [ 268.565882][ T8937] ? copy_mm+0xc5/0x370 [ 268.565975][ T8937] ? __pfx_it_real_fn+0x10/0x10 [ 268.566138][ T8937] copy_mm+0xc5/0x370 [ 268.566160][ T8937] copy_process+0x1087/0x2370 [ 268.566271][ T8937] kernel_clone+0x1a5/0x5e0 [ 268.566295][ T8937] ? vfs_write+0x86e/0x9f0 [ 268.566446][ T8937] __x64_sys_clone+0x143/0x180 [ 268.566483][ T8937] x64_sys_call+0x1222/0x3020 [ 268.566513][ T8937] do_syscall_64+0x12c/0x3b0 [ 268.566544][ T8937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.566588][ T8937] RIP: 0033:0x7fcdd28fcdd9 [ 268.566603][ T8937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.566646][ T8937] RSP: 002b:00007fcdd1356fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 268.566667][ T8937] RAX: ffffffffffffffda RBX: 00007fcdd2b75fa0 RCX: 00007fcdd28fcdd9 [ 268.566686][ T8937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c2002000 [ 268.566702][ T8937] RBP: 00007fcdd1357090 R08: 0000000000000000 R09: 0000000000000000 [ 268.566753][ T8937] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 268.566768][ T8937] R13: 00007fcdd2b76038 R14: 00007fcdd2b75fa0 R15: 00007ffe52dfd8c8 [ 268.566792][ T8937] [ 269.236069][ T8953] macsec2: entered promiscuous mode [ 269.264914][ T8953] macsec2: entered allmulticast mode [ 269.389268][ T8956] netlink: 'syz.2.1741': attribute type 30 has an invalid length. [ 269.811774][ T8966] netlink: 'syz.3.1744': attribute type 30 has an invalid length. [ 270.389543][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 270.389560][ T28] audit: type=1400 audit(270.353:10841): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 270.471620][ T28] audit: type=1400 audit(270.423:10842): avc: denied { create } for pid=8970 comm="syz.2.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 270.532121][ T28] audit: type=1400 audit(270.423:10843): avc: denied { write } for pid=8970 comm="syz.2.1745" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=0 [ 270.605937][ T28] audit: type=1400 audit(270.523:10844): avc: denied { bpf } for pid=8970 comm="syz.2.1745" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 270.655923][ T28] audit: type=1400 audit(270.523:10845): avc: denied { read write } for pid=8970 comm="syz.2.1745" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0 [ 270.656013][ T28] audit: type=1400 audit(270.553:10846): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 270.656048][ T28] audit: type=1400 audit(270.603:10847): avc: denied { open } for pid=8974 comm="syz.4.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 270.656184][ T28] audit: type=1400 audit(270.603:10848): avc: denied { create } for pid=8974 comm="syz.4.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 270.656213][ T28] audit: type=1400 audit(270.613:10849): avc: denied { create } for pid=8974 comm="syz.4.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 270.656240][ T28] audit: type=1400 audit(270.613:10850): avc: denied { bpf } for pid=8974 comm="syz.4.1746" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 271.774372][ T9000] netlink: 'syz.4.1755': attribute type 30 has an invalid length. [ 272.778244][ T9009] netlink: 'syz.1.1758': attribute type 30 has an invalid length. [ 272.792524][ T9010] No such timeout policy "syz1" [ 273.544733][ T9036] netlink: 'syz.4.1767': attribute type 30 has an invalid length. [ 274.639655][ T9058] netlink: 'syz.4.1773': attribute type 1 has an invalid length. [ 274.712529][ T9058] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.403149][ T28] kauditd_printk_skb: 171 callbacks suppressed [ 275.403219][ T28] audit: type=1400 audit(275.363:11022): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 275.478882][ T28] audit: type=1400 audit(275.443:11023): avc: denied { execmem } for pid=9067 comm="syz.4.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 275.583790][ T28] audit: type=1400 audit(275.543:11024): avc: denied { open } for pid=9067 comm="syz.4.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 275.632170][ T28] audit: type=1400 audit(275.543:11025): avc: denied { prog_load } for pid=9067 comm="syz.4.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 275.683855][ T28] audit: type=1400 audit(275.623:11026): avc: denied { read write } for pid=9067 comm="syz.4.1776" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 276.011820][ T28] audit: type=1400 audit(275.973:11027): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 276.072953][ T9075] netlink: 'syz.2.1778': attribute type 30 has an invalid length. [ 276.080875][ T28] audit: type=1400 audit(276.013:11028): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 276.147514][ T28] audit: type=1400 audit(276.033:11029): avc: denied { open } for pid=9074 comm="syz.2.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 276.195980][ T28] audit: type=1400 audit(276.033:11030): avc: denied { allowed } for pid=9074 comm="syz.2.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 277.031226][ T28] audit: type=1400 audit(276.993:11031): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 277.530306][ T9094] netlink: 'syz.0.1784': attribute type 1 has an invalid length. [ 277.586810][ T9094] 8021q: adding VLAN 0 to HW filter on device bond12 [ 277.734449][ T9105] team0: entered allmulticast mode [ 277.740057][ T9105] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.826681][ T9110] netlink: 'syz.3.1789': attribute type 30 has an invalid length. [ 279.010709][ T9137] netlink: 'syz.4.1796': attribute type 1 has an invalid length. [ 279.067316][ T9137] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.716555][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 280.716647][ T28] audit: type=1400 audit(280.683:11117): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.793826][ T28] audit: type=1400 audit(280.733:11118): avc: denied { prog_load } for pid=9148 comm="syz.3.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 280.837309][ T28] audit: type=1400 audit(280.733:11119): avc: denied { prog_load } for pid=9148 comm="syz.3.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 280.871570][ T28] audit: type=1400 audit(280.733:11120): avc: denied { open } for pid=9148 comm="syz.3.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 280.915873][ T28] audit: type=1400 audit(280.733:11121): avc: denied { execute } for pid=9148 comm="syz.3.1799" dev="tmpfs" ino=1350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 280.969241][ T28] audit: type=1400 audit(280.793:11122): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.969281][ T28] audit: type=1400 audit(280.813:11123): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.969359][ T28] audit: type=1400 audit(280.843:11124): avc: denied { create } for pid=9150 comm="syz.3.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 280.969399][ T28] audit: type=1400 audit(280.853:11125): avc: denied { mounton } for pid=9151 comm="syz.1.1801" path="/320/file0" dev="tmpfs" ino=1712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 280.969432][ T28] audit: type=1400 audit(280.853:11126): avc: denied { write } for pid=9150 comm="syz.3.1800" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=0 [ 281.323540][ T9163] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1804'. [ 281.360515][ T9167] netlink: 'syz.0.1806': attribute type 30 has an invalid length. [ 281.416153][ T9169] netlink: 'syz.3.1807': attribute type 1 has an invalid length. [ 281.447327][ T9169] 8021q: adding VLAN 0 to HW filter on device bond5 [ 281.810557][ T9188] netlink: 'syz.1.1812': attribute type 30 has an invalid length. [ 282.374207][ T9193] netlink: 'syz.0.1813': attribute type 30 has an invalid length. [ 282.921078][ T9209] netlink: 'syz.4.1818': attribute type 1 has an invalid length. [ 282.963333][ T9209] 8021q: adding VLAN 0 to HW filter on device bond8 [ 283.642855][ T9219] FAULT_INJECTION: forcing a failure. [ 283.642855][ T9219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.688737][ T9219] CPU: 0 UID: 0 PID: 9219 Comm: syz.0.1820 Tainted: G W syzkaller #0 PREEMPT(full) [ 283.688769][ T9219] Tainted: [W]=WARN [ 283.688844][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.688857][ T9219] Call Trace: [ 283.688863][ T9219] [ 283.688871][ T9219] __dump_stack+0x1d/0x30 [ 283.688901][ T9219] dump_stack_lvl+0x95/0xd0 [ 283.688923][ T9219] dump_stack+0x15/0x1b [ 283.689020][ T9219] should_fail_ex+0x263/0x280 [ 283.689056][ T9219] should_fail+0xb/0x20 [ 283.689151][ T9219] should_fail_usercopy+0x1a/0x20 [ 283.689186][ T9219] _copy_from_user+0x1c/0xb0 [ 283.689224][ T9219] copy_from_sockptr+0x5e/0x90 [ 283.689322][ T9219] do_ip_setsockopt+0x1a8e/0x2290 [ 283.689383][ T9219] ip_setsockopt+0x58/0x110 [ 283.689414][ T9219] udp_setsockopt+0x89/0xa0 [ 283.689459][ T9219] sock_common_setsockopt+0x69/0x80 [ 283.689501][ T9219] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 283.689535][ T9219] __sys_setsockopt+0x184/0x200 [ 283.689628][ T9219] __x64_sys_setsockopt+0x64/0x80 [ 283.689658][ T9219] x64_sys_call+0x2327/0x3020 [ 283.689690][ T9219] do_syscall_64+0x12c/0x3b0 [ 283.689724][ T9219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.689746][ T9219] RIP: 0033:0x7fdb8caacdd9 [ 283.689765][ T9219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.689862][ T9219] RSP: 002b:00007fdb8b507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 283.689890][ T9219] RAX: ffffffffffffffda RBX: 00007fdb8cd25fa0 RCX: 00007fdb8caacdd9 [ 283.689908][ T9219] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000003 [ 283.689924][ T9219] RBP: 00007fdb8b507090 R08: 000000000000000c R09: 0000000000000000 [ 283.689940][ T9219] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 283.689957][ T9219] R13: 00007fdb8cd26038 R14: 00007fdb8cd25fa0 R15: 00007fff16810768 [ 283.690000][ T9219] [ 285.727368][ T28] kauditd_printk_skb: 9854 callbacks suppressed [ 285.727384][ T28] audit: type=1400 audit(285.683:20981): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 285.766699][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 285.766719][ T3020] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 285.766735][ T3020] audit: backlog limit exceeded [ 285.766773][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 285.766785][ T3020] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 285.766801][ T3020] audit: backlog limit exceeded [ 285.766900][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 285.766912][ T3020] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 285.766924][ T3020] audit: backlog limit exceeded [ 286.115193][ T9237] netlink: 'syz.4.1826': attribute type 30 has an invalid length. [ 288.008518][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 290.045952][ T3548] Bluetooth: hci0: command 0x1003 tx timeout [ 290.052031][ T4533] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 290.086773][ T9318] netlink: 'syz.1.1858': attribute type 16 has an invalid length. [ 290.138093][ T9318] netlink: 64122 bytes leftover after parsing attributes in process `syz.1.1858'. [ 290.738196][ T28] kauditd_printk_skb: 23357 callbacks suppressed [ 290.738215][ T28] audit: type=1400 audit(290.703:43619): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 290.775238][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.782077][ T3020] audit: audit_lost=247 audit_rate_limit=0 audit_backlog_limit=64 [ 290.790290][ T28] audit: type=1400 audit(290.703:43620): avc: denied { create } for pid=9343 comm="syz.2.