last executing test programs: 7m57.112753642s ago: executing program 3 (id=1535): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000190001002abd7000fbdbdf251d010900500012804c0030801400ae00ff01000000000000000000000000000128004f800400e9801400b100000000000000000000000000000000000c001f00330f0000000007000900ec009be3cdb677000000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000190001002abd7000fbdbdf251d010900500012804c0030801400ae00ff01000000000000000000000000000128004f800400e9801400b100000000000000000000000000000000000c001f00330f0000000007000900ec009be3cdb677000000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) 7m57.082250213s ago: executing program 3 (id=1536): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x44, r0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x8000003}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) 7m57.024865715s ago: executing program 3 (id=1538): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 7m57.024477435s ago: executing program 3 (id=1539): getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080), 0x2) 7m56.967088856s ago: executing program 3 (id=1540): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, 0x2, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_virt_wifi\x00'}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0xe, 0x8}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 7m56.966727886s ago: executing program 3 (id=1541): r0 = socket$nl_route(0x10, 0x3, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) mount$bpf(0x200000000000, 0x0, 0x0, 0x198d044, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000040)={0x8, 0x0, 0x27f}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa19, &(0x7f0000000d00)="$eJzs3c1vHGdcB/DvbOzEcas0bUMJUdtsUqV1W+PYDk0U9UATe524+AXZjtQIUFM1CYpiUdSC1FYcUglxoqJCCAm4oB45VSoHekG5wZETByTof4AqLoQDLNrZdbKO9yV2N3YIn89qMm+/521ndp7senee8H9ZvV4vpx2uX/mb3awsT56Lsz9++93XjemrO9mffXmn+LtkJEk1Gfrv8lwZnpldWV7sk9Ht5FqSu0mR5ECa8y4Oblq7luJP8uyD9bsp/ipHOyQb2Wbj6KvO/2t7ff4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMATaWZ2cnKqyML80pUPqt2VQ4D32L+R3Q/lqN/FD/2KLZKiMWVkZGOo76NHHux+qfHPybzcXHu5OfL3SL585qXD7744VNlI36NCu+KzL768/dH6+o1PH2wa7hg41GpXY/nArlXv0e3fWbJLtaX51eX5xQuXatX51eXq+bNnJ09fnlutzs2ntnp1da22WJ1ZqV1YW16pjs28WZ06f/5MtTZxdfnK0qXZiYXaxsZzvzw9OXm2+v7Er9curKwuL51+f2J15vL8wsL80qUyprG7EXOucSL+2vxada12YbFavXlr/caZfpVsBE113FNsDprul9P05PT01NT09NTZd86/c25ycmjLhsmHZEvE3p+07J2/Hei1G36mSqv/z0Lms5Qr+SDVjo+ZzGYly1nssr9lo/8/dbrWs9z2/n+jlz/6YPexlP3/q821V7v1/13q0v9Rrzdz3mn6jcdn+SJf5nY+ynrWcyOf/uwctzz+a0D5VH9+a7c+LqWWpcxnNcuZz2IulFuqrS3VnM/ZnM1kPszlzGU11cxlPgupZTVXs5q11MozaiYrqeVC1rKclVQzlpm8mWqmcj7ncybV1DKRq1nOlSzlUmZzoczlZm6Vz/uZHnW8HzT1KEHTPYIG3P/Xn8T/CfK4DfwaDjtVb/X/+7sG1DeWxmZ2rVYAAADAIP3SP+bQkRf+4V+T4bxSfi4/N79Qm9zragEAAAADVH5d7+XGbLix9EoK7/8BAADgaVOUv7ErkozmeHOp+UuoffEhAAAAADwlyr//v9qYjTaWjqe4fyeUa3tdNwAAAGAw+t9jv29EMb5x+9/q9eb8eiuidZ/f0bn5hdrEzPLCu1N5vbzLQPlLgy257UuK4fLnB2/lRDPqxGhzPro5x5FG1NTEu1N5KydbDRl7rTF7baxD5HQz8o1m5Bs9Is80IgHgaXeyR3/8qP3/WxlvRowfG9qfZOhYh551Us8KAE+K/mPs9I0ofuXB+//hVrab+v8XcvM/m18pmMjH+STruZ7x8tcG5TcONuX6m9+0PjO4/zWEyYz3+TRgI/afzlUy3ufzgNG2gV7G+3wi0IzNbyVnHv+BAIBddLJLP7yd/n+87f1/tr7/vz+00A0/KQSAJ8L9EewHuvDcppz3uo0AwGZ6aQAAAAAAAAAAAAAAAAAAAAAAAAAAABi8gd72f2SHyf+tNa7foIch6LNwsPUc7DyfP02ye3UuBlxWZQD51JPs1vHavYUcTnb8rHY8jfcn2ft29V0Yar0kbn+0vldXJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHZTkezrtL2SHEgymeT07tfq8bmz1xXYfb/avlLcy718nkN7Vx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKdT6/7/lTTnzzQ3ZaiSnEpyLclv7HUdB+neXldgQA7uMF3b/f8bxzz1IkPNw55ieGZ2ZXmxcfjLsR8qP3773deNqS35gUctpwysPDS4RKuEh2P/+tmNpefLVKOzNz67/Xuf/G519mIq2Z+La3MLs4uXVt57kOSl4vukmua0YaO+f3Dq77/p0PLvGy3t7OFy58onZ3Zrub/YKXXvcnu5tX5julHSWu2Dtd//nVuft+16ISeS18aSsc0l/XZj6lLSiQz3Kq34qfij4lD+PNfK4994Nop60ThEz5XtP3jz1vqNiY8/Wb/epU6HczzJ9WSkd52+att9vLyedFSedZXhRqmTZVDjnyN92thTW45TXdrwfHnKjLbasL9rG9pVO7Thf+r1+sZy2/Ne6VStZo3OdKnRi3m9w5GuH0i61+j13ke6s+Kn4l+Ky/nn/GHb+B+VxvE/le6vzs1ZlJFtZ0rXyEozsmz5dPuODx+O/Pe/eKTadxymhu36400v3krb9b91rAZ0PaoXPa9HbSVu73XRVmJl61nR43VR9khHHkrRuvp0S9Oq55FmVJd6/kLeToaO9boqbumt3+5+Vdyc/r3Ou3f6+v/LYiz/kTvG/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ58RbKv0/ZKcirJ4Y31alLfRrYHuu2ojBbbreJA3bn/z1Ohst0Exb3cy+c59HiqAwAAAAAAAMBuuzj747fffd2YioOtTa2/71eToSSHiz87mNmV5cU+GQ0n15LcbSyPdNjf48/9jXR59sH63cba0e22BAB4VP8bAAD//2vcY1k=") execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x54, 0x0, &(0x7f0000000340)=[@register_looper, @clear_death={0x400c630f, 0x2}, @dead_binder_done, @dead_binder_done, @decrefs={0x40046307, 0x1}, @acquire, @register_looper, @dead_binder_done, @acquire], 0x0, 0x0, &(0x7f0000000500)}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfffffd15, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x0, 0x4, 0x2, 0x0, 0x0, 0x65, 0x0, 0x5, 0x2, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x0, 0x1, [{}, {0x2, 0x0, "fc594069704560a968f2da152a2f"}, {0x6, 0x0, "f2298a7c03"}, {0x5, 0x0, "3122a6a9"}, {0x5}, {0x5, 0x0, "f16a549779d3e3be4ed625deae7a9738"}, {0x2, 0x0, 'D'}, {0x3, 0x0, "5f55795e1ef13b93028121"}]}, @ssrr={0x89, 0x0, 0xce, [@loopback, @broadcast, @multicast2, @rand_addr=0x64010102, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x0, 0x8a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @cipso={0x86, 0x0, 0xffffffffffffffff, [{0x0, 0x0, "4bae7b48272d46d3"}, {0x7, 0x0, "ef10a9"}, {0x7, 0x0, "450d5da3f9a8375f0933fc"}, {0x5, 0x0, "3f88e6c402"}, {0x7, 0x0, "8ed3d017"}, {0x7, 0x0, "b60703"}, {0x7, 0x0, "5e21fcf62d4321a87c0a"}, {0x1, 0x0, "0002afee45b433a7d3c1"}]}, @cipso={0x86, 0x0, 0x2, [{0x2, 0x0, "246ec6ae1c45ac7d6fdcc2"}]}, @lsrr={0x83, 0x0, 0x40, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @empty, @empty]}, @noop, @timestamp={0x44, 0x0, 0xb8, 0x0, 0x4, [0x54, 0x1, 0x1, 0x8001]}, @ssrr={0x89, 0x0, 0x70, [@private=0xa010101, @empty, @remote, @initdev={0xac, 0x1e, 0x5, 0x0}]}]}}, {0x13, 0x80, 0x0, @multicast1, "58626f977ea4c8b342b6a704fd486210762ac1a34e22f705687f21388c583e12a3d2fe6412a87a8cd1b09405ad4f3e11d957fb860f52b8eb79c8f502fd70a10644"}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}, 0x1, 0x300}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 7m41.840348534s ago: executing program 32 (id=1541): r0 = socket$nl_route(0x10, 0x3, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) mount$bpf(0x200000000000, 0x0, 0x0, 0x198d044, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000040)={0x8, 0x0, 0x27f}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa19, &(0x7f0000000d00)="$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") execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x54, 0x0, &(0x7f0000000340)=[@register_looper, @clear_death={0x400c630f, 0x2}, @dead_binder_done, @dead_binder_done, @decrefs={0x40046307, 0x1}, @acquire, @register_looper, @dead_binder_done, @acquire], 0x0, 0x0, &(0x7f0000000500)}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfffffd15, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x0, 0x4, 0x2, 0x0, 0x0, 0x65, 0x0, 0x5, 0x2, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x0, 0x1, [{}, {0x2, 0x0, "fc594069704560a968f2da152a2f"}, {0x6, 0x0, "f2298a7c03"}, {0x5, 0x0, "3122a6a9"}, {0x5}, {0x5, 0x0, "f16a549779d3e3be4ed625deae7a9738"}, {0x2, 0x0, 'D'}, {0x3, 0x0, "5f55795e1ef13b93028121"}]}, @ssrr={0x89, 0x0, 0xce, [@loopback, @broadcast, @multicast2, @rand_addr=0x64010102, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x0, 0x8a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @cipso={0x86, 0x0, 0xffffffffffffffff, [{0x0, 0x0, "4bae7b48272d46d3"}, {0x7, 0x0, "ef10a9"}, {0x7, 0x0, "450d5da3f9a8375f0933fc"}, {0x5, 0x0, "3f88e6c402"}, {0x7, 0x0, "8ed3d017"}, {0x7, 0x0, "b60703"}, {0x7, 0x0, "5e21fcf62d4321a87c0a"}, {0x1, 0x0, "0002afee45b433a7d3c1"}]}, @cipso={0x86, 0x0, 0x2, [{0x2, 0x0, "246ec6ae1c45ac7d6fdcc2"}]}, @lsrr={0x83, 0x0, 0x40, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @empty, @empty]}, @noop, @timestamp={0x44, 0x0, 0xb8, 0x0, 0x4, [0x54, 0x1, 0x1, 0x8001]}, @ssrr={0x89, 0x0, 0x70, [@private=0xa010101, @empty, @remote, @initdev={0xac, 0x1e, 0x5, 0x0}]}]}}, {0x13, 0x80, 0x0, @multicast1, "58626f977ea4c8b342b6a704fd486210762ac1a34e22f705687f21388c583e12a3d2fe6412a87a8cd1b09405ad4f3e11d957fb860f52b8eb79c8f502fd70a10644"}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}, 0x1, 0x300}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 7m26.994197753s ago: executing program 0 (id=1905): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x11e0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0x9987, 0xfc00, 0xa, 0x20002f7}) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m26.946653665s ago: executing program 0 (id=1909): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) setreuid(r0, r0) ioprio_set$uid(0x3, 0x0, 0x0) 7m26.713562072s ago: executing program 0 (id=1910): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[{0x10, 0x10a, 0x2}, {0x10, 0x84, 0x5}], 0x20}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x10000, 0x331, 0x80000001, 0x7, 0x100, 0x7f, 0x0, 0x1000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r3}, &(0x7f0000000bc0)=0x12, &(0x7f0000000c00)}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8954, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0x29, 0x5, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000180)) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, 0x0}, 0x40040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019001b000000000000000800021800000000fd000000ed0008000100ac1414"], 0x2c}}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x80164000, &(0x7f0000000840)="167c3650b1464b8d5e06296d74d5c0c69ca58cc473335cf70a5b9b9c1d89e63da19d394b0ed119d5102b31a60aa2a87481b67d5a0931d2b9efb8cca9cc2167920f053d804e88bbe07126fcd1183fd33e0079a510", 0x54, &(0x7f0000000380), &(0x7f0000000580), &(0x7f00000008c0)="fefc121d36220a36e875b2a24eaf67ab42018fbb6bb8436c29fbb821738c083a5c15f3f64f67f3af74e65b3e1aa5deda476f2c8047322f5ffda26388485edc103c0800000000000000133d2f524654b5878ca368d9f6c0f0e0a6ab7cead5947bba03b88d232831934e671e462090d9e27162a26beba033538a5a1b0bdfebf790242fc9187fde0fb85f11d0ba5840c0ef5a204d4c34391eae6266925b") 7m26.626616864s ago: executing program 0 (id=1917): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x16) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x60a, @broadcast}, 0x0, {0x2, 0x4e22, @broadcast}, 'veth0\x00'}) read(r4, &(0x7f0000000280)=""/150, 0x96) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="07000000040000001800000001000000000000006e086810b050f483429c8a6ba8bf2607d472d7bf37e03660fdb6b6b43ae03c007eb9f24e9cbb0a3caaf5d996854403c771ff24c25b6e9e98d17ad8134d1ac05ef2530513f6f448430e4ddba5b9e80b764235702c781ac1a2b27c682db01de3a78dde71f4a7740d368862c290a96d8b107d29875e86530afa47a41d3f1e2fd8d9ae", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) pread64(r7, &(0x7f00000024c0)=""/209, 0xd1, 0xa) 7m22.955969756s ago: executing program 0 (id=1938): io_setup(0x2, &(0x7f0000000200)=0x0) io_getevents(r0, 0x185a, 0x0, 0xfffffffffffffffe, 0x0) io_pgetevents(r0, 0xf, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x58f2]}, 0x8}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000ad1000/0x1000)=nil, 0x1000, 0x600000, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = socket(0x10, 0x803, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = open(&(0x7f0000000280)='.\x00', 0x880, 0x0) fcntl$lock(r3, 0x410, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x60, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x120}}, 0x0) r5 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x8000000, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x5, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x40000) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000010003904001beb89000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01980400419a04001800128008000100736974000c0002800500090089000000"], 0x38}}, 0x0) setreuid(0xee01, 0xee01) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 7m22.723977742s ago: executing program 0 (id=1945): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) mount$bpf(0x200000000000, 0x0, 0x0, 0x198d044, 0x0) (async) mount$bpf(0x200000000000, 0x0, 0x0, 0x198d044, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa19, &(0x7f0000000d00)="$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") execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x3, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x54, 0x0, &(0x7f0000000340)=[@register_looper, @clear_death={0x400c630f, 0x2}, @dead_binder_done, @dead_binder_done, @decrefs={0x40046307, 0x1}, @acquire, @register_looper, @dead_binder_done, @acquire], 0x0, 0x0, &(0x7f0000000500)}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000700)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}, 0x1, 0x300}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}, 0x1, 0x300}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@dax_inode}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000a40)="$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") setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x7}, [], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x5}}, 0x24, 0x0) listxattr(&(0x7f0000000480)='./file0\x00', &(0x7f0000000080)=""/17, 0x11) 7m7.521573813s ago: executing program 33 (id=1945): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) mount$bpf(0x200000000000, 0x0, 0x0, 0x198d044, 0x0) (async) mount$bpf(0x200000000000, 0x0, 0x0, 0x198d044, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa19, &(0x7f0000000d00)="$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") execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x3, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x54, 0x0, &(0x7f0000000340)=[@register_looper, @clear_death={0x400c630f, 0x2}, @dead_binder_done, @dead_binder_done, @decrefs={0x40046307, 0x1}, @acquire, @register_looper, @dead_binder_done, @acquire], 0x0, 0x0, &(0x7f0000000500)}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000700)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}, 0x1, 0x300}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}, 0x1, 0x300}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@dax_inode}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000a40)="$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") setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x7}, [], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x5}}, 0x24, 0x0) listxattr(&(0x7f0000000480)='./file0\x00', &(0x7f0000000080)=""/17, 0x11) 2m10.395961994s ago: executing program 2 (id=4617): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x1, 0x28008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x200000000c8, 0x8, 0x0, 0x0, 0x0, 0x20, 0x0, 0x40001}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x2284, &(0x7f00000003c0)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x37, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470"], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) socket$packet(0x11, 0x2, 0x300) 2m10.318041876s ago: executing program 2 (id=4620): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0, 0x46}, 0x28) mq_unlink(&(0x7f0000000b40)='Q\xcaAq\x18?\xfe\x96}\n\x90\r\x18\x03i\xcf\xffo}wd\xf4W\xc2\x05*\xd0\xb05q\xc1B\x1bR\x17\xb5\xad\x01>C0K\xf6\xcb\xda\xa9\xe3w\xee7\x87\xae\x06\x18\xd4\xbc\x1c\xe2\xbd\x9fO\xefc\xda\xf7\xbfx\xc7\xae\xc5\xf8Uh}3\xcds\x1d\xd7\xff\xf3\x06\xce\xf07ViHtw\x83\xca\f\x93w\x80\xf1\x06\xa3\xbee\r(\r\xf6\xbd\xf8\xbd*dM_\xbc]\b\x8b\xd64(\x9b\x16\xae\xb87\xfe\x1c\xd2y\x12\x89a\x7fl\xeav\fO\xe1R\x87.z\a\xed`\xc7Q}\xc0\x8d\xf8\x89\x84u\xba\x13\xf4Vs\xfd\x9b\xd9@\xbfx>\v\xddK\xd1\xfdBRy\x83\x0f\xd85d\xd3\xe7\fb\xad\x94|+\xcd\xee\xb7]\xf3s\x94\xf1\xb3\x94\xbb\x118\x92\xbfw\xad:C\xc2A8\x9d\xbdoJ\x9f\xa6G\xf5\xe3f\xd9\x86<\t4\xaej\x8dj\xf0\xdeL&\x10\x9b\xce\x8a\xf1LH\x90\xa9n`\xbfJc\xfd\xcd\xb9Ux\x05\x1dW\a\b]B\xdf\n\xa1\x1f+,%\no\x12\x9c\xba\x06\xee\xb5E\xae3\n\xb6\xa0\x99\x88\xb9\xa1\xee2t\xc7\x12\x16\x8a\x05\xb8\"\x85K\xc7\xf9q-\xe6\x98F\x11~\xf6\xf2Ku\xac\xdb\xd97\x97\xa81\x167\xc7\x11@\t\xe3\xd2\xe7mh\x98\xe1\x9a;~&\xe18\x8e\x19]%!\xab>[jb\x8f\xbd\x0f\"b\x81\xf6\x9dh\x92JO2G\xe3\x04\xca\x8dX\x87\x18,\xa1\xbdo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002\xc9\xd7d\x1f\xbcE\x0f\xc6\xa2\xa9\xecvy#\x82N\xa3`\xbdw{\xef\'\xc3`O\xfe\xf4\xb5\xa7\x14\x8f\x99\x03}Qf\xd8}2\xe7\xb5\xe5\xf8#M\x11\xea\xd2\xc9\xe4R\xa2\xa2\x9e\"\xb2\x1f\x9e\x95\xcf\x17\xba**$\x81\xfd\xb1\xe1\xed\xa3\x16\xecuz}\xa8\"\x87\xac\x1e\x14\x00D\xc8\xb2\xd8\x9a\x9cET\xcd3\xe7\xed\x7f\xc7\xa0\xb9\xfd\xdez\x04\xf7\xfe\x87\xf1\xed\xd7\x93}p\x02\xaf\x91\xb1\x18\x9a\bB\xb8\xf9{\xe4n1\xb4J\xafK8\xabj0]I\xecE\a\x8d\xc7X4\xf2$\t\x19\x1f\x93[\x96\x05\xa8\xf2\xa5\xdb\x03=\xb3\x87\xc5Q0\x9a\xc7*]R\x00\x00\x00\x00\xb0\xe6\x80\xc1N\x04\xbe3\xdaR\xb2{|\xbd_C\x1f\'v)\x8az=\xcb\xe7\xd9\xf3\xb2f\xe5h\xab\xc6iB<.\xc6 ~k\xb2\xd0\xa5,C4 ^]\xbe5%R\x11\x9e\xff\xaa~\x90\xe7\x8b\xda\n\xb7\xaa\xd6\xe2\xc1Ax\xbf46\xef\xb5T5q \xf8\xbc\x96o\x81\x8d\xc7N{\xa4]\x1am\xea\x97\x166 }\xc5\xd0\xe6\xfa\xcaE\x03$2[\x80kv\xda\xd0\x00\xddn\x94\xae\xd7\\N\xd6\b/B\xe0\xee\xbe\xa6\xccm\xc5\xdd\xf983\xa6e\x1c\xd6\x95`\x8d\xdc\xd8\xa9\x13\xa09\xfc\xf3\xdf\x16\xd3\xdb\xf5\x05\xfc\'f\xd4v5\xf1\xc6\xd8\xa8\xf8Q\x86j\xdf\nh\x04\xa7n\xbb\x91,a\x9e\x93\xf2\xae\xcd\xd6D\xb8\nV\xc6\x93\xc0\xaf\xe8\x9dhY\xac\x1cn\x19\xa5\x814\xce\xf6#%\xa2\xcb.