last executing test programs: 2m45.734926907s ago: executing program 4 (id=191): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002e40)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000002e80)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f0000002ec0)={0x11, 0x1f4, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m45.632543507s ago: executing program 4 (id=193): unshare(0x62040200) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) perf_event_open(0x0, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000140)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') setitimer(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setitimer(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac043f0bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f0000000dc0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x20000000) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x44, r4, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) 2m45.402633641s ago: executing program 4 (id=196): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c5}, 0x4) 2m45.324403329s ago: executing program 4 (id=199): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4000000) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x100}, 0x0) close(0x3) io_uring_setup(0x1694, &(0x7f0000000180)={0x0, 0x200000}) 2m45.303682511s ago: executing program 4 (id=201): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc2100) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x18000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601080000000000000000f400004005000100060000000500050002000000050004000000000009e39dba1c7f6943d93eb800020073797a31000000000c000780050003000502000000000000006173683a6e65742c70"], 0x5c}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000002c0)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000340)={0x1d, r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/modules\x00', 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c854) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x400454a4, &(0x7f0000000400)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000440)=0x3, 0x4) ptrace(0x10, r5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tkill(0x0, 0x3b) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r5) ptrace$peeksig(0x4212, r5, &(0x7f00000004c0)={0x3, 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000500)) 2m44.164532258s ago: executing program 4 (id=217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x8050) 2m34.577115219s ago: executing program 1 (id=301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x80, 0x31}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x2, &(0x7f00000002c0)={[0x8000003]}, 0x0, 0x8) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x8010, &(0x7f00000002c0)=ANY=[@ANYBLOB="00084795be00000000000400000000f2be743e8c0d767e84713204d5975b7d6230633b31ebe4c4c1939f09c11052e76610e1e0bda89bf4807a4f924af9042873e13370ef158544a1834b7e8edf6efd73538247328c6649faad65c751c4f1cb2d23003afa421b2be95c26a90cbb558f00"], 0x1, 0x59c, &(0x7f0000000440)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=@newtaction={0x48, 0x30, 0x871a15abc695fb3d, 0xffffffff, 0x25dfdc02, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48050}, 0x20004800) r2 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001680)=ANY=[@ANYBLOB="68000000300005060000000d0000000000000100540001005000010009000100676174"], 0x68}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000006593436247c9000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x6, 0x6, 0x2, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) r5 = socket$kcm(0x2, 0xa, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x11, 0xe}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{}, {}, {}, {}, {}, {0x0, 0x1}]}, {}, {[{}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}, {}, {[], [{0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}]}, {}, {[], [{0x2}]}, {[{0x0, 0x2}]}]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001700)=ANY=[@ANYBLOB, @ANYRES64=r3, @ANYRESOCT=r1], 0xfdef) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8av\x92\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x41, 0x0) mq_unlink(&(0x7f00000000c0)='eth0\x00') close(r6) 2m33.816698667s ago: executing program 1 (id=309): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000010400000000010000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x54, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r2, 0x100, 0x306c}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x100}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x54}}, 0xeb64d656001f6f32) 2m33.754156374s ago: executing program 1 (id=310): r0 = syz_create_resource$futex(&(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, @perf_bp={0x0, 0x8}, 0x10009b, 0x0, 0x0, 0x6, 0x479, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(r0, 0xd, 0x1, 0x0, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex$unlock_pi_list32(r0, 0x687, 0x0, 0x0, 0x0, 0x63) prlimit64(0x0, 0xe, 0x0, 0x0) io_setup(0x2007, &(0x7f0000000180)=0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f00000001c0)=[{}, {}], 0x0, 0x0) io_getevents(r1, 0x4, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], 0x0) io_destroy(r1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000280)=0x100000001, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000198000/0x3000)=nil, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8000000000000001, &(0x7f0000000100)=0x1) 2m32.071996278s ago: executing program 1 (id=324): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0xa0310, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff}, 0x8844, 0xff, 0xffffffff, 0x1, 0x0, 0x0, 0x39d, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200), 0x2) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xc8) syz_emit_ethernet(0x7a, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500006c0000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socket$igmp(0x2, 0x3, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/disk', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newtaction={0xa0, 0x30, 0x1, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x3f}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa0}}, 0x0) sendfile(r2, r1, &(0x7f0000000100)=0xb, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000013000700000a30200000060a030400000000000000000a0000010900010073797a3100000000040004800900020073797a3200001600140000001100010000000000000000000a00000ab20e1a1c62f1d9e0eba60eaa"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000fc0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="06f137d1881ef185c472b9a9a1088b3c1dcad523b1da404b050822fdf2a8b8f200eae500b099b29abe1f8caf9c23bbc48fc387ffb40992655898", @ANYRESOCT], 0x3f, 0x2d0, &(0x7f0000001180)="$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") syz_mount_image$vfat(&(0x7f0000001c40), &(0x7f0000001c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x386503a, 0x0, 0x1, 0x0, &(0x7f0000001d80)) rename(&(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x2, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="240a0000004e187f94000000000000009500000000000000"], &(0x7f0000000c00)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r5, 0x202, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f0000000c40)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000c80)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000cc0)='minorversion\x00', &(0x7f0000000d00)='5\x00', 0x0) perf_event_open(&(0x7f0000000d40)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x552, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x3b82, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 2m31.844877331s ago: executing program 1 (id=325): mkdir(0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64], 0x3, 0x251, &(0x7f0000000ec0)="$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") perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x40, 0x8}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) unshare(0xa000200) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, 0x0, 0x1ff) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000000c0)={[{@resuid}, {}]}, 0x21, 0x4d2, &(0x7f0000000100)="$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") socket$inet_smc(0x2b, 0x1, 0x0) fchownat(r1, 0x0, 0xee00, 0x0, 0x1000) add_key$fscrypt_provisioning(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x1}, &(0x7f0000000e00)={0x2, 0x0, @auto=[0x30, 0x26, 0x32]}, 0xb, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.events\x00', 