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 290.809812][ T3020] audit: backlog limit exceeded [ 290.815110][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.823390][ T9347] audit: audit_backlog=65 > audit_backlog_limit=64 [ 290.830371][ T9347] audit: audit_lost=248 audit_rate_limit=0 audit_backlog_limit=64 [ 290.838414][ T3020] audit: audit_lost=249 audit_rate_limit=0 audit_backlog_limit=64 [ 290.846463][ T9347] audit: backlog limit exceeded [ 291.122519][ T9360] netlink: 'syz.3.1875': attribute type 4 has an invalid length. [ 291.138970][ T9360] netlink: 'syz.3.1875': attribute type 6 has an invalid length. [ 291.158902][ T9360] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1875'. [ 292.209032][ T9393] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1890'. [ 292.245345][ T9393] : renamed from gretap0 [ 292.269577][ T9393] : entered promiscuous mode [ 292.291663][ T9393] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 293.596118][ T9450] syzkaller1: entered promiscuous mode [ 293.611551][ T9450] syzkaller1: entered allmulticast mode [ 294.209389][ T122] Bluetooth: hci0: Frame reassembly failed (-84) [ 294.225213][ T3548] Bluetooth: hci0: unexpected event 0x10 length: 0 < 1 [ 294.464876][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1939'. [ 295.727146][ T9530] syzkaller1: entered promiscuous mode [ 295.746057][ T28] kauditd_printk_skb: 31272 callbacks suppressed [ 295.746075][ T28] audit: type=1400 audit(295.713:74889): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 295.756751][ T9530] syzkaller1: entered allmulticast mode [ 295.795593][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.821366][ T9533] syzkaller1: entered promiscuous mode [ 295.824086][ T3020] audit: audit_lost=251 audit_rate_limit=0 audit_backlog_limit=64 [ 295.839483][ T9533] syzkaller1: entered allmulticast mode [ 295.845025][ T3020] audit: backlog limit exceeded [ 295.851257][ T28] audit: type=1400 audit(295.753:74890): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 295.872112][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.883019][ T3020] audit: audit_lost=252 audit_rate_limit=0 audit_backlog_limit=64 [ 295.900955][ T3020] audit: backlog limit exceeded [ 295.905990][ T28] audit: type=1400 audit(295.753:74891): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 295.938816][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 296.286165][ T4533] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 296.376431][ T9553] syzkaller0: entered promiscuous mode [ 296.386876][ T9553] syzkaller0: entered allmulticast mode [ 296.591906][ T122] Bluetooth: hci0: Frame reassembly failed (-84) [ 298.606052][ T4533] Bluetooth: hci0: command 0x1003 tx timeout [ 298.612188][ T3548] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 298.931123][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 299.139440][ T9650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2005'. [ 299.241956][ T9650] bond_slave_0: entered promiscuous mode [ 299.254009][ T9650] bond_slave_0: entered allmulticast mode [ 299.400516][ T9662] syzkaller1: entered promiscuous mode [ 299.416829][ T9662] syzkaller1: entered allmulticast mode [ 299.963228][ T9675] netlink: 'syz.2.2016': attribute type 30 has an invalid length. [ 300.755912][ T28] kauditd_printk_skb: 38172 callbacks suppressed [ 300.755930][ T28] audit: type=1400 audit(300.713:112315): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 300.774383][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 300.791094][ T3020] audit: audit_lost=503 audit_rate_limit=0 audit_backlog_limit=64 [ 300.799111][ T3020] audit: backlog limit exceeded [ 300.804150][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 300.811114][ T3020] audit: audit_lost=504 audit_rate_limit=0 audit_backlog_limit=64 [ 300.813241][ T28] audit: type=1400 audit(300.723:112316): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 300.821733][ T3020] audit: backlog limit exceeded [ 300.861335][ T28] audit: type=1400 audit(300.723:112317): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 300.870086][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 301.005902][ T4533] Bluetooth: hci0: command 0x1003 tx timeout [ 301.012123][ T3548] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 301.205868][ T9702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9702 comm=syz.1.2024 [ 301.228522][ T9704] FAULT_INJECTION: forcing a failure. [ 301.228522][ T9704] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.264417][ T9704] CPU: 0 UID: 0 PID: 9704 Comm: syz.4.2025 Tainted: G W syzkaller #0 PREEMPT(full) [ 301.264460][ T9704] Tainted: [W]=WARN [ 301.264467][ T9704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 301.264480][ T9704] Call Trace: [ 301.264488][ T9704] [ 301.264497][ T9704] __dump_stack+0x1d/0x30 [ 301.264526][ T9704] dump_stack_lvl+0x95/0xd0 [ 301.264574][ T9704] dump_stack+0x15/0x1b [ 301.264593][ T9704] should_fail_ex+0x263/0x280 [ 301.264620][ T9704] should_fail_alloc_page+0xf2/0x100 [ 301.264660][ T9704] __alloc_frozen_pages_noprof+0x108/0x350 [ 301.264705][ T9704] alloc_pages_mpol+0xb3/0x260 [ 301.264734][ T9704] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 301.264831][ T9704] do_wp_page+0x70e/0x2040 [ 301.264864][ T9704] ? _raw_spin_lock+0x52/0xa0 [ 301.264913][ T9704] ? __rcu_read_lock+0x36/0x50 [ 301.264953][ T9704] handle_mm_fault+0x8b9/0x2e70 [ 301.264988][ T9704] ? vma_start_read+0x1c7/0x2c0 [ 301.265049][ T9704] do_user_addr_fault+0x62f/0x1050 [ 301.265084][ T9704] ? ksys_mmap_pgoff+0xc1/0x310 [ 301.265181][ T9704] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 301.265255][ T9704] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 301.265286][ T9704] ? trace_page_fault_user+0x1f/0xa0 [ 301.265323][ T9704] exc_page_fault+0x62/0xa0 [ 301.265430][ T9704] asm_exc_page_fault+0x26/0x30 [ 301.265454][ T9704] RIP: 0033:0x7f2daae83e63 [ 301.265474][ T9704] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 301.265553][ T9704] RSP: 002b:00007f2da9a263c0 EFLAGS: 00010206 [ 301.265604][ T9704] RAX: 0000000000000181 RBX: 00007f2da9a26480 RCX: 00007f2da1607000 [ 301.265616][ T9704] RDX: 00007f2da9a26620 RSI: 0000000000000000 RDI: 00007f2da9a26520 [ 301.265637][ T9704] RBP: 000000000000007e R08: 0000000000000007 R09: 0000000000000059 [ 301.265653][ T9704] R10: 000000000000006c R11: 00007f2da9a26480 R12: 0000000000000001 [ 301.265771][ T9704] R13: 00007f2dab082900 R14: 000000000000000a R15: 00007f2da9a26520 [ 301.265796][ T9704] [ 301.472260][ T9704] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 301.596341][ T9710] syzkaller1: entered promiscuous mode [ 301.619714][ T9710] syzkaller1: entered allmulticast mode [ 301.752969][ T9717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.765386][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2033'. [ 301.782611][ T9717] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.816213][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2033'. [ 301.856107][ T9717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.902141][ T9717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.915723][ T9717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.929453][ T9717] veth1_vlan: left promiscuous mode [ 301.936715][ T9717] veth0_vlan: left promiscuous mode [ 301.942568][ T9717] veth0_vlan: entered promiscuous mode [ 301.952753][ T9717] veth1_vlan: entered promiscuous mode [ 301.964063][ T9717] veth1_macvtap: left promiscuous mode [ 301.971288][ T9717] veth0_macvtap: left promiscuous mode [ 301.977739][ T9717] veth0_macvtap: entered promiscuous mode [ 301.984941][ T9717] veth1_macvtap: entered promiscuous mode [ 301.996185][ T9717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.011305][ T9736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9736 comm=syz.2.2036 [ 302.034045][ T9717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.044477][ T9717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 302.053474][ T9717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 302.069108][ T9717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.077548][ T9717] geneve2: left promiscuous mode [ 302.236625][ T9750] netlink: 'syz.4.2038': attribute type 4 has an invalid length. [ 302.251115][ T9750] netlink: 'syz.4.2038': attribute type 6 has an invalid length. [ 302.269209][ T9750] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2038'. [ 302.398799][ T9768] netlink: 'syz.0.2046': attribute type 1 has an invalid length. [ 302.415735][ T9768] 8021q: adding VLAN 0 to HW filter on device bond13 [ 303.201903][ T9789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9789 comm=syz.3.2051 [ 303.366649][ T9795] bridge0: left promiscuous mode [ 303.444205][ T9797] netlink: 'syz.3.2052': attribute type 4 has an invalid length. [ 303.470289][ T9797] netlink: 'syz.3.2052': attribute type 6 has an invalid length. [ 303.497499][ T9797] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2052'. [ 303.630719][ T9803] netlink: 'syz.2.2054': attribute type 4 has an invalid length. [ 303.658744][ T9803] netlink: 'syz.2.2054': attribute type 6 has an invalid length. [ 303.689274][ T9803] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2054'. [ 304.188421][ T9818] netlink: 'syz.0.2055': attribute type 4 has an invalid length. [ 304.198212][ T9816] serio: Serial port ptm0 [ 304.208629][ T9818] netlink: 'syz.0.2055': attribute type 6 has an invalid length. [ 304.233339][ T9818] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2055'. [ 305.292490][ T9844] xt_TCPMSS: Only works on TCP SYN packets [ 305.611821][ T9855] validate_nla: 2 callbacks suppressed [ 305.611840][ T9855] netlink: 'syz.1.2070': attribute type 1 has an invalid length. [ 305.767710][ T28] kauditd_printk_skb: 20115 callbacks suppressed [ 305.767726][ T28] audit: type=1400 audit(305.723:130950): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 305.856809][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.868136][ T3020] audit: audit_lost=1000 audit_rate_limit=0 audit_backlog_limit=64 [ 305.882147][ T28] audit: type=1400 audit(305.733:130951): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 305.907402][ T3020] audit: backlog limit exceeded [ 305.915498][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.925704][ T3297] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.929646][ T3020] audit: audit_lost=1001 audit_rate_limit=0 audit_backlog_limit=64 [ 305.950583][ T3304] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.960442][ T28] audit: type=1400 audit(305.733:130952): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 305.995641][ T9863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9863 comm=syz.2.2073 [ 306.024148][ T9864] netlink: 'syz.1.2071': attribute type 4 has an invalid length. [ 306.081547][ T9864] netlink: 'syz.1.2071': attribute type 6 has an invalid length. [ 306.153032][ T9864] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2071'. [ 306.191884][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 306.916594][ T9895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2083'. [ 306.943240][ T9898] netlink: 'syz.4.2085': attribute type 1 has an invalid length. [ 306.984758][ T9898] netlink: 'syz.4.2085': attribute type 4 has an invalid length. [ 307.013518][ T9900] netlink: 'syz.1.2086': attribute type 30 has an invalid length. [ 307.035940][ T9898] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2085'. [ 307.278375][ T9906] netlink: 'syz.3.2087': attribute type 5 has an invalid length. [ 308.112190][ T9928] netlink: 'syz.0.2090': attribute type 4 has an invalid length. [ 308.136541][ T9928] netlink: 'syz.0.2090': attribute type 6 has an invalid length. [ 