\xc3S\xf0\x8b;[\x1ck\xf7\r\xf0\x83\xd6h\xd9z\xfd\xef4:\xea\xb0\x05\x84\xe2\x96\xfb\x81\x0e\xfa\xf7lE\xbf\x11n\x94\x826\xc4M\xf8\x90\x0e\xaa3A\x1b\xd6S\xa1z\xe2\xe4\xdb\xad{\xc2Qn\xfb_\xb4\x12\xe7x\xdd\xe0\xb7=sU\xb2\x16Q\xa94\xe2\x01+H5\xb8\xdc\x94\xc7\xaf\x88\x1b\x13\x9a|\xbeO)\xdaZYo\xb4\x00\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000100)) setsockopt$inet_buf(r1, 0x0, 0x25, &(0x7f0000000000)="8a8e6301e89c37a806d2a04ef546557f68ba20e992b0034bf9388fc5292760ff0022143ccf", 0x25) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40080, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES32], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = socket(0x40000000015, 0xa, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@gettfilter={0x24, 0x2e, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff4, 0xc}, {0xb, 0xf}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4014841}, 0x10014854) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd70007ddbdf250100000004000180100002800c0001800807"], 0x28}, 0x1, 0x0, 0x0, 0x24008080}, 0xc0d8) setresuid(0xee00, 0xee01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x88) setreuid(0xee00, 0x0) getpeername$packet(r6, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x109300) 2m10.144414752s ago: executing program 2 (id=4624): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0x800000000, 0x0, 0xffffffffffffffff}], 0x1, 0xbff, 0x1e, 0x0, 0x2e, 0x6e}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @random="00eb7e41ef71"}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="08000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYRES32=r7], 0x54, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r5) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000880)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@nojoliet}, {@block={'block', 0x3d, 0x400}}, {@sbsector={'sbsector', 0x3d, 0xfffffffffffffff1}}, {@showassoc}, {@mode={'mode', 0x3d, 0x80}}, {@hide}, {@gid={'gid', 0x3d, r7}}, {@map_acorn}, {@overriderock}, {@check_relaxed}, {@gid}, {@map_off}, {@check_relaxed}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x50}}]}, 0x5, 0xa51, &(0x7f0000001240)="$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") epoll_pwait2(r5, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f00000003c0)={[0xd1d7]}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 2m8.86573066s ago: executing program 2 (id=4630): bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x692, &(0x7f00000011c0)="$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") fcntl$setpipe(r0, 0x407, 0x6) syz_clone3(&(0x7f0000000040)={0x21000080, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x4004854}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x800, 0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x100800) getsockname$packet(r3, 0x0, &(0x7f0000000600)) 2m8.382955905s ago: executing program 2 (id=4633): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0) 2m7.23074682s ago: executing program 2 (id=4641): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c1e82, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="c20fb6cf90fdfcf77d3a20162878f634", 0x10, 0x10, &(0x7f0000000280)={0x11, 0x1, r6, 0x1, 0xf9, 0x6, @broadcast}, 0x14) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x20000, 0x1000}, 0x20) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) (fail_nth: 5) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000800}, 0x44854) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 2m7.22888037s ago: executing program 34 (id=4641): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c1e82, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="c20fb6cf90fdfcf77d3a20162878f634", 0x10, 0x10, &(0x7f0000000280)={0x11, 0x1, r6, 0x1, 0xf9, 0x6, @broadcast}, 0x14) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x20000, 0x1000}, 0x20) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) (fail_nth: 5) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000800}, 0x44854) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 2.053061388s ago: executing program 1 (id=5989): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000884000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x484c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x5, 0xfffffffffffffbff}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigqueueinfo(0x0, 0x2b, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f0000000300)=@alg, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)=""/95, 0x5f}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/118, 0x76}], 0x4, &(0x7f00000007c0)=""/232, 0xe8}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x2, 0x0, 0x92, 0x1}]}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c4972e3aaa30cbdaa"], 0xc) epoll_create(0xb398) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x34, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x240484d4}, 0x0) 1.919523942s ago: executing program 5 (id=5990): r0 = epoll_create(0x4) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x30000010}) (fail_nth: 3) 1.565185563s ago: executing program 5 (id=5991): bpf$ENABLE_STATS(0x20, 0x0, 0x0) inotify_init1(0x100000) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/89, &(0x7f00000002c0)=0x59) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000200)=ANY=[], 0x0) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x600080) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000180)={{0x2, 0x2, 0x9, 0x3, 0x1000}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x311600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r7 = fcntl$dupfd(r6, 0x0, r6) write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="635a0b42010006"], 0x5c) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x2, 0x0, 0x2}) 1.564705753s ago: executing program 7 (id=5992): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x7, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x400000000000027c, &(0x7f0000000080)}) socket$kcm(0x29, 0x2, 0x0) 1.486610686s ago: executing program 7 (id=5993): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40481, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x80503d0a, &(0x7f0000000080)={0xfffffffe, 0x8}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010"], 0xd4}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x50}, 0x1, 0x7}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000001900010900000000000000000218000000000001000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x5, 0x663) shutdown(0xffffffffffffffff, 0x2) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x50, r5, 0x1, 0x0, 0x25dfdbfd, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000845}, 0x8840) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) 1.456704906s ago: executing program 5 (id=5994): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) link(0x0, &(0x7f0000000300)='./bus\x00') r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffef6, 0x4, @perf_bp={0x0, 0x1}, 0xc8a0, 0x6, 0xfffffffe, 0x8, 0xc, 0x475}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, 0x0, 0x400c084) r2 = socket$inet6(0xa, 0x3, 0x87) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', 0x800, &(0x7f0000000280)=ANY=[], 0x1, 0x38e, &(0x7f0000000a40)="$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") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x9, 0x0, 0x3}, 0x20) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x8ec, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8d8, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x66, 0xffffff80, 0xffffffffffffffff, 0x0, 0x8af}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x880, 0x2, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x80, 0x914, 0xffffffff, 0x3, 0x0, 0xd39f, 0x4314, 0x1, 0x200, 0x6, 0xffff0ced, 0x2, 0xc, 0x7, 0x8, 0x2, 0xffff, 0x3, 0xff, 0x8, 0x8, 0x4, 0x401, 0x7fff, 0x5, 0xf, 0x419c6eaa, 0x1, 0x3, 0x1, 0x4, 0x1, 0x7, 0x9, 0x8, 0x3b, 0x8, 0x8a, 0xfffffffb, 0x4, 0x7, 0x3, 0x7, 0x3e, 0xbc, 0x1, 0x6, 0x5, 0x5, 0x0, 0x6, 0x0, 0x3, 0x200, 0xfffffff8, 0x20000, 0x2, 0x6, 0x1, 0x8000, 0xffff8001, 0x100, 0x9d, 0x1, 0xfffffff7, 0x5864, 0x3, 0x80000001, 0x7fff, 0xedc, 0x7ff, 0xfffeffff, 0x3, 0x8, 0x7, 0x6, 0x8, 0x9, 0x9, 0x8, 0x3f48bf0a, 0x5, 0xffffffff, 0x370, 0x7, 0x9942, 0xfffffffa, 0x80000000, 0xbff8, 0x9, 0xfff, 0x10000, 0x0, 0x4, 0x4, 0x3ff, 0x1, 0xda, 0x0, 0x8, 0x8, 0x2f, 0x7fffffff, 0x7, 0x2, 0x8, 0x9, 0x1, 0x101, 0x0, 0x265d, 0x9, 0x4, 0x9, 0x2, 0x2, 0x0, 0x37a, 0x5, 0x5, 0x8001, 0x200, 0x5, 0xffffffff, 0x5, 0x200, 0x2, 0x2, 0x401, 0x9, 0xfffff145, 0x64, 0x9, 0x9, 0x400, 0x7ff, 0x1ff, 0x9, 0xffffffff, 0xfffffffb, 0x10001, 0x6, 0x80000001, 0xfc0, 0x5, 0x3, 0x9, 0x4, 0xfffffbff, 0x4, 0x4, 0x9, 0x3d6, 0x9, 0x7fff, 0x1, 0x3, 0x4, 0x7401, 0xcd5, 0x2, 0x7, 0xf3, 0x80, 0x9, 0x800, 0x2, 0x1, 0x1, 0x65887464, 0x4, 0x6, 0x5, 0x0, 0x2, 0x8, 0x4, 0x4, 0x120000, 0x7, 0x200, 0x4, 0x8001, 0x4, 0xa8, 0x3, 0x7, 0x7, 0x9, 0x9, 0x9, 0x68, 0x9, 0x6, 0x8000, 0x401, 0x9, 0xfffffffe, 0x8001, 0x3ff, 0x7, 0x80000001, 0x8000, 0x6, 0x7fffffff, 0x6e4b, 0x8, 0x8, 0x8, 0x2, 0x4, 0x0, 0xfff, 0xffffff7f, 0xa7, 0x3, 0x2, 0x1, 0x3, 0x6, 0x2, 0x1, 0xec, 0x4d, 0xe99, 0xa, 0xfffffff9, 0x40, 0x6, 0x9, 0x7de9, 0x8001, 0x1000, 0x4, 0x7, 0x0, 0x5, 0x9, 0x5, 0x3, 0x81, 0x4, 0x5, 0x4, 0xd2, 0x56e, 0x1, 0x5, 0x795, 0xffff, 0x8cac, 0x5, 0x1, 0xa, 0x406e]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x720b, 0x10001, 0x8001, 0x1, 0x80000000, 0x7, 0x4, 0xfffffffb, 0x8, 0x0, 0x7f, 0xdd, 0x6, 0xfffffffa, 0x2, 0x8, 0x6, 0x2, 0x6, 0x0, 0x0, 0x3, 0x6, 0x0, 0x10000, 0x8, 0x4, 0x8, 0x0, 0x2, 0x0, 0x3, 0xff, 0x3, 0x7, 0x9, 0xfffffffe, 0x806, 0x6, 0x3, 0x0, 0x1, 0x2, 0x7ff, 0x40, 0x1, 0x100, 0x7, 0x3, 0x7f, 0x8000, 0xffff, 0x81, 0x4, 0x8, 0x6, 0xdb5, 0x101, 0x6e7, 0x8, 0x7, 0xc, 0xfffffff8, 0x1, 0x7, 0x6, 0x6, 0x7, 0x9, 0x4, 0x4, 0x8, 0xffff, 0x5, 0x1, 0xa93, 0x9, 0xf, 0x7, 0x8001, 0x0, 0x0, 0x6, 0x3, 0x9, 0xffff, 0xf, 0x2, 0x7, 0x2, 0x0, 0x4, 0x800, 0x6, 0xeca, 0x76, 0x5, 0x4d, 0x57, 0xfffff9b3, 0x4, 0x8c, 0x2, 0x7f, 0xbb, 0x1, 0x2000, 0x80, 0x3, 0x80, 0x80000000, 0xb, 0x6a, 0xfffffff7, 0x8, 0xa8, 0x7, 0x9, 0x2, 0xfffffffe, 0x4, 0xffffaa90, 0x7f, 0x81, 0x8, 0x800, 0x7, 0xa, 0x2, 0x8, 0x9, 0x7, 0x8, 0x0, 0x800, 0x7, 0x2, 0x6, 0x2, 0x9, 0x6, 0x1, 0x8001, 0x8, 0x2, 0x40, 0x6, 0x1, 0x10001, 0x3, 0x8, 0x81, 0x2, 0x6, 0x8000, 0x10000, 0xfffffffe, 0x6, 0x9, 0x3ff, 0x6, 0x81, 0x7fffffff, 0xc7, 0x7, 0x2, 0x8, 0xfffffeff, 0x4, 0xffff, 0x8, 0x2, 0x9f, 0x7, 0x2, 0x7fff, 0xff, 0xfffffff7, 0x7, 0xa8, 0x8, 0x7, 0x401, 0x1, 0x7, 0x59b, 0x6, 0x2, 0x2, 0x87, 0x1, 0x10000, 0x400, 0x7fe, 0x1b, 0x5, 0x56474848, 0xbfe, 0x9, 0x6, 0x7, 0xff, 0x5, 0x3ff, 0x3, 0x5, 0x798515b1, 0x3cc, 0x1, 0x10, 0x7, 0x32e, 0x3, 0xfffffffc, 0x3ff, 0x7f, 0x4, 0x1080, 0x401, 0x4, 0x0, 0x6, 0x6, 0x5, 0x4, 0x8, 0x5, 0x5, 0xf8a4, 0x10c, 0x8, 0x1ff, 0x8, 0xba1f, 0x3, 0x1000, 0x3, 0x401, 0x7, 0x4, 0x0, 0x5, 0x79, 0x81, 0x8, 0xfffffffa, 0xfffffffa, 0x3, 0x884, 0x98b, 0xb3, 0xffbfffff, 0x8, 0x6, 0x6]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff00000000}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x7, 0x2, 0x7, 0x400, {0x6, 0x1, 0x4, 0x5, 0x1, 0xf}, {0x1d, 0x1, 0x5, 0x3, 0x1000, 0x2}, 0x5, 0x5d, 0x4}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.423388387s ago: executing program 7 (id=5996): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1ff, 0x4, 0x4, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.374961219s ago: executing program 5 (id=5997): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086610, &(0x7f0000000000)={@desc={0x1, 0x0, @auto="43112485dd716d9b"}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000010903000000000000000000010000063c000200"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8104) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8000080}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") 1.33048979s ago: executing program 4 (id=5998): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x3, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="826b", 0x2, 0x0, 0x0, 0x0) 1.3299365s ago: executing program 4 (id=5999): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40243, 0x4d) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x4}, 0x38) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x5}]}}]}, 0x38}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x5b14, &(0x7f0000000280)={0x0, 0x33b6, 0x40040, 0x3, 0x269, 0x0, r0}, 0x0, 0x0, 0x0) 1.256279862s ago: executing program 6 (id=6000): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000040) r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x153a, 0x0, 0x2, 0x17a}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/131, 0x83}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003700)=""/4100, 0x1004}], 0x0, 0x1}, 0x20) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet(0x2, 0x3, 0x9) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000100001040eff", @ANYRES32=0x0, @ANYBLOB="40c20000000000001800128008000100677470000c00028008000200", @ANYRES32=r7, @ANYBLOB="9c0018805000018014000500686345ffffffffffffffff00000000000500060007000000140004001170fea6ec81d48634e6396a730c48c3140005001eb8353f544779fc9d5313a5c7c738e70500060002000000140001800500060080000000050006000d0000001c00018005000600f0000000050002000000000008000200fe252c001800018014000400bec865ef86eeae205e0a7a3a769e"], 0xd4}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.255777812s ago: executing program 4 (id=6001): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getpid() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) pread64(r0, &(0x7f0000000180)=""/59, 0x3b, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000001080)={[{@errors_remount}, {@grpquota}], [{@euid_lt}, {@smackfsdef={'smackfsdef', 0x3d, '*,.}+'}}, {@uid_eq}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") setuid(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 1.232364843s ago: executing program 7 (id=6002): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002cbd7002d32d1fecc88cec87d006ac00000000000000000000000054b819f42785295ca714c9279c80097eaf5e787b53dc671fccf2cbeaacacef4688676e4e896b77b8d5e49a21aafb6161e9595054e245fdf05363984836b5e9645c8df68c5b69caf0efca47ccfc04c755be82a3db3afd5f00fb4c4f022304b0d8de5f4e"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x50) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000100)=0xffffffffffffff40, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[], 0x4c}}, 0x48000) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x0, 0x0}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x40000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c4, &(0x7f0000000340)="$eJzs3T2LY1UYAOD3ziQ32bVICisRvKCF1bKzrU0GycJiKiWFWujg7oIkQdiFAVcxWNnaWPoLBMHOP2Ej+AMEf4CdWywcuTf3ksxsPiaw2fXjeYrMO+ec95z33NzMB0POfPzqbHK3iPtff/l7dLtZHA1iEI+z6MdRNFJKKZYG3wYA8G/2OKX4My1cMWVQPmQR0T1saQDAgez9/f+ng5cEABzYe+9/8M7paDR8tyi6cXv2zfm4/M2+/LjoP70fn8Y07sXN6MWTxd8Cmp8WysfbKaV5qyj1443Z/HxcZs4++qWe/7RZ6CR60a+ii/l3RsOTYmElf17Wcb1ef1Cufyt68fKa9e+MhrfW5Mc4jzdfX6n/RvTi10/is5jG3aqIZf5XJ0Xxdvrury8+LMsr87P5+bhTjVtKx8/vWQEAAAAAAAAAAAAAAAAAAAAA4L/uRn12Tieq83vKpvr8neMn5SftKBr9i+fzLPKzZqJL5wPNU3yfUqcVMRreLIoi1QOX+a14pRWtF7NrAAAAAAAAAAAAAAAAAAAA+Gd5+Pmjydl0eu/BmuC36xEbujYEzWkAzdv6d2Qdb+oarLS8Fo8mZ53NE650HdXhlkXjuBmTRWzdTrTazcz9vS7C/sG1TTX/8OO+E3Z3j2lvuz7PJmjurslZFmvHdKJp6TbP6c+rY/K44lr5pq60+/ZbCfK1Xb29956/VAXzLWMi21bYW38srlzdkl3eRV5d1bXp7ZXTOKqWzuV7Y/1zsemV8pSselnnz+6LDwAAAAAAAAAAAAAAAAAAcMHyTb9PdV3bkXqUOgcrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeq+X//98jmNfJVxicx4OHL3iLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/8HQAA//9kbFXe") r4 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000780)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000280)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000780)="$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") r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x610, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2a0, 0x2c8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00002e3000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000021c0), 0x0, 0x821c3, 0x1e, 0x0, 0x4e, 0x20}) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0x4004550c, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 969.501241ms ago: executing program 1 (id=6003): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001600010a0000000000000000160000000400000008000a"], 0x20}}, 0x0) (async, rerun: 64) rmdir(&(0x7f0000000640)='./file0\x00') (rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async, rerun: 32) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x1}, 0x4581, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa2, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000090000000000890000000000004c570000000000fee68eb377da75d99233cfcf07708b5479ff4a59ff93fc88e66e4c3b414ca79c88fe74b85d23eafd330e39ff31f9b02ae0879d64b0bb"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) 962.596431ms ago: executing program 4 (id=6004): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/2, &(0x7f0000001080)=0x2) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r1 = socket$kcm(0x1e, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x1) ppoll(0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) r3 = socket$inet(0x2, 0x6, 0x4d) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0xa}, {}, 0x2, 0x0, 0x2, 0x4, 0x0, 0x2b}, [@algo_auth={0x48, 0x1, {{'blake2s-160-arm\x00'}}}]}, 0x138}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r2) 576.522343ms ago: executing program 6 (id=6005): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) 528.738434ms ago: executing program 4 (id=6006): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40481, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x80503d0a, &(0x7f0000000080)={0xfffffffe, 0x8}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010"], 0xd4}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x50}, 0x1, 0x7}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000001900010900000000000000000218000000000001000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x5, 0x663) shutdown(0xffffffffffffffff, 0x2) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x50, r5, 0x1, 0x0, 0x25dfdbfd, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000845}, 0x8840) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) 528.216924ms ago: executing program 6 (id=6007): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31000000000800"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x1000, 0x0) syslog(0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = io_uring_setup(0x4bbe, &(0x7f0000000000)={0x0, 0x3, 0x800}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@random="9ec6ba579974", @random="55765aa910ba", @void, {@can={0xc, {{0x1, 0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "eb3a3306c8c6d2d4"}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x53, 0xfffff024}, {0x6, 0x1, 0x8, 0x81}]}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) 507.873275ms ago: executing program 1 (id=6008): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a4000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14, 0x52, 0x311, 0x0, 0x20000}, 0x14}}, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0x1, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x45c, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0xfffffffe, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x800008, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x100000, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0xc, 0x80000000, 0xffff, 0x9, 0x2, 0x4, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0xab5, 0x10000, 0x1, 0x9, 0x0, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0xb4, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x1, 0x18000, 0x10, 0x1000, 0x6, 0x2002, 0x80, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x7, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x4, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x2, 0x8, 0x8000, 0x10004, 0x9, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0xfffffffe, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x10007fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x8d0f, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4, 0x6, 0x7fffffff, 0x0, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x3, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x4, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x3, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x5, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x23, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x2006, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xfffffffc, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x0, 0x5, 0xffff351b, 0x7, 0xa00000, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x3c, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x20c47, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x40000005, 0x3, 0xfffffdab, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x5, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xa, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8001, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x8, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f00000001c0)={[{@errors_remount}, {@nolazytime}, {@sb={'sb', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@auto_da_alloc}]}, 0x0, 0x625, &(0x7f0000000800)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0, &(0x7f00000012c0)="c5c6488514b8809eec71a2423e1558bb3b36b340405a994145a26cd363c738c3d39ef34cf7a97f2f2c408f34fe31ad4a453bece6b719b3eaa5e72fe8d38a40fb5122dc0097798438314fe695a9f17f19929e903120a4d97e2c1b2bb9d2e51bface0266431f0b3befce4eaaea1ecb6b98b903f6accedb4dc311368db800947ec78cf0d2e516e65b70a438f45fd818ddbd4f7e37a25bf3069126af8eed23f708aed95ad84fa7fa178b5e3890d1a5776eada77abce69340018a2d520ff8a9"}, 0x20) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) renameat2(r7, &(0x7f0000000240)='./file0\x00', r7, &(0x7f0000000280)='./file0\x00', 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r7, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYBLOB="814c8d"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000001280)={0xffffffffffffffff, 0x696, "da3cbc", 0x9, 0x10}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 507.492245ms ago: executing program 5 (id=6009): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000), 0x0, 0xbff, 0x1e, 0x0, 0x2e, 0x6e}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @random="00eb7e41ef71"}, 0x14) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYRES32=r5], 0x54, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x101, 0x7}, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 483.600765ms ago: executing program 4 (id=6010): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x202) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000000c0)={{0x0, 0x1}, {0xe}, 0x2, 0x3, 0x2e}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e140602000006020e00280010600700028000001294", 0x2e}], 0x1}, 0x404c004) r2 