0x275a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000800)={'syztnl0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000cc0)={'netdevsim0\x00', &(0x7f0000000d00)=@ethtool_rxfh_indir={0x4c}}) 2m31.640487002s ago: executing program 1 (id=328): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x8, 0x20520, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x11e484, 0x3, 0x40, 0x8, 0x7ffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0xfffc, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0xa4ffffff, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffb}}, 0xe8) 2m31.600710476s ago: executing program 32 (id=328): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x8, 0x20520, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x11e484, 0x3, 0x40, 0x8, 0x7ffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0xfffc, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0xa4ffffff, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffb}}, 0xe8) 2m28.789478986s ago: executing program 2 (id=349): perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0xffffffff, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="680000003b000100000000000000000003010000000000002600010000112233445566778899aabb8848dd0000140000000145b50000010203040506070800000c0002000600200008000000100003"], 0x68}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf2523000000080002", @ANYRES8=r1, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x4044004) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "2e9fdec670ed4b67a6096c732dfb7c74"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf25090000000800", @ANYRES32=r4, @ANYBLOB="0500080000000000050007"], 0x38}, 0x1, 0x0, 0x0, 0x200400d4}, 0x80) 2m28.74929403s ago: executing program 33 (id=217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x8050) 2m28.65483257s ago: executing program 2 (id=354): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000980)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000a80), 0x366, 0x10, &(0x7f0000000ac0), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) unshare(0x2c020400) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x400000, 0x5a) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@map=r1, 0x26, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x10840, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x4, 0x3, 0xee5, 0x0, 0x1}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)={@map=r3, r0, 0x26}, 0x10) 2m28.55634978s ago: executing program 2 (id=355): openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x44041, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000009c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a00)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000b40)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000b80)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000bc0), 0x4) sendto$inet(r5, &(0x7f0000000c00), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000c40)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xfffffffffffffe36, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$key(r6, &(0x7f0000000d80)={0x900, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="020afc000700000928bdc16bafccdf2505001a0000000000000000000000000000000000ac14bf194c2f815114890000000000000a0049"], 0x38}}, 0x40408c0) 2m28.484299708s ago: executing program 2 (id=357): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000001640), 0xffffffffffffff97, 0x10, &(0x7f0000001680), 0xffffffffffffffc2}, 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48840, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x300000b, 0x11, r0, 0x0) signalfd(r0, &(0x7f0000000080)={[0xf]}, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xd, 0x0, 0x19, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, @perf_bp={0x0, 0x9}, 0x4000, 0x2, 0x0, 0x7, 0x80, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000440)='\x00', 0x9801) move_mount(r2, &(0x7f00000016c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', 0x0) umount2(&(0x7f0000001740)='./file0\x00', 0x9) setns(0xc9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015000100fdffffff0000000802180000", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x48000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000001780)) 2m28.079800119s ago: executing program 2 (id=360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f000001a5c0)={&(0x7f00000195c0)=""/4096, 0x1004000, 0x1800, 0x2, 0x2}, 0x20) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070604000000fdffffdf2d0000000a0001007770616e3000000008002f"], 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0xc000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5b02}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3) socket(0x10, 0x80002, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000280)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f000001a7c0)={0xffffffffffffffff, &(0x7f000001a840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x8c\xa8@\x00\xcdM\x9e\x18\xc0\x9c%*\xc9\xde\x1e\x11<\xa8\aO\xb6\x15\xc8\xd52\xf8\x0f\xef\x0fs\xb34tF\xd2\xff\xeb\xb0\x86\xac\f\xf9\x9e\xfe\xc9:\xe90\xd4\xeba\xce\xba\xc08B4m\x1b<\xf3{\x1d`\x89\x00\xb8APr3/$\xd9F?\x89\r\x9d{\xa5\x1e\xbd\xac\xce\xa6z\xdf\xf7\xad\x00\x00\x00\x00\xd0\xee\xcd\xd9v\x99(\xa2\x1b\x8d\x0fI\xca\x03Y\xb8i\xe2\x0f\xce2\x8b\xfa\x9bl\xb0\xecJIV\xb0\xd9n[/\xcf\xe0\x96J\xef\xf8\xd4\xb7le\x88\xee\xf6\x97Q\x99Y\xc7\x82(\x0eL\xba\x88K\xa5\xe6\x14\x8b\xaf\xfc', 0x109000, &(0x7f000001a700)={@align=0x3, {0x6, 0x1, 0x10e, 0xffffffffffffff3d}}, 0x9, &(0x7f000001a740)={@_ha_fsid}, &(0x7f000001a780)=0x212e}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f000001a800)={'team0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f000001a640)={@remote, r7}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f000001a680)={@dev, r7}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f000001a6c0)={@remote, r7}, 0x78) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair(0x1a, 0xa, 0x0, &(0x7f0000000000)) preadv(r8, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r11], 0x3c}}, 0x0) 2m27.644302464s ago: executing program 2 (id=365): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) msgget$private(0x0, 0x437) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x24000880) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x21c, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "4ec16854695fa6f7b32d580574bb286ed65e52501b34d1dc1d215d"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8d33}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x546d8013}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x500}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000480)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r4, &(0x7f00000004c0)="240000001a005f0214f9f407000904001f000000fe0000400000000008000f00fd000000", 0x24) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 2m27.643951075s ago: executing program 34 (id=365): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) msgget$private(0x0, 0x437) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x24000880) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x21c, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "4ec16854695fa6f7b32d580574bb286ed65e52501b34d1dc1d215d"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8d33}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x546d8013}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x500}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000480)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r4, &(0x7f00000004c0)="240000001a005f0214f9f407000904001f000000fe0000400000000008000f00fd000000", 0x24) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) 2m4.522830192s ago: executing program 5 (id=626): r0 = perf_event_open(&(0x7f0000001380)={0x5, 0x80, 0xfd, 0x34, 0x0, 0x3a, 0x0, 0x0, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe688, 0xfff}, 0x10004b, 0x90, 0x1, 0x3, 0x8, 0x1, 0xd0b, 0x0, 0x4, 0x0, 0x800000000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0x1c1bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0xdaa2, 0x8, 0x43a1bd76, 0x9, 0xb, 0xa, 0x2, 0x0, 0x0, 0x0, 0x19}, 0x0, 0x4400000000, r0, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setfsuid(0xffffffffffffffff) 2m4.441983571s ago: executing program 5 (id=628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000100}, 0x24000800) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x1, 0xff, 0x4, 0x3}, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200010200000000000000000a000019"], 0x14}}, 0x40044c4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f00000001c0)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x881}, 