308.155468][ T9928] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2090'. [ 308.206109][ T3548] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 308.264826][ T9935] netlink: 'syz.2.2094': attribute type 30 has an invalid length. [ 308.856007][ T9947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2097'. [ 310.509146][ T9968] 8021q: adding VLAN 0 to HW filter on device bond5 [ 310.776065][ T28] kauditd_printk_skb: 17784 callbacks suppressed [ 310.776080][ T28] audit: type=1400 audit(310.743:148195): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 310.818292][ T9970] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 310.840857][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.855962][ T3020] audit: audit_lost=1183 audit_rate_limit=0 audit_backlog_limit=64 [ 310.864040][ T28] audit: type=1400 audit(310.773:148196): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 310.885131][ T3020] audit: backlog limit exceeded [ 310.890555][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.899656][ T3020] audit: audit_lost=1184 audit_rate_limit=0 audit_backlog_limit=64 [ 310.909724][ T28] audit: type=1400 audit(310.773:148197): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 310.937591][ T3020] audit: backlog limit exceeded [ 310.948941][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.993009][ T9978] validate_nla: 2 callbacks suppressed [ 310.993023][ T9978] netlink: 'syz.1.2106': attribute type 30 has an invalid length. [ 311.992779][ T9990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2109'. [ 312.334603][ T9997] netlink: 'syz.1.2111': attribute type 30 has an invalid length. [ 312.855417][T10008] netlink: 'syz.3.2115': attribute type 30 has an invalid length. [ 314.295562][ T30] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.295609][ T30] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.295766][ T30] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.295804][ T30] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.320890][T10040] Cannot find add_set index 0 as target [ 315.389633][T10037] syzkaller0: entered promiscuous mode [ 315.417283][T10037] syzkaller0: entered allmulticast mode [ 315.448743][T10040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2125'. [ 315.461325][T10044] netlink: 'syz.4.2126': attribute type 30 has an invalid length. [ 315.525782][T10040] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2125'. [ 315.591846][T10040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2125'. [ 315.660431][T10040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2125'. [ 315.723358][T10040] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2125'. [ 315.783490][T10040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2125'. [ 315.792697][ T28] kauditd_printk_skb: 16110 callbacks suppressed [ 315.792712][ T28] audit: type=1400 audit(315.743:163805): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 315.822433][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 315.841960][ T3020] audit: audit_lost=1353 audit_rate_limit=0 audit_backlog_limit=64 [ 315.860449][ T3020] audit: backlog limit exceeded [ 315.869491][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 315.870666][T10040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2125'. [ 315.884005][ T3020] audit: audit_lost=1354 audit_rate_limit=0 audit_backlog_limit=64 [ 315.886799][ T28] audit: type=1400 audit(315.743:163806): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 315.904043][ T3020] audit: backlog limit exceeded [ 315.938231][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 315.953128][ T3020] audit: audit_lost=1355 audit_rate_limit=0 audit_backlog_limit=64 [ 316.016433][T10040] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2125'. [ 316.068827][T10040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2125'. [ 316.308202][T10059] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 316.384114][T10059] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 317.112113][T10089] __nla_validate_parse: 21 callbacks suppressed [ 317.112132][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2139'. [ 317.844578][T10102] syzkaller0: entered promiscuous mode [ 317.877645][T10102] syzkaller0: entered allmulticast mode [ 317.913209][T10102] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2144'. [ 318.113907][T10105] netlink: 'syz.4.2145': attribute type 30 has an invalid length. [ 319.041918][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 319.060817][T10125] syzkaller0: entered promiscuous mode [ 319.076323][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 319.092199][T10125] syzkaller0: entered allmulticast mode [ 319.241069][T10135] netlink: 'syz.3.2155': attribute type 1 has an invalid length. [ 319.299007][T10135] 8021q: adding VLAN 0 to HW filter on device bond6 [ 320.797153][ T28] kauditd_printk_skb: 17518 callbacks suppressed [ 320.797169][ T28] audit: type=1400 audit(320.753:181324): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 320.836192][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 320.857804][T10163] audit: audit_backlog=65 > audit_backlog_limit=64 [ 320.867145][ T3020] audit: audit_lost=1356 audit_rate_limit=0 audit_backlog_limit=64 [ 320.887666][T10163] audit: audit_lost=1357 audit_rate_limit=0 audit_backlog_limit=64 [ 320.895507][ T28] audit: type=1400 audit(320.763:181325): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 320.896520][ T3020] audit: backlog limit exceeded [ 320.937343][T10163] audit: backlog limit exceeded [ 320.952097][ T28] audit: type=1400 audit(320.763:181326): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 320.978979][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 321.001367][T10166] netlink: 'syz.2.2164': attribute type 30 has an invalid length. [ 324.052463][T10210] netlink: 'syz.0.2175': attribute type 1 has an invalid length. [ 324.118511][T10210] 8021q: adding VLAN 0 to HW filter on device bond14 [ 325.805856][ T28] kauditd_printk_skb: 18849 callbacks suppressed [ 325.805875][ T28] audit: type=1400 audit(325.763:199595): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 325.839871][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 325.861022][ T3020] audit: audit_lost=1552 audit_rate_limit=0 audit_backlog_limit=64 [ 325.887680][ T3020] audit: backlog limit exceeded [ 325.897945][ T28] audit: type=1400 audit(325.773:199596): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 325.903426][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 325.927483][T10231] audit: audit_backlog=65 > audit_backlog_limit=64 [ 325.971445][ T3020] audit: audit_lost=1553 audit_rate_limit=0 audit_backlog_limit=64 [ 325.978819][T10231] audit: audit_lost=1554 audit_rate_limit=0 audit_backlog_limit=64 [ 325.987107][T10232] audit: audit_backlog=65 > audit_backlog_limit=64 [ 328.053994][T10238] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2182'. [ 328.674970][T10240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2183'. [ 328.978481][T10249] netlink: 'syz.2.2186': attribute type 1 has an invalid length. [ 329.012699][T10249] 8021q: adding VLAN 0 to HW filter on device bond4 [ 329.604181][T10276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10276 comm=syz.4.2194 [ 329.687165][T10282] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2197'. [ 329.773358][T10287] netlink: 'syz.0.2199': attribute type 1 has an invalid length. [ 329.789000][T10287] 8021q: adding VLAN 0 to HW filter on device bond15 [ 329.908882][T10301] FAULT_INJECTION: forcing a failure. [ 329.908882][T10301] name failslab, interval 1, probability 0, space 0, times 0 [ 329.922094][T10301] CPU: 0 UID: 0 PID: 10301 Comm: syz.2.2205 Tainted: G W syzkaller #0 PREEMPT(full) [ 329.922206][T10301] Tainted: [W]=WARN [ 329.922216][T10301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.922233][T10301] Call Trace: [ 329.922241][T10301] [ 329.922251][T10301] __dump_stack+0x1d/0x30 [ 329.922281][T10301] dump_stack_lvl+0x95/0xd0 [ 329.922376][T10301] dump_stack+0x15/0x1b [ 329.922400][T10301] should_fail_ex+0x263/0x280 [ 329.922437][T10301] should_failslab+0x8c/0xb0 [ 329.922476][T10301] kmem_cache_alloc_noprof+0x66/0x3f0 [ 329.922518][T10301] ? security_file_alloc+0x32/0xf0 [ 329.922545][T10301] security_file_alloc+0x32/0xf0 [ 329.922603][T10301] init_file+0x5b/0x1b0 [ 329.922629][T10301] alloc_empty_file+0x85/0x1e0 [ 329.922657][T10301] alloc_file_pseudo+0xf6/0x190 [ 329.922718][T10301] __shmem_file_setup+0x226/0x260 [ 329.922747][T10301] shmem_file_setup+0x3b/0x50 [ 329.922772][T10301] memfd_alloc_file+0x4e/0x300 [ 329.922808][T10301] __se_sys_memfd_create+0x2e1/0x3b0 [ 329.922922][T10301] __x64_sys_memfd_create+0x31/0x40 [ 329.922958][T10301] x64_sys_call+0x1f22/0x3020 [ 329.923047][T10301] do_syscall_64+0x12c/0x3b0 [ 329.923147][T10301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.923170][T10301] RIP: 0033:0x7fcdd28fcdd9 [ 329.923186][T10301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.923262][T10301] RSP: 002b:00007fcdd1356d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 329.923283][T10301] RAX: ffffffffffffffda RBX: 0000000000004078 RCX: 00007fcdd28fcdd9 [ 329.923297][T10301] RDX: 00007fcdd1356ddc RSI: 0000000000000000 RDI: 00007fcdd2992f49 [ 329.923313][T10301] RBP: 0000200000004080 R08: 00000000ffffffff R09: 0000000000000000 [ 329.923327][T10301] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 329.923344][T10301] R13: 00007fcdd1356ddc R14: 00007fcdd1356de0 R15: 00007ffe52dfd8c8 [ 329.923368][T10301] [ 330.180341][T10305] FAULT_INJECTION: forcing a failure. [ 330.180341][T10305] name failslab, interval 1, probability 0, space 0, times 0 [ 330.227562][T10305] CPU: 0 UID: 0 PID: 10305 Comm: syz.2.2207 Tainted: G W syzkaller #0 PREEMPT(full) [ 330.227603][T10305] Tainted: [W]=WARN [ 330.227610][T10305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.227622][T10305] Call Trace: [ 330.227629][T10305] [ 330.227638][T10305] __dump_stack+0x1d/0x30 [ 330.227814][T10305] dump_stack_lvl+0x95/0xd0 [ 330.227844][T10305] dump_stack+0x15/0x1b [ 330.227869][T10305] should_fail_ex+0x263/0x280 [ 330.227927][T10305] should_failslab+0x8c/0xb0 [ 330.227968][T10305] kmem_cache_alloc_noprof+0x66/0x3f0 [ 330.228010][T10305] ? security_inode_alloc+0x37/0x100 [ 330.228101][T10305] security_inode_alloc+0x37/0x100 [ 330.228132][T10305] inode_init_always_gfp+0x4a0/0x4e0 [ 330.228193][T10305] alloc_inode+0x58/0x170 [ 330.228332][T10305] path_from_stashed+0xec/0x330 [ 330.228354][T10305] ? __pfx_proc_ns_get_link+0x10/0x10 [ 330.228381][T10305] ns_get_path+0x62/0x80 [ 330.228510][T10305] proc_ns_get_link+0x80/0x160 [ 330.228537][T10305] pick_link+0x4b1/0x8e0 [ 330.228560][T10305] step_into_slowpath+0x36a/0x4c0 [ 330.228614][T10305] path_openat+0x15d0/0x2050 [ 330.228742][T10305] do_file_open+0x16c/0x290 [ 330.228860][T10305] do_sys_openat2+0x94/0x130 [ 330.228891][T10305] __x64_sys_openat+0xf2/0x120 [ 330.228917][T10305] x64_sys_call+0x1e39/0x3020 [ 330.228940][T10305] do_syscall_64+0x12c/0x3b0 [ 330.229069][T10305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.229099][T10305] RIP: 0033:0x7fcdd28bd60e [ 330.229120][T10305] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 330.229147][T10305] RSP: 002b:00007fcdd1356ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 330.229329][T10305] RAX: ffffffffffffffda RBX: 00007fcdd13576c0 RCX: 00007fcdd28bd60e [ 330.229346][T10305] RDX: 0000000000000002 RSI: 00007fcdd1356f90 RDI: ffffffffffffff9c [ 330.229360][T10305] RBP: 00007fcdd1357090 R08: 0000000000000000 R09: 0000000000000000 [ 330.229427][T10305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 330.229444][T10305] R13: 00007fcdd2b76038 R14: 00007fcdd2b75fa0 R15: 00007ffe52dfd8c8 [ 330.229469][T10305] [ 330.780951][T10337] netlink: 'syz.4.2217': attribute type 30 has an invalid length. [ 330.816614][ T28] kauditd_printk_skb: 22246 callbacks suppressed [ 330.816631][ T28] audit: type=1400 audit(330.783:219139): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.850280][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 330.857561][ T3020] audit: audit_lost=2456 audit_rate_limit=0 audit_backlog_limit=64 [ 330.865951][ T3020] audit: backlog limit exceeded [ 330.870970][ T28] audit: type=1400 audit(330.783:219140): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.892086][ T3020] audit: audit_backlog=66 > audit_backlog_limit=64 [ 330.899449][T10341] audit: audit_backlog=66 > audit_backlog_limit=64 [ 330.906229][ T3020] audit: audit_lost=2457 audit_rate_limit=0 audit_backlog_limit=64 [ 330.914239][ T3020] audit: backlog limit exceeded [ 330.919374][T10341] audit: audit_lost=2458 audit_rate_limit=0 audit_backlog_limit=64 [ 331.164985][T10351] netlink: 'syz.2.2220': attribute type 1 has an invalid length. [ 331.222777][T10351] 8021q: adding VLAN 0 to HW filter on device bond5 [ 331.610413][T10361] FAULT_INJECTION: forcing a failure. [ 331.610413][T10361] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 331.626194][T10361] CPU: 1 UID: 0 PID: 10361 Comm: syz.2.2224 Tainted: G W syzkaller #0 PREEMPT(full) [ 331.626230][T10361] Tainted: [W]=WARN [ 331.626239][T10361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.626302][T10361] Call Trace: [ 331.626309][T10361] [ 331.626324][T10361] __dump_stack+0x1d/0x30 [ 331.626354][T10361] dump_stack_lvl+0x95/0xd0 [ 331.626381][T10361] dump_stack+0x15/0x1b [ 331.626402][T10361] should_fail_ex+0x263/0x280 [ 331.626529][T10361] should_fail_alloc_page+0xf2/0x100 [ 331.626562][T10361] __alloc_frozen_pages_noprof+0x108/0x350 [ 331.626644][T10361] alloc_pages_mpol+0xb3/0x260 [ 331.626712][T10361] ? __memcg_slab_post_alloc_hook+0x34f/0x7d0 [ 331.626804][T10361] alloc_pages_noprof+0x8f/0x140 [ 331.626834][T10361] pgd_alloc+0x40/0x290 [ 331.626913][T10361] mm_init+0x381/0x680 [ 331.626938][T10361] copy_mm+0x100/0x370 [ 331.626967][T10361] copy_process+0x1087/0x2370 [ 331.627047][T10361] kernel_clone+0x1a5/0x5e0 [ 331.627076][T10361] ? vfs_write+0x86e/0x9f0 [ 331.627114][T10361] __x64_sys_clone+0x143/0x180 [ 331.627209][T10361] x64_sys_call+0x1222/0x3020 [ 331.627238][T10361] do_syscall_64+0x12c/0x3b0 [ 331.627274][T10361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.627353][T10361] RIP: 0033:0x7fcdd28fcdd9 [ 331.627372][T10361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.627394][T10361] RSP: 002b:00007fcdd1356fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 331.627419][T10361] RAX: ffffffffffffffda RBX: 00007fcdd2b75fa0 RCX: 00007fcdd28fcdd9 [ 331.627437][T10361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c2002000 [ 331.627453][T10361] RBP: 00007fcdd1357090 R08: 0000000000000000 R09: 0000000000000000 [ 331.627531][T10361] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 331.627547][T10361] R13: 00007fcdd2b76038 R14: 00007fcdd2b75fa0 R15: 00007ffe52dfd8c8 [ 331.627570][T10361] [ 331.927113][T10364] netlink: 'syz.0.2225': attribute type 3 has an invalid length. [ 332.058284][T10371] FAULT_INJECTION: forcing a failure. [ 332.058284][T10371] name failslab, interval 1, probability 0, space 0, times 0 [ 332.095899][T10371] CPU: 1 UID: 0 PID: 10371 Comm: syz.2.2226 Tainted: G W syzkaller #0 PREEMPT(full) [ 332.095931][T10371] Tainted: [W]=WARN [ 332.095939][T10371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 332.095953][T10371] Call Trace: [ 332.095968][T10371] [ 332.095977][T10371] __dump_stack+0x1d/0x30 [ 332.096005][T10371] dump_stack_lvl+0x95/0xd0 [ 332.096032][T10371] dump_stack+0x15/0x1b [ 332.096056][T10371] should_fail_ex+0x263/0x280 [ 332.096087][T10371] should_failslab+0x8c/0xb0 [ 332.096120][T10371] kmem_cache_alloc_noprof+0x66/0x3f0 [ 332.096159][T10371] ? mas_alloc_nodes+0x1a2/0x210 [ 332.096193][T10371] mas_alloc_nodes+0x1a2/0x210 [ 332.096226][T10371] mas_preallocate+0x2ca/0x510 [ 332.096258][T10371] mmap_region+0x1467/0x20d0 [ 332.096313][T10371] do_mmap+0x9b2/0xbd0 [ 332.096341][T10371] ? selinux_mmap_file+0x5d/0x70 [ 332.096366][T10371] vm_mmap_pgoff+0x183/0x2d0 [ 332.096403][T10371] ksys_mmap_pgoff+0xc1/0x310 [ 332.096428][T10371] ? __x64_sys_mmap+0x49/0x70 [ 332.096469][T10371] x64_sys_call+0x14df/0x3020 [ 332.096493][T10371] do_syscall_64+0x12c/0x3b0 [ 332.096521][T10371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.096547][T10371] RIP: 0033:0x7fcdd28fcb42 [ 332.096567][T10371] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 332.096587][T10371] RSP: 002b:00007fcdd1314df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 332.096607][T10371] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcdd28fcb42 [ 332.096619][T10371] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 332.096632][T10371] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 332.096644][T10371] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000008 [ 332.096658][T10371] R13: 00007fcdd1314ee0 R14: 00007fcdd1314ea0 R15: 0000200000000140 [ 332.096679][T10371] [ 332.492033][T10380] netlink: 'syz.1.2231': attribute type 1 has an invalid length. [ 332.577604][T10380] 8021q: adding VLAN 0 to HW filter on device bond7 [ 333.917011][T10400] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 333.940271][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'. [ 334.303330][T10404] FAULT_INJECTION: forcing a failure. [ 334.303330][T10404] name failslab, interval 1, probability 0, space 0, times 0 [ 334.342313][T10404] CPU: 1 UID: 0 PID: 10404 Comm: syz.1.2238 Tainted: G W syzkaller #0 PREEMPT(full) [ 334.342355][T10404] Tainted: [W]=WARN [ 334.342365][T10404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 334.342380][T10404] Call Trace: [ 334.342388][T10404] [ 334.342396][T10404] __dump_stack+0x1d/0x30 [ 334.342419][T10404] dump_stack_lvl+0x95/0xd0 [ 334.342439][T10404] dump_stack+0x15/0x1b [ 334.342457][T10404] should_fail_ex+0x263/0x280 [ 334.342490][T10404] should_failslab+0x8c/0xb0 [ 334.342526][T10404] kmem_cache_alloc_noprof+0x66/0x3f0 [ 334.342566][T10404] ? vm_area_dup+0x33/0x2c0 [ 334.342608][T10404] vm_area_dup+0x33/0x2c0 [ 334.342649][T10404] __split_vma+0xe9/0x640 [ 334.342685][T10404] ? lockref_put_return+0xf7/0x130 [ 334.342723][T10404] ? __rcu_read_unlock+0x4e/0x70 [ 334.342750][T10404] vma_modify+0xbee/0xca0 [ 334.342788][T10404] ? path_openat+0x1b01/0x2050 [ 334.342817][T10404] vma_modify_flags+0x182/0x210 [ 334.342849][T10404] mlock_fixup+0x15c/0x420 [ 334.342874][T10404] apply_vma_lock_flags+0x195/0x260 [ 334.342903][T10404] do_mlock+0x3c3/0x520 [ 334.342941][T10404] ? mutex_unlock+0x4e/0x90 [ 334.342961][T10404] ? fput+0x8f/0xc0 [ 334.342980][T10404] ? ksys_write+0x194/0x1a0 [ 334.343010][T10404] __x64_sys_mlock+0x36/0x50 [ 334.343048][T10404] x64_sys_call+0x1ab3/0x3020 [ 334.343080][T10404] do_syscall_64+0x12c/0x3b0 [ 334.343113][T10404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.343140][T10404] RIP: 0033:0x7f5008bbcdd9 [ 334.343160][T10404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.343183][T10404] RSP: 002b:00007f50075ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 334.343206][T10404] RAX: ffffffffffffffda RBX: 00007f5008e36090 RCX: 00007f5008bbcdd9 [ 334.343219][T10404] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 334.343234][T10404] RBP: 00007f50075ee090 R08: 0000000000000000 R09: 0000000000000000 [ 334.343250][T10404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.343267][T10404] R13: 00007f5008e36128 R14: 00007f5008e36090 R15: 00007ffc76f4bc48 [ 334.343291][T10404] [ 334.590121][T10408] netlink: 'syz.2.2240': attribute type 30 has an invalid length. [ 334.771837][T10419] netlink: 'syz.1.2242': attribute type 30 has an invalid length. [ 335.564461][T10424] FAULT_INJECTION: forcing a failure. [ 335.564461][T10424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.621446][T10424] CPU: 0 UID: 0 PID: 10424 Comm: syz.0.2243 Tainted: G W syzkaller #0 PREEMPT(full) [ 335.621480][T10424] Tainted: [W]=WARN [ 335.621486][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.621555][T10424] Call Trace: [ 335.621564][T10424] [ 335.621574][T10424] __dump_stack+0x1d/0x30 [ 335.621614][T10424] dump_stack_lvl+0x95/0xd0 [ 335.621635][T10424] dump_stack+0x15/0x1b [ 335.621720][T10424] should_fail_ex+0x263/0x280 [ 335.621804][T10424] should_fail+0xb/0x20 [ 335.621910][T10424] should_fail_usercopy+0x1a/0x20 [ 335.621948][T10424] _copy_from_user+0x1c/0xb0 [ 335.621983][T10424] do_ebt_get_ctl+0x139/0x13c0 [ 335.622090][T10424] ? __rcu_read_unlock+0x4e/0x70 [ 335.622118][T10424] ? avc_has_perm+0x101/0x190 [ 335.622146][T10424] ? selinux_file_open+0x2e6/0x330 [ 335.622205][T10424] ? __rcu_read_unlock+0x4e/0x70 [ 335.622231][T10424] ? ip6_datagram_release_cb+0xf8/0x160 [ 335.622306][T10424] ? _raw_spin_unlock_bh+0x18/0x20 [ 335.622367][T10424] ? release_sock+0x10c/0x180 [ 335.622409][T10424] ? sockopt_release_sock+0x41/0x50 [ 335.622436][T10424] ? do_ip_getsockopt+0xbe3/0x10c0 [ 335.622505][T10424] ? path_openat+0x1b01/0x2050 [ 335.622542][T10424] ? __rcu_read_unlock+0x4e/0x70 [ 335.622621][T10424] nf_getsockopt+0x190/0x1b0 [ 335.622650][T10424] ip_getsockopt+0x137/0x180 [ 335.622682][T10424] ipv6_getsockopt+0x117/0x1e0 [ 335.622710][T10424] udpv6_getsockopt+0x66/0x80 [ 335.622812][T10424] sock_common_getsockopt+0x60/0x70 [ 335.622853][T10424] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 335.622936][T10424] do_sock_getsockopt+0x2f5/0x570 [ 335.623014][T10424] __x64_sys_getsockopt+0x11d/0x1a0 [ 335.623118][T10424] x64_sys_call+0x2dcf/0x3020 [ 335.623160][T10424] do_syscall_64+0x12c/0x3b0 [ 335.623197][T10424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.623227][T10424] RIP: 0033:0x7fdb8caacdd9 [ 335.623245][T10424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.623262][T10424] RSP: 002b:00007fdb8b507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 335.623282][T10424] RAX: ffffffffffffffda RBX: 00007fdb8cd25fa0 RCX: 00007fdb8caacdd9 [ 335.623295][T10424] RDX: 0000000000000083 RSI: 0000000000000000 RDI: 0000000000000003 [ 335.623326][T10424] RBP: 00007fdb8b507090 R08: 0000200000000100 R09: 0000000000000000 [ 335.623341][T10424] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 335.623356][T10424] R13: 00007fdb8cd26038 R14: 00007fdb8cd25fa0 R15: 00007fff16810768 [ 335.623381][T10424] [ 335.881904][T10439] wireguard0: entered promiscuous mode [ 335.888436][ T28] kauditd_printk_skb: 15566 callbacks suppressed [ 335.888449][ T28] audit: type=1400 audit(335.863:234245): avc: denied { create } for pid=10433 comm="syz.3.