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = open(0x0, 0x1a1342, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x31) fallocate(0xffffffffffffffff, 0x58, 0x4000003, 0x8800004) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write(r2, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) r9 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @broadcast}, {0x1, @broadcast}, 0x20, {0x2, 0x4e21, @multicast1}, 'bond_slave_0\x00'}) sendmmsg(r7, &(0x7f0000000180), 0x4000190, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file2\x00', 0x40, &(0x7f0000000280)=ANY=[], 0xfb, 0x1218, &(0x7f00000005c0)="$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") syz_emit_ethernet(0x10c, &(0x7f0000001ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081004b0000047e02840bb2ae62aa1540e484fd60fe7c978869d0a75c64f9e9c8bd71a99d67a3f9af175d1da6d8de5663fb55de22b27e5231b7a0f01e497c2e37691d009fd7c8c9f4a4239a62edc0d119126de0a047887649c916f6b842c9ad88eed446364ce5c26231e9a6520f679addd368f7fd7014404751fe6476f17928c05c6a7a909c2c8fcb823e4be85b39dd9cfaf3fb1b37714220506e9b35dfa4305224a6e7fa59f3e1cac750aa62b8d7ba7c818e6709187bf95ff8f79f38b617b9d684f1b454662521fffabd39d98fb0b367fbb2d00178741c252f47e46fd2feafc3601f2a748b7c6a961f0890b1e4e74ce2689fe6ec6f095ad2546485323baef711"], 0x0) 427.072757ms ago: executing program 6 (id=6011): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x3, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="826b", 0x2, 0x0, 0x0, 0x0) 418.187138ms ago: executing program 6 (id=6012): socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1ff, 0x4, 0x4, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 379.066159ms ago: executing program 6 (id=6013): r0 = socket$igmp6(0xa, 0x3, 0x2) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}], 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x4}) r1 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000780)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r4, 0x29, 0x1e, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x65}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3e2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40011) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x3fe, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) bind$tipc(r5, 0x0, 0x0) sendmsg$unix(r5, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x20044810) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x3000)=nil) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) socketpair(0xb, 0x2, 0xdaa, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x48, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x40) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x5, 0xe, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c) sendmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005040)=[{&(0x7f00000001c0)="06f2da4cc04d8670c1f0dcc422b856d751a2e787a1c36180a266ae4c4a0a4c690b65bde00f84cc89feb2ec3cf512ca83dc60ad19dcb62cb8eac74990d9feb2bf3085592cd871918bb814a81ee86077fd1e63850498cb77b8bd532dd3f30022cd9231ae0db79499f43e08a0dcb4d6f6091044a9e424f2e8cef7e584dd6e2fed55117a1209c2920ea8d639f2342a62e31b9f9e1f617c64baaf68440c940ebde60272840941e79839bcbf05b79f1d1f", 0xae}, {&(0x7f0000001300)="884ab464847da64b706f21833e820163d1f2bd12864a028d63d2b6d5b3f4b8ee1929e89e43e9a2d3eeea181e9b1464a9528b1ff78a976a56932a993f225583f10287998b6908650c21d03a45a07796fb1c4863e5c36cbe082d128e5b37d9e2755530bfc088c19cff45e48558cc8b80cb22d4939d168953c6ba627995e48f3afbf510d37b8320a6d4b462b472dc513681b7715f44df68525aaca640244729bc08fd4698a8ebfd7863b07462dd248739b9b03b8c6fed19900201139ee540319bfe186a57d03df59e048076486ba3eb60ec8d524fb6f04c7c503dbbd3c35b10392c0fab73f349ceed807f98a5e1436e724c02963515dcb81232e5b664682ba3432820992f5feef072584fd1730da81a99a550f80999d0db425c3f67874cb5652f3efa34998cd1750cb1fb873aa326bc611405970de6751bd21dfd6f34278462b4fa3d3f065e16d63a45b5b5a59841ec1e300395635454730a82ba7a386c4874743e8a58bf364bca9357864f25e4ae82bcead5d781fc00c7c83765f5858994a85a79ec24deaa1ab25ad85736371dad808f809dcf806f17801b0b645f7e1ead1f7d253267eda1dd7f74bfb3ccf7202cf630aee34906e52f5cbf684075961b34fbd8dca037dc4fd16ebbf7b04e5da931aa3d00bbf979db9cc6f350f0bc6c5b3627c7c09aa72e06e2a9364399cd94d2751a41be853c83e484d58602299e800559418dd5d1062e008c94766560b9aa648af83675d62e50c4f8e32e7af92c854a03b12bde4e351dfc829fd227e11cd6b7390a76aa5004f72c9a7a4b46a430b29d87415cff34671471a02484162a927df10e87d439047f269e98d39640fc54d2c59c589ca77bb7fae8d2fbbe7bf2dbfe77ef49d74631476b45804d57f7293c24d9d96771d614bd75c4e6a29bb6227e14209ef852ac050b1c68418408ee03f1765a7331719207375be9777c8c3ddb9ea41f95441b9a6e964cb10d9b87a1d241272ffa0e6b85dea2098fa7cc5c044dc5cd63a6b4c7fbb134d5f3d92535755a2ae442386ca633108f74fdfc439ba7b3a42f48ac6ca97e32f9eb0e6e3404e3e9daf1dcfb32233e051de56fe2fc3837768c7ca58d93fa3d115d751c1a1d977879ff9eeb9625f64edf2dfe8eb997e7aef141972935639eb8309eeb0d48feef10e2b4df31c873378655c4f740fa88fbcbde4911f50bf98d5e956a7cf02ab25769cd8ffaa99451aff5d234de158e0b2be61170627be036fdeda08550cbc41457fde37a28b4dc1e88d27bcbd43cbb8cff537e63e04a963b7c776e21a3ebe0b8c0982656a6998252f390eb0b6a333f7bcabda3a889b846926275276b8baf5c82ff47b8140bec940982a5f22dcc987ba1f20df0f826d5b1b7f9405d5f9f0a576f03c1fad24f610b002eb4208fdef0a534fe8dac914891c3c8ed430391fe8b7d184eff0632c3dc682a92dbe61f9ac98de3f4b7afe1fa1dd22be007880c0314cca16579ac0da7b0a1666f9b75eead478ad61447c6d6a8cf95d426b14759099b55ade8d86b5d9dcd51fd2438605fa4cdb67e4189dd7786554c0931bdc2d8a97c16818a24695f4f6b3698cf5f64c46a0985a118b72277f385a1cac6852423f9d7f8bd85241297bb652d0b144c22bd81d26b973c3819b93161bf52c8d9d772f76fb707d3a3833101678cf23ab0de8293440f64cfea2aa448b420578bf80f12a90206d5bcc612756e2610e339dd2c22545dab1afdf123b78bfa366c50b4ec5e734ce5d3981c4a14d1003d228d0dfdd22485adf22626400ff2ed5a5ead34bf3df81f74ad22017e23ecbbc2355af57b5e7a76070a552a9dab51582183c4007133d0a8651484c7f8d611f42c3db1bea9919babe128a6b33e7a704e65686221cf4be1876cc04c6e72ab19e03c3b073740bb5605dff0559b7d9aa6493afa7c56324c6d1302bb612a63cf538287704837dba8478b794eb801b1e605dcfe31d6e0bddae085261c1991b6c1628aab9719a6b323b1b26edf6c7765aac1f1c9cbc445ea0dcbc9d05ba71eedf9ebf9d5f6d81e9dcfb3f1f8b2d2b2ed95260c611a50d01a5a73bef766ce9c79254ddd05cf4d5e2ced27380d31bbcd3774f14e5c0ed1da627dee18720217e06c4b6b6719be3fcb7fc19b2fd9e52616802a5f673bb99afb2fa1be053d6d8a4d7ce6a875404dee983f2a71379b3e6bc5aa08db334d24aa8260060ed6f806510e3fa997e562a328b72e3ecb4c49572274bf1facc2ab257d0e1e499cf21be5e9a1858edb7c4f931c83b0ad3b86bb6a4df900ba3cdca8297f0ac83f47d31d2df05cce40760e74cdd66276cd15fbf6f772110c5eed25ad6877d043dfbd132ddfc8650e5896a6436ecc4cce6a216b5b3a64e0685e91f85fd24961ffbcbe076057b8d7d5037712eeed0424a48fdb824811e48595734f370306b49bf6474bc97383d73c123d015da53179b5958564f860101ef1146dabeea8cc55718125c41ff59355cd64f3da1e59715af397e34f59afae3b319a9ead2abae198163e76305236ad89aa488192eb5976", 0x6fe}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f00000000c0)="ea84b65695a4a3fea60d0423e6a2a97bc5f9c2bbd4e3c9f3987cd672b1b8f85ca257c5ea196a76cf7113441154e8319084a8b96dc903eeb6178c85aa52322c6abee158cbb26f036fe9e02fe7cff1502c489ec7f49199cb6e93b2d5c6eef9571844da7e67b9421c37030df9fd8b8946ec575edae1e42c98634cad1e5e5b9531b3114e4f81f81935e206db95235c796540b182552c9305046e150974c672793b57a42d162c887f6443370a86ba90af164b", 0xb0, r1}, 0x68) 350.22814ms ago: executing program 7 (id=6014): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getpid() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) pread64(r0, &(0x7f0000000180)=""/59, 0x3b, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000001080)={[{@errors_remount}, {@grpquota}], [{@euid_lt}, {@smackfsdef={'smackfsdef', 0x3d, '*,.}+'}}, {@uid_eq}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") setuid(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 349.7698ms ago: executing program 1 (id=6015): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x891b, 0x0) (fail_nth: 1) 305.571391ms ago: executing program 5 (id=6016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = syz_io_uring_setup(0x358f, &(0x7f0000000000)={0x0, 0x4983, 0x400, 0x1, 0x183}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x16}]}) sendto$inet6(r1, &(0x7f0000000200)="09e3b5797572be4caa1f688eb65b", 0xe, 0x8000, &(0x7f0000000240)={0xa, 0x4e23, 0x3d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) io_uring_enter(r0, 0x7d08, 0x9bca, 0x5e, &(0x7f00000001c0)={[0x40]}, 0x8) r2 = getpid() syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x147) write(r4, &(0x7f0000000340)="6b53acc1a6df", 0x6) sendfile(r4, r3, 0x0, 0x3ffff) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r6, 0x0, 0x3, 0x1}}, 0x20) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x362, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 110.736887ms ago: executing program 7 (id=6017): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff00000000fdffffff8500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000040000850000007b00000095"], 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd0d, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) fsync(r2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3d8, 0x2c8, 0x2c8, 0xffffffff, 0x1d0, 0x0, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, &(0x7f0000000040), {[{{@ip={@loopback, @loopback, 0xff000000, 0x0, 'syzkaller1\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x62, 0x1, 0x8}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x3}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast2, @multicast2, @port=0x4e21, @gre_key=0x7ff}}}}, {{@ip={@multicast2, @multicast1, 0xffffffff, 0x0, 'virt_wifi0\x00', 'pimreg\x00', {0xff}, {}, 0x0, 0x3, 0x40}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x248, 0x1, 0x1}}, @common=@ttl={{0x28}, {0x0, 0xc}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x9, @remote, @rand_addr=0x64010101, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @gre_key=0x478, @gre_key=0x5}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @broadcast, @multicast1, @port=0x4e23, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) r3 = accept$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @loopback}, {0x306, @random="d569ea8cd22f"}, 0x30, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 'xfrm0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000240)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x476, &(0x7f0000000540)="$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") sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x32}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendto$inet(r1, 0x0, 0x0, 0x3404c8d0, 0x0, 0x0) 38.493379ms ago: executing program 1 (id=6018): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) lseek(r0, 0x1ff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r1, 0xf0) 0s ago: executing program 1 (id=6019): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) unshare(0x22020400) (async) poll(0x0, 0x0, 0x9) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000240)="c41a2716eb99945e429d9ac0a334308ec5b0b8b2de385685667f4d5111ab0f2794bf1fa8df8a1d6f762810f954803daa0089446ae126727cfc30af96c3a34119e738176da30111749727db0e6e8de9572693dfc73ead798b17fabe3e0848b36b25745bfb402d22692650d972849f98c6a92a9c2b3dd785e7966e7644fda205fc18ce90daaf3f939060d3c26c929a1dc0723d15412980622f884f8e23a6ee43a605755400baed3dc0f14b52fd205aa9aeff5cfa8d3ce80a7a2b76c37b17e8d83db47062f83e9fb31daa95448b928ccb7b4ff0590d1314643ac2cf171445437f2cf8e2ccf063cb42", 0xe7}], 0x1, 0x10001, 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) (async, rerun: 64) r4 = socket(0x2a, 0x2, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x64b498a5, @mcast1, 0x9e5}, 0x1c) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffb34d76a1b8e286dd61fbddf000083a01fe8000000000000000000000000000aaff0200020000000000000000000000018100907800020004"], 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x3, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff3}, {}, {0x3, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x3}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}]}}]}, 0x44}}, 0x24000000) kernel console output (not intermixed with test programs): avc: denied { write } for pid=20070 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.866472][T20058] IPVS: using max 2208 ests per chain, 110400 per kthread [ 633.880157][T20073] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 633.906818][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 634.651120][T20105] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5097'. [ 634.664868][T20105] gtp2: entered allmulticast mode [ 634.856700][ T8005] IPVS: stop unused estimator thread 0... [ 635.065000][ T28] audit: type=1400 audit(1781965512.463:12781): avc: denied { write } for pid=20081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.093630][T20113] FAULT_INJECTION: forcing a failure. [ 635.093630][T20113] name failslab, interval 1, probability 0, space 0, times 0 [ 635.131420][ T28] audit: type=1326 audit(1781965512.463:12782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20112 comm="syz.4.5102" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d31fbce59 code=0x7ffc0000 [ 635.196666][T20113] CPU: 0 UID: 0 PID: 20113 Comm: syz.4.5102 Not tainted syzkaller #0 PREEMPT(lazy) [ 635.196701][T20113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 635.196715][T20113] Call Trace: [ 635.196787][T20113] [ 635.196796][T20113] __dump_stack+0x1d/0x30 [ 635.196823][T20113] dump_stack_lvl+0x95/0xd0 [ 635.196847][T20113] dump_stack+0x15/0x1b [ 635.196875][T20113] should_fail_ex+0x25e/0x270 [ 635.196905][T20113] ? audit_log_d_path+0x8d/0x150 [ 635.196938][T20113] should_failslab+0x8c/0xb0 [ 635.196969][T20113] __kmalloc_cache_noprof+0x5f/0x400 [ 635.197074][T20113] audit_log_d_path+0x8d/0x150 [ 635.197107][T20113] audit_log_d_path_exe+0x42/0x70 [ 635.197159][T20113] audit_log_task+0x1e8/0x240 [ 635.197192][T20113] audit_seccomp+0x6a/0x110 [ 635.197222][T20113] __seccomp_filter+0x905/0x1370 [ 635.197271][T20113] ? __fget_files+0x184/0x1c0 [ 635.197298][T20113] ? mutex_lock+0x57/0x90 [ 635.197332][T20113] ? xfd_validate_state+0x45/0xf0 [ 635.197364][T20113] __secure_computing+0x7d/0x150 [ 635.197500][T20113] do_syscall_64+0xd4/0x3c0 [ 635.197529][T20113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.197554][T20113] RIP: 0033:0x7f3d31fbce59 [ 635.197615][T20113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.197716][T20113] RSP: 002b:00007f3d30a17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000020 [ 635.197746][T20113] RAX: ffffffffffffffda RBX: 00007f3d32235fa0 RCX: 00007f3d31fbce59 [ 635.197774][T20113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 635.197794][T20113] RBP: 00007f3d30a17090 R08: 0000000000000000 R09: 0000000000000000 [ 635.197809][T20113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.197889][T20113] R13: 00007f3d32236038 R14: 00007f3d32235fa0 R15: 00007fff50dab518 [ 635.197912][T20113] [ 635.393374][ T28] audit: type=1326 audit(1781965512.463:12783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20112 comm="syz.4.5102" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d31fbce59 code=0x7ffc0000 [ 635.434258][ T28] audit: type=1326 audit(1781965512.463:12784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20112 comm="syz.4.5102" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d31fbce59 code=0x7ffc0000 [ 635.461469][ T28] audit: type=1326 audit(1781965512.463:12785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20112 comm="syz.4.5102" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d31fbce59 code=0x7ffc0000 [ 635.517964][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 635.550216][ T28] audit: type=1326 audit(1781965512.463:12786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20112 comm="syz.4.5102" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d31fbce59 code=0x7ffc0000 [ 635.577722][ T28] audit: type=1326 audit(1781965512.463:12787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20112 comm="syz.4.5102" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d31fbce59 code=0x7ffc0000 [ 635.603779][ T28] audit: type=1326 audit(1781965512.463:12788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20112 comm="syz.4.5102" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d31fbce59 code=0x7ffc0000 [ 635.642634][T20128] lo speed is unknown, defaulting to 1000 [ 635.734053][T20140] netlink: 208 bytes leftover after parsing attributes in process `syz.6.5101'. [ 635.743329][T20140] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5101'. [ 636.341502][T20152] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5111'. [ 636.356379][T20152] gtp2: entered allmulticast mode [ 636.549098][T20154] tipc: Enabling of bearer rejected, already enabled [ 637.102157][T20161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5114'. [ 638.659126][T20180] netlink: 'syz.5.5120': attribute type 1 has an invalid length. [ 638.673692][T20180] 8021q: adding VLAN 0 to HW filter on device bond3 [ 638.701743][T20175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5119'. [ 638.722620][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5122'. [ 638.744780][T20175] FAULT_INJECTION: forcing a failure. [ 638.744780][T20175] name failslab, interval 1, probability 0, space 0, times 0 [ 638.761674][T20180] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 638.763090][T20187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5121'. [ 638.786481][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 638.786498][ T28] audit: type=1400 audit(1781965516.173:12806): avc: denied { getopt } for pid=20179 comm="syz.5.5120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 638.815790][T20175] CPU: 0 UID: 0 PID: 20175 Comm: syz.4.5119 Not tainted syzkaller #0 PREEMPT(lazy) [ 638.815825][T20175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 638.815838][T20175] Call Trace: [ 638.815844][T20175] [ 638.815854][T20175] __dump_stack+0x1d/0x30 [ 638.815889][T20175] dump_stack_lvl+0x95/0xd0 [ 638.815916][T20175] dump_stack+0x15/0x1b [ 638.815941][T20175] should_fail_ex+0x25e/0x270 [ 638.816001][T20175] should_failslab+0x8c/0xb0 [ 638.816025][T20175] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 638.816049][T20175] ? __alloc_skb+0x2db/0x6f0 [ 638.816083][T20175] __alloc_skb+0x2db/0x6f0 [ 638.816207][T20175] ? __alloc_skb+0x205/0x6f0 [ 638.816246][T20175] netlink_ack+0xfd/0x530 [ 638.816354][T20175] netlink_rcv_skb+0x18d/0x220 [ 638.816511][T20175] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 638.816557][T20175] rtnetlink_rcv+0x1c/0x30 [ 638.816588][T20175] netlink_unicast+0x5a7/0x680 [ 638.816623][T20175] netlink_sendmsg+0x5be/0x6f0 [ 638.816664][T20175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.816781][T20175] ____sys_sendmsg+0x532/0x580 [ 638.816813][T20175] ___sys_sendmsg+0x195/0x1e0 [ 638.816848][T20175] __x64_sys_sendmsg+0xd4/0x160 [ 638.816930][T20175] x64_sys_call+0x194c/0x3020 [ 638.816962][T20175] do_syscall_64+0x136/0x3c0 [ 638.816989][T20175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.817046][T20175] RIP: 0033:0x7f3d31fbce59 [ 638.817067][T20175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.817088][T20175] RSP: 002b:00007f3d30a17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.817114][T20175] RAX: ffffffffffffffda RBX: 00007f3d32235fa0 RCX: 00007f3d31fbce59 [ 638.817198][T20175] RDX: 0000000020040000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 638.817215][T20175] RBP: 00007f3d30a17090 R08: 0000000000000000 R09: 0000000000000000 [ 638.817232][T20175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.817250][T20175] R13: 00007f3d32236038 R14: 00007f3d32235fa0 R15: 00007fff50dab518 [ 638.817277][T20175] [ 639.037199][T20180] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 639.189030][T20199] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5124'. [ 639.203548][T20199] gtp3: entered allmulticast mode [ 639.806169][T20214] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5132'. [ 643.028273][T20249] gtp3: entered allmulticast mode [ 643.148960][T20250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5140'. [ 643.349253][T20250] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5140'. [ 644.425715][T20262] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5147'. [ 