0x8000) 2m4.327773722s ago: executing program 5 (id=630): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0xa82, 0x0) sendfile(r0, r0, 0x0, 0x6) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a3100000000140000001100", @ANYBLOB, @ANYBLOB="915c86c405"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0xc4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[], 0xe0}}, 0x0) close(0xffffffffffffffff) 2m4.242703961s ago: executing program 5 (id=631): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x2, 0x522, &(0x7f0000000280)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/203, 0xcb}], 0x1}, 0x0) close(r1) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000007c0), 0x181482, 0x0) splice(r0, 0x0, r2, 0x0, 0x402000784853be, 0x8) unshare(0x20040600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x110, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xc0185879, 0x1000000000000) 2m4.052500941s ago: executing program 5 (id=633): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001a00)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xf, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x24}, @TCA_ROUTE4_TO={0x8, 0x2, 0x87}, @TCA_ROUTE4_IIF={0x8, 0x4, r1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2m3.497605648s ago: executing program 5 (id=637): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x7}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xd}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x16, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x3}, 0x959, 0x0, 0x7, 0x0, 0x2, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0xcfd2bfdd25d0dcac, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000009c0)={0x2000, 0x101, 0x0, 'queue0\x00'}) semop(0x0, &(0x7f0000000200)=[{0x1, 0x8005, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x1, 0xbbdb, 0x1000}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000a80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000b00)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40), 0x651, 0x0) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x13) tkill(r4, 0x12) waitid(0x1, r4, 0x0, 0x8, &(0x7f0000000b80)) mount(0x0, 0x0, 0x0, 0x2000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x4) 2m3.47271324s ago: executing program 35 (id=637): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x7}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xd}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x16, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x3}, 0x959, 0x0, 0x7, 0x0, 0x2, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0xcfd2bfdd25d0dcac, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000009c0)={0x2000, 0x101, 0x0, 'queue0\x00'}) semop(0x0, &(0x7f0000000200)=[{0x1, 0x8005, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x1, 0xbbdb, 0x1000}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000a80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000b00)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40), 0x651, 0x0) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x13) tkill(r4, 0x12) waitid(0x1, r4, 0x0, 0x8, &(0x7f0000000b80)) mount(0x0, 0x0, 0x0, 0x2000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x4) 1m17.777499579s ago: executing program 0 (id=1861): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit, @tail_call]}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240), 0x10}, 0x94) 1m17.494690978s ago: executing program 0 (id=1864): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 1m16.155788696s ago: executing program 0 (id=1879): syz_open_procfs(0x0, &(0x7f0000000300)='autogroup\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r1, &(0x7f0000000280)='6', 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0xff, 0xb}, 0x20) 1m15.865939716s ago: executing program 0 (id=1883): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYBLOB="f206d69b9436474a01529af29dfee9a4061f0d820c84d52ea67a515c77464d78bb3744375520e70264167ef5f4ff7a476378e045f3d362341ff08d27fb8802f24947e028e4e6153bd565ee372bca9e3a8921590105152f519a910f9e0dc53a7cd6bf8c27ca5797f8034d66ba1cb75fb3805a8ddd06a4387b0d95ad568340139009ef9fac4179a9947637aedbbefd86d13f33b12f7f52eb03e70c358f3ffe3a20216cc011f55c7afa7b30bb6ff312e9d92d10f4fe8661", @ANYRESDEC=r0], 0x1, 0x3a2, &(0x7f00000001c0)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000580)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000840)=0x1, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010163, 0x0) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000406000008001b"], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/class/net/veth0/threaded\x00', 0x2, 0x0) ftruncate(r3, 0x2000009) write(0xffffffffffffffff, &(0x7f0000000000)="14000000140005b7ffccca38b9000000070860eb", 0x14) sendfile(r1, r3, 0x0, 0x7ffff004) 1m14.597080237s ago: executing program 0 (id=1898): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit, @tail_call]}, &(0x7f0000000200)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) 1m9.976344985s ago: executing program 0 (id=1951): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x79, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d", 0x24}, {&(0x7f0000000c80)="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", 0x144}, {&(0x7f0000000680)="fa8f73530bdc6839cbd7de2c3cfdf1eda862656f65d5d0c4c2844e668b2a9c3003a5b2dc3dd324d843512a5791747534054eb682e05b38c2d19db77d13ec6bbee3da919aa8147271b5612c545cf95483", 0x50}], 0x3}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3127e54e348b02f", 0x38}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000840)="ec008fdc8d2e6f8167e70b7173e464c9f5d825e803f7ff71", 0x18}], 0x2}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d47f9f49741bf6bcdd4c68eebf6b5d62dc43b74cf", 0xd8}, {&(0x7f0000000a00)="da02d6f5505c2587ed4cb3656c40aefe7037a4e2e157ef1ffd6c36986d63c6cf8db41f42a2d02b09e37c75fbdb3f50108e5d5d135440a4cde064d28c9c30b8c59ebfcf1b3804b16606a289938e5d310359fb8ca279e501d6edc0c7b4cc2419f0bf92a5aea2e8b60b95ffd2c82d9932a22d7a8eb2346247776a523a5d0066bd5f7869e4d24bf30e366fb39c5c3091e615339a415b3efcf073205576f86fdc7e98a12fff979ba11c76a43e889e9bd44ae74e058b5e8e2d8028521a084e135600b4c3e6770b8ff8e26dbd3a010ed5e3bb894cdbfd1b53f85f80", 0xd8}, {&(0x7f0000000b00)="99b8979ec0fd5f721da667032cfc1f89a347faf9add0ff5faf7646e11e7526e29ac6", 0x22}, {&(0x7f0000000b40)="88c28a2a8af39ce81f3b350e8d029b409bacf181a71c0d4559cb976dff2a1a381136daa1f0d4151e9203490eb924a37eb0c0501b733da3f2fed08209d65894a59916", 0x42}, {&(0x7f0000000bc0)="8e47d5ad9a73a9b1d76b0d98507e6646c535982501ec2f2475c6723f6c9d81ed7780965ae4d82e89f5f53b13a72f181d3617eaaa", 0x34}], 0x5}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000c00)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000c40)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m9.794398763s ago: executing program 36 (id=1951): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x79, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d", 0x24}, {&(0x7f0000000c80)="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", 0x144}, {&(0x7f0000000680)="fa8f73530bdc6839cbd7de2c3cfdf1eda862656f65d5d0c4c2844e668b2a9c3003a5b2dc3dd324d843512a5791747534054eb682e05b38c2d19db77d13ec6bbee3da919aa8147271b5612c545cf95483", 0x50}], 0x3}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3127e54e348b02f", 0x38}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000840)="ec008fdc8d2e6f8167e70b7173e464c9f5d825e803f7ff71", 0x18}], 0x2}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d47f9f49741bf6bcdd4c68eebf6b5d62dc43b74cf", 0xd8}, {&(0x7f0000000a00)="da02d6f5505c2587ed4cb3656c40aefe7037a4e2e157ef1ffd6c36986d63c6cf8db41f42a2d02b09e37c75fbdb3f50108e5d5d135440a4cde064d28c9c30b8c59ebfcf1b3804b16606a289938e5d310359fb8ca279e501d6edc0c7b4cc2419f0bf92a5aea2e8b60b95ffd2c82d9932a22d7a8eb2346247776a523a5d0066bd5f7869e4d24bf30e366fb39c5c3091e615339a415b3efcf073205576f86fdc7e98a12fff979ba11c76a43e889e9bd44ae74e058b5e8e2d8028521a084e135600b4c3e6770b8ff8e26dbd3a010ed5e3bb894cdbfd1b53f85f80", 0xd8}, {&(0x7f0000000b00)="99b8979ec0fd5f721da667032cfc1f89a347faf9add0ff5faf7646e11e7526e29ac6", 0x22}, {&(0x7f0000000b40)="88c28a2a8af39ce81f3b350e8d029b409bacf181a71c0d4559cb976dff2a1a381136daa1f0d4151e9203490eb924a37eb0c0501b733da3f2fed08209d65894a59916", 0x42}, {&(0x7f0000000bc0)="8e47d5ad9a73a9b1d76b0d98507e6646c535982501ec2f2475c6723f6c9d81ed7780965ae4d82e89f5f53b13a72f181d3617eaaa", 0x34}], 0x5}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000c00)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000c40)="17", 0x59a, 0x10008095, 0x0, 0x0) 8.048276049s ago: executing program 3 (id=2645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1012, &(0x7f0000000ac0)=ANY=[], &(0x7f0000001b00)={0x1, 0x4, [0xd10, 0x1f5, 0x1c, 0xed2]}) 7.923727662s ago: executing program 3 (id=2647): mkdirat(0xffffffffffffff9c, 0x0, 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, 0x0, 0x0) socket$inet(0x2, 0x4, 0x262) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 7.867899788s ago: executing program 3 (id=2650): io_uring_setup(0x4a86, &(0x7f0000000840)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r0 = gettid() timer_create(0x0, &(0x7f00000008c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000900)) timer_settime(0x0, 0x0, &(0x7f0000000940)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x4000000000000009, 0x0) write$binfmt_script(r1, 0x0, 0x0) close(0x3) 7.017635716s ago: executing program 7 (id=2656): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0xf}, 0x94) (async) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x50000000000, 0x6}, 0x10c0e8, 0x0, 0x2f, 0x8, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x6f8eb1a1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$kcm(0x23, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000480)=0xffeb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfe, 0x281a5faa01ef99b3}, 0xc) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x40088d4) (async) shutdown(r2, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0x4}, 0x90) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x48}}, 0x40080c0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file2\x00', 0x109141, 0xd6) (async) socket(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xc, &(0x7f0000000700)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x8914, &(0x7f0000000780)='dummy0\x00'/19) 6.989107579s ago: executing program 3 (id=2658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, r0}, 0xc) 6.87396987s ago: executing program 3 (id=2661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b40)={r2}, 0xc) 6.67959496s ago: executing program 3 (id=2662): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240), 0x10}, 0x94) 4.492439356s ago: executing program 7 (id=2673): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240), 0x10}, 0x94) 4.405640205s ago: executing program 8 (id=2674): r0 = gettid() timer_create(0x2, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x17, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='attr/exec\x00') writev(r2, &(0x7f0000000980)=[{&(0x7f00000009c0)}], 0x1) setns(0xc9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c0000004300010025bd700000000000020000000e0001006172705f6361636865000000580006", @ANYRES32=0x0, @ANYBLOB="080011"], 0x7c}}, 0x0) setsockopt(0xffffffffffffffff, 0x108, 0x42020054, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') preadv(r5, &(0x7f0000000300)=[{0x0}], 0x1, 0x38, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x6a040400) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x3000000, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000005e4b92e433e93ada0837308316ba16a4a2131f188978126fee217a761824cd7801d7682300000000000000000213d9df6f9ddb8342285c003eda15513e85c15653462e40fb95a0ab4f112eb9167119c7089a4e2cb6fc08eda65ca3bd16e43130535a6887238a5ab352a946845d5e98916c4f846a364d41", @ANYRES16, @ANYBLOB="030700000000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="270e26bd7000ffdbdf250a000000050038000100000008000300", @ANYRES32=r7, @ANYBLOB="0500330001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./trace\x00', &(0x7f0000000800)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000c40)='call_site.function == vfs_read', 0x1e) 4.315644515s ago: executing program 7 (id=2677): perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0xb}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x100000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000800)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/33, 0x21, 0x0, &(0x7f0000000740)=""/161, 0xa1}, &(0x7f0000000840)=0x40) setresuid(0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5b1b030000000000140012800b0001006d5ed2df939f1052097813cf493a7661", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@ptr={0x1, 0x0, 0x0, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xe16}}, @enum64={0xf, 0x2, 0x0, 0x13, 0x1, 0x8, [{0x2, 0x0, 0x6ecf}, {0x4, 0x80000001, 0xe28}]}, @float={0xb, 0x0, 0x0, 0x10, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x3}}]}, {0x0, [0x2e]}}, &(0x7f0000000340)=""/184, 0x9f, 0xb8, 0x1, 0x401}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) flock(r7, 0x11) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000980)={'veth0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="340000001400010605000000000000000a402000", @ANYRES32=r8, @ANYBLOB="1400020020010000000000000000"], 0x34}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x17, &(0x7f0000000d40)=ANY=[@ANYRES16=r9, @ANYRES32=r10, @ANYRES16=r8], &(0x7f0000000d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x6, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'tunl0\x00', r9, 0x0, 0x10, 0xbe, 0x42, {{0x13, 0x4, 0x1, 0x0, 0x4c, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x2c, 0x72, 0x1, 0x7, [{@multicast1, 0x5}, {@private=0xa010100, 0x2}, {@local, 0x7f}, {@broadcast, 0x3}, {@rand_addr=0x64010101, 0x4}]}, @timestamp={0x44, 0x4, 0xa, 0x0, 0xc}, @lsrr={0x83, 0x7, 0xcb, [@multicast2]}]}}}}}) 3.664494302s ago: executing program 7 (id=2678): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000f80)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000000), 0x5}, 0x2006, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x4, 0x0, 0x1, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x26020480) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc3, 0x4, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xfffffffd, 0x6, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f00000002c0), 0x1, 0x242, &(0x7f0000000300)="$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") ioctl$FITRIM(0xffffffffffffffff, 0x40e8662e, &(0x7f0000000580)={0xc3e4, 0xd000000, 0x7}) bind$netlink(r1, &(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc) syz_mount_image$ext4(&(0x7f0000000640)='ext3\x00', &(0x7f0000000680)='./file0\x00', 0x9314546df761cba8, &(0x7f00000006c0), 0x1, 0x490, &(0x7f0000000700)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000d80)) setfsgid(0x0) open(&(0x7f0000000bc0)='.\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000040) syz_genetlink_get_family_id$tipc(&(0x7f0000000dc0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000001000)=ANY=[@ANYBLOB="440000001000ffff25bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="75c00200aa7c0300240012050000000062676e64000000001400028005010000000500010004000000043d5165f557579ee410e466944c796a2ba313a395d8b6b9d81c70c811dbe393e57de8985e81a73609c12d3bd653a4672f59d17993b5b22c18ada4e84a4dfb4e07a83de6c5462ee75e45a781c8ab1bb1c64716d0bf814e001c4b009bb7d181c2811852a969dd672157657079360cedcd89429e68a3646a087ec8658d88963a7761215244208707d2f77fd0c2058be639a0167cdbaf073ce512b8920544a3b4561863bde1f19a7845000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) write(0xffffffffffffffff, &(0x7f0000000200)='8', 0x1) unshare(0x6a040000) 2.732043638s ago: executing program 6 (id=2685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b40)={r2}, 0xc) 2.663770825s ago: executing program 6 (id=2687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x80, 0x31}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x2, &(0x7f00000002c0)={[0x8000003]}, 0x0, 0x8) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x8010, &(0x7f00000002c0)=ANY=[@ANYBLOB="00084795be00000000000400000000f2be743e8c0d767e84713204d5975b7d6230633b31ebe4c4c1939f09c11052e76610e1e0bda89bf4807a4f924af9042873e13370ef158544a1834b7e8edf6efd73538247328c6649faad65c751c4f1cb2d23003afa421b2be95c26a90cbb558f00"], 0x1, 0x59c, &(0x7f0000000440)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=@newtaction={0x48, 0x30, 0x871a15abc695fb3d, 0xffffffff, 0x25dfdc02, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48050}, 0x20004800) r2 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001680)=ANY=[@ANYBLOB="68000000300005060000000d000000000000010054000100500001000900010067617465"], 0x68}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x6, 0x6, 0x2, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) r5 = socket$kcm(0x2, 0xa, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x11, 0xe}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{}, {}, {}, {}, {}, {0x0, 0x1}]}, {}, {[{}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}, {}, {[], [{0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}]}, {}, {[], [{0x2}]}, {[{0x0, 