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 335.916451][T10439] wireguard0: entered allmulticast mode [ 335.919152][ T28] audit: type=1400 audit(335.843:234244): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.944735][ T28] audit: type=1400 audit(335.863:234246): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.966878][ T28] audit: type=1400 audit(335.863:234247): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.988897][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 335.996472][ T3020] audit: audit_lost=2613 audit_rate_limit=0 audit_backlog_limit=64 [ 336.004669][ T3020] audit: backlog limit exceeded [ 336.009951][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 336.016796][ T3020] audit: audit_lost=2614 audit_rate_limit=0 audit_backlog_limit=64 [ 336.025224][ T3020] audit: backlog limit exceeded [ 336.628680][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2259'. [ 336.674735][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2259'. [ 336.763241][T10471] FAULT_INJECTION: forcing a failure. [ 336.763241][T10471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.802975][T10473] netlink: 'syz.4.2261': attribute type 1 has an invalid length. [ 336.812497][T10471] CPU: 1 UID: 0 PID: 10471 Comm: syz.3.2260 Tainted: G W syzkaller #0 PREEMPT(full) [ 336.812571][T10471] Tainted: [W]=WARN [ 336.812581][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 336.812594][T10471] Call Trace: [ 336.812601][T10471] [ 336.812611][T10471] __dump_stack+0x1d/0x30 [ 336.812720][T10471] dump_stack_lvl+0x95/0xd0 [ 336.812743][T10471] dump_stack+0x15/0x1b [ 336.812768][T10471] should_fail_ex+0x263/0x280 [ 336.812850][T10471] should_fail+0xb/0x20 [ 336.812876][T10471] should_fail_usercopy+0x1a/0x20 [ 336.812927][T10471] _copy_from_iter+0xcf/0xea0 [ 336.812966][T10471] ? __alloc_skb+0x4f6/0x690 [ 336.812991][T10471] ? __alloc_skb+0x200/0x690 [ 336.813017][T10471] netlink_sendmsg+0x4ae/0x6f0 [ 336.813099][T10471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.813144][T10471] ____sys_sendmsg+0x563/0x5b0 [ 336.813171][T10471] ___sys_sendmsg+0x195/0x1e0 [ 336.813231][T10471] __x64_sys_sendmsg+0xd4/0x160 [ 336.813264][T10471] x64_sys_call+0x194c/0x3020 [ 336.813301][T10471] do_syscall_64+0x12c/0x3b0 [ 336.813336][T10471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.813358][T10471] RIP: 0033:0x7f7bafdbcdd9 [ 336.813374][T10471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.813416][T10471] RSP: 002b:00007f7bae80f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.813443][T10471] RAX: ffffffffffffffda RBX: 00007f7bb0035fa0 RCX: 00007f7bafdbcdd9 [ 336.813527][T10471] RDX: 0000000020040844 RSI: 00002000000002c0 RDI: 0000000000000003 [ 336.813545][T10471] RBP: 00007f7bae80f090 R08: 0000000000000000 R09: 0000000000000000 [ 336.813561][T10471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.813577][T10471] R13: 00007f7bb0036038 R14: 00007f7bb0035fa0 R15: 00007ffc82f39118 [ 336.813615][T10471] [ 336.877805][T10473] 8021q: adding VLAN 0 to HW filter on device bond10 [ 337.048935][T10478] netlink: 'syz.3.2262': attribute type 1 has an invalid length. [ 337.095579][T10478] 8021q: adding VLAN 0 to HW filter on device bond7 [ 337.693377][T10502] bridge_slave_1: entered allmulticast mode [ 337.713922][T10500] netlink: 'syz.3.2270': attribute type 30 has an invalid length. [ 337.730915][T10502] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 339.678362][T10545] netlink: 'syz.3.2284': attribute type 30 has an invalid length. [ 340.896004][ T28] kauditd_printk_skb: 16701 callbacks suppressed [ 340.896023][ T28] audit: type=1400 audit(340.863:250613): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.939712][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.942540][T10576] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.957316][ T3020] audit: audit_lost=2727 audit_rate_limit=0 audit_backlog_limit=64 [ 340.975700][T10577] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.983760][ T3020] audit: backlog limit exceeded [ 340.995891][T10577] audit: audit_lost=2728 audit_rate_limit=0 audit_backlog_limit=64 [ 341.000492][ T28] audit: type=1400 audit(340.893:250614): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 341.006326][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 341.055912][T10577] audit: backlog limit exceeded [ 341.560411][T10587] macsec1: entered promiscuous mode [ 341.581287][T10587] erspan0: entered promiscuous mode [ 341.599062][T10587] macsec1: entered allmulticast mode [ 341.618620][T10587] erspan0: entered allmulticast mode [ 341.671240][T10587] erspan0: left allmulticast mode [ 341.681337][T10592] FAULT_INJECTION: forcing a failure. [ 341.681337][T10592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.713021][T10587] erspan0: left promiscuous mode [ 341.737524][T10592] CPU: 0 UID: 0 PID: 10592 Comm: syz.4.2299 Tainted: G W syzkaller #0 PREEMPT(full) [ 341.737564][T10592] Tainted: [W]=WARN [ 341.737572][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 341.737587][T10592] Call Trace: [ 341.737596][T10592] [ 341.737604][T10592] __dump_stack+0x1d/0x30 [ 341.737711][T10592] dump_stack_lvl+0x95/0xd0 [ 341.737738][T10592] dump_stack+0x15/0x1b [ 341.737779][T10592] should_fail_ex+0x263/0x280 [ 341.737836][T10592] should_fail+0xb/0x20 [ 341.737868][T10592] should_fail_usercopy+0x1a/0x20 [ 341.737907][T10592] _copy_to_user+0x20/0xa0 [ 341.738010][T10592] simple_read_from_buffer+0xb5/0x130 [ 341.738062][T10592] proc_fail_nth_read+0x10e/0x150 [ 341.738096][T10592] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 341.738139][T10592] vfs_read+0x1ab/0x7f0 [ 341.738170][T10592] ? __rcu_read_unlock+0x4e/0x70 [ 341.738198][T10592] ? __fget_files+0x184/0x1c0 [ 341.738224][T10592] ? mutex_lock+0x57/0x90 [ 341.738265][T10592] ksys_read+0xdc/0x1a0 [ 341.738292][T10592] __x64_sys_read+0x40/0x50 [ 341.738367][T10592] x64_sys_call+0x2886/0x3020 [ 341.738391][T10592] do_syscall_64+0x12c/0x3b0 [ 341.738429][T10592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.738530][T10592] RIP: 0033:0x7f2daaf8d60e [ 341.738548][T10592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 341.738573][T10592] RSP: 002b:00007f2da9a26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 341.738663][T10592] RAX: ffffffffffffffda RBX: 00007f2da9a276c0 RCX: 00007f2daaf8d60e [ 341.738750][T10592] RDX: 000000000000000f RSI: 00007f2da9a270a0 RDI: 0000000000000004 [ 341.738767][T10592] RBP: 00007f2da9a27090 R08: 0000000000000000 R09: 0000000000000000 [ 341.738784][T10592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.738800][T10592] R13: 00007f2dab246038 R14: 00007f2dab245fa0 R15: 00007ffc5525f048 [ 341.738821][T10592] [ 342.153842][T10603] netlink: 'syz.1.2302': attribute type 1 has an invalid length. [ 342.189795][T10603] 8021q: adding VLAN 0 to HW filter on device bond8 [ 342.232662][T10605] netlink: 'syz.2.2303': attribute type 3 has an invalid length. [ 342.483817][T10620] netlink: 'syz.1.2304': attribute type 4 has an invalid length. [ 342.511187][T10620] netlink: 'syz.1.2304': attribute type 6 has an invalid length. [ 342.539715][T10620] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2304'. [ 343.472102][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2308'. [ 344.170710][T10634] netlink: 'syz.2.2310': attribute type 30 has an invalid length. [ 344.906631][T10639] netlink: 'syz.1.2311': attribute type 30 has an invalid length. [ 345.846974][T10651] netlink: 'syz.2.2314': attribute type 30 has an invalid length. [ 345.907057][ T28] kauditd_printk_skb: 15205 callbacks suppressed [ 345.907074][ T28] audit: type=1400 audit(345.873:265759): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 345.953203][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 345.985921][ T3020] audit: audit_lost=2750 audit_rate_limit=0 audit_backlog_limit=64 [ 345.993890][ T3020] audit: backlog limit exceeded [ 346.005966][ T28] audit: type=1400 audit(345.903:265760): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 346.026818][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 346.047440][ T3020] audit: audit_lost=2751 audit_rate_limit=0 audit_backlog_limit=64 [ 346.065610][ T3298] audit: audit_backlog=65 > audit_backlog_limit=64 [ 346.071205][ T3020] audit: backlog limit exceeded [ 346.078680][ T28] audit: type=1400 audit(345.903:265761): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 346.530659][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 348.605973][ T4533] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 348.612338][ T3548] Bluetooth: hci0: command 0x1003 tx timeout [ 348.744007][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2323'. [ 348.804897][T10690] netlink: 'syz.3.2324': attribute type 1 has an invalid length. [ 348.830866][T10690] 8021q: adding VLAN 0 to HW filter on device bond8 [ 348.989278][T10696] netlink: 'syz.3.2326': attribute type 1 has an invalid length. [ 349.011809][T10696] 8021q: adding VLAN 0 to HW filter on device bond9 [ 349.133440][T10699] netlink: 'syz.3.2327': attribute type 10 has an invalid length. [ 349.173143][T10699] team0: Port device wg2 added [ 349.315755][T10711] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2329'. [ 349.446804][T10714] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 349.861696][T10716] syzkaller0: entered promiscuous mode [ 349.913333][T10716] syzkaller0: entered allmulticast mode [ 350.364993][T10729] netlink: 'syz.2.2336': attribute type 7 has an invalid length. [ 350.425937][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.437309][T10729] netlink: 'syz.2.2336': attribute type 7 has an invalid length. [ 350.456129][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.482967][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.507782][ T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.614001][T10735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2337'. [ 350.915969][ T28] kauditd_printk_skb: 17900 callbacks suppressed [ 350.915988][ T28] audit: type=1400 audit(350.873:282778): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 350.945946][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 350.946768][T10737] audit: audit_backlog=65 > audit_backlog_limit=64 [ 350.959872][ T3020] audit: audit_lost=3047 audit_rate_limit=0 audit_backlog_limit=64 [ 350.976136][T10737] audit: audit_lost=3048 audit_rate_limit=0 audit_backlog_limit=64 [ 350.984161][ T3020] audit: backlog limit exceeded [ 350.995174][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 351.008163][T10738] audit: audit_backlog=65 > audit_backlog_limit=64 [ 351.016323][ T3020] audit: audit_lost=3049 audit_rate_limit=0 audit_backlog_limit=64 [ 351.017466][ T28] audit: type=1400 audit(350.873:282779): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 351.141581][T10740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2339'. [ 351.218070][T10742] FAULT_INJECTION: forcing a failure. [ 351.218070][T10742] name failslab, interval 1, probability 0, space 0, times 0 [ 351.273511][T10742] CPU: 1 UID: 0 PID: 10742 Comm: syz.0.2340 Tainted: G W syzkaller #0 PREEMPT(full) [ 351.273621][T10742] Tainted: [W]=WARN [ 351.273711][T10742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 351.273728][T10742] Call Trace: [ 351.273736][T10742] [ 351.273791][T10742] __dump_stack+0x1d/0x30 [ 351.273818][T10742] dump_stack_lvl+0x95/0xd0 [ 351.273838][T10742] dump_stack+0x15/0x1b [ 351.273949][T10742] should_fail_ex+0x263/0x280 [ 351.274062][T10742] should_failslab+0x8c/0xb0 [ 351.274093][T10742] kmem_cache_alloc_noprof+0x66/0x3f0 [ 351.274124][T10742] ? security_file_alloc+0x32/0xf0 [ 351.274171][T10742] security_file_alloc+0x32/0xf0 [ 351.274196][T10742] init_file+0x5b/0x1b0 [ 351.274217][T10742] alloc_empty_file+0x85/0x1e0 [ 351.274237][T10742] path_openat+0x65/0x2050 [ 351.274319][T10742] ? _parse_integer_limit+0x170/0x190 [ 351.274353][T10742] do_file_open+0x16c/0x290 [ 351.274533][T10742] do_sys_openat2+0x94/0x130 [ 351.274556][T10742] __x64_sys_openat+0xf2/0x120 [ 351.274580][T10742] x64_sys_call+0x1e39/0x3020 [ 351.274611][T10742] do_syscall_64+0x12c/0x3b0 [ 351.274671][T10742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.274692][T10742] RIP: 0033:0x7fdb8ca6d60e [ 351.274711][T10742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 