644.452639][T20262] netlink: 'syz.7.5147': attribute type 1 has an invalid length. [ 644.586653][T20281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5158'. [ 644.728483][T20283] tipc: Enabling of bearer rejected, already enabled [ 644.776491][T20289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5160'. [ 644.949544][T20303] lo speed is unknown, defaulting to 1000 [ 644.989433][T20307] netlink: 208 bytes leftover after parsing attributes in process `syz.6.5164'. [ 644.998678][T20307] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5164'. [ 645.045742][ T28] audit: type=1326 audit(1781965522.463:12807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.4.5167" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d31fbce59 code=0x0 [ 645.079809][T20312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5169'. [ 645.209053][T20315] FAULT_INJECTION: forcing a failure. [ 645.209053][T20315] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 645.222382][T20315] CPU: 1 UID: 0 PID: 20315 Comm: syz.4.5167 Not tainted syzkaller #0 PREEMPT(lazy) [ 645.222462][T20315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 645.222475][T20315] Call Trace: [ 645.222483][T20315] [ 645.222491][T20315] __dump_stack+0x1d/0x30 [ 645.222621][T20315] dump_stack_lvl+0x95/0xd0 [ 645.222647][T20315] dump_stack+0x15/0x1b [ 645.222673][T20315] should_fail_ex+0x25e/0x270 [ 645.222720][T20315] should_fail_alloc_page+0xf2/0x100 [ 645.222749][T20315] __alloc_frozen_pages_noprof+0x108/0x350 [ 645.223018][T20315] alloc_pages_mpol+0xa9/0x1d0 [ 645.223055][T20315] alloc_pages_noprof+0x8f/0x140 [ 645.223089][T20315] pte_alloc_one+0x1c/0xc0 [ 645.223169][T20315] __pte_alloc+0x32/0x2a0 [ 645.223197][T20315] ? mtree_range_walk+0x444/0x480 [ 645.223234][T20315] handle_mm_fault+0x22f6/0x2da0 [ 645.223337][T20315] do_user_addr_fault+0x634/0x1060 [ 645.223438][T20315] ? ksys_mmap_pgoff+0xc1/0x310 [ 645.223470][T20315] ? __x64_sys_mmap+0x49/0x70 [ 645.223540][T20315] ? trace_page_fault_user+0x1f/0xa0 [ 645.223574][T20315] exc_page_fault+0x62/0xa0 [ 645.223616][T20315] asm_exc_page_fault+0x26/0x30 [ 645.223657][T20315] RIP: 0033:0x7f3d31e74123 [ 645.223749][T20315] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 645.223768][T20315] RSP: 002b:00007f3d309f5470 EFLAGS: 00010206 [ 645.223851][T20315] RAX: 0000000000000000 RBX: 00007f3d309f5530 RCX: 00007f3d285d6000 [ 645.223923][T20315] RDX: 00007f3d309f56d0 RSI: 0000000000000003 RDI: 00007f3d309f55d0 [ 645.223938][T20315] RBP: 0000000000000000 R08: 0000000000000008 R09: 00000000000000ad [ 645.223951][T20315] R10: 00000000000000bc R11: 00007f3d309f5530 R12: 000000000000011e [ 645.223965][T20315] R13: 00007f3d32072aa0 R14: 00000000000000eb R15: 00007f3d309f55d0 [ 645.223987][T20315] [ 645.228212][T20315] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 645.246758][T20318] lo speed is unknown, defaulting to 1000 [ 645.308862][T20323] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5170'. [ 645.440375][T20323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5170'. [ 645.571221][ T28] audit: type=1400 audit(1781965522.983:12808): avc: denied { write } for pid=20319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.629421][ T28] audit: type=1400 audit(1781965523.043:12809): avc: denied { write } for pid=20338 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.680551][T20340] tipc: Enabling of bearer rejected, already enabled [ 645.942914][ T28] audit: type=1400 audit(1781965523.353:12810): avc: denied { mount } for pid=20352 comm="syz.6.5180" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 646.026111][ T28] audit: type=1326 audit(1781965523.403:12811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20348 comm="syz.4.5179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d31fbce59 code=0x7ffc0000 [ 646.071855][ T28] audit: type=1326 audit(1781965523.403:12812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20348 comm="syz.4.5179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d31fbce59 code=0x7ffc0000 [ 646.109885][ T28] audit: type=1326 audit(1781965523.403:12813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20348 comm="syz.4.5179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d31fbce59 code=0x7ffc0000 [ 646.138195][ T28] audit: type=1326 audit(1781965523.403:12814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20348 comm="syz.4.5179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d31fbce59 code=0x7ffc0000 [ 646.173445][T20364] netlink: 'syz.6.5183': attribute type 1 has an invalid length. [ 646.185233][ T28] audit: type=1326 audit(1781965523.403:12815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20348 comm="syz.4.5179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d31fbce59 code=0x7ffc0000 [ 646.211224][ T28] audit: type=1326 audit(1781965523.403:12816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20348 comm="syz.4.5179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d31fbce59 code=0x7ffc0000 [ 646.288354][T20364] 8021q: adding VLAN 0 to HW filter on device bond10 [ 646.325201][T20372] bond10: (slave veth0_to_bond): making interface the new active one [ 646.341154][T20372] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 646.689254][T20398] lo speed is unknown, defaulting to 1000 [ 646.759458][T20398] netlink: 208 bytes leftover after parsing attributes in process `syz.6.5189'. [ 646.769333][T20398] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5189'. [ 646.892731][T20406] sctp: [Deprecated]: syz.7.5193 (pid 20406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 646.892731][T20406] Use struct sctp_sack_info instead [ 647.860610][T20438] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5204'. [ 647.903216][T20447] FAULT_INJECTION: forcing a failure. [ 647.903216][T20447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.923774][T20447] CPU: 0 UID: 0 PID: 20447 Comm: syz.4.5207 Not tainted syzkaller #0 PREEMPT(lazy) [ 647.923812][T20447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 647.923867][T20447] Call Trace: [ 647.923875][T20447] [ 647.923885][T20447] __dump_stack+0x1d/0x30 [ 647.923914][T20447] dump_stack_lvl+0x95/0xd0 [ 647.923939][T20447] dump_stack+0x15/0x1b [ 647.923963][T20447] should_fail_ex+0x25e/0x270 [ 647.924034][T20447] should_fail+0xb/0x20 [ 647.924066][T20447] should_fail_usercopy+0x1a/0x20 [ 647.924104][T20447] _copy_from_user+0x1c/0xb0 [ 647.924148][T20447] __copy_msghdr+0x242/0x300 [ 647.924181][T20447] ___sys_sendmsg+0x10c/0x1e0 [ 647.924210][T20447] ? terminate_walk+0x1d5/0x200 [ 647.924266][T20447] __sys_sendmmsg+0x185/0x320 [ 647.924310][T20447] __x64_sys_sendmmsg+0x57/0x70 [ 647.924406][T20447] x64_sys_call+0x27aa/0x3020 [ 647.924446][T20447] do_syscall_64+0x136/0x3c0 [ 647.924478][T20447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.924532][T20447] RIP: 0033:0x7f3d31fbce59 [ 647.924553][T20447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.924579][T20447] RSP: 002b:00007f3d30a17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 647.924606][T20447] RAX: ffffffffffffffda RBX: 00007f3d32235fa0 RCX: 00007f3d31fbce59 [ 647.924683][T20447] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 647.924706][T20447] RBP: 00007f3d30a17090 R08: 0000000000000000 R09: 0000000000000000 [ 647.924765][T20447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.924820][T20447] R13: 00007f3d32236038 R14: 00007f3d32235fa0 R15: 00007fff50dab518 [ 647.924848][T20447] [ 648.369275][T20482] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 648.379002][T20482] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 648.415696][T20483] lo speed is unknown, defaulting to 1000 [ 648.564615][T20493] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5217'. [ 649.186679][T20507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5221'. [ 649.282810][T20507] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.290068][T20507] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.330473][T20507] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 649.548640][T20521] gtp8: entered allmulticast mode [ 649.979599][T20530] gtp0: entered allmulticast mode [ 650.121296][T20532] __nla_validate_parse: 1 callbacks suppressed [ 650.121698][T20532] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5228'. [ 650.421020][T20541] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5230'. [ 650.829589][T20553] syzkaller0: entered promiscuous mode [ 650.859984][T20553] syzkaller0: entered allmulticast mode [ 651.111138][T20558] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 651.121925][T20558] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.129257][T20558] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.306646][T20569] tipc: Enabling of bearer rejected, already enabled [ 651.326882][T20569] tipc: Enabling of bearer rejected, already enabled [ 651.459846][T20577] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5241'. [ 651.477181][T20575] tipc: Enabling of bearer rejected, already enabled [ 651.485744][T20575] tipc: Enabling of bearer rejected, already enabled [ 651.517267][T20583] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5255'. [ 651.811497][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 651.811514][ T28] audit: type=1400 audit(1781965529.223:12854): avc: denied { write } for pid=13342 comm="syz-executor" name="484" dev="tmpfs" ino=2564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 651.846694][ T28] audit: type=1400 audit(1781965529.223:12855): avc: denied { write } for pid=13342 comm="syz-executor" name="484" dev="tmpfs" ino=2564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 651.872902][ T28] audit: type=1400 audit(1781965529.223:12856): avc: denied { write } for pid=13342 comm="syz-executor" name="484" dev="tmpfs" ino=2564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 651.899808][ T28] audit: type=1400 audit(1781965529.223:12857): avc: denied { write } for pid=13342 comm="syz-executor" name="484" dev="tmpfs" ino=2564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 652.023332][ T278] IPVS: starting estimator thread 0... [ 652.105604][ T28] audit: type=1326 audit(1781965529.523:12858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20611 comm="syz.5.5254" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd2b0cce59 code=0x0 [ 652.115267][T20609] IPVS: using max 1824 ests per chain, 91200 per kthread [ 652.303430][T20620] tipc: Enabling of bearer rejected, already enabled [ 652.311939][T20620] tipc: Enabling of bearer rejected, already enabled [ 652.565848][T20636] lo speed is unknown, defaulting to 1000 [ 652.845402][T20644] lo speed is unknown, defaulting to 1000 [ 652.886624][T20646] netlink: 208 bytes leftover after parsing attributes in process `syz.6.5267'. [ 652.895855][T20646] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5267'. [ 653.013567][T20652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5270'. [ 653.023033][T20652] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5270'. [ 653.035523][T20652] dvmrp0: entered allmulticast mode [ 653.089889][T20657] tipc: Enabling of bearer rejected, already enabled [ 653.098216][T20657] tipc: Enabling of bearer rejected, already enabled [ 653.548533][T20690] netlink: 'syz.7.5285': attribute type 1 has an invalid length. [ 653.575820][T20690] 8021q: adding VLAN 0 to HW filter on device bond3 [ 653.586686][T20693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5286'. [ 653.627270][T20698] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 134217731, id = 0 [ 653.945236][T20725] FAULT_INJECTION: forcing a failure. [ 653.945236][T20725] name failslab, interval 1, probability 0, space 0, times 0 [ 653.958973][T20725] CPU: 1 UID: 0 PID: 20725 Comm: syz.1.5298 Not tainted syzkaller #0 PREEMPT(lazy) [ 653.959072][T20725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 653.959090][T20725] Call Trace: [ 653.959099][T20725] [ 653.959111][T20725] __dump_stack+0x1d/0x30 [ 653.959142][T20725] dump_stack_lvl+0x95/0xd0 [ 653.959164][T20725] dump_stack+0x15/0x1b [ 653.959190][T20725] should_fail_ex+0x25e/0x270 [ 653.959230][T20725] should_failslab+0x8c/0xb0 [ 653.959265][T20725] __kmalloc_node_noprof+0xc8/0x550 [ 653.959297][T20725] ? blk_mq_alloc_tag_set+0x321/0x640 [ 653.959334][T20725] blk_mq_alloc_tag_set+0x321/0x640 [ 653.959367][T20725] ? __pfx_loop_control_ioctl+0x10/0x10 [ 653.959465][T20725] loop_add+0x267/0x580 [ 653.959499][T20725] ? __pfx_loop_control_ioctl+0x10/0x10 [ 653.959558][T20725] loop_control_ioctl+0xd0/0x3f0 [ 653.959588][T20725] ? __pfx_loop_control_ioctl+0x10/0x10 [ 653.959668][T20725] __se_sys_ioctl+0xce/0x140 [ 653.959790][T20725] __x64_sys_ioctl+0x43/0x50 [ 653.959899][T20725] x64_sys_call+0x1563/0x3020 [ 653.959943][T20725] do_syscall_64+0x136/0x3c0 [ 653.960042][T20725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.960073][T20725] RIP: 0033:0x7f81cdeace59 [ 653.960095][T20725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.960122][T20725] RSP: 002b:00007f81cc907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 653.960220][T20725] RAX: ffffffffffffffda RBX: 00007f81ce125fa0 RCX: 00007f81cdeace59 [ 653.960240][T20725] RDX: ffffffffffffdffb RSI: 0000000000004c80 RDI: 0000000000000004 [ 653.960259][T20725] RBP: 00007f81cc907090 R08: 0000000000000000 R09: 0000000000000000 [ 653.960274][T20725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.960290][T20725] R13: 00007f81ce126038 R14: 00007f81ce125fa0 R15: 00007ffe6a87d4d8 [ 653.960318][T20725] [ 654.252995][T20736] netlink: 'syz.6.5303': attribute type 1 has an invalid length. [ 654.282923][T20736] 8021q: adding VLAN 0 to HW filter on device bond11 [ 654.444207][T20741] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5305'. [ 654.477053][T20758] tipc: Enabling of bearer rejected, already enabled [ 654.485407][T20758] tipc: Enabling of bearer rejected, already enabled [ 655.695876][T20800] tipc: Enabling of bearer rejected, already enabled [ 655.787496][T20804] __nla_validate_parse: 1 callbacks suppressed [ 655.787519][T20804] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5330'. [ 655.835566][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5330'. [ 655.967233][T20816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5334'. [ 656.085423][T20816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.839745][T20832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5336'. [ 657.350798][T20834] tipc: Enabling of bearer rejected, already enabled [ 657.522250][T20837] lo speed is unknown, defaulting to 1000 [ 658.279975][T19133] bond0: (slave syz_tun): Releasing backup interface [ 658.352866][T20837] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.363230][T20837] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.371536][T20837] bridge_slave_0: entered allmulticast mode [ 658.378552][T20837] bridge_slave_0: entered promiscuous mode [ 658.413234][T20879] netlink: 'syz.1.5352': attribute type 58 has an invalid length. [ 658.413251][ T8007] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.413295][ T8007] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.453573][T20879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5352'. [ 658.474577][T20882] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5353'. [ 658.485722][T20837] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.492844][T20837] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.500049][T20837] bridge_slave_1: entered allmulticast mode [ 658.506657][T20837] bridge_slave_1: entered promiscuous mode [ 658.526161][T20880] lo speed is unknown, defaulting to 1000 [ 658.530223][T20837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.542905][T20837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.565302][T20837] team0: Port device team_slave_0 added [ 658.572434][T20837] team0: Port device team_slave_1 added [ 658.609346][T20837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.609878][T20882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20882 comm=syz.7.5353 [ 658.616656][T20837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.657089][T20837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.683186][T20837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.690922][T20837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.720157][T20837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.755909][ T8007] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.766728][ T8007] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.813834][T20837] hsr_slave_0: entered promiscuous mode [ 658.820688][T20837] hsr_slave_1: entered promiscuous mode [ 658.828943][T20837] debugfs: 'hsr0' already exists in 'hsr' [ 658.840317][T20837] Cannot create hsr debugfs directory [ 658.855559][ T8007] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.867302][ T8007] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.075789][ T8007] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.089826][ T8007] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.357936][ T8007] bridge_slave_1: left allmulticast mode [ 659.396530][ T8007] bridge_slave_1: left promiscuous mode [ 659.415088][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.445624][ T8007] bridge_slave_0: left allmulticast mode [ 659.468329][ T8007] bridge_slave_0: left promiscuous mode [ 659.481759][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.494588][ T8007] dvmrp0: left allmulticast mode [ 659.748169][ T28] audit: type=1400 audit(1781965537.113:12859): avc: denied { write } for pid=20916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.771877][ T8007] bond3 (unregistering): (slave geneve2): Releasing active interface [ 659.817484][ T28] audit: type=1400 audit(1781965537.223:12860): avc: denied { write } for pid=20940 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.871094][ T8007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.883287][ T8007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.894916][ T8007] bond0 (unregistering): Released all slaves [ 659.911534][ T8007] bond1 (unregistering): (slave dummy0): Releasing active interface [ 659.922982][ T8007] bond1 (unregistering): Released all slaves [ 659.932980][ T8007] bond2 (unregistering): Released all slaves [ 659.946336][ T8007] bond3 (unregistering): Released all slaves [ 659.961524][ T8007] bond4 (unregistering): Released all slaves [ 659.971873][ T8007] bond5 (unregistering): Released all slaves [ 659.984301][ T8007] bond6 (unregistering): Released all slaves [ 659.996457][ T8007] bond7 (unregistering): Released all slaves [ 660.006156][ T8007] bond8 (unregistering): Released all slaves [ 660.020424][ T8007] bond9 (unregistering): Released all slaves [ 660.030717][ T8007] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 660.041622][ T8007] bond10 (unregistering): Released all slaves [ 660.051475][ T8007] bond11 (unregistering): Released all slaves [ 660.065671][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 660.075933][T20948] ip6tnl1: entered allmulticast mode [ 660.098499][T20923] tipc: Enabling of bearer rejected, already enabled [ 660.140826][ T8007] tipc: Disabling bearer [ 660.146440][ T8007] tipc: Disabling bearer [ 660.156067][ T8007] tipc: Left network mode [ 660.169490][ T28] audit: type=1400 audit(1781965537.583:12861): avc: denied { watch watch_reads } for pid=20955 comm="syz.4.5374" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 660.215601][ T8007] IPVS: stopping master sync thread 20698 ... [ 660.363745][ T8007] hsr_slave_0: left promiscuous mode [ 660.406568][ T8007] hsr_slave_1: left promiscuous mode [ 660.423880][ T8007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.440779][ T8007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.510195][ T8007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.560650][ T8007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.762664][ T28] audit: type=1400 audit(1781965538.173:12862): avc: denied { write } for pid=20960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.799954][ T8007] batadv0: left allmulticast mode [ 660.832326][ T8007] batadv0: left promiscuous mode [ 660.862911][ T8007] veth1_macvtap: left promiscuous