0x2}]}]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001700)=ANY=[@ANYBLOB, @ANYRES64=r3, @ANYRESOCT=r1], 0xfdef) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8av\x92\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x41, 0x0) mq_unlink(&(0x7f00000000c0)='eth0\x00') close(r6) 2.505050262s ago: executing program 8 (id=2689): perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0xb}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x100000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000800)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/33, 0x21, 0x0, &(0x7f0000000740)=""/161, 0xa1}, &(0x7f0000000840)=0x40) setresuid(0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5b1b030000000000140012800b0001006d5ed2df939f1052097813cf493a7661", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@ptr={0x1, 0x0, 0x0, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xe16}}, @enum64={0xf, 0x2, 0x0, 0x13, 0x1, 0x8, [{0x2, 0x0, 0x6ecf}, {0x4, 0x80000001, 0xe28}]}, @float={0xb, 0x0, 0x0, 0x10, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x3}}]}, {0x0, [0x2e]}}, &(0x7f0000000340)=""/184, 0x9f, 0xb8, 0x1, 0x401}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) flock(r7, 0x11) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000980)={'veth0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="340000001400010605000000000000000a402000", @ANYRES32=r8, @ANYBLOB="1400020020010000000000000000"], 0x34}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x17, &(0x7f0000000d40)=ANY=[@ANYRES16=r9, @ANYRES32=r10, @ANYRES16=r8], &(0x7f0000000d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x6, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'tunl0\x00', r9, 0x0, 0x10, 0xbe, 0x42, {{0x13, 0x4, 0x1, 0x0, 0x4c, 0x67, 0x0, 0x5, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x2c, 0x72, 0x1, 0x7, [{@multicast1, 0x5}, {@private=0xa010100, 0x2}, {@local, 0x7f}, {@broadcast, 0x3}, {@rand_addr=0x64010101, 0x4}]}, @timestamp={0x44, 0x4, 0xa, 0x0, 0xc}, @lsrr={0x83, 0x7, 0xcb, [@multicast2]}]}}}}}) 1.899408134s ago: executing program 8 (id=2692): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x10e, &(0x7f0000000180)={[{@dax_always}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}], [{@fowner_lt={'fowner<', 0xee01}}]}, 0x4, 0x493, &(0x7f0000000200)="$eJzs3MtvG0UYAPBvnUffNJTyaCkQKIiIR9KmLfTABQQSB5CQuJRjSNKqNG1QEyRaVTQgVI6oEhJHxBGJv4ATXBBwQuIKd1Spgl4onIzWu5vY7sZxUtdW499Pcjy7nvXMt7Pjnd2xE0DfGk3/JBE7I+L3iNidLTZmGM2ebt64NP3vjUvTSVSrb/+V1PL9c+PSdJG12G5HvjBWiah8msTDJeUuXLh4ZmpubvZ8vjyxePb9iYULF58/fXbq1Oyp2XOTx48fPXL4xRcmj3UkznvTuu7/aP7Avtffufrm9Imr7/78bVLE3xRHh4y2evGparXDxfXWrrp0MtjGBgN3sDK0LW2GtLmGav1/dwzESuPtjtc+6WnlgDuqmlvl5aUqsIkl0esaAL1RnOjT69/i0b3RR+9dfzm7AErjvpk/slcGo5LnGWq6vu2k0Yg4sfTfV+kj1n8fwlU0ALBu36fjn+duGf9ta853T2ypzQ2N5HMpeyLivojYGxH3R8QDEfFgRDxUVkiLCYHmSZJbxz+VaxuNrR3p+O+lfG6rcfxXjP5iZCBf2lWL/1glYm72UG2fRIzFUJw8PTd7uEUZP7z62+ervVY//ksfafnFWDCvx7XBLY3bzEwtTt1OzPWufxyxf7As/mR5JiCJiH0RsX+tN6tuKV19+plvDqy2ydrxt9DOPNMaql9HPJ21/1I0xV9IWs9PTmxNj4eJ9Cg4VFrGL79eeWu18m8r/g5I23976fG/HP9IUj9fu7Ced89695U/Plv1mmZ8Q8f/yorh/PnDqcXF84cjhpM3skrXr59c2bZYTiLLn8Y/drC8/++pPVeXd0R6ED8SEY9GxGN5dI9HxBMRcbDFXvjplSffa7WHyuPf2uIdOyeNf6ap/UcaszS1/0piOJrXlCcGzvz4XeM7NsYfEUuR74fy9j9aS43la2qff1+2jqudeq33aAYAAIC7VSUidkZSGV9OVyrj49l3+PfG9src/MLisyfnPzg3k/1GYCSGKsWdrux+8FBS3P8cqVuebFo+kt83/mJgW215fHp+bqbXwUOf21Hf/4s7nePZ05++XQKbXwfm0YC7lP4P/Uv/h/6l/0P/Kun/t3wBHNicys7/l3tQD6D7mvp/47TfUHfrAnSX63/oX4N1P3Jc0993tCpAl9Wf/9v/IADucgvbYu0fya+RGI7b2rwbiaT2r457Xo3NlIhKu5kvb6CIyE9FXQon2UAviGg/887et9d6E73+ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiM/wMAAP//kOLhLg==") bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40086602, &(0x7f0000001440)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) 1.84507814s ago: executing program 7 (id=2693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, r0}, 0xc) 1.832717801s ago: executing program 6 (id=2694): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x10, 0x803, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000009cc7000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32=r5, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 1.780532366s ago: executing program 8 (id=2695): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x59f8, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x10, 0x89, 0xffffffff}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x3, 0xff) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@block_validity}, {}, {@nombcache}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000d80)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000dc0)='./file0/file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file1\x00', 0x24042, 0xc) write$P9_RUNLINKAT(r2, &(0x7f0000000e40)={0xfffffffffffffecb, 0x4d, 0x1}, 0x9f66a781) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000e80)='rdma.current\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create(0xffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 1.679140187s ago: executing program 9 (id=2697): sched_setscheduler(0x0, 0x0, &(0x7f00000007c0)=0x4000003) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x604802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'sit0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc10, {0x0, 0x0, 0x0, r3, {0xffff, 0x9}, {}, {0x5, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4044) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='100', 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.cpu/syz1\x00', 0x1ff) 1.637536971s ago: executing program 7 (id=2698): r0 = gettid() timer_create(0x2, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x17, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='attr/exec\x00') writev(r2, &(0x7f0000000980)=[{&(0x7f00000009c0)}], 0x1) setns(0xc9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c0000004300010025bd700000000000020000000e0001006172705f6361636865000000580006", @ANYRES32=0x0, @ANYBLOB="080011"], 0x7c}}, 0x0) setsockopt(0xffffffffffffffff, 0x108, 0x42020054, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') preadv(r5, &(0x7f0000000300)=[{0x0}], 0x1, 0x38, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x6a040400) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x3000000, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000005e4b92e433e93ada0837308316ba16a4a2131f188978126fee217a761824cd7801d7682300000000000000000213d9df6f9ddb8342285c003eda15513e85c15653462e40fb95a0ab4f112eb9167119c7089a4e2cb6fc08eda65ca3bd16e43130535a6887238a5ab352a946845d5e98916c4f846a364d41", @ANYRES16, @ANYBLOB="030700000000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="270e26bd7000ffdbdf250a000000050038000100000008000300", @ANYRES32=r7, @ANYBLOB="0500330001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./trace\x00', &(0x7f0000000800)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000c40)='call_site.function == vfs_read', 0x1e) 1.276551549s ago: executing program 9 (id=2699): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000b80)={0x3, 0x1000}, 0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000a80)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000ac0)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}], 0x1}}], 0x1, 0x2401c4c5) sendmmsg$inet6(r1, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001840)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) 1.185100858s ago: executing program 9 (id=2700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$phonet(0x23, 0x2, 0x1) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008015}, 0x44) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000280)="cf8966c772761003f9e692f02c25fbffa81116b47294ff9a8526e39a078e3228ba17d501ec4a4b54e72346f743ebc4b79a6b1116cb0880f0f867df80d4e86e6d94e641366f89ec3d06a4809b214d01a44d866917af68de835e5f0f4bd2e0d725a0befaac529927ccb74d670162bef85ef4c4fcb722d40b042a7e2d744243226d02e0abf391a5f6f85852230390c84a21da1c6cd7d7fd1bf5f1fff7a3045e76b8d7eb0c6f1402b2b0bb387074a1a6a97e2be7b0f010a93d85a50409d9158a8d29a8665bee1ce00fd5ef92829783f759a2916a35dab54986891e036485", 0xdc}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x4, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1.012465166s ago: executing program 9 (id=2701): syz_clone(0x21888200, 0x0, 0xfffffffffffffc9e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f00000004c0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x2, 0x4, 0x2, 0x0, 0x1, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f0000000640), &(0x7f0000000680)=@tcp}, 0x20) 603.305708ms ago: executing program 9 (id=2702): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3b9aca00, 0x0, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x0) 562.217812ms ago: executing program 6 (id=2703): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/net/pppol2tp\x00', 0x80, 0x0) read(r3, 0x0, 0x0) read(r3, 0x0, 0x0) read(r3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r2, 0x84, 0x7d, &(0x7f0000000480)={r5, 0x4}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r1}, @RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}]}, 0x2c}}, 0xea5bc50b6199d77e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x19) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x5, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r7, &(0x7f0000000400), 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0xb2461d910c6e8466) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000340)={{0x0, 0x2, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x5422) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x24, 0x20, 0x8, 0x70bd2d, 0x25dfdbff, {0x1c}, [@typed={0x8, 0x122, 0x0, 0x0, @uid}, @generic="0a23da17b19a"]}, 0x24}, 0x1, 0x0, 0x0, 0x480c2}, 0x20000000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fsopen(&(0x7f0000000500)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f0000000580)='fd', 0x0, r9) openat(r9, &(0x7f00000005c0)='./file0\x00', 0x204900, 0x122) 484.49895ms ago: executing program 8 (id=2704): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000b80)={0x3, 0x1000}, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000a80)={0x200000000000001}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000ac0)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="102e59", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001480)="e9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001500)="04", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001580)='^', 0x1}], 0x1, &(0x7f00000015c0)=ANY=[], 0x68}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)="74e9", 0x2}], 0x1}}], 0x5, 0x2401c4c5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001840)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) 376.007581ms ago: executing program 9 (id=2705): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xffffe000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x0, 0x4, &(0x7f0000000a00)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000b00)=ANY=[], &(0x7f0000000b80)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r0}, &(0x7f0000000d00), 0x0}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000140)=""/213, 0xd5, 0x0, &(0x7f0000000240)=""/153, 0x99}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, &(0x7f0000000e40)=ANY=[], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ec0)={r2}, 0xc) r3 = perf_event_open(&(0x7f0000000f00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8001, 0x3}, 0x108, 0x32, 0x43a1bd78, 0x4, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="180100000000000000"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)={0x1c, r6, 0x20b, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./dev\x00', 0x1ff) r7 = syz_clone(0xa0388111, 0x0, 0x21, 0x0, 0x0, 0x0) setpgid(r7, r7) mount(0x0, &(0x7f0000001200)='./dev\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x1a, 0xb, &(0x7f00000013c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000d4ee2842d13de7e16a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 327.401996ms ago: executing program 6 (id=2706): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000b80)={0x3, 0x1000}, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000a80)={0x200000000000001}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000ac0)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="102e59", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001480)="e9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001500)="04", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001580)='^', 0x1}], 0x1, &(0x7f00000015c0)=ANY=[], 0x68}}], 0x4, 0x2401c4c5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001840)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) 260.594554ms ago: executing program 8 (id=2707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, r0}, 0xc) 0s ago: executing program 6 (id=2708): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000240)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000b00)={0x1, &(0x7f0000000b40)=[{0x6, 0x5, 0x7, 0x7ffc0003}]}) r1 = perf_event_open(&(0x7f0000000b80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000c40)='./file0\x00', 0x8, &(0x7f0000000c80)={[{@inode_readahead_blks}, {@norecovery}, {@dioread_nolock}, {@norecovery}]}, 0x5, 0x4f3, &(0x7f0000000d00)="$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") perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x3, 0x300000000}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, r1, 0x9) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ff) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000001280)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000012c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)={0x40, r4, 0x1, 0x1, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000013c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r6, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x2000000000000216, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, 0x0, &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001680)={0x1, 0x80, 0x2, 0xf8, 0x0, 0x0, 0x0, 0x200, 0x29, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001700), 0x706229cb1540170c}, 0x1002e2, 0x400000, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unshare(0x60000600) kernel console output (not intermixed with test programs): "/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 182.530348][ T9801] loop3: detected capacity change from 0 to 2048 [ 182.555700][ T9801] loop3: p1 < > p2 p3 p4 < p5 p6 > [ 182.555717][ T9801] loop3: partition table partially beyond EOD, truncated [ 182.555877][ T9801] loop3: p1 start 3405774849 is beyond EOD, truncated [ 182.563699][ T9801] loop3: p3 start 4225 is beyond EOD, truncated [ 182.595555][ T9805] loop8: detected capacity change from 0 to 512 [ 182.598482][ T9801] loop3: p6 start 4225 is beyond EOD, truncated [ 182.629543][ T29] audit: type=1326 audit(1793432450.480:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9800 comm="syz.6.2218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 182.724915][ T6331] udevd[6331]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 182.731187][ T5821] udevd[5821]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 182.738685][ T5820] udevd[5820]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 182.873050][ T9816] FAULT_INJECTION: forcing a failure. [ 182.873050][ T9816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.873082][ T9816] CPU: 0 UID: 0 PID: 9816 Comm: syz.9.2222 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 182.873126][ T9816] Tainted: [W]=WARN [ 182.873139][ T9816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 182.873160][ T9816] Call Trace: [ 182.873172][ T9816] [ 182.873186][ T9816] __dump_stack+0x1d/0x30 [ 182.873248][ T9816] dump_stack_lvl+0x95/0xd0 [ 182.873279][ T9816] dump_stack+0x15/0x1b [ 182.873309][ T9816] should_fail_ex+0x259/0x270 [ 182.873401][ T9816] should_fail+0xb/0x20 [ 182.873435][ T9816] should_fail_usercopy+0x1a/0x20 [ 182.873466][ T9816] _copy_from_user+0x1c/0xb0 [ 182.873528][ T9816] map_update_elem+0x42e/0x710 [ 182.873566][ T9816] __sys_bpf+0x7f8/0xc50 [ 182.873610][ T9816] __x64_sys_bpf+0x69/0x80 [ 182.873710][ T9816] x64_sys_call+0xf26/0x2550 [ 182.873747][ T9816] do_syscall_64+0x112/0x360 [ 182.873841][ T9816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.873871][ T9816] RIP: 0033:0x7f5a0efbf559 [ 182.873964][ T9816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.873993][ T9816] RSP: 002b:00007f5a0da17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.874090][ T9816] RAX: ffffffffffffffda RBX: 00007f5a0f245fa0 RCX: 00007f5a0efbf559 [ 182.874114][ T9816] RDX: 0000000000000020 RSI: 0000200000000600 RDI: 0000000000000002 [ 182.874149][ T9816] RBP: 00007f5a0f056b20 R08: 0000000000000000 R09: 0000000000000000 [ 182.874166][ T9816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.874185][ T9816] R13: 00007f5a0f246038 R14: 00007f5a0f245fa0 R15: 00007fff41c23118 [ 182.874216][ T9816] [ 183.073691][ T9823] netlink: 'syz.7.2225': attribute type 1 has an invalid length. [ 183.093660][ T9820] FAULT_INJECTION: forcing a failure. [ 183.093660][ T9820] name fail_futex, interval 1, probability 0, space 0, times 0 [ 183.093835][ T9820] CPU: 