351.274734][T10742] RSP: 002b:00007fdb8b506ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 351.274759][T10742] RAX: ffffffffffffffda RBX: 00007fdb8b5076c0 RCX: 00007fdb8ca6d60e [ 351.274777][T10742] RDX: 0000000000000000 RSI: 00007fdb8b506f90 RDI: ffffffffffffff9c [ 351.274868][T10742] RBP: 00007fdb8b507090 R08: 0000000000000000 R09: 0000000000000000 [ 351.274884][T10742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.274900][T10742] R13: 00007fdb8cd26038 R14: 00007fdb8cd25fa0 R15: 00007fff16810768 [ 351.274922][T10742] [ 351.629010][T10755] netlink: 'syz.2.2345': attribute type 49 has an invalid length. [ 351.647949][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2345'. [ 351.673216][T10755] macvtap1: entered promiscuous mode [ 351.697864][T10755] ip6gretap0: entered promiscuous mode [ 351.717673][T10755] macvtap1: entered allmulticast mode [ 351.747470][T10755] ip6gretap0: entered allmulticast mode [ 351.881809][T10759] syzkaller0: entered promiscuous mode [ 351.895504][T10759] syzkaller0: entered allmulticast mode [ 352.461479][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 352.532184][T10789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2354'. [ 352.712413][T10795] netlink: 'syz.3.2358': attribute type 1 has an invalid length. [ 352.745140][T10795] 8021q: adding VLAN 0 to HW filter on device bond10 [ 353.418442][T10818] netlink: 'syz.2.2363': attribute type 4 has an invalid length. [ 353.443013][T10818] netlink: 'syz.2.2363': attribute type 6 has an invalid length. [ 353.467283][T10818] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2363'. [ 353.481945][T10820] can0: slcan on ptm0. [ 353.557409][T10819] can0 (unregistered): slcan off ptm0. [ 353.566941][T10825] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2368'. [ 353.614831][T10825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2368'. [ 353.621723][T10828] syzkaller0: entered promiscuous mode [ 353.655882][T10828] syzkaller0: entered allmulticast mode [ 353.684659][T10825] sch_tbf: burst 185 is lower than device syzkaller0 mtu (1500) ! [ 354.216504][T10843] netlink: 'syz.2.2373': attribute type 1 has an invalid length. [ 354.232813][T10843] 8021q: adding VLAN 0 to HW filter on device bond6 [ 354.568902][T10853] netlink: 'syz.3.2376': attribute type 7 has an invalid length. [ 354.587663][T10853] netlink: 'syz.3.2376': attribute type 7 has an invalid length. [ 355.069207][T10879] netlink: 'syz.4.2383': attribute type 1 has an invalid length. [ 355.146591][T10879] 8021q: adding VLAN 0 to HW filter on device bond11 [ 355.329001][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2387'. [ 355.499311][T10905] netlink: 'syz.2.2392': attribute type 30 has an invalid length. [ 355.926477][ T28] kauditd_printk_skb: 21659 callbacks suppressed [ 355.926496][ T28] audit: type=1400 audit(355.893:303235): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 355.957433][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 355.971771][ T3020] audit: audit_lost=3451 audit_rate_limit=0 audit_backlog_limit=64 [ 355.988255][ T3020] audit: backlog limit exceeded [ 355.998358][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 356.007359][ T28] audit: type=1400 audit(355.893:303236): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 356.013520][ T3020] audit: audit_lost=3452 audit_rate_limit=0 audit_backlog_limit=64 [ 356.059784][ T3020] audit: backlog limit exceeded [ 356.063005][ T28] audit: type=1400 audit(355.893:303237): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 356.072707][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 356.413899][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2394'. [ 356.479646][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2395'. [ 356.661607][T10933] macvtap1: entered promiscuous mode [ 356.683576][T10935] FAULT_INJECTION: forcing a failure. [ 356.683576][T10935] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 356.689862][T10933] macvtap1: entered allmulticast mode [ 356.721317][T10935] CPU: 0 UID: 0 PID: 10935 Comm: syz.4.2402 Tainted: G W syzkaller #0 PREEMPT(full) [ 356.721437][T10935] Tainted: [W]=WARN [ 356.721446][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 356.721462][T10935] Call Trace: [ 356.721470][T10935] [ 356.721480][T10935] __dump_stack+0x1d/0x30 [ 356.721572][T10935] dump_stack_lvl+0x95/0xd0 [ 356.721596][T10935] dump_stack+0x15/0x1b [ 356.721619][T10935] should_fail_ex+0x263/0x280 [ 356.721689][T10935] should_fail_alloc_page+0xf2/0x100 [ 356.721806][T10935] __alloc_frozen_pages_noprof+0x108/0x350 [ 356.721839][T10935] alloc_pages_mpol+0xb3/0x260 [ 356.721895][T10935] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 356.721927][T10935] alloc_pages_noprof+0x8f/0x140 [ 356.721952][T10935] pte_alloc_one+0x1c/0xc0 [ 356.722010][T10935] __pte_alloc+0x32/0x2a0 [ 356.722029][T10935] handle_mm_fault+0x239e/0x2e70 [ 356.722109][T10935] ? vma_start_read+0x1c7/0x2c0 [ 356.722157][T10935] do_user_addr_fault+0x62f/0x1050 [ 356.722198][T10935] ? arch_exit_work+0x30/0x40 [ 356.722225][T10935] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 356.722276][T10935] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 356.722305][T10935] ? trace_page_fault_user+0x1f/0xa0 [ 356.722355][T10935] exc_page_fault+0x62/0xa0 [ 356.722382][T10935] asm_exc_page_fault+0x26/0x30 [ 356.722407][T10935] RIP: 0033:0x7f2daae83f0e [ 356.722430][T10935] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 356.722450][T10935] RSP: 002b:00007f2da9a263c0 EFLAGS: 00010206 [ 356.722466][T10935] RAX: 00000000001f9001 RBX: 00007f2da9a26480 RCX: 00000000000000fc [ 356.722491][T10935] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f2da9a26520 [ 356.722505][T10935] RBP: 0000000000000102 R08: 00007f2da1607000 R09: 00000000001f9000 [ 356.722523][T10935] R10: 0000000000000000 R11: 00007f2da9a26490 R12: 0000000000000001 [ 356.722582][T10935] R13: 00007f2dab082900 R14: 0000000000000000 R15: 00007f2da9a26520 [ 356.722678][T10935] [ 356.723720][T10935] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 356.724201][T10940] netlink: 'syz.1.2405': attribute type 30 has an invalid length. [ 356.796993][T10933] veth1_vlan: entered allmulticast mode [ 357.024521][T10937] dummy0: entered promiscuous mode [ 357.048553][T10937] gretap0: entered promiscuous mode [ 357.082757][T10951] netlink: 'syz.4.2407': attribute type 30 has an invalid length. [ 357.092938][T10937] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 357.159682][T10937] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 357.228005][T10937] hsr1: entered allmulticast mode [ 357.262087][T10937] dummy0: entered allmulticast mode [ 357.297865][T10937] gretap0: entered allmulticast mode [ 357.815802][T10970] ip6gretap0: left allmulticast mode [ 357.851925][T10970] ip6gretap0: left promiscuous mode [ 357.914428][ T36] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.936724][ T36] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.964462][ T36] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.992757][ T36] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.181548][T10984] wireguard0: entered promiscuous mode [ 358.200338][T10984] wireguard0: entered allmulticast mode [ 358.552410][T11000] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2426'. [ 358.652562][T11007] netlink: 'syz.1.2429': attribute type 10 has an invalid length. [ 358.664929][T11009] netlink: 'syz.2.2430': attribute type 30 has an invalid length. [ 358.673738][T11012] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2431'. [ 358.688440][T11007] wg2: entered allmulticast mode [ 358.695136][T11013] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2431'. [ 358.721268][T11007] team0: Port device wg2 added [ 358.932659][T11028] vlan2: entered promiscuous mode [ 358.958992][T11028] gretap0: entered promiscuous mode [ 360.584516][T11068] wireguard0: entered promiscuous mode [ 360.616969][T11068] wireguard0: entered allmulticast mode [ 360.834725][T11071] netlink: 'syz.0.2447': attribute type 1 has an invalid length. [ 360.886447][T11071] 8021q: adding VLAN 0 to HW filter on device bond16 [ 360.924089][T11076] wireguard0: entered promiscuous mode [ 360.935878][ T28] kauditd_printk_skb: 18538 callbacks suppressed [ 360.935897][ T28] audit: type=1400 audit(360.893:321156): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 360.944330][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.969566][ T3020] audit: audit_lost=3660 audit_rate_limit=0 audit_backlog_limit=64 [ 360.977601][ T3020] audit: backlog limit exceeded [ 360.980444][T11076] wireguard0: entered allmulticast mode [ 360.982769][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.994717][ T3020] audit: audit_lost=3661 audit_rate_limit=0 audit_backlog_limit=64 [ 361.002710][ T3020] audit: backlog limit exceeded [ 361.010156][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 361.016767][ T3020] audit: audit_lost=3662 audit_rate_limit=0 audit_backlog_limit=64 [ 361.024751][ T3020] audit: backlog limit exceeded [ 362.770746][T11093] bridge_slave_0: left allmulticast mode [ 362.792815][T11093] bridge_slave_0: left promiscuous mode [ 362.806155][T11093] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.830038][T11093] bridge_slave_1: left allmulticast mode [ 362.845209][T11093] bridge_slave_1: left promiscuous mode [ 362.860669][T11093] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.879695][T11093] bond0: (slave bond_slave_0): Releasing backup interface [ 362.899686][T11093] bond0: (slave bond_slave_1): Releasing backup interface [ 362.921596][T11093] team0: Port device team_slave_0 removed [ 362.931720][T11093] team0: Port device team_slave_1 removed [ 362.945942][T11093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.983816][T11093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.014138][T11093] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 363.141532][T11095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2454'. [ 364.362212][T11118] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 364.462096][T11120] netlink: 'syz.0.2463': attribute type 1 has an invalid length. [ 364.502564][T11120] 8021q: adding VLAN 0 to HW filter on device bond17 [ 364.833833][T11128] 8021q: VLANs not supported on team0 [ 364.889991][T11128] netlink: 'syz.3.2465': attribute type 7 has an invalid length. [ 364.913314][T11128] netlink: 'syz.3.2465': attribute type 5 has an invalid length. [ 364.933142][T11128] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2465'. [ 365.017884][T11138] netlink: 'syz.4.2469': attribute type 10 has an invalid length. [ 365.050557][T11138] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2469'. [ 365.502441][T11155] netlink: 'syz.0.2475': attribute type 1 has an invalid length. [ 365.554550][T11155] 8021q: adding VLAN 0 to HW filter on device bond18 [ 365.945936][ T28] kauditd_printk_skb: 20251 callbacks suppressed [ 365.945974][ T28] audit: type=1400 audit(365.903:341171): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 365.987049][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 366.008642][T11160] audit: audit_backlog=65 > audit_backlog_limit=64 [ 366.012316][ T3020] audit: audit_lost=3742 audit_rate_limit=0 audit_backlog_limit=64 [ 366.015226][T11160] audit: audit_lost=3743 audit_rate_limit=0 audit_backlog_limit=64 [ 366.015241][T11160] audit: backlog limit exceeded [ 366.044528][ T3301] audit: audit_backlog=65 > audit_backlog_limit=64 [ 366.045975][ T28] audit: type=1400 audit(365.913:341172): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 