mode [ 660.880578][ T8007] veth0_macvtap: left promiscuous mode [ 660.886247][ T8007] veth1_vlan: left promiscuous mode [ 660.891686][ T8007] veth0_vlan: left promiscuous mode [ 660.913656][ T28] audit: type=1400 audit(1781965538.323:12863): avc: denied { write } for pid=20989 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.021511][ T8007] team0 (unregistering): Port device team_slave_1 removed [ 661.032696][ T8007] team0 (unregistering): Port device team_slave_0 removed [ 661.097405][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 661.108002][ T28] audit: type=1400 audit(1781965538.523:12864): avc: denied { write } for pid=21002 comm="syz.7.5383" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 661.175952][T21008] tipc: Enabling of bearer rejected, already enabled [ 661.402482][ T28] audit: type=1400 audit(1781965538.813:12865): avc: denied { write } for pid=21020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.454361][ T28] audit: type=1400 audit(1781965538.863:12866): avc: denied { write } for pid=21043 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.664578][ T28] audit: type=1400 audit(1781965539.043:12867): avc: denied { write } for pid=21056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.681085][T20837] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 661.702051][T20837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 661.719187][T20837] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 661.729770][T20837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 661.737293][ T28] audit: type=1400 audit(1781965539.143:12868): avc: denied { write } for pid=21080 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.770011][T20837] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 661.779537][T20837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 661.797376][T20837] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 661.810016][T20837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 661.824335][ T8007] IPVS: stop unused estimator thread 0... [ 661.876772][T20837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.890927][T20837] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.902792][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.910036][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.961495][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.968715][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.547858][T20837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 662.558402][T20837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 662.725618][T21151] lo speed is unknown, defaulting to 1000 [ 662.884550][T21152] gtp1: entered allmulticast mode [ 663.071474][T21155] tipc: Resetting bearer [ 663.104525][T21155] tipc: Disabling bearer [ 663.321669][T21168] FAULT_INJECTION: forcing a failure. [ 663.321669][T21168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.334769][T21168] CPU: 0 UID: 0 PID: 21168 Comm: syz.4.5401 Not tainted syzkaller #0 PREEMPT(lazy) [ 663.334803][T21168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 663.334880][T21168] Call Trace: [ 663.334890][T21168] [ 663.334901][T21168] __dump_stack+0x1d/0x30 [ 663.334933][T21168] dump_stack_lvl+0x95/0xd0 [ 663.334960][T21168] dump_stack+0x15/0x1b [ 663.334986][T21168] should_fail_ex+0x25e/0x270 [ 663.335024][T21168] should_fail+0xb/0x20 [ 663.335056][T21168] should_fail_usercopy+0x1a/0x20 [ 663.335093][T21168] _copy_to_user+0x20/0xa0 [ 663.335137][T21168] simple_read_from_buffer+0xb5/0x130 [ 663.335214][T21168] proc_fail_nth_read+0x10e/0x150 [ 663.335243][T21168] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 663.335265][T21168] vfs_read+0x18e/0x7c0 [ 663.335352][T21168] ? __rcu_read_unlock+0x4e/0x70 [ 663.335400][T21168] ? __fget_files+0x184/0x1c0 [ 663.335427][T21168] ? mutex_lock+0x57/0x90 [ 663.335461][T21168] ksys_read+0xdc/0x1a0 [ 663.335523][T21168] __x64_sys_read+0x40/0x50 [ 663.335632][T21168] x64_sys_call+0x2886/0x3020 [ 663.335658][T21168] do_syscall_64+0x136/0x3c0 [ 663.335692][T21168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.335741][T21168] RIP: 0033:0x7f3d31f7d68e [ 663.335759][T21168] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 663.335825][T21168] RSP: 002b:00007f3d30a16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 663.335856][T21168] RAX: ffffffffffffffda RBX: 00007f3d30a176c0 RCX: 00007f3d31f7d68e [ 663.335901][T21168] RDX: 000000000000000f RSI: 00007f3d30a170a0 RDI: 0000000000000007 [ 663.335918][T21168] RBP: 00007f3d30a17090 R08: 0000000000000000 R09: 0000000000000000 [ 663.335931][T21168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.335944][T21168] R13: 00007f3d32236038 R14: 00007f3d32235fa0 R15: 00007fff50dab518 [ 663.336013][T21168] [ 663.368527][T20837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.719757][T20837] veth0_vlan: entered promiscuous mode [ 663.728699][T20837] veth1_vlan: entered promiscuous mode [ 663.752513][T20837] veth0_macvtap: entered promiscuous mode [ 663.760872][T20837] veth1_macvtap: entered promiscuous mode [ 663.773404][T20837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.786162][T20837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.798351][ T7318] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.808231][ T7318] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.824043][ T7318] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.832987][ T7318] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.871987][T21205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5340'. [ 663.945940][T21207] gtp4: entered allmulticast mode [ 665.092025][T21261] tipc: Started in network mode [ 665.097017][T21261] tipc: Node identity ac1414aa, cluster identity 4711 [ 665.105163][T21261] tipc: Enabled bearer , priority 10 [ 665.116558][T21261] tipc: Enabled bearer , priority 0 [ 665.191290][T21264] gtp5: entered allmulticast mode [ 665.632418][T21272] tipc: Enabling of bearer rejected, already enabled [ 665.682605][T21272] tipc: Enabling of bearer rejected, already enabled [ 665.792948][T21278] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5436'. [ 665.802854][T21279] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5436'. [ 665.850768][T21285] FAULT_INJECTION: forcing a failure. [ 665.850768][T21285] name failslab, interval 1, probability 0, space 0, times 0 [ 665.864504][T21285] CPU: 0 UID: 0 PID: 21285 Comm: syz.1.5438 Not tainted syzkaller #0 PREEMPT(lazy) [ 665.864538][T21285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 665.864552][T21285] Call Trace: [ 665.864559][T21285] [ 665.864568][T21285] __dump_stack+0x1d/0x30 [ 665.864636][T21285] dump_stack_lvl+0x95/0xd0 [ 665.864662][T21285] dump_stack+0x15/0x1b [ 665.864687][T21285] should_fail_ex+0x25e/0x270 [ 665.864723][T21285] should_failslab+0x8c/0xb0 [ 665.864825][T21285] __kmalloc_noprof+0xb8/0x4d0 [ 665.864854][T21285] ? io_cache_alloc_new+0x2a/0xb0 [ 665.864895][T21285] io_cache_alloc_new+0x2a/0xb0 [ 665.864934][T21285] io_sendmsg_prep+0x3c6/0x4f0 [ 665.865022][T21285] io_submit_sqes+0x737/0x1180 [ 665.865131][T21285] __se_sys_io_uring_enter+0x25c/0xf90 [ 665.865182][T21285] __x64_sys_io_uring_enter+0x78/0x90 [ 665.865256][T21285] x64_sys_call+0x1e16/0x3020 [ 665.865289][T21285] do_syscall_64+0x136/0x3c0 [ 665.865323][T21285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.865387][T21285] RIP: 0033:0x7f81cdeace59 [ 665.865465][T21285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.865490][T21285] RSP: 002b:00007f81cc907028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 665.865517][T21285] RAX: ffffffffffffffda RBX: 00007f81ce125fa0 RCX: 00007f81cdeace59 [ 665.865536][T21285] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 665.865553][T21285] RBP: 00007f81cc907090 R08: 0000000000000000 R09: 0000000000000000 [ 665.865634][T21285] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 665.865704][T21285] R13: 00007f81ce126038 R14: 00007f81ce125fa0 R15: 00007ffe6a87d4d8 [ 665.865730][T21285] [ 665.899773][T21287] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5440'. [ 666.187557][ T278] tipc: Node number set to 2886997162 [ 666.632683][T21305] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5445'. [ 666.641915][T21305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5445'. [ 666.820849][T21314] netlink: 208 bytes leftover after parsing attributes in process `syz.7.5447'. [ 666.830174][T21314] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5447'. [ 667.030794][T21324] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5452'. [ 667.046293][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 667.046376][ T28] audit: type=1400 audit(1781965544.413:12871): avc: denied { map } for pid=21321 comm="syz.5.5451" path="socket:[80210]" dev="sockfs" ino=80210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 667.152429][T21334] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5457'. [ 667.688707][T21373] gtp0: entered allmulticast mode [ 669.471051][T21423] __nla_validate_parse: 8 callbacks suppressed [ 669.471085][T21423] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5491'. [ 669.550093][T21425] gtp4: entered allmulticast mode [ 669.584778][T21428] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5493'. [ 670.145932][T21437] tipc: Enabling of bearer rejected, already enabled [ 670.237524][T21447] FAULT_INJECTION: forcing a failure. [ 670.237524][T21447] name failslab, interval 1, probability 0, space 0, times 0 [ 670.250235][T21447] CPU: 0 UID: 0 PID: 21447 Comm: syz.1.5499 Not tainted syzkaller #0 PREEMPT(lazy) [ 670.250268][T21447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 670.250284][T21447] Call Trace: [ 670.250292][T21447] [ 670.250302][T21447] __dump_stack+0x1d/0x30 [ 670.250388][T21447] dump_stack_lvl+0x95/0xd0 [ 670.250414][T21447] dump_stack+0x15/0x1b [ 670.250435][T21447] should_fail_ex+0x25e/0x270 [ 670.250467][T21447] should_failslab+0x8c/0xb0 [ 670.250491][T21447] kmem_cache_alloc_noprof+0x66/0x3f0 [ 670.250601][T21447] ? radix_tree_node_alloc+0x8a/0x1f0 [ 670.250627][T21447] radix_tree_node_alloc+0x8a/0x1f0 [ 670.250655][T21447] idr_get_free+0x1fc/0x560 [ 670.250682][T21447] idr_alloc_u32+0xe9/0x1a0 [ 670.250741][T21447] idr_alloc_cyclic+0x7b/0x140 [ 670.250772][T21447] bpf_link_prime+0x69/0x1d0 [ 670.250805][T21447] tcx_link_attach+0xf4/0x550 [ 670.250829][T21447] ? __fget_files+0x184/0x1c0 [ 670.250863][T21447] ? kstrtoull+0x111/0x140 [ 670.250892][T21447] link_create+0x51a/0x6b0 [ 670.250917][T21447] __sys_bpf+0x5a2/0xc30 [ 670.250952][T21447] ? vfs_write+0x7b0/0x990 [ 670.251033][T21447] __x64_sys_bpf+0x69/0x80 [ 670.251099][T21447] x64_sys_call+0x10cb/0x3020 [ 670.251126][T21447] do_syscall_64+0x136/0x3c0 [ 670.251177][T21447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.251353][T21447] RIP: 0033:0x7f81cdeace59 [ 670.251375][T21447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.251474][T21447] RSP: 002b:00007f81cc907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 670.251499][T21447] RAX: ffffffffffffffda RBX: 00007f81ce125fa0 RCX: 00007f81cdeace59 [ 670.251516][T21447] RDX: 0000000000000020 RSI: 00002000000018c0 RDI: 000000000000001c [ 670.251532][T21447] RBP: 00007f81cc907090 R08: 0000000000000000 R09: 0000000000000000 [ 670.251652][T21447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.251667][T21447] R13: 00007f81ce126038 R14: 00007f81ce125fa0 R15: 00007ffe6a87d4d8 [ 670.251690][T21447] [ 670.490826][T21458] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5501'. [ 670.511116][T21458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5501'. [ 670.589911][T21464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5507'. [ 670.736101][T21472] gtp6: entered allmulticast mode [ 670.881379][T21476] FAULT_INJECTION: forcing a failure. [ 670.881379][T21476] name failslab, interval 1, probability 0, space 0, times 0 [ 670.913188][T21476] CPU: 1 UID: 0 PID: 21476 Comm: syz.1.5511 Not tainted syzkaller #0 PREEMPT(lazy) [ 670.913221][T21476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 670.913234][T21476] Call Trace: [ 670.913241][T21476] [ 670.913294][T21476] __dump_stack+0x1d/0x30 [ 670.913325][T21476] dump_stack_lvl+0x95/0xd0 [ 670.913421][T21476] dump_stack+0x15/0x1b [ 670.913440][T21476] should_fail_ex+0x25e/0x270 [ 670.913500][T21476] should_failslab+0x8c/0xb0 [ 670.913566][T21476] kmem_cache_alloc_noprof+0x66/0x3f0 [ 670.913595][T21476] ? dst_alloc+0xbd/0x100 [ 670.913629][T21476] dst_alloc+0xbd/0x100 [ 670.913656][T21476] ? fib_multipath_hash+0xac2/0xfc0 [ 670.913725][T21476] ip_route_output_key_hash_rcu+0xe3b/0x1370 [ 670.913766][T21476] ip_route_output_flow+0x65/0x110 [ 670.913842][T21476] tcp_v4_connect+0x47c/0xad0 [ 670.913881][T21476] tcp_v6_connect+0x8dd/0xd40 [ 670.913915][T21476] __inet_stream_connect+0x166/0x7d0 [ 670.913987][T21476] ? lock_sock_nested+0x84/0x110 [ 670.914019][T21476] inet_stream_connect+0x44/0x70 [ 670.914084][T21476] ? __pfx_inet_stream_connect+0x10/0x10 [ 670.914195][T21476] __sys_connect+0x1f1/0x2a0 [ 670.914246][T21476] __x64_sys_connect+0x3f/0x50 [ 670.914321][T21476] x64_sys_call+0x2df0/0x3020 [ 670.914350][T21476] do_syscall_64+0x136/0x3c0 [ 670.914384][T21476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.914406][T21476] RIP: 0033:0x7f81cdeace59 [ 670.914428][T21476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.914475][T21476] RSP: 002b:00007f81cc907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 670.914559][T21476] RAX: ffffffffffffffda RBX: 00007f81ce125fa0 RCX: 00007f81cdeace59 [ 670.914579][T21476] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000003 [ 670.914597][T21476] RBP: 00007f81cc907090 R08: 0000000000000000 R09: 0000000000000000 [ 670.914613][T21476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.914626][T21476] R13: 00007f81ce126038 R14: 00007f81ce125fa0 R15: 00007ffe6a87d4d8 [ 670.914650][T21476] [ 671.318105][T21482] netlink: 'syz.4.5514': attribute type 1 has an invalid length. [ 671.331067][T21483] netlink: 'syz.7.5513': attribute type 1 has an invalid length. [ 671.372841][T21482] 8021q: adding VLAN 0 to HW filter on device bond8 [ 671.436225][T21486] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 671.451984][T21488] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5515'. [ 671.479499][T21488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5515'. [ 671.482246][T21483] 8021q: adding VLAN 0 to HW filter on device bond4 [ 671.610307][T21492] lo speed is unknown, defaulting to 1000 [ 671.732313][T21512] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5524'. [ 671.818310][T21518] gtp3: entered allmulticast mode [ 672.068421][T21523] netlink: 'syz.5.5527': attribute type 1 has an invalid length. [ 672.154805][T21524] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 672.276563][T21523] 8021q: adding VLAN 0 to HW filter on device bond4 [ 672.400931][T21531] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5530'. [ 672.410271][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5530'. [ 672.712694][T21553] gtp7: entered allmulticast mode [ 673.264283][T21563] netlink: 'syz.7.5543': attribute type 1 has an invalid length. [ 673.291762][T21563] 8021q: adding VLAN 0 to HW filter on device bond5 [ 673.309142][T21563] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 673.796253][T21601] netlink: 'syz.6.5557': attribute type 1 has an invalid length. [ 673.909795][T21601] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 674.140601][T21620] netlink: 'syz.5.5568': attribute type 2 has an invalid length. [ 674.205445][ T28] audit: type=1326 audit(1781965551.613:12872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21619 comm="syz.5.5568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2b0cce59 code=0x50000 [ 674.243809][ T28] audit: type=1326 audit(1781965551.613:12873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21619 comm="syz.5.5568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2b0cce59 code=0x50000 [ 674.270234][ T28] audit: type=1326 audit(1781965551.613:12874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21619 comm="syz.5.5568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2b0cce59 code=0x50000 [ 674.276561][T21624] tipc: Enabling of bearer rejected, already enabled [ 674.296376][ T28] audit: type=1326 audit(1781965551.613:12875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21619 comm="syz.5.5568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2b0cce59 code=0x50000 [ 674.338015][ T28] audit: type=1326 audit(1781965551.613:12876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21619 comm="syz.5.5568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2b0cce59 code=0x50000 [ 674.375808][ T28] audit: type=1326 audit(1781965551.613:12877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21619 comm="syz.5.5568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2b0cce59 code=0x50000 [ 674.402071][ T28] audit: type=1326 audit(1781965551.613:12878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21619 comm="syz.5.5568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2b0cce59 code=0x50000 [ 674.450877][ T28] audit: type=1326 audit(1781965551.613:12879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21619 comm="syz.5.5568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2b0cce59 code=0x50000 [ 674.452684][T21637] FAULT_INJECTION: forcing a failure. [ 674.452684][T21637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.498799][ T28] audit: type=1326 audit(1781965551.613:12880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21619 comm="syz.5.5568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2b0cce59 code=0x50000 [ 674.506673][T21637] CPU: 1 UID: 0 PID: 21637 Comm: syz.7.5573 Not tainted syzkaller #0 PREEMPT(lazy) [ 674.506770][T21637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 674.506882][T21637] Call Trace: [ 674.506904][T21637] [ 674.506934][T21637] __dump_stack+0x1d/0x30 [ 674.507010][T21637] dump_stack_lvl+0x95/0xd0 [ 674.507083][T21637] dump_stack+0x15/0x1b [ 674.507226][T21637] should_fail_ex+0x25e/0x270 [ 674.507320][T21637] should_fail+0xb/0x20 [ 674.507416][T21637] should_fail_usercopy+0x1a/0x20 [ 674.507525][T21637] _copy_from_user+0x1c/0xb0 [ 674.507632][T21637] kstrtouint_from_user+0x69/0xf0 [ 674.507720][T21637] ? avc_policy_seqno+0x15/0x30 [ 674.507796][T21637] proc_fail_nth_write+0x50/0x160 [ 674.507869][T21637] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 674.507975][T21637] vfs_write+0x252/0x990 [ 674.508151][T21637] ? __fget_files+0x184/0x1c0 [ 674.508275][T21637] ? mutex_lock+0x57/0x90 [ 674.508388][T21637] ksys_write+0xdc/0x1a0 [ 674.508535][T21637] __x64_sys_write+0x40/0x50 [ 674.508597][T21637] x64_sys_call+0x27e1/0x3020 [ 674.508681][T21637] do_syscall_64+0x136/0x3c0 [ 674.508798][T21637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.508938][T21637] RIP: 0033:0x7fae9654d68e [ 674.508991][T21637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 674.509054][T21637] RSP: 002b:00007fae94fdefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 674.509125][T21637] RAX: ffffffffffffffda RBX: 00007fae94fdf6c0 RCX: 00007fae9654d68e [ 674.509175][T21637] RDX: 0000000000000001 RSI: 00007fae94fdf0a0 RDI: 0000000000000004 [ 674.509226][T21637] RBP: 00007fae94fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 674.509279][T21637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.509322][T21637] R13: 00007fae96806038 R14: 00007fae96805fa0 R15: 00007ffc65b98c18 [ 674.509395][T21637] [ 674.718054][ T28] audit: type=1326 audit(1781965551.613:12881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21619 comm="syz.5.5568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2b0cce59 code=0x50000 [ 674.737797][T21650] sctp: [Deprecated]: syz.7.5579 (pid 21650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 674.737797][T21650] Use struct sctp_sack_info instead [ 675.179669][T21665] tipc: Enabling of bearer rejected, already enabled [ 675.403999][T21671] netlink: 'syz.6.5587': attribute type 1 has an invalid length. [ 675.469792][T21671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 675.558583][T21671] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 675.628267][T21687] __nla_validate_parse: 6 callbacks suppressed [ 675.628283][T21687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5593'. [ 675.673460][T21693] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5595'. [ 676.755641][T21719] netlink: 'syz.7.5606': attribute type 1 has an invalid length. [ 676.781437][T21719] 8021q: adding VLAN 0 to HW filter on device bond6 [ 676.809187][T21719] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 677.020068][T21715] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5604'. [ 677.279192][T21733] tipc: Enabling of bearer rejected, already enabled [ 677.320706][T21739] FAULT_INJECTION: forcing a failure. [ 677.320706][T21739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.344846][T21739] CPU: 0 UID: 0 PID: 21739 Comm: syz.6.5614 Not tainted syzkaller #0 PREEMPT(lazy) [ 677.344940][T21739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 677.344954][T21739] Call Trace: [ 677.344965][T21739] [ 677.344975][T21739] __dump_stack+0x1d/0x30 [ 677.345006][T21739] dump_stack_lvl+0x95/0xd0 [ 677.345083][T21739] dump_stack+0x15/0x1b [ 677.345102][T21739] should_fail_ex+0x25e/0x270 [ 677.345130][T21739] should_fail+0xb/0x20 [ 677.345184][T21739] should_fail_usercopy+0x1a/0x20 [ 677.345221][T21739] _copy_from_user+0x1c/0xb0 [ 677.345262][T21739] file_ioctl+0x188/0x5b0 [ 677.345387][T21739] do_vfs_ioctl+0x7c4/0xe50 [ 677.345476][T21739] ? selinux_file_ioctl+0x33c/0x3c0 [ 677.345518][T21739] ? __fget_files+0x184/0x1c0 [ 677.345549][T21739] ? mutex_lock+0x57/0x90 [ 677.345604][T21739] __se_sys_ioctl+0x82/0x140 [ 677.345640][T21739] __x64_sys_ioctl+0x43/0x50 [ 677.345682][T21739] x64_sys_call+0x1563/0x3020 [ 677.345743][T21739] do_syscall_64+0x136/0x3c0 [ 677.345854][T21739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.345880][T21739] RIP: 0033:0x7f18f612ce59 [ 677.345902][T21739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.345926][T21739] RSP: 002b:00007f18f4b7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 677.345953][T21739] RAX: ffffffffffffffda RBX: 00007f18f63a5fa0 RCX: 00007f18f612ce59 [ 677.346002][T21739] RDX: 0000200000000180 RSI: 0000000040305828 RDI: 0000000000000003 [ 677.346016][T21739] RBP: 00007f18f4b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 677.346029][T21739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.346099][T21739] R13: 00007f18f63a6038 R14: 00007f18f63a5fa0 R15: 00007ffcbd7ac238 [ 677.346121][T21739] [ 677.365949][T21741] netlink: 10 bytes leftover after parsing attributes in process `syz.5.5615'. [ 677.726951][T21747] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 677.733687][T21747] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 677.750775][T21747] vhci_hcd vhci_hcd.0: Device attached [ 677.770044][T21747] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 677.776716][T21747] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 677.787010][T21747] vhci_hcd vhci_hcd.0: Device attached [ 677.842508][T21747] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(16) [ 677.849224][T21747] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 677.875364][T21747] vhci_hcd vhci_hcd.0: Device attached [ 678.026248][T21783] netlink: 'syz.1.5627': attribute type 5 has an invalid length. [ 678.034139][T21783] netlink: 'syz.1.5627': attribute type 4 has an invalid length. [ 678.041940][T21783] netlink: 'syz.1.5627': attribute type 5 has an invalid length. [ 678.049808][T21783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5627'. [ 678.212869][T21786] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5632'. [ 678.647406][T21767] vhci_hcd: connection closed [ 678.647630][ T68] vhci_hcd vhci_hcd.4: stop threads [ 678.648660][T21755] vhci_hcd: connection closed [ 678.652643][ T68] vhci_hcd vhci_hcd.4: release socket [ 678.657747][T21761] vhci_hcd: connection closed [ 678.665281][ T11] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 678.681886][ T68] vhci_hcd vhci_hcd.4: disconnect device [ 678.683524][T21756] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 678.693741][ T68] vhci_hcd vhci_hcd.4: stop threads [ 678.706392][T21804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=161 sclass=netlink_route_socket pid=21804 comm=syz.4.5640 [ 678.722517][ T68] vhci_hcd vhci_hcd.4: release socket [ 678.733357][ T68] vhci_hcd vhci_hcd.4: disconnect device [ 678.747034][ T68] vhci_hcd vhci_hcd.4: stop threads [ 678.760870][ T68] vhci_hcd vhci_hcd.4: release socket [ 678.773783][ T68] vhci_hcd vhci_hcd.4: disconnect device [ 678.787664][T21810] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5642'. [ 678.963587][T21820] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5647'. [ 679.083156][T21829] netlink: 'syz.1.5648': attribute type 5 has an invalid length. [ 679.091069][T21829] netlink: 'syz.1.5648': attribute type 4 has an invalid length. [ 679.099064][T21829] netlink: 'syz.1.5648': attribute type 5 has an invalid length. [ 679.107050][T21829] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5648'. [ 680.015022][ T28] kauditd_printk_skb: 7586 callbacks suppressed [ 680.015044][ T28] audit: type=1400 audit(1781965557.153:20468): avc: denied { mount } for pid=21831 comm="syz.5.5651" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 681.995600][T21847] FAULT_INJECTION: forcing a failure. [ 681.995600][T21847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.031518][T21847] CPU: 0 UID: 0 PID: 21847 Comm: syz.5.5657 Not tainted syzkaller #0 PREEMPT(lazy) [ 682.031547][T21847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 682.031629][T21847] Call Trace: [ 682.031636][T21847] [ 682.031644][T21847] __dump_stack+0x1d/0x30 [ 682.031674][T21847] dump_stack_lvl+0x95/0xd0 [ 682.031698][T21847] dump_stack+0x15/0x1b [ 682.031719][T21847] should_fail_ex+0x25e/0x270 [ 682.031751][T21847] should_fail+0xb/0x20 [ 682.031814][T21847] should_fail_usercopy+0x1a/0x20 [ 682.031932][T21847] _copy_from_user+0x1c/0xb0 [ 682.032020][T21847] ___sys_sendmsg+0xc1/0x1e0 [ 682.032066][T21847] __x64_sys_sendmsg+0xd4/0x160 [ 682.032103][T21847] x64_sys_call+0x194c/0x3020 [ 682.032130][T21847] do_syscall_64+0x136/0x3c0 [ 682.032250][T21847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.032278][T21847] RIP: 0033:0x7fbd2b0cce59 [ 682.032298][T21847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.032324][T21847] RSP: 002b:00007fbd29b27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.032352][T21847] RAX: ffffffffffffffda RBX: 00007fbd2b345fa0 RCX: 00007fbd2b0cce59 [ 682.032371][T21847] RDX: 0000000000040800 RSI: 0000200000000300 RDI: 0000000000000003 [ 682.032429][T21847] RBP: 00007fbd29b27090 R08: 0000000000000000 R09: 0000000000000000 [ 682.032445][T21847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.032460][T21847] R13: 00007fbd2b346038 R14: 00007fbd2b345fa0 R15: 00007ffc8561ae78 [ 682.032487][T21847] [ 682.051059][T21851] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 682.211169][ T28] audit: type=1400 audit(1781965559.623:20469): avc: denied { relabelto } for pid=21850 comm="syz.6.5658" name="50" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 682.245841][T21851] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 682.248200][ T28] audit: type=1400 audit(1781965559.653:20470): avc: denied { associate } for pid=21850 comm="syz.6.5658" name="50" dev="tmpfs" ino=275 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 682.280184][ T28] audit: type=1400 audit(1781965559.653:20471): avc: denied { write } for pid=21850 comm="syz.6.5658" name="50" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 682.306142][ T28] audit: type=1400 audit(1781965559.653:20472): avc: denied { add_name } for pid=21850 comm="syz.6.5658" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 682.332044][ T28] audit: type=1400 audit(1781965559.653:20473): avc: denied { create } for pid=21850 comm="syz.6.5658" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 682.349456][T21852] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5658'. [ 682.430804][ T28] audit: type=1400 audit(1781965559.653:20474): avc: denied { associate } for pid=21850 comm="syz.6.5658" name=E91F7189591E9233614B scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 682.456902][ T28] audit: type=1400 audit(1781965559.653:20475): avc: denied { write } for pid=21850 comm="syz.6.5658" name="50" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 682.495721][T21852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.507242][T21852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.517906][T21852] bond0 (unregistering): Released all slaves [ 682.534739][ T278] syz1: Port: 1 Link DOWN [ 682.591736][ T28] audit: type=1400 audit(1781965560.003:20476): avc: denied { write } for pid=20837 comm="syz-executor" name="50" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 682.633808][ T28] audit: type=1400 audit(1781965560.003:20477): avc: denied { remove_name } for pid=20837 comm="syz-executor" name="file0" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 682.667046][T21872] netlink: 'syz.4.5664': attribute type 5 has an invalid length. [ 682.674947][T21872] netlink: 'syz.4.5664': attribute type 4 has an invalid length. [ 682.682861][T21872] netlink: 'syz.4.5664': attribute type 5 has an invalid length. [ 682.690815][T21872] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5664'. [ 682.779687][T21875] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5667'. [ 682.907196][T21878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5668'. [ 683.227883][T21886] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5672'. [ 683.237607][T21886] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5672'. [ 683.282063][T21888] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5673'. [ 683.331577][T21895] netlink: 'syz.1.5676': attribute type 1 has an invalid length. [ 683.346292][T21895] 8021q: adding VLAN 0 to HW filter on device bond5 [ 683.364580][T21895] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 683.452108][T21901] tipc: Enabling of bearer rejected, already enabled [ 683.724016][T21912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5682'. [ 683.815947][T21913] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 683.867496][ T11] usb 9-1: enqueue for inactive port 0 [ 683.873185][ T11] usb 9-1: enqueue for inactive port 0 [ 683.915126][ T11] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 684.704011][T21920] netlink: 'syz.5.5681': attribute type 12 has an invalid length. [ 684.722383][T21920] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5681'. [ 684.746570][T21928] netlink: 'syz.6.5688': attribute type 1 has an invalid length. [ 684.762814][T21928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.770910][T21926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5686'. [ 684.793442][T21928] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 684.905045][T21933] tipc: Enabling of bearer rejected, already enabled [ 686.131983][T21970] tipc: Enabling of bearer rejected, already enabled [ 687.787604][T22004] netlink: 'syz.6.5714': attribute type 14 has an invalid length. [ 687.805120][T22004] __nla_validate_parse: 2 callbacks suppressed [ 687.806235][T22004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5714'. [ 687.827210][T22004] netlink: 'syz.6.5714': attribute type 14 has an invalid length. [ 687.835086][T22004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5714'. [ 687.844066][ T8007] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.852985][ T8007] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.861761][ T8007] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.870493][ T8007] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.048348][T22015] tipc: Enabling of bearer rejected, already enabled [ 688.249723][T22041] netlink: 10 bytes leftover after parsing attributes in process `syz.6.5729'. [ 688.335627][T22042] lo speed is unknown, defaulting to 1000 [ 688.374478][T22045] netlink: 208 bytes leftover after parsing attributes in process `syz.7.5726'. [ 688.383685][T22045] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5726'. [ 688.809520][T22061] tipc: Enabling of bearer rejected, already enabled [ 688.923094][T22065] tipc: Enabling of bearer rejected, already enabled [ 689.179750][T22067] netlink: 'syz.4.5738': attribute type 21 has an invalid length. [ 689.859172][T22094] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5746'. [ 690.448915][T22103] tipc: Enabling of bearer rejected, already enabled [ 690.460227][T22083] 9pnet_fd: Insufficient options for proto=fd [ 690.481071][T22083] netlink: 830 bytes leftover after parsing attributes in process `syz.6.5742'. [ 690.549707][T22117] tipc: Enabling of bearer rejected, already enabled [ 690.681714][T22124] netlink: 'syz.5.5757': attribute type 1 has an invalid length. [ 690.696984][T22124] 8021q: adding VLAN 0 to HW filter on device bond5 [ 691.015513][T22140] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5759'. [ 691.859638][ T7318] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.030670][ T7318] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.052726][T22153] lo speed is unknown, defaulting to 1000 [ 692.092114][ T7318] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.127976][T22181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5777'. [ 692.179266][ T7318] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.300745][T22192] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5779'. [ 692.822975][T22206] vhci_hcd vhci_hcd.0: invalid port number 0 [ 692.934228][T22215] __nla_validate_parse: 1 callbacks suppressed [ 692.934248][T22215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5788'. [ 692.967157][T22153] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.985686][T22153] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.003303][T22153] bridge_slave_0: entered allmulticast mode [ 693.010243][T22153] bridge_slave_0: entered promiscuous mode [ 693.017472][T22153] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.026500][T22153] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.033940][T22153] bridge_slave_1: entered allmulticast mode [ 693.040503][T22153] bridge_slave_1: entered promiscuous mode [ 693.091010][ T7318] bridge_slave_1: left allmulticast mode [ 693.106037][ T7318] bridge_slave_1: left promiscuous mode [ 693.132021][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.158377][ T7318] bridge_slave_0: left allmulticast mode [ 693.170821][ T7318] bridge_slave_0: left promiscuous mode [ 693.184237][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.218981][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 693.219000][ T28] audit: type=1400 audit(1781965570.633:20486): avc: denied { write } for pid=22219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.289055][ T28] audit: type=1400 audit(1781965570.683:20487): avc: denied { write } for pid=22248 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.365518][ T7318] ip6gretap0 (unregistering): left allmulticast mode [ 693.393255][T22254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5799'. [ 693.481827][ T7318] bond2 (unregistering): (slave gretap1): Releasing active interface [ 693.640604][ T7318] bond1 (unregistering): (slave geneve2): Releasing active interface [ 693.818549][ T7318] bond0 (unregistering): left promiscuous mode [ 693.848385][ T7318] bond_slave_0: left promiscuous mode [ 693.883871][ T7318] bond_slave_1: left promiscuous mode [ 693.926192][ T7318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.002236][ T7318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.043829][ T7318] bond0 (unregistering): Released all slaves [ 694.065204][ T7318] bond1 (unregistering): Released all slaves [ 694.085382][ T7318] bond2 (unregistering): Released all slaves [ 694.104684][ T7318] bond3 (unregistering): Released all slaves [ 694.159370][ T7318] bond4 (unregistering): Released all slaves [ 694.197370][ T7318] bond5 (unregistering): Released all slaves [ 694.239016][T22153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.250079][T22153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.274483][T22239] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5796'. [ 694.286188][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 694.298220][T22277] tipc: Enabling of bearer rejected, already enabled [ 694.310344][T22153] team0: Port device team_slave_0 added [ 694.317250][T22153] team0: Port device team_slave_1 added [ 694.328343][ T7318] tipc: Disabling bearer [ 694.333605][ T7318] tipc: Disabling bearer [ 694.339815][ T7318] tipc: Left network mode [ 694.358148][T22153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.365147][T22153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.391092][T22153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.402787][T22153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.433912][T22153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.488542][T22153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.514415][T22286] FAULT_INJECTION: forcing a failure. [ 694.514415][T22286] name failslab, interval 1, probability 0, space 0, times 0 [ 694.551014][ T28] audit: type=1400 audit(1781965571.963:20488): avc: denied { write } for pid=22279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.575379][T22286] CPU: 0 UID: 0 PID: 22286 Comm: syz.7.5808 Not tainted syzkaller #0 PREEMPT(lazy) [ 694.575416][T22286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 694.575431][T22286] Call Trace: [ 694.575439][T22286] [ 694.575448][T22286] __dump_stack+0x1d/0x30 [ 694.575493][T22286] dump_stack_lvl+0x95/0xd0 [ 694.575518][T22286] dump_stack+0x15/0x1b [ 694.575570][T22286] should_fail_ex+0x25e/0x270 [ 694.575611][T22286] should_failslab+0x8c/0xb0 [ 694.575666][T22286] __kvmalloc_node_noprof+0x155/0x640 [ 694.575712][T22286] ? seq_read_iter+0x141/0x8f0 [ 694.575750][T22286] seq_read_iter+0x141/0x8f0 [ 694.575780][T22286] ? _parse_integer+0x27/0x40 [ 694.575881][T22286] seq_read+0x279/0x2c0 [ 694.575918][T22286] ? __pfx_seq_read+0x10/0x10 [ 694.575965][T22286] proc_reg_read+0x128/0x1c0 [ 694.576021][T22286] ? __pfx_proc_reg_read+0x10/0x10 [ 694.576066][T22286] vfs_read+0x18e/0x7c0 [ 694.576110][T22286] ? __rcu_read_unlock+0x4e/0x70 [ 694.576145][T22286] ? __fget_files+0x184/0x1c0 [ 694.576209][T22286] ? mutex_lock+0x57/0x90 [ 694.576248][T22286] ksys_read+0xdc/0x1a0 [ 694.576300][T22286] __x64_sys_read+0x40/0x50 [ 694.576339][T22286] x64_sys_call+0x2886/0x3020 [ 694.576367][T22286] do_syscall_64+0x136/0x3c0 [ 694.576407][T22286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.576429][T22286] RIP: 0033:0x7fae9658ce59 [ 694.576479][T22286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.576501][T22286] RSP: 002b:00007fae94fdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 694.576522][T22286] RAX: ffffffffffffffda RBX: 00007fae96805fa0 RCX: 00007fae9658ce59 [ 694.576537][T22286] RDX: 0000000000000008 RSI: 0000200000000380 RDI: 0000000000000003 [ 694.576558][T22286] RBP: 00007fae94fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 694.576577][T22286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.576697][T22286] R13: 00007fae96806038 R14: 00007fae96805fa0 R15: 00007ffc65b98c18 [ 694.576740][T22286] [ 694.832004][ T28] audit: type=1400 audit(1781965572.243:20489): avc: denied { write } for pid=22294 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.868961][ T7318] batadv0: left promiscuous mode [ 694.892625][ T7318] hsr_slave_0: left promiscuous mode [ 694.901093][ T7318] hsr_slave_1: left promiscuous mode [ 694.915056][ T7318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.937342][ T7318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.975376][ T7318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.992713][ T7318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.018923][ T7318] veth1_macvtap: left promiscuous mode [ 695.024481][ T7318] veth0_macvtap: left promiscuous mode [ 695.030073][ T7318] veth1_vlan: left promiscuous mode [ 695.112358][ T7318] team0 (unregistering): Port device team_slave_1 removed [ 695.132354][ T7318] team0 (unregistering): Port device team_slave_0 removed [ 