366.060504][ T3020] audit: backlog limit exceeded [ 366.085957][ T3301] audit: audit_lost=3744 audit_rate_limit=0 audit_backlog_limit=64 [ 366.261260][T11187] netlink: 'syz.0.2483': attribute type 4 has an invalid length. [ 366.293588][T11187] netlink: 'syz.0.2483': attribute type 6 has an invalid length. [ 366.314837][T11187] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2483'. [ 366.448332][T11200] FAULT_INJECTION: forcing a failure. [ 366.448332][T11200] name failslab, interval 1, probability 0, space 0, times 0 [ 366.461585][T11200] CPU: 0 UID: 0 PID: 11200 Comm: syz.2.2488 Tainted: G W syzkaller #0 PREEMPT(full) [ 366.461693][T11200] Tainted: [W]=WARN [ 366.461700][T11200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 366.461713][T11200] Call Trace: [ 366.461780][T11200] [ 366.461791][T11200] __dump_stack+0x1d/0x30 [ 366.461822][T11200] dump_stack_lvl+0x95/0xd0 [ 366.461846][T11200] dump_stack+0x15/0x1b [ 366.461864][T11200] should_fail_ex+0x263/0x280 [ 366.461982][T11200] should_failslab+0x8c/0xb0 [ 366.462077][T11200] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 366.462122][T11200] ? __alloc_skb+0x2d6/0x690 [ 366.462149][T11200] __alloc_skb+0x2d6/0x690 [ 366.462213][T11200] ? __alloc_skb+0x200/0x690 [ 366.462231][T11200] __ip_append_data+0x1892/0x2360 [ 366.462267][T11200] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 366.462348][T11200] ip_append_data+0xd5/0x130 [ 366.462381][T11200] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 366.462551][T11200] udp_sendmsg+0x23c/0x1500 [ 366.462636][T11200] ? __rcu_read_unlock+0x4e/0x70 [ 366.462666][T11200] ? avc_has_perm+0x101/0x190 [ 366.462701][T11200] ? __pfx_udp_sendmsg+0x10/0x10 [ 366.462796][T11200] inet_sendmsg+0xac/0xd0 [ 366.462882][T11200] ? __pfx_inet_sendmsg+0x10/0x10 [ 366.462952][T11200] ____sys_sendmsg+0x519/0x5b0 [ 366.462978][T11200] ___sys_sendmsg+0x195/0x1e0 [ 366.463069][T11200] ? path_openat+0x1b01/0x2050 [ 366.463116][T11200] __sys_sendmmsg+0x185/0x320 [ 366.463154][T11200] __x64_sys_sendmmsg+0x57/0x70 [ 366.463184][T11200] x64_sys_call+0x27aa/0x3020 [ 366.463263][T11200] do_syscall_64+0x12c/0x3b0 [ 366.463336][T11200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.463358][T11200] RIP: 0033:0x7fcdd28fcdd9 [ 366.463374][T11200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.463446][T11200] RSP: 002b:00007fcdd1357028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 366.463465][T11200] RAX: ffffffffffffffda RBX: 00007fcdd2b75fa0 RCX: 00007fcdd28fcdd9 [ 366.463479][T11200] RDX: 0000000000000003 RSI: 0000200000004540 RDI: 0000000000000003 [ 366.463491][T11200] RBP: 00007fcdd1357090 R08: 0000000000000000 R09: 0000000000000000 [ 366.463507][T11200] R10: 00000000240080e4 R11: 0000000000000246 R12: 0000000000000002 [ 366.463523][T11200] R13: 00007fcdd2b76038 R14: 00007fcdd2b75fa0 R15: 00007ffe52dfd8c8 [ 366.463554][T11200] [ 368.585004][T11233] netlink: 'syz.2.2499': attribute type 30 has an invalid length. [ 368.911515][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'. [ 369.064509][T11245] netlink: 'syz.1.2502': attribute type 30 has an invalid length. [ 369.355048][T11253] FAULT_INJECTION: forcing a failure. [ 369.355048][T11253] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 369.422861][T11253] CPU: 1 UID: 0 PID: 11253 Comm: syz.3.2504 Tainted: G W syzkaller #0 PREEMPT(full) [ 369.422903][T11253] Tainted: [W]=WARN [ 369.422912][T11253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 369.422954][T11253] Call Trace: [ 369.422960][T11253] [ 369.422967][T11253] __dump_stack+0x1d/0x30 [ 369.422991][T11253] dump_stack_lvl+0x95/0xd0 [ 369.423017][T11253] dump_stack+0x15/0x1b [ 369.423043][T11253] should_fail_ex+0x263/0x280 [ 369.423107][T11253] should_fail_alloc_page+0xf2/0x100 [ 369.423150][T11253] __alloc_frozen_pages_noprof+0x108/0x350 [ 369.423184][T11253] alloc_pages_mpol+0xb3/0x260 [ 369.423208][T11253] ? css_rstat_updated+0xbb/0x280 [ 369.423309][T11253] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 369.423342][T11253] handle_mm_fault+0x103e/0x2e70 [ 369.423422][T11253] ? vma_start_read+0x1c7/0x2c0 [ 369.423464][T11253] do_user_addr_fault+0x62f/0x1050 [ 369.423492][T11253] ? ksys_mmap_pgoff+0xc1/0x310 [ 369.423524][T11253] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 369.423682][T11253] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 369.423803][T11253] ? trace_page_fault_user+0x1f/0xa0 [ 369.423835][T11253] exc_page_fault+0x62/0xa0 [ 369.423862][T11253] asm_exc_page_fault+0x26/0x30 [ 369.423888][T11253] RIP: 0033:0x7f7bafc73f18 [ 369.423907][T11253] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 369.423956][T11253] RSP: 002b:00007f7bae80e470 EFLAGS: 00010202 [ 369.424049][T11253] RAX: 0000000000001000 RBX: 00007f7bae80e530 RCX: 0000000000000003 [ 369.424064][T11253] RDX: 0000000000003fe3 RSI: 0000000000000be4 RDI: 00007f7bae80e5d0 [ 369.424076][T11253] RBP: 0000000000000004 R08: 00007f7ba63ef000 R09: 0000000000000002 [ 369.424088][T11253] R10: 0000200000000cc2 R11: 0000000000000533 R12: 0000000000000801 [ 369.424100][T11253] R13: 00007f7bafe72900 R14: 0000000000000016 R15: 00007f7bae80e5d0 [ 369.424117][T11253] [ 369.622247][T11253] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 369.894224][T11273] netlink: 'syz.4.2512': attribute type 30 has an invalid length. [ 369.972141][T11275] FAULT_INJECTION: forcing a failure. [ 369.972141][T11275] name failslab, interval 1, probability 0, space 0, times 0 [ 370.063060][T11275] CPU: 1 UID: 0 PID: 11275 Comm: syz.2.2513 Tainted: G W syzkaller #0 PREEMPT(full) [ 370.063098][T11275] Tainted: [W]=WARN [ 370.063107][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 370.063123][T11275] Call Trace: [ 370.063131][T11275] [ 370.063141][T11275] __dump_stack+0x1d/0x30 [ 370.063223][T11275] dump_stack_lvl+0x95/0xd0 [ 370.063250][T11275] dump_stack+0x15/0x1b [ 370.063274][T11275] should_fail_ex+0x263/0x280 [ 370.063309][T11275] should_failslab+0x8c/0xb0 [ 370.063407][T11275] kmem_cache_alloc_noprof+0x66/0x3f0 [ 370.063454][T11275] ? __anon_vma_prepare+0x70/0x2f0 [ 370.063475][T11275] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 370.063498][T11275] __anon_vma_prepare+0x70/0x2f0 [ 370.063583][T11275] do_wp_page+0x1910/0x2040 [ 370.063618][T11275] ? _raw_spin_lock+0x52/0xa0 [ 370.063721][T11275] ? __rcu_read_lock+0x36/0x50 [ 370.063749][T11275] handle_mm_fault+0x8b9/0x2e70 [ 370.063839][T11275] ? vma_start_read+0x1c7/0x2c0 [ 370.063876][T11275] do_user_addr_fault+0x62f/0x1050 [ 370.063911][T11275] ? ksys_mmap_pgoff+0xc1/0x310 [ 370.063951][T11275] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 370.064073][T11275] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 370.064098][T11275] ? trace_page_fault_user+0x1f/0xa0 [ 370.064128][T11275] exc_page_fault+0x62/0xa0 [ 370.064157][T11275] asm_exc_page_fault+0x26/0x30 [ 370.064245][T11275] RIP: 0033:0x7fcdd27b3e63 [ 370.064334][T11275] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 370.064355][T11275] RSP: 002b:00007fcdd1356470 EFLAGS: 00010202 [ 370.064377][T11275] RAX: 0000000000000400 RBX: 00007fcdd1356530 RCX: 00007fcdc8f37000 [ 370.064404][T11275] RDX: 00007fcdd13566d0 RSI: 0000000000000001 RDI: 00007fcdd13565d0 [ 370.064524][T11275] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a6 [ 370.064542][T11275] R10: 00000000000000be R11: 00007fcdd1356530 R12: 0000000000000001 [ 370.064559][T11275] R13: 00007fcdd29b2900 R14: 0000000000000020 R15: 00007fcdd13565d0 [ 370.064582][T11275] [ 370.065199][T11278] netlink: 'syz.3.2514': attribute type 1 has an invalid length. [ 370.286636][T11275] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 370.404770][T11278] 8021q: adding VLAN 0 to HW filter on device bond11 [ 370.583652][T11283] syzkaller0: entered promiscuous mode [ 370.614228][T11283] syzkaller0: entered allmulticast mode [ 370.690424][T11298] netlink: 'syz.1.2519': attribute type 10 has an invalid length. [ 370.956015][ T28] kauditd_printk_skb: 20141 callbacks suppressed [ 370.956034][ T28] audit: type=1400 audit(370.923:359930): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 370.991646][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 371.010392][ T3020] audit: audit_lost=4206 audit_rate_limit=0 audit_backlog_limit=64 [ 371.032417][ T3020] audit: backlog limit exceeded [ 371.038895][T11309] audit: audit_backlog=65 > audit_backlog_limit=64 [ 371.045361][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 371.050182][ T28] audit: type=1400 audit(370.923:359931): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 371.066343][ T3020] audit: audit_lost=4207 audit_rate_limit=0 audit_backlog_limit=64 [ 371.092927][T11309] audit: audit_lost=4208 audit_rate_limit=0 audit_backlog_limit=64 [ 371.108861][ T3020] audit: backlog limit exceeded [ 371.171139][T11309] netlink: 'syz.4.2522': attribute type 4 has an invalid length. [ 371.205276][T11309] netlink: 'syz.4.2522': attribute type 6 has an invalid length. [ 371.245055][T11309] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2522'. [ 371.924242][T11323] wireguard0: entered promiscuous mode [ 371.936390][T11323] wireguard0: entered allmulticast mode [ 373.740693][T11363] wireguard0: entered promiscuous mode [ 373.746300][T11363] wireguard0: entered allmulticast mode [ 374.514046][T11384] wireguard0: entered promiscuous mode [ 374.519817][T11384] wireguard0: entered allmulticast mode [ 374.676942][T11387] netlink: 'syz.3.2550': attribute type 10 has an invalid length. [ 374.886337][T11398] wireguard0: entered promiscuous mode [ 374.901993][T11398] wireguard0: entered allmulticast mode [ 375.266035][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2560'. [ 375.298909][T11416] 8021q: adding VLAN 0 to HW filter on device bond7 [ 375.360679][T11416] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 375.380491][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2560'. [ 375.390265][T11420] FAULT_INJECTION: forcing a failure. [ 375.390265][T11420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.405122][T11420] CPU: 0 UID: 0 PID: 11420 Comm: syz.1.2561 Tainted: G W syzkaller #0 PREEMPT(full) [ 375.405161][T11420] Tainted: [W]=WARN [ 375.405170][T11420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 375.405207][T11420] Call Trace: [ 375.405215][T11420] [ 375.405224][T11420] __dump_stack+0x1d/0x30 [ 375.405254][T11420] dump_stack_lvl+0x95/0xd0 [ 375.405308][T11420] dump_stack+0x15/0x1b [ 375.405327][T11420] should_fail_ex+0x263/0x280 [ 375.405354][T11420] should_fail+0xb/0x20 [ 375.405386][T11420] should_fail_usercopy+0x1a/0x20 [ 375.405424][T11420] _copy_to_user+0x20/0xa0 [ 375.405526][T11420] btf_new_fd+0x43e/0x740 [ 375.405565][T11420] bpf_btf_load+0x112/0x130 [ 375.405602][T11420] __sys_bpf+0x3d8/0x7e0 [ 375.405660][T11420] __x64_sys_bpf+0x41/0x50 [ 375.405683][T11420] x64_sys_call+0x10cb/0x3020 [ 375.405708][T11420] do_syscall_64+0x12c/0x3b0 [ 375.405826][T11420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.405926][T11420] RIP: 0033:0x7f5008bbcdd9 [ 375.406015][T11420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.406100][T11420] RSP: 002b:00007f500760f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 375.406126][T11420] RAX: ffffffffffffffda RBX: 00007f5008e35fa0 RCX: 00007f5008bbcdd9 [ 375.406143][T11420] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 375.406160][T11420] RBP: 00007f500760f090 R08: 0000000000000000 R09: 0000000000000000 [ 375.406177][T11420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.406261][T11420] R13: 