695.187865][T22153] hsr_slave_0: entered promiscuous mode [ 695.194286][T22153] hsr_slave_1: entered promiscuous mode [ 695.203661][T22153] debugfs: 'hsr0' already exists in 'hsr' [ 695.213692][T22153] Cannot create hsr debugfs directory [ 695.236480][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 695.253848][T22307] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5814'. [ 695.283519][T22317] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5817'. [ 695.351581][T22324] netlink: 'syz.4.5818': attribute type 1 has an invalid length. [ 695.372609][T22324] 8021q: adding VLAN 0 to HW filter on device bond9 [ 695.382859][T22327] FAULT_INJECTION: forcing a failure. [ 695.382859][T22327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.420685][T22327] CPU: 0 UID: 0 PID: 22327 Comm: syz.7.5819 Not tainted syzkaller #0 PREEMPT(lazy) [ 695.420768][T22327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 695.420785][T22327] Call Trace: [ 695.420793][T22327] [ 695.420803][T22327] __dump_stack+0x1d/0x30 [ 695.420834][T22327] dump_stack_lvl+0x95/0xd0 [ 695.420861][T22327] dump_stack+0x15/0x1b [ 695.420955][T22327] should_fail_ex+0x25e/0x270 [ 695.421064][T22327] should_fail+0xb/0x20 [ 695.421089][T22327] should_fail_usercopy+0x1a/0x20 [ 695.421118][T22327] _copy_to_user+0x20/0xa0 [ 695.421183][T22327] simple_read_from_buffer+0xb5/0x130 [ 695.421209][T22327] proc_fail_nth_read+0x10e/0x150 [ 695.421231][T22327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 695.421253][T22327] vfs_read+0x18e/0x7c0 [ 695.421305][T22327] ? __rcu_read_unlock+0x4e/0x70 [ 695.421332][T22327] ? __fget_files+0x184/0x1c0 [ 695.421384][T22327] ? mutex_lock+0x57/0x90 [ 695.421468][T22327] ksys_read+0xdc/0x1a0 [ 695.421503][T22327] __x64_sys_read+0x40/0x50 [ 695.421591][T22327] x64_sys_call+0x2886/0x3020 [ 695.421617][T22327] do_syscall_64+0x136/0x3c0 [ 695.421644][T22327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.421668][T22327] RIP: 0033:0x7fae9654d68e [ 695.421809][T22327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 695.421829][T22327] RSP: 002b:00007fae94fdefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 695.421850][T22327] RAX: ffffffffffffffda RBX: 00007fae94fdf6c0 RCX: 00007fae9654d68e [ 695.421922][T22327] RDX: 000000000000000f RSI: 00007fae94fdf0a0 RDI: 0000000000000004 [ 695.421935][T22327] RBP: 00007fae94fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 695.421949][T22327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.422008][T22327] R13: 00007fae96806038 R14: 00007fae96805fa0 R15: 00007ffc65b98c18 [ 695.422029][T22327] [ 695.445757][T22329] tipc: Enabling of bearer rejected, already enabled [ 695.479631][ T28] audit: type=1400 audit(1781965572.853:20490): avc: denied { write } for pid=22319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.585974][T22341] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5821'. [ 695.594842][ T28] audit: type=1400 audit(1781965572.853:20491): avc: denied { write } for pid=22339 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.724096][T22345] netlink: 'syz.7.5823': attribute type 1 has an invalid length. [ 695.750909][T22345] 8021q: adding VLAN 0 to HW filter on device bond7 [ 695.766915][T22345] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 695.897517][ T7318] IPVS: stop unused estimator thread 0... [ 695.970093][T22153] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 696.001264][ T28] audit: type=1400 audit(1781965573.413:20492): avc: denied { write } for pid=22348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.039434][T22153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.054426][T22153] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 696.074382][T22153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.083705][ T28] audit: type=1400 audit(1781965573.473:20493): avc: denied { write } for pid=22376 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.107520][T22153] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 696.125795][T22153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.133747][T22153] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 696.158950][T22153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 696.181644][T22378] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5832'. [ 696.314065][T22153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.322750][ T28] audit: type=1400 audit(1781965573.733:20494): avc: denied { write } for pid=22384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.358543][T22402] tipc: Enabling of bearer rejected, already enabled [ 696.382413][T22153] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.394403][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.401609][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.425864][ T28] audit: type=1400 audit(1781965573.833:20495): avc: denied { write } for pid=22410 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.445957][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.455053][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.489096][T22153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 696.714125][T22439] lo speed is unknown, defaulting to 1000 [ 696.744317][T22153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.836715][T22453] tipc: Enabling of bearer rejected, already enabled [ 696.874304][T22449] tipc: Enabling of bearer rejected, already enabled [ 696.931131][T22465] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5844'. [ 696.971260][T22153] veth0_vlan: entered promiscuous mode [ 697.001668][T22153] veth1_vlan: entered promiscuous mode [ 697.053418][T22153] veth0_macvtap: entered promiscuous mode [ 697.089884][T22153] veth1_macvtap: entered promiscuous mode [ 697.142680][T22153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.169968][T22153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.181832][ T7311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.191084][ T7311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.201120][ T7311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.213474][ T7311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.367679][T22497] netlink: 'syz.5.5854': attribute type 1 has an invalid length. [ 697.382841][T22497] 8021q: adding VLAN 0 to HW filter on device bond6 [ 697.406608][T22497] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 697.465970][T22504] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5855'. [ 697.475271][T22504] FAULT_INJECTION: forcing a failure. [ 697.475271][T22504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.499277][T22504] CPU: 0 UID: 0 PID: 22504 Comm: syz.7.5855 Not tainted syzkaller #0 PREEMPT(lazy) [ 697.499325][T22504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 697.499341][T22504] Call Trace: [ 697.499349][T22504] [ 697.499357][T22504] __dump_stack+0x1d/0x30 [ 697.499388][T22504] dump_stack_lvl+0x95/0xd0 [ 697.499413][T22504] dump_stack+0x15/0x1b [ 697.499460][T22504] should_fail_ex+0x25e/0x270 [ 697.499516][T22504] should_fail+0xb/0x20 [ 697.499548][T22504] should_fail_usercopy+0x1a/0x20 [ 697.499580][T22504] _copy_from_user+0x1c/0xb0 [ 697.499676][T22504] kstrtouint_from_user+0x69/0xf0 [ 697.499706][T22504] ? 0xffffffff81000000 [ 697.499722][T22504] ? avc_policy_seqno+0x15/0x30 [ 697.499748][T22504] proc_fail_nth_write+0x50/0x160 [ 697.499814][T22504] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 697.499838][T22504] vfs_write+0x252/0x990 [ 697.499881][T22504] ? __fget_files+0x184/0x1c0 [ 697.499908][T22504] ? mutex_lock+0x57/0x90 [ 697.499993][T22504] ksys_write+0xdc/0x1a0 [ 697.500030][T22504] __x64_sys_write+0x40/0x50 [ 697.500051][T22504] x64_sys_call+0x27e1/0x3020 [ 697.500078][T22504] do_syscall_64+0x136/0x3c0 [ 697.500198][T22504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.500235][T22504] RIP: 0033:0x7fae9654d68e [ 697.500258][T22504] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 697.500285][T22504] RSP: 002b:00007fae94fdefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 697.500385][T22504] RAX: ffffffffffffffda RBX: 00007fae94fdf6c0 RCX: 00007fae9654d68e [ 697.500402][T22504] RDX: 0000000000000001 RSI: 00007fae94fdf0a0 RDI: 0000000000000005 [ 697.500490][T22504] RBP: 00007fae94fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 697.500505][T22504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.500520][T22504] R13: 00007fae96806038 R14: 00007fae96805fa0 R15: 00007ffc65b98c18 [ 697.500544][T22504] [ 698.542760][T22519] netlink: 10 bytes leftover after parsing attributes in process `syz.5.5861'. [ 698.725802][T16418] bond0: (slave syz_tun): Releasing backup interface [ 698.782376][ T8007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.839029][ T8007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.874148][T22521] lo speed is unknown, defaulting to 1000 [ 699.004865][ T8007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.101950][ T8007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.289551][T22521] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.316012][T22521] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.338743][T22521] bridge_slave_0: entered allmulticast mode [ 699.359705][T22521] bridge_slave_0: entered promiscuous mode [ 699.395356][ T8007] bridge_slave_1: left allmulticast mode [ 699.401244][ T8007] bridge_slave_1: left promiscuous mode [ 699.447506][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.491641][ T8007] bridge_slave_0: left allmulticast mode [ 699.513929][ T8007] bridge_slave_0: left promiscuous mode [ 699.535314][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 699.535333][ T28] audit: type=1400 audit(1781965576.943:20500): avc: denied { write } for pid=22543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.577305][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.650340][ T28] audit: type=1400 audit(1781965577.063:20501): avc: denied { write } for pid=22559 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.704721][T22567] netlink: 'syz.6.5867': attribute type 1 has an invalid length. [ 699.712077][T22542] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5864'. [ 699.756578][ T8007] bond3 (unregistering): (slave geneve2): Releasing active interface [ 699.803414][ T8007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.819126][ T8007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.829060][ T8007] bond0 (unregistering): Released all slaves [ 699.836931][ T8007] bond1 (unregistering): Released all slaves [ 699.854776][ T8007] bond2 (unregistering): (slave veth3): Releasing active interface [ 699.874395][ T8007] bond2 (unregistering): Released all slaves [ 699.887876][ T8007] bond3 (unregistering): Released all slaves [ 699.900372][ T8007] bond4 (unregistering): Released all slaves [ 699.911454][ T8007] bond5 (unregistering): Released all slaves [ 699.922376][ T8007] bond6 (unregistering): Released all slaves [ 699.933009][ T8007] bond7 (unregistering): Released all slaves [ 699.942014][ T8007] bond8 (unregistering): Released all slaves [ 699.952745][ T8007] bond9 (unregistering): Released all slaves [ 699.962136][T22521] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.969382][T22521] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.976795][T22521] bridge_slave_1: entered allmulticast mode [ 699.983676][T22521] bridge_slave_1: entered promiscuous mode [ 700.012105][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 700.028938][T22567] 8021q: adding VLAN 0 to HW filter on device bond2 [ 700.044692][T22521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.055959][T22521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.077092][T22521] team0: Port device team_slave_0 added [ 700.084296][T22521] team0: Port device team_slave_1 added [ 700.101753][T22521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.110234][T22521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.136781][T22521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.157908][T22521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.166702][T22521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.193212][T22521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.204591][ T8007] tipc: Disabling bearer [ 700.213579][ T8007] tipc: Disabling bearer [ 700.218951][ T8007] tipc: Left network mode [ 700.256168][T22521] hsr_slave_0: entered promiscuous mode [ 700.262496][T22521] hsr_slave_1: entered promiscuous mode [ 700.268952][T22521] debugfs: 'hsr0' already exists in 'hsr' [ 700.277973][T22585] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5873'. [ 700.312197][T22521] Cannot create hsr debugfs directory [ 700.446921][ T28] audit: type=1400 audit(1781965577.863:20502): avc: denied { write } for pid=22586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.595232][T22616] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5881'. [ 700.608005][ T28] audit: type=1400 audit(1781965577.973:20503): avc: denied { write } for pid=22614 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.635114][ T8007] hsr_slave_0: left promiscuous mode [ 700.663728][ T8007] hsr_slave_1: left promiscuous mode [ 700.669597][ T8007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.691793][ T8007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.813894][ T8007] team0 (unregistering): Port device team_slave_1 removed [ 700.824860][ T8007] team0 (unregistering): Port device team_slave_0 removed [ 700.860998][ T7318] smc: removing ib device sz1 [ 701.015591][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 701.138644][T22632] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5886'. [ 701.196628][T22636] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5887'. [ 701.208313][T22634] tipc: Enabling of bearer rejected, already enabled [ 701.216434][T22634] tipc: Enabling of bearer rejected, already enabled [ 701.254781][T22638] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5888'. [ 701.395596][ T28] audit: type=1400 audit(1781965578.803:20504): avc: denied { write } for pid=22640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.425999][T22652] FAULT_INJECTION: forcing a failure. [ 701.425999][T22652] name failslab, interval 1, probability 0, space 0, times 0 [ 701.469429][T22652] CPU: 1 UID: 0 PID: 22652 Comm: syz.7.5892 Not tainted syzkaller #0 PREEMPT(lazy) [ 701.469457][T22652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 701.469474][T22652] Call Trace: [ 701.469483][T22652] [ 701.469494][T22652] __dump_stack+0x1d/0x30 [ 701.469568][T22652] dump_stack_lvl+0x95/0xd0 [ 701.469596][T22652] dump_stack+0x15/0x1b [ 701.469623][T22652] should_fail_ex+0x25e/0x270 [ 701.469657][T22652] should_failslab+0x8c/0xb0 [ 701.469724][T22652] kmem_cache_alloc_noprof+0x66/0x3f0 [ 701.469746][T22652] ? security_file_alloc+0x32/0xf0 [ 701.469776][T22652] security_file_alloc+0x32/0xf0 [ 701.469809][T22652] init_file+0x5b/0x1b0 [ 701.469873][T22652] alloc_empty_file+0x85/0x1e0 [ 701.469907][T22652] alloc_file_pseudo+0x92/0x120 [ 701.469941][T22652] __shmem_file_setup+0x226/0x260 [ 701.470024][T22652] shmem_file_setup+0x3b/0x50 [ 701.470054][T22652] memfd_alloc_file+0x4e/0x300 [ 701.470093][T22652] __se_sys_memfd_create+0x2e1/0x3b0 [ 701.470177][T22652] __x64_sys_memfd_create+0x31/0x40 [ 701.470217][T22652] x64_sys_call+0x1f22/0x3020 [ 701.470241][T22652] do_syscall_64+0x136/0x3c0 [ 701.470269][T22652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.470376][T22652] RIP: 0033:0x7fae9658ce59 [ 701.470424][T22652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.470443][T22652] RSP: 002b:00007fae94fdee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 701.470463][T22652] RAX: ffffffffffffffda RBX: 00000000000007fb RCX: 00007fae9658ce59 [ 701.470495][T22652] RDX: 00007fae94fdeee0 RSI: 0000000000000000 RDI: 00007fae9662304f [ 701.470513][T22652] RBP: 0000200000001700 R08: 00000000ffffffff R09: 0000000000000000 [ 701.470531][T22652] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 701.470549][T22652] R13: 00007fae94fdeee0 R14: 00007fae94fdeea0 R15: 0000200000000900 [ 701.470632][T22652] [ 701.696692][ T28] audit: type=1400 audit(1781965579.113:20505): avc: denied { write } for pid=22664 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.245303][T22687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5897'. [ 702.283793][T22692] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5898'. [ 702.332131][ T28] audit: type=1400 audit(1781965579.743:20506): avc: denied { write } for pid=22672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.400426][ T28] audit: type=1400 audit(1781965579.813:20507): avc: denied { write } for pid=22703 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.419214][T22698] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5901'. [ 702.468216][T22696] tipc: Started in network mode [ 702.473158][T22696] tipc: Node identity ac1414aa, cluster identity 4711 [ 702.480257][T22696] tipc: Enabled bearer , priority 10 [ 702.488184][T22696] tipc: Enabled bearer , priority 0 [ 702.577433][ T8007] IPVS: stop unused estimator thread 0... [ 702.602637][ T28] audit: type=1400 audit(1781965579.963:20508): avc: denied { write } for pid=22705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.655649][T22521] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 702.667206][ T28] audit: type=1400 audit(1781965580.023:20509): avc: denied { write } for pid=22726 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 702.721366][T22521] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 702.729470][T22521] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 702.738573][T22521] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 702.746721][T22521] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 702.759142][T22521] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 702.767120][T22521] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 702.787990][T22521] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 703.073853][T22521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.090602][T22521] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.108622][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.115832][ T8007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.130403][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.137637][ T7318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.311828][T22779] tipc: Enabling of bearer rejected, already enabled [ 703.321349][T22779] tipc: Enabling of bearer rejected, already enabled [ 703.431797][T22521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.475186][ T7725] tipc: Node number set to 2886997162 [ 703.592851][T22820] __nla_validate_parse: 2 callbacks suppressed [ 703.592872][T22820] netlink: 180 bytes leftover after parsing attributes in process `syz.5.5919'. [ 703.846350][T22825] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5920'. [ 704.243754][T22858] netlink: 'syz.5.5928': attribute type 1 has an invalid length. [ 704.256413][T22860] netlink: 10 bytes leftover after parsing attributes in process `syz.7.5929'. [ 704.294248][T22832] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 704.312521][T22858] 8021q: adding VLAN 0 to HW filter on device bond7 [ 704.323092][T22855] tipc: Enabling of bearer rejected, already enabled [ 704.344462][T22521] veth0_vlan: entered promiscuous mode [ 704.367081][T22855] tipc: Enabling of bearer rejected, already enabled [ 704.423390][T22521] veth1_vlan: entered promiscuous mode [ 704.440866][T22874] netlink: 'syz.6.5930': attribute type 1 has an invalid length. [ 704.475215][T22874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 704.500802][T22521] veth0_macvtap: entered promiscuous mode [ 704.519181][T22521] veth1_macvtap: entered promiscuous mode [ 704.540338][T22521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.549285][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 704.549303][ T28] audit: type=1400 audit(1781965581.963:20519): avc: denied { write } for pid=22882 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.554932][T22874] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 704.564720][T22521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.604895][ T311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.613738][ T311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.622601][ T311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.631347][ T311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.810352][ T28] audit: type=1400 audit(1781965582.223:20520): avc: denied { write } for pid=22887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.905611][T22911] netlink: 180 bytes leftover after parsing attributes in process `syz.6.5933'. [ 705.001104][ T28] audit: type=1400 audit(1781965582.303:20521): avc: denied { write } for pid=22909 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 705.455585][T22923] tipc: Enabling of bearer rejected, already enabled [ 705.458950][T22929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5943'. [ 705.476597][T22923] tipc: Enabling of bearer rejected, already enabled [ 705.567582][T22933] FAULT_INJECTION: forcing a failure. [ 705.567582][T22933] name failslab, interval 1, probability 0, space 0, times 0 [ 705.585268][T22933] CPU: 0 UID: 0 PID: 22933 Comm: syz.1.5945 Not tainted syzkaller #0 PREEMPT(lazy) [ 705.585432][T22933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 705.585449][T22933] Call Trace: [ 705.585458][T22933] [ 705.585469][T22933] __dump_stack+0x1d/0x30 [ 705.585513][T22933] dump_stack_lvl+0x95/0xd0 [ 705.585541][T22933] dump_stack+0x15/0x1b [ 705.585566][T22933] should_fail_ex+0x25e/0x270 [ 705.585601][T22933] ? __request_module+0x1c4/0x3c0 [ 705.585635][T22933] should_failslab+0x8c/0xb0 [ 705.585667][T22933] ? dev_load+0xa3/0xc0 [ 705.585691][T22933] __kmalloc_cache_noprof+0x5f/0x400 [ 705.585863][T22933] ? dev_load+0xa3/0xc0 [ 705.585894][T22933] __request_module+0x1c4/0x3c0 [ 705.585991][T22933] dev_load+0xa3/0xc0 [ 705.586022][T22933] dev_ioctl+0x776/0x960 [ 705.586055][T22933] sock_ioctl+0x58f/0x610 [ 705.586128][T22933] ? __pfx_sock_ioctl+0x10/0x10 [ 705.586156][T22933] __se_sys_ioctl+0xce/0x140 [ 705.586253][T22933] __x64_sys_ioctl+0x43/0x50 [ 705.586297][T22933] x64_sys_call+0x1563/0x3020 [ 705.586329][T22933] do_syscall_64+0x136/0x3c0 [ 705.586375][T22933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.586404][T22933] RIP: 0033:0x7fb0ed63ce59 [ 705.586423][T22933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.586500][T22933] RSP: 002b:00007fb0ec097028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 705.586602][T22933] RAX: ffffffffffffffda RBX: 00007fb0ed8b5fa0 RCX: 00007fb0ed63ce59 [ 705.586654][T22933] RDX: 0000200000000300 RSI: 00000000000089f3 RDI: 0000000000000003 [ 705.586671][T22933] RBP: 00007fb0ec097090 R08: 0000000000000000 R09: 0000000000000000 [ 705.586689][T22933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.586779][T22933] R13: 00007fb0ed8b6038 R14: 00007fb0ed8b5fa0 R15: 00007ffe3609eb78 [ 705.586800][T22933] [ 705.922440][T22925] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5941'. [ 705.985178][T22952] netlink: 180 bytes leftover after parsing attributes in process `syz.6.5950'. [ 706.191201][T22954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5953'. [ 706.503301][T22961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5955'. [ 706.643965][T22971] FAULT_INJECTION: forcing a failure. [ 706.643965][T22971] name failslab, interval 1, probability 0, space 0, times 0 [ 706.667437][ T28] audit: type=1326 audit(1781965584.023:20522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.6.5961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f612ce59 code=0x7ffc0000 [ 706.684696][T22971] CPU: 1 UID: 0 PID: 22971 Comm: syz.6.5961 Not tainted syzkaller #0 PREEMPT(lazy) [ 706.684801][T22971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.684829][T22971] Call Trace: [ 706.684882][T22971] [ 706.684913][T22971] __dump_stack+0x1d/0x30 [ 706.684999][T22971] dump_stack_lvl+0x95/0xd0 [ 706.685072][T22971] dump_stack+0x15/0x1b [ 706.685136][T22971] should_fail_ex+0x25e/0x270 [ 706.685258][T22971] should_failslab+0x8c/0xb0 [ 706.685392][T22971] kmem_cache_alloc_noprof+0x66/0x3f0 [ 706.685457][T22971] ? audit_log_start+0x34c/0x730 [ 706.685609][T22971] audit_log_start+0x34c/0x730 [ 706.685756][T22971] audit_seccomp+0x49/0x110 [ 706.685880][T22971] __seccomp_filter+0x905/0x1370 [ 706.686020][T22971] ? __fget_files+0x184/0x1c0 [ 706.686105][T22971] ? mutex_lock+0x57/0x90 [ 706.686212][T22971] ? mutex_unlock+0x4e/0x90 [ 706.686387][T22971] __secure_computing+0x7d/0x150 [ 706.686461][T22971] do_syscall_64+0xd4/0x3c0 [ 706.686546][T22971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.686613][T22971] RIP: 0033:0x7f18f612ce59 [ 706.686684][T22971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.686756][T22971] RSP: 002b:00007f18f4b7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 706.686942][T22971] RAX: ffffffffffffffda RBX: 00007f18f63a5fa0 RCX: 00007f18f612ce59 [ 706.686993][T22971] RDX: 0000200000000980 RSI: 000000000000000f RDI: 0000000000000000 [ 706.687036][T22971] RBP: 00007f18f4b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 706.687131][T22971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.687179][T22971] R13: 00007f18f63a6038 R14: 00007f18f63a5fa0 R15: 00007ffcbd7ac238 [ 706.687252][T22971] [ 706.690842][T22971] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 706.751163][ T28] audit: type=1326 audit(1781965584.023:20523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.6.5961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f612ce59 code=0x7ffc0000 [ 706.755508][T22971] audit: out of memory in audit_log_start [ 706.757784][T22978] FAULT_INJECTION: forcing a failure. [ 706.757784][T22978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.925179][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5965'. [ 706.926122][ T28] audit: type=1326 audit(1781965584.023:20524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.6.5961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f612ce59 code=0x7ffc0000 [ 706.941662][T22983] SET target dimension over the limit! [ 706.970381][ T28] audit: type=1326 audit(1781965584.023:20526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.6.5961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f612ce59 code=0x7ffc0000 [ 706.973060][T22983] geneve2: entered allmulticast mode [ 706.996235][ T28] audit: type=1326 audit(1781965584.023:20525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.6.5961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f18f612ce59 code=0x7ffc0000 [ 706.996405][T22978] CPU: 0 UID: 0 PID: 22978 Comm: syz.1.5962 Not tainted syzkaller #0 PREEMPT(lazy) [ 706.996437][T22978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.996454][T22978] Call Trace: [ 706.996512][T22978] [ 706.996524][T22978] __dump_stack+0x1d/0x30 [ 706.996552][T22978] dump_stack_lvl+0x95/0xd0 [ 706.996577][T22978] dump_stack+0x15/0x1b [ 706.996602][T22978] should_fail_ex+0x25e/0x270 [ 706.996668][T22978] should_fail+0xb/0x20 [ 706.996694][T22978] should_fail_usercopy+0x1a/0x20 [ 706.996731][T22978] _copy_from_user+0x1c/0xb0 [ 706.996786][T22978] kstrtouint_from_user+0x69/0xf0 [ 706.996821][T22978] ? 0xffffffff81000000 [ 706.996884][T22978] ? avc_policy_seqno+0x15/0x30 [ 706.996993][T22978] proc_fail_nth_write+0x50/0x160 [ 706.997113][T22978] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 706.997190][T22978] vfs_write+0x252/0x990 [ 706.997305][T22978] ? __fget_files+0x184/0x1c0 [ 706.997382][T22978] ? mutex_lock+0x57/0x90 [ 706.997519][T22978] ksys_write+0xdc/0x1a0 [ 706.997627][T22978] __x64_sys_write+0x40/0x50 [ 706.997695][T22978] x64_sys_call+0x27e1/0x3020 [ 706.997772][T22978] do_syscall_64+0x136/0x3c0 [ 706.997916][T22978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.998072][T22978] RIP: 0033:0x7fb0ed5fd68e [ 706.998163][T22978] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 706.998228][T22978] RSP: 002b:00007fb0ec075fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 706.998308][T22978] RAX: ffffffffffffffda RBX: 00007fb0ec0766c0 RCX: 00007fb0ed5fd68e [ 706.998431][T22978] RDX: 0000000000000001 RSI: 00007fb0ec0760a0 RDI: 0000000000000004 [ 706.998484][T22978] RBP: 00007fb0ec076090 R08: 0000000000000000 R09: 0000000000000000 [ 706.998527][T22978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.998595][T22978] R13: 00007fb0ed8b6128 R14: 00007fb0ed8b6090 R15: 00007ffe3609eb78 [ 706.998668][T22978] [ 707.240542][T22984] xfrm0: entered allmulticast mode [ 707.305295][T19969] IPVS: starting estimator thread 0... [ 707.395099][T23000] IPVS: using max 2256 ests per chain, 112800 per kthread [ 707.603084][T23009] FAULT_INJECTION: forcing a failure. [ 707.603084][T23009] name failslab, interval 1, probability 0, space 0, times 0 [ 707.663947][T23009] CPU: 1 UID: 0 PID: 23009 Comm: syz.7.5975 Not tainted syzkaller #0 PREEMPT(lazy) [ 707.664032][T23009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 707.664109][T23009] Call Trace: [ 707.664119][T23009] [ 707.664130][T23009] __dump_stack+0x1d/0x30 [ 707.664159][T23009] dump_stack_lvl+0x95/0xd0 [ 707.664216][T23009] dump_stack+0x15/0x1b [ 707.664241][T23009] should_fail_ex+0x25e/0x270 [ 707.664276][T23009] should_failslab+0x8c/0xb0 [ 707.664303][T23009] __kmalloc_noprof+0xb8/0x4d0 [ 707.664371][T23009] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 707.664399][T23009] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 707.664429][T23009] genl_start+0xe0/0x380 [ 707.664496][T23009] __netlink_dump_start+0x322/0x520 [ 707.664531][T23009] genl_family_rcv_msg_dumpit+0x1a5/0x210 [ 707.664565][T23009] ? __pfx_genl_start+0x10/0x10 [ 707.664593][T23009] ? __pfx_genl_dumpit+0x10/0x10 [ 707.664613][T23009] ? __pfx_genl_done+0x10/0x10 [ 707.664637][T23009] genl_rcv_msg+0x3fd/0x470 [ 707.664661][T23009] ? __pfx_nl802154_dump_llsec_key+0x10/0x10 [ 707.664752][T23009] netlink_rcv_skb+0x11e/0x220 [ 707.664782][T23009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 707.664811][T23009] genl_rcv+0x28/0x40 [ 707.664877][T23009] netlink_unicast+0x5a7/0x680 [ 707.664907][T23009] netlink_sendmsg+0x5be/0x6f0 [ 707.664942][T23009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.664980][T23009] ____sys_sendmsg+0x532/0x580 [ 707.665008][T23009] ___sys_sendmsg+0x195/0x1e0 [ 707.665049][T23009] __x64_sys_sendmsg+0xd4/0x160 [ 707.665153][T23009] x64_sys_call+0x194c/0x3020 [ 707.665180][T23009] do_syscall_64+0x136/0x3c0 [ 707.665209][T23009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.665233][T23009] RIP: 0033:0x7fae9658ce59 [ 707.665251][T23009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.665271][T23009] RSP: 002b:00007fae94fdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.665300][T23009] RAX: ffffffffffffffda RBX: 00007fae96805fa0 RCX: 00007fae9658ce59 [ 707.665316][T23009] RDX: 00000000200440c4 RSI: 00002000000001c0 RDI: 0000000000000004 [ 707.665331][T23009] RBP: 00007fae94fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 707.665345][T23009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.665359][T23009] R13: 00007fae96806038 R14: 00007fae96805fa0 R15: 00007ffc65b98c18 [ 707.665381][T23009] [ 708.129617][T23019] FAULT_INJECTION: forcing a failure. [ 708.129617][T23019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.168868][T23019] CPU: 1 UID: 0 PID: 23019 Comm: syz.7.5979 Not tainted syzkaller #0 PREEMPT(lazy) [ 708.168905][T23019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 708.168920][T23019] Call Trace: [ 708.168926][T23019] [ 708.168937][T23019] __dump_stack+0x1d/0x30 [ 708.168965][T23019] dump_stack_lvl+0x95/0xd0 [ 708.169068][T23019] dump_stack+0x15/0x1b [ 708.169095][T23019] should_fail_ex+0x25e/0x270 [ 708.169129][T23019] should_fail+0xb/0x20 [ 708.169172][T23019] should_fail_usercopy+0x1a/0x20 [ 708.169204][T23019] _copy_to_user+0x20/0xa0 [ 708.169237][T23019] simple_read_from_buffer+0xb5/0x130 [ 708.169263][T23019] proc_fail_nth_read+0x10e/0x150 [ 708.169325][T23019] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.169352][T23019] vfs_read+0x18e/0x7c0 [ 708.169392][T23019] ? __rcu_read_unlock+0x4e/0x70 [ 708.169442][T23019] ? __fget_files+0x184/0x1c0 [ 708.169475][T23019] ? mutex_lock+0x57/0x90 [ 708.169513][T23019] ksys_read+0xdc/0x1a0 [ 708.169547][T23019] __x64_sys_read+0x40/0x50 [ 708.169602][T23019] x64_sys_call+0x2886/0x3020 [ 708.169677][T23019] do_syscall_64+0x136/0x3c0 [ 708.169771][T23019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.169798][T23019] RIP: 0033:0x7fae9654d68e [ 708.169817][T23019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 708.169836][T23019] RSP: 002b:00007fae94fdefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 708.169884][T23019] RAX: ffffffffffffffda RBX: 00007fae94fdf6c0 RCX: 00007fae9654d68e [ 708.169904][T23019] RDX: 000000000000000f RSI: 00007fae94fdf0a0 RDI: 0000000000000004 [ 708.169921][T23019] RBP: 00007fae94fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 708.169934][T23019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.169947][T23019] R13: 00007fae96806038 R14: 00007fae96805fa0 R15: 00007ffc65b98c18 [ 708.170048][T23019] [ 708.586846][T23041] netlink: 'syz.1.5989': attribute type 1 has an invalid length. [ 708.616440][T23041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 708.640391][T23037] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 708.714607][T23043] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 708.821486][T23046] FAULT_INJECTION: forcing a failure. [ 708.821486][T23046] name failslab, interval 1, probability 0, space 0, times 0 [ 708.845455][T23046] CPU: 0 UID: 0 PID: 23046 Comm: syz.5.5990 Not tainted syzkaller #0 PREEMPT(lazy) [ 708.845532][T23046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 708.845550][T23046] Call Trace: [ 708.845559][T23046] [ 708.845571][T23046] __dump_stack+0x1d/0x30 [ 708.845601][T23046] dump_stack_lvl+0x95/0xd0 [ 708.845622][T23046] dump_stack+0x15/0x1b [ 708.845682][T23046] should_fail_ex+0x25e/0x270 [ 708.845759][T23046] should_failslab+0x8c/0xb0 [ 708.845787][T23046] kmem_cache_alloc_noprof+0x66/0x3f0 [ 708.845813][T23046] ? ep_insert+0x2aa/0xd80 [ 708.845848][T23046] ep_insert+0x2aa/0xd80 [ 708.845991][T23046] ? __rcu_read_unlock+0x4e/0x70 [ 708.846027][T23046] ? proc_fail_nth_write+0x13b/0x160 [ 708.846057][T23046] do_epoll_ctl_file+0x645/0x700 [ 708.846150][T23046] __se_sys_epoll_ctl+0xf1/0x190 [ 708.846265][T23046] __x64_sys_epoll_ctl+0x55/0x70 [ 708.846308][T23046] x64_sys_call+0x2a8b/0x3020 [ 708.846445][T23046] do_syscall_64+0x136/0x3c0 [ 708.846481][T23046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.846511][T23046] RIP: 0033:0x7fbd2b0cce59 [ 708.846532][T23046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.846551][T23046] RSP: 002b:00007fbd29b27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 708.846673][T23046] RAX: ffffffffffffffda RBX: 00007fbd2b345fa0 RCX: 00007fbd2b0cce59 [ 708.846687][T23046] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 708.846700][T23046] RBP: 00007fbd29b27090 R08: 0000000000000000 R09: 0000000000000000 [ 708.846713][T23046] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 708.846727][T23046] R13: 00007fbd2b346038 R14: 00007fbd2b345fa0 R15: 00007ffc8561ae78 [ 708.846754][T23046] [ 709.051819][T23049] IPVS: length: 89 != 24 [ 709.103932][T23053] __nla_validate_parse: 7 callbacks suppressed [ 709.103964][T23053] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5993'. [ 709.476219][T23076] netlink: 'syz.6.6000': attribute type 13 has an invalid length. [ 709.892860][T23064] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5997'. [ 709.949994][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 709.950016][ T28] audit: type=1400 audit(1781965587.343:20559): avc: denied { mounton } for pid=23084 comm="syz.1.6003" path="/file0" dev="ramfs" ino=87309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 710.082957][T23092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6006'. [ 710.152057][T23100] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6010'. [ 710.255608][T23107] xt_hashlimit: size too large, truncated to 1048576 [ 710.287992][T23111] FAULT_INJECTION: forcing a failure. [ 710.287992][T23111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.333920][T23111] CPU: 1 UID: 0 PID: 23111 Comm: syz.1.6015 Not tainted syzkaller #0 PREEMPT(lazy) [ 710.334005][T23111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 710.334019][T23111] Call Trace: [ 710.334026][T23111] [ 710.334057][T23111] __dump_stack+0x1d/0x30 [ 710.334086][T23111] dump_stack_lvl+0x95/0xd0 [ 710.334131][T23111] dump_stack+0x15/0x1b [ 710.334170][T23111] should_fail_ex+0x25e/0x270 [ 710.334202][T23111] should_fail+0xb/0x20 [ 710.334258][T23111] should_fail_usercopy+0x1a/0x20 [ 710.334299][T23111] _copy_to_user+0x20/0xa0 [ 710.334446][T23111] simple_read_from_buffer+0xb5/0x130 [ 710.334503][T23111] proc_fail_nth_read+0x10e/0x150 [ 710.334604][T23111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 710.334633][T23111] vfs_read+0x18e/0x7c0 [ 710.334667][T23111] ? __rcu_read_unlock+0x4e/0x70 [ 710.334699][T23111] ? __fget_files+0x184/0x1c0 [ 710.334729][T23111] ? mutex_lock+0x57/0x90 [ 710.334775][T23111] ksys_read+0xdc/0x1a0 [ 710.334819][T23111] __x64_sys_read+0x40/0x50 [ 710.334931][T23111] x64_sys_call+0x2886/0x3020 [ 710.334988][T23111] do_syscall_64+0x136/0x3c0 [ 710.335042][T23111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.335065][T23111] RIP: 0033:0x7fb0ed5fd68e [ 710.335082][T23111] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 710.335102][T23111] RSP: 002b:00007fb0ec096fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 710.335128][T23111] RAX: ffffffffffffffda RBX: 00007fb0ec0976c0 RCX: 00007fb0ed5fd68e [ 710.335246][T23111] RDX: 000000000000000f RSI: 00007fb0ec0970a0 RDI: 0000000000000003 [ 710.335260][T23111] RBP: 00007fb0ec097090 R08: 0000000000000000 R09: 0000000000000000 [ 710.335280][T23111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.335298][T23111] R13: 00007fb0ed8b6038 R14: 00007fb0ed8b5fa0 R15: 00007ffe3609eb78 [ 710.335326][T23111] [ 710.528144][ T28] audit: type=1326 audit(1781965587.943:20560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23113 comm="syz.5.6016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd2b0cce59 code=0x0 [ 711.325178][T23131] ================================================================== [ 711.333332][T23131] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 711.340707][T23131] [ 711.343056][T23131] write to 0xffff88810787ba08 of 4 bytes by task 23114 on cpu 0: [ 711.350806][T23131] touch_atime+0x1cb/0x300 [ 711.355273][T23131] shmem_file_read_iter+0x3ed/0x4b0 [ 711.360523][T23131] copy_splice_read+0x47a/0x6b0 [ 711.366791][T23131] splice_direct_to_actor+0x27c/0x680 [ 711.372202][T23131] do_splice_direct+0x119/0x1a0 [ 711.377092][T23131] do_sendfile+0x37d/0x640 [ 711.381565][T23131] __x64_sys_sendfile64+0x105/0x150 [ 711.386812][T23131] x64_sys_call+0x2dc4/0x3020 [ 711.391683][T23131] do_syscall_64+0x136/0x3c0 [ 711.396316][T23131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.402251][T23131] [ 711.404604][T23131] read to 0xffff88810787ba08 of 4 bytes by task 23131 on cpu 1: [ 711.412266][T23131] atime_needs_update+0x25f/0x3e0 [ 711.417331][T23131] touch_atime+0x4a/0x300 [ 711.421701][T23131] shmem_file_read_iter+0x3ed/0x4b0 [ 711.426944][T23131] copy_splice_read+0x47a/0x6b0 [ 711.431821][T23131] splice_direct_to_actor+0x27c/0x680 [ 711.437219][T23131] do_splice_direct+0x119/0x1a0 [ 711.442099][T23131] do_sendfile+0x37d/0x640 [ 711.446551][T23131] __x64_sys_sendfile64+0x105/0x150 [ 711.451791][T23131] x64_sys_call+0x2dc4/0x3020 [ 711.456493][T23131] do_syscall_64+0x136/0x3c0 [ 711.461124][T23131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.467055][T23131] [ 711.469398][T23131] value changed: 0x2bbbdfcd -> 0x2c54764d [ 711.475137][T23131] [ 711.477511][T23131] Reported by Kernel Concurrency Sanitizer on: [ 711.483865][T23131] CPU: 1 UID: 0 PID: 23131 Comm: syz.5.6016 Not tainted syzkaller #0 PREEMPT(lazy) [ 711.493264][T23131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 711.503343][T23131] ================================================================== [ 711.604482][T23133] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6020'.