00007f5008e36038 R14: 00007f5008e35fa0 R15: 00007ffc76f4bc48 [ 375.406285][T11420] [ 375.578878][T11416] bond7 (unregistering): (slave gretap1): Releasing backup interface [ 375.608154][T11416] bond7 (unregistering): Released all slaves [ 375.625745][T11422] netlink: 'syz.1.2562': attribute type 10 has an invalid length. [ 375.735189][T11431] netlink: 'syz.2.2565': attribute type 30 has an invalid length. [ 375.800350][T11434] wireguard0: entered promiscuous mode [ 375.815826][T11434] wireguard0: entered allmulticast mode [ 375.966239][ T28] kauditd_printk_skb: 24548 callbacks suppressed [ 375.966258][ T28] audit: type=1400 audit(375.933:384479): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 375.998092][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 376.008165][T11442] audit: audit_backlog=65 > audit_backlog_limit=64 [ 376.014973][ T3020] audit: audit_lost=4209 audit_rate_limit=0 audit_backlog_limit=64 [ 376.023422][T11442] audit: audit_lost=4210 audit_rate_limit=0 audit_backlog_limit=64 [ 376.031737][ T3020] audit: backlog limit exceeded [ 376.032475][ T28] audit: type=1400 audit(375.933:384480): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 376.037498][T11442] audit: backlog limit exceeded [ 376.062677][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 376.069621][ T3020] audit: audit_lost=4211 audit_rate_limit=0 audit_backlog_limit=64 [ 376.303616][T11450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2570'. [ 376.337392][T11452] syzkaller0: mtu greater than device maximum [ 376.681295][T11461] netlink: 'syz.1.2575': attribute type 10 has an invalid length. [ 376.819065][T11469] wireguard0: entered promiscuous mode [ 376.824446][T11472] FAULT_INJECTION: forcing a failure. [ 376.824446][T11472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.830281][T11469] wireguard0: entered allmulticast mode [ 376.844417][T11472] CPU: 1 UID: 0 PID: 11472 Comm: syz.4.2579 Tainted: G W syzkaller #0 PREEMPT(full) [ 376.844458][T11472] Tainted: [W]=WARN [ 376.844465][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 376.844484][T11472] Call Trace: [ 376.844492][T11472] [ 376.844502][T11472] __dump_stack+0x1d/0x30 [ 376.844532][T11472] dump_stack_lvl+0x95/0xd0 [ 376.844558][T11472] dump_stack+0x15/0x1b [ 376.844654][T11472] should_fail_ex+0x263/0x280 [ 376.844685][T11472] should_fail+0xb/0x20 [ 376.844714][T11472] should_fail_usercopy+0x1a/0x20 [ 376.844751][T11472] _copy_from_user+0x1c/0xb0 [ 376.844829][T11472] __sys_bpf+0x183/0x7e0 [ 376.844865][T11472] __x64_sys_bpf+0x41/0x50 [ 376.844886][T11472] x64_sys_call+0x10cb/0x3020 [ 376.844910][T11472] do_syscall_64+0x12c/0x3b0 [ 376.844949][T11472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.844976][T11472] RIP: 0033:0x7f2daafccdd9 [ 376.844996][T11472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.845015][T11472] RSP: 002b:00007f2da9a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.845078][T11472] RAX: ffffffffffffffda RBX: 00007f2dab245fa0 RCX: 00007f2daafccdd9 [ 376.845096][T11472] RDX: 0000000000000008 RSI: 0000200000000200 RDI: 0000000000000024 [ 376.845113][T11472] RBP: 00007f2da9a27090 R08: 0000000000000000 R09: 0000000000000000 [ 376.845130][T11472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.845160][T11472] R13: 00007f2dab246038 R14: 00007f2dab245fa0 R15: 00007ffc5525f048 [ 376.845178][T11472] [ 377.146677][T11477] batadv1: entered promiscuous mode [ 377.196291][T11480] netlink: 'syz.3.2582': attribute type 1 has an invalid length. [ 377.238615][T11480] 8021q: adding VLAN 0 to HW filter on device bond12 [ 377.290097][T11487] netlink: 'syz.3.2584': attribute type 30 has an invalid length. [ 377.454670][T11495] netlink: 'syz.0.2587': attribute type 30 has an invalid length. [ 377.753599][T11506] binfmt_misc: register: failed to install interpreter file ./file1 [ 378.112614][T11515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2592'. [ 379.316848][T11539] netlink: 'syz.4.2600': attribute type 30 has an invalid length. [ 380.339724][T11561] netlink: 'syz.1.2608': attribute type 30 has an invalid length. [ 380.509374][T11566] netlink: 'syz.4.2609': attribute type 30 has an invalid length. [ 380.977534][ T28] kauditd_printk_skb: 19435 callbacks suppressed [ 380.977549][ T28] audit: type=1400 audit(380.943:402700): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.031342][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 381.056296][ T3020] audit: audit_lost=4617 audit_rate_limit=0 audit_backlog_limit=64 [ 381.074288][ T3020] audit: backlog limit exceeded [ 381.079452][ T28] audit: type=1400 audit(380.943:402701): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.104485][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 381.114923][ T3020] audit: audit_lost=4618 audit_rate_limit=0 audit_backlog_limit=64 [ 381.126184][ T3020] audit: backlog limit exceeded [ 381.131123][ T28] audit: type=1400 audit(380.943:402702): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.156542][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 383.721495][T11606] wireguard0: entered promiscuous mode [ 383.730060][T11606] wireguard0: entered allmulticast mode [ 384.222203][T11617] wireguard0: entered promiscuous mode [ 384.229483][T11617] wireguard0: entered allmulticast mode [ 384.433651][T11620] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 384.672204][T11624] bridge8: entered promiscuous mode [ 384.687822][T11624] bridge8: entered allmulticast mode [ 384.868448][T11633] gtp0: entered allmulticast mode [ 384.899663][T11635] netlink: 'syz.1.2628': attribute type 21 has an invalid length. [ 384.916774][T11635] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2628'. [ 384.943015][T11635] netlink: 'syz.1.2628': attribute type 5 has an invalid length. [ 384.960707][T11635] netlink: 'syz.1.2628': attribute type 6 has an invalid length. [ 384.992875][T11635] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2628'. [ 385.063397][T11641] netlink: 'syz.2.2630': attribute type 1 has an invalid length. [ 385.102910][T11641] 8021q: adding VLAN 0 to HW filter on device bond7 [ 385.526897][T11666] vlan2: entered promiscuous mode [ 385.546200][T11666] bridge0: entered promiscuous mode [ 385.986987][ T28] kauditd_printk_skb: 21568 callbacks suppressed [ 385.987002][ T28] audit: type=1400 audit(385.953:423441): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.023596][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 386.045774][ T3020] audit: audit_lost=4896 audit_rate_limit=0 audit_backlog_limit=64 [ 386.061668][ T3020] audit: backlog limit exceeded [ 386.070710][ T3302] audit: audit_backlog=65 > audit_backlog_limit=64 [ 386.073277][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 386.085495][ T28] audit: type=1400 audit(385.953:423442): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.101560][ T3302] audit: audit_lost=4897 audit_rate_limit=0 audit_backlog_limit=64 [ 386.122569][ T3020] audit: audit_lost=4898 audit_rate_limit=0 audit_backlog_limit=64 [ 386.136538][ T3020] audit: backlog limit exceeded [ 386.176285][T11682] netlink: 'syz.0.2643': attribute type 3 has an invalid length. [ 386.202837][T11682] netlink: 'syz.0.2643': attribute type 1 has an invalid length. [ 386.229208][T11682] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2643'. [ 386.660554][T11696] netlink: 'syz.2.2646': attribute type 1 has an invalid length. [ 386.707139][T11696] 8021q: adding VLAN 0 to HW filter on device bond8 [ 387.238142][T11706] netlink: 'syz.2.2649': attribute type 30 has an invalid length. [ 387.367618][T11709] netlink: 'syz.1.2650': attribute type 10 has an invalid length. [ 387.646606][ T30] ================================================================== [ 387.654787][ T30] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 387.663078][ T30] [ 387.665432][ T30] write to 0xffff88813bc018e0 of 44 bytes by task 11716 on cpu 0: [ 387.673270][ T30] tty_set_termios+0xc0/0x910 [ 387.677985][ T30] set_termios+0x373/0x4f0 [ 387.682443][ T30] tty_mode_ioctl+0x37f/0x5b0 [ 387.687155][ T30] n_tty_ioctl_helper+0x87/0x370 [ 387.692121][ T30] n_tty_ioctl+0x101/0x220 [ 387.696566][ T30] tty_ioctl+0x83e/0xb80 [ 387.700866][ T30] __se_sys_ioctl+0xce/0x140 [ 387.705505][ T30] __x64_sys_ioctl+0x43/0x50 [ 387.710136][ T30] x64_sys_call+0x1563/0x3020 [ 387.714852][ T30] do_syscall_64+0x12c/0x3b0 [ 387.719490][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.725426][ T30] [ 387.727785][ T30] read to 0xffff88813bc018fa of 1 bytes by task 30 on cpu 1: [ 387.735192][ T30] n_tty_lookahead_flow_ctrl+0x1c9/0x300 [ 387.740866][ T30] tty_port_default_lookahead_buf+0x91/0xc0 [ 387.746805][ T30] flush_to_ldisc+0x288/0x340 [ 387.751516][ T30] process_scheduled_works+0x4f0/0x9c0 [ 387.757019][ T30] worker_thread+0x58a/0x780 [ 387.761649][ T30] kthread+0x22a/0x280 [ 387.765769][ T30] ret_from_fork+0x146/0x330 [ 387.770406][ T30] ret_from_fork_asm+0x1a/0x30 [ 387.775205][ T30] [ 387.777559][ T30] value changed: 0x13 -> 0xb2 [ 387.782273][ T30] [ 387.784619][ T30] Reported by Kernel Concurrency Sanitizer on: [ 387.790828][ T30] CPU: 1 UID: 0 PID: 30 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(full) [ 387.801724][ T30] Tainted: [W]=WARN [ 387.805556][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 387.815739][ T30] Workqueue: events_unbound flush_to_ldisc [ 387.821608][ T30] ================================================================== [ 390.995976][ T28] kauditd_printk_skb: 20668 callbacks suppressed [ 390.995999][ T28] audit: type=1400 audit(390.963:443996): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.014269][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 391.023266][ T28] audit: type=1400 audit(390.963:443997): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.023330][ T28] audit: type=1400 audit(390.963:443998): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.023420][ T28] audit: type=1400 audit(390.963:443999): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.023450][ T28] audit: type=1400 audit(390.963:444000): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.023480][ T28] audit: type=1400 audit(390.963:444001): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.023534][ T28] audit: type=1400 audit(390.963:444002): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.023565][ T28] audit: type=1400 audit(390.963:444003): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.023649][ T28] audit: type=1400 audit(390.963:444004): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.005913][ T28] kauditd_printk_skb: 44135 callbacks suppressed [ 396.005938][ T28] audit: type=1400 audit(395.973:488138): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.023092][ T3020] audit: audit_backlog=65 > audit_backlog_limit=64 [ 396.033581][ T28] audit: type=1400 audit(395.973:488139): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.039897][ T3020] audit: audit_lost=4938 audit_rate_limit=0 audit_backlog_limit=64 [ 396.062851][ T28] audit: type=1400 audit(395.973:488140): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.068851][ T3020] audit: backlog limit exceeded [ 396.089604][ T28] audit: type=1400 audit(395.973:488141): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.089638][ T28] audit: type=1400 audit(395.973:488142): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.089669][ T28] audit: type=1400 audit(395.973:488143): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.089721][ T28] audit: type=1400 audit(395.973:488144): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0