1 UID: 0 PID: 9820 Comm: syz.6.2223 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 183.093923][ T9820] Tainted: [W]=WARN [ 183.093936][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 183.093980][ T9820] Call Trace: [ 183.093989][ T9820] [ 183.094002][ T9820] __dump_stack+0x1d/0x30 [ 183.094031][ T9820] dump_stack_lvl+0x95/0xd0 [ 183.094109][ T9820] dump_stack+0x15/0x1b [ 183.094161][ T9820] should_fail_ex+0x259/0x270 [ 183.094191][ T9820] should_fail+0xb/0x20 [ 183.094238][ T9820] get_futex_key+0x12c/0xc40 [ 183.094324][ T9820] futex_wake+0x89/0x400 [ 183.094371][ T9820] do_futex+0x3f8/0x460 [ 183.094409][ T9820] __se_sys_futex+0x2f6/0x370 [ 183.094551][ T9820] __x64_sys_futex+0x78/0x90 [ 183.094703][ T9820] x64_sys_call+0x22e2/0x2550 [ 183.094797][ T9820] do_syscall_64+0x112/0x360 [ 183.094911][ T9820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.095049][ T9820] RIP: 0033:0x7f47391ff559 [ 183.095113][ T9820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.095150][ T9820] RSP: 002b:00007f4737c570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 183.095235][ T9820] RAX: ffffffffffffffda RBX: 00007f4739485fa8 RCX: 00007f47391ff559 [ 183.095296][ T9820] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4739485fac [ 183.095419][ T9820] RBP: 00007f4739485fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 183.095486][ T9820] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 183.095547][ T9820] R13: 00007f4739486038 R14: 00007fff5ab23ab0 R15: 00007fff5ab23b98 [ 183.095621][ T9820] [ 183.277104][ T9823] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.359583][ T9830] loop9: detected capacity change from 0 to 512 [ 183.361989][ T9830] EXT4-fs: Ignoring removed orlov option [ 183.362033][ T9830] ext4: Unknown parameter 'grpquota2' [ 183.402271][ T9828] loop6: detected capacity change from 0 to 128 [ 183.442734][ T9828] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.462587][ T9828] ext4 filesystem being mounted at /334/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.533009][ T9833] loop7: detected capacity change from 0 to 2048 [ 183.548279][ T9828] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.558370][ T9833] loop7: p1 < > p2 p3 p4 < p5 p6 > [ 183.558421][ T9833] loop7: partition table partially beyond EOD, truncated [ 183.558788][ T9833] loop7: p1 start 3405774849 is beyond EOD, truncated [ 183.578877][ T9833] loop7: p3 start 4225 is beyond EOD, truncated [ 183.595724][ T9833] loop7: p6 start 4225 is beyond EOD, truncated [ 183.660321][ T9844] __nla_validate_parse: 14 callbacks suppressed [ 183.660344][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2232'. [ 183.661857][ T9844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.779492][ T9851] FAULT_INJECTION: forcing a failure. [ 183.779492][ T9851] name failslab, interval 1, probability 0, space 0, times 0 [ 183.779536][ T9851] CPU: 0 UID: 0 PID: 9851 Comm: syz.7.2236 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 183.779599][ T9851] Tainted: [W]=WARN [ 183.779610][ T9851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 183.779644][ T9851] Call Trace: [ 183.779656][ T9851] [ 183.779669][ T9851] __dump_stack+0x1d/0x30 [ 183.779708][ T9851] dump_stack_lvl+0x95/0xd0 [ 183.779754][ T9851] dump_stack+0x15/0x1b [ 183.779824][ T9851] should_fail_ex+0x259/0x270 [ 183.779859][ T9851] ? asymmetric_key_generate_id+0x63/0x140 [ 183.779953][ T9851] should_failslab+0x8c/0xb0 [ 183.779996][ T9851] __kmalloc_noprof+0xb6/0x4b0 [ 183.780053][ T9851] ? asymmetric_key_generate_id+0x63/0x140 [ 183.780140][ T9851] asymmetric_key_generate_id+0x63/0x140 [ 183.780191][ T9851] x509_akid_note_kid+0x60/0xb0 [ 183.780214][ T9851] asn1_ber_decoder+0xee9/0x1490 [ 183.780243][ T9851] ? asn1_ber_decoder+0x502/0x1490 [ 183.780345][ T9851] ? trace_event_raw_event_kmalloc+0xb7/0x110 [ 183.780376][ T9851] x509_cert_parse+0x163/0x450 [ 183.780512][ T9851] x509_key_preparse+0x3c/0x420 [ 183.780544][ T9851] ? selinux_key_permission+0x161/0x190 [ 183.780629][ T9851] asymmetric_key_preparse+0x68/0xb0 [ 183.780732][ T9851] __key_create_or_update+0x29e/0x820 [ 183.780765][ T9851] ? key_task_permission+0x2ac/0x2c0 [ 183.780879][ T9851] key_create_or_update+0x42/0x60 [ 183.780921][ T9851] __se_sys_add_key+0x2a5/0x360 [ 183.780945][ T9851] __x64_sys_add_key+0x67/0x80 [ 183.781044][ T9851] x64_sys_call+0x1fa9/0x2550 [ 183.781124][ T9851] do_syscall_64+0x112/0x360 [ 183.781167][ T9851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.781252][ T9851] RIP: 0033:0x7f3b80abf559 [ 183.781345][ T9851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.781374][ T9851] RSP: 002b:00007f3b7f50f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 183.781416][ T9851] RAX: ffffffffffffffda RBX: 00007f3b80d45fa0 RCX: 00007f3b80abf559 [ 183.781437][ T9851] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 183.781454][ T9851] RBP: 00007f3b80b56b20 R08: ffffffffffffffff R09: 0000000000000000 [ 183.781527][ T9851] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 183.781549][ T9851] R13: 00007f3b80d46038 R14: 00007f3b80d45fa0 R15: 00007ffdb7c2a078 [ 183.781614][ T9851] [ 183.781872][ T9851] X.509: Couldn't decode AuthKeyIdentifier [ 184.096463][ T9856] FAULT_INJECTION: forcing a failure. [ 184.096463][ T9856] name fail_futex, interval 1, probability 0, space 0, times 0 [ 184.096506][ T9856] CPU: 0 UID: 0 PID: 9856 Comm: syz.3.2237 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 184.096617][ T9856] Tainted: [W]=WARN [ 184.096626][ T9856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 184.096657][ T9856] Call Trace: [ 184.096669][ T9856] [ 184.096683][ T9856] __dump_stack+0x1d/0x30 [ 184.096722][ T9856] dump_stack_lvl+0x95/0xd0 [ 184.096752][ T9856] dump_stack+0x15/0x1b [ 184.096793][ T9856] should_fail_ex+0x259/0x270 [ 184.096832][ T9856] should_fail+0xb/0x20 [ 184.096895][ T9856] get_futex_key+0x12c/0xc40 [ 184.096921][ T9856] futex_wait_setup+0x49/0x3e0 [ 184.096995][ T9856] __futex_wait+0xb2/0x2a0 [ 184.097027][ T9856] ? __pfx_futex_wake_mark+0x10/0x10 [ 184.097076][ T9856] futex_wait+0x98/0x1c0 [ 184.097131][ T9856] do_futex+0x391/0x460 [ 184.097159][ T9856] __se_sys_futex+0x2f6/0x370 [ 184.097182][ T9856] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 184.097271][ T9856] __x64_sys_futex+0x78/0x90 [ 184.097305][ T9856] x64_sys_call+0x22e2/0x2550 [ 184.097332][ T9856] do_syscall_64+0x112/0x360 [ 184.097384][ T9856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.097417][ T9856] RIP: 0033:0x7f6ef772f559 [ 184.097436][ T9856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.097464][ T9856] RSP: 002b:00007f6ef617f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 184.097496][ T9856] RAX: ffffffffffffffda RBX: 00007f6ef79b5fa8 RCX: 00007f6ef772f559 [ 184.097571][ T9856] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6ef79b5fa8 [ 184.097587][ T9856] RBP: 00007f6ef79b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 184.097606][ T9856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.097645][ T9856] R13: 00007f6ef79b6038 R14: 00007fff590021a0 R15: 00007fff59002288 [ 184.097674][ T9856] [ 184.330801][ T9859] FAULT_INJECTION: forcing a failure. [ 184.330801][ T9859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.330851][ T9859] CPU: 0 UID: 0 PID: 9859 Comm: syz.9.2238 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 184.330968][ T9859] Tainted: [W]=WARN [ 184.330978][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 184.330995][ T9859] Call Trace: [ 184.331007][ T9859] [ 184.331021][ T9859] __dump_stack+0x1d/0x30 [ 184.331060][ T9859] dump_stack_lvl+0x95/0xd0 [ 184.331101][ T9859] dump_stack+0x15/0x1b [ 184.331134][ T9859] should_fail_ex+0x259/0x270 [ 184.331175][ T9859] should_fail+0xb/0x20 [ 184.331237][ T9859] should_fail_usercopy+0x1a/0x20 [ 184.331291][ T9859] _copy_from_user+0x1c/0xb0 [ 184.331333][ T9859] map_update_elem+0x42e/0x710 [ 184.331395][ T9859] __sys_bpf+0x7f8/0xc50 [ 184.331439][ T9859] __x64_sys_bpf+0x69/0x80 [ 184.331553][ T9859] x64_sys_call+0xf26/0x2550 [ 184.331593][ T9859] do_syscall_64+0x112/0x360 [ 184.331643][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.331702][ T9859] RIP: 0033:0x7f5a0efbf559 [ 184.331727][ T9859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.331789][ T9859] RSP: 002b:00007f5a0da17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.331831][ T9859] RAX: ffffffffffffffda RBX: 00007f5a0f245fa0 RCX: 00007f5a0efbf559 [ 184.331855][ T9859] RDX: 0000000000000020 RSI: 0000200000000600 RDI: 0000000000000002 [ 184.331941][ T9859] RBP: 00007f5a0f056b20 R08: 0000000000000000 R09: 0000000000000000 [ 184.331962][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.332048][ T9859] R13: 00007f5a0f246038 R14: 00007f5a0f245fa0 R15: 00007fff41c23118 [ 184.332078][ T9859] [ 184.502945][ T9863] netlink: 'syz.7.2239': attribute type 1 has an invalid length. [ 184.555781][ T9863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.623060][ T9864] EXT4-fs: Ignoring removed orlov option [ 184.623115][ T9864] ext4: Unknown parameter 'grpquota2' [ 184.787542][ T9867] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.791325][ T9867] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.853386][ T9879] EXT4-fs: Ignoring removed bh option [ 184.858609][ T9879] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 184.965948][ T9869] lo: entered promiscuous mode [ 184.966661][ T9869] tunl0: entered promiscuous mode [ 184.969109][ T9867] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.969275][ T9869] gre0: entered promiscuous mode [ 185.006235][ T9873] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.033088][ T9869] gretap0: entered promiscuous mode [ 185.057492][ T9869] erspan0: entered promiscuous mode [ 185.061096][ T9869] ip_vti0: entered promiscuous mode [ 185.075988][ T9869] ip6_vti0: entered promiscuous mode [ 185.079121][ T9869] sit0: entered promiscuous mode [ 185.094814][ T9869] ip6tnl0: entered promiscuous mode [ 185.098377][ T9869] ip6gre0: entered promiscuous mode [ 185.125272][ T9869] syz_tun: entered promiscuous mode [ 185.137884][ T9869] ip6gretap0: entered promiscuous mode [ 185.150509][ T9869] vcan0: entered promiscuous mode [ 185.158299][ T29] audit: type=1326 audit(1793432453.014:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.9.2249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0efbf559 code=0x7ffc0000 [ 185.159235][ T9869] bond0: entered promiscuous mode [ 185.159301][ T9869] bond_slave_0: entered promiscuous mode [ 185.159400][ T9869] bond_slave_1: entered promiscuous mode [ 185.208016][ T9869] team0: entered promiscuous mode [ 185.208043][ T9869] team_slave_0: entered promiscuous mode [ 185.208197][ T9869] team_slave_1: entered promiscuous mode [ 185.211537][ T9869] dummy0: entered promiscuous mode [ 185.242858][ T9869] nlmon0: entered promiscuous mode [ 185.244925][ T9869] batadv0: entered promiscuous mode [ 185.268462][ T9869] vxcan0: entered promiscuous mode [ 185.270103][ T9869] vxcan1: entered promiscuous mode [ 185.284844][ T9869] veth0: entered promiscuous mode [ 185.288325][ T9869] veth1: entered promiscuous mode [ 185.304193][ T9869] wg0: entered promiscuous mode [ 185.322091][ T9869] wg2: entered promiscuous mode [ 185.324125][ T9869] veth0_to_bridge: entered promiscuous mode [ 185.327177][ T9869] bridge_slave_0: entered promiscuous mode [ 185.355419][ T9869] veth1_to_bridge: entered promiscuous mode [ 185.358120][ T9869] bridge_slave_1: entered promiscuous mode [ 185.360307][ T9869] veth0_to_bond: entered promiscuous mode [ 185.383605][ T9869] veth1_to_bond: entered promiscuous mode [ 185.388322][ T9869] veth0_to_team: entered promiscuous mode [ 185.407452][ T9890] FAULT_INJECTION: forcing a failure. [ 185.407452][ T9890] name fail_futex, interval 1, probability 0, space 0, times 0 [ 185.407485][ T9890] CPU: 0 UID: 0 PID: 9890 Comm: syz.8.2251 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 185.407536][ T9890] Tainted: [W]=WARN [ 185.407550][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 185.407573][ T9890] Call Trace: [ 185.407587][ T9890] [ 185.407602][ T9890] __dump_stack+0x1d/0x30 [ 185.407652][ T9890] dump_stack_lvl+0x95/0xd0 [ 185.407685][ T9890] dump_stack+0x15/0x1b [ 185.407727][ T9890] should_fail_ex+0x259/0x270 [ 185.407775][ T9890] should_fail+0xb/0x20 [ 185.407827][ T9890] get_futex_key+0x12c/0xc40 [ 185.407868][ T9890] futex_wake+0x89/0x400 [ 185.407913][ T9890] do_futex+0x3f8/0x460 [ 185.407950][ T9890] __se_sys_futex+0x2f6/0x370 [ 185.408069][ T9890] __x64_sys_futex+0x78/0x90 [ 185.408104][ T9890] x64_sys_call+0x22e2/0x2550 [ 185.408146][ T9890] do_syscall_64+0x112/0x360 [ 185.408211][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.408246][ T9890] RIP: 0033:0x7fe07d8bf559 [ 185.408272][ T9890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.408422][ T9890] RSP: 002b:00007fe07c3170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 185.408455][ T9890] RAX: ffffffffffffffda RBX: 00007fe07db45fa8 RCX: 00007fe07d8bf559 [ 185.408480][ T9890] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe07db45fac [ 185.408499][ T9890] RBP: 00007fe07db45fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 185.408597][ T9890] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 185.408621][ T9890] R13: 00007fe07db46038 R14: 00007ffe61b16130 R15: 00007ffe61b16218 [ 185.408649][ T9890] [ 185.515479][ T9869] veth1_to_team: entered promiscuous mode [ 185.617593][ T9869] veth0_to_batadv: entered promiscuous mode [ 185.636736][ T9869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.636821][ T9869] batadv_slave_0: entered promiscuous mode [ 185.665179][ T9869] veth1_to_batadv: entered promiscuous mode [ 185.667573][ T9892] FAULT_INJECTION: forcing a failure. [ 185.667573][ T9892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.667617][ T9892] CPU: 0 UID: 0 PID: 9892 Comm: syz.9.2252 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 185.667710][ T9892] Tainted: [W]=WARN [ 185.667721][ T9892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 185.667742][ T9892] Call Trace: [ 185.667750][ T9892] [ 185.667761][ T9892] __dump_stack+0x1d/0x30 [ 185.667850][ T9892] dump_stack_lvl+0x95/0xd0 [ 185.667992][ T9892] dump_stack+0x15/0x1b [ 185.668016][ T9892] should_fail_ex+0x259/0x270 [ 185.668055][ T9892] should_fail+0xb/0x20 [ 185.668084][ T9892] should_fail_usercopy+0x1a/0x20 [ 185.668137][ T9892] _copy_from_user+0x1c/0xb0 [ 185.668181][ T9892] map_update_elem+0x42e/0x710 [ 185.668245][ T9892] __sys_bpf+0x7f8/0xc50 [ 185.668381][ T9892] __x64_sys_bpf+0x69/0x80 [ 185.668432][ T9892] x64_sys_call+0xf26/0x2550 [ 185.668481][ T9892] do_syscall_64+0x112/0x360 [ 185.668529][ T9892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.668672][ T9892] RIP: 0033:0x7f5a0efbf559 [ 185.668699][ T9892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.668730][ T9892] RSP: 002b:00007f5a0da17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.668760][ T9892] RAX: ffffffffffffffda RBX: 00007f5a0f245fa0 RCX: 00007f5a0efbf559 [ 185.668778][ T9892] RDX: 0000000000000020 RSI: 0000200000000600 RDI: 0000000000000002 [ 185.668797][ T9892] RBP: 00007f5a0f056b20 R08: 0000000000000000 R09: 0000000000000000 [ 185.668858][ T9892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.668879][ T9892] R13: 00007f5a0f246038 R14: 00007f5a0f245fa0 R15: 00007fff41c23118 [ 185.668902][ T9892] [ 185.693560][ T9869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.693785][ T9869] batadv_slave_1: entered promiscuous mode [ 185.767906][ T9869] xfrm0: entered promiscuous mode [ 185.805571][ T9888] set_capacity_and_notify: 6 callbacks suppressed [ 185.805622][ T9888] loop3: detected capacity change from 0 to 8192 [ 185.809517][ T9869] veth0_to_hsr: entered promiscuous mode [ 185.885452][ T9888] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.931040][ T9869] veth1_to_hsr: entered promiscuous mode [ 185.952838][ T9869] hsr0: entered promiscuous mode [ 185.955509][ T9869] veth1_virt_wifi: entered promiscuous mode [ 185.958105][ T9869] veth0_virt_wifi: entered promiscuous mode [ 186.029239][ T9896] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 186.029347][ T9896] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.029426][ T9896] vhci_hcd vhci_hcd.0: Device attached [ 186.058362][ T9869] vlan0: entered promiscuous mode [ 186.071283][ T9869] vlan1: entered promiscuous mode [ 186.073232][ T9869] macvlan0: entered promiscuous mode [ 186.075228][ T9896] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(16) [ 186.075338][ T9896] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.075388][ T9896] vhci_hcd vhci_hcd.0: Device attached [ 186.075660][ T9869] macvlan1: entered promiscuous mode [ 186.077766][ T9869] ipvlan0: entered promiscuous mode [ 186.077935][ T9869] ipvlan1: entered promiscuous mode [ 186.134599][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2253'. [ 186.162946][ T9869] macvtap0: entered promiscuous mode [ 186.171260][ T9869] macsec0: entered promiscuous mode [ 186.181959][ T9903] vhci_hcd: connection closed [ 186.182362][ T9898] vhci_hcd: connection closed [ 186.182863][ T3627] vhci_hcd vhci_hcd.9: stop threads [ 186.182885][ T3627] vhci_hcd vhci_hcd.9: release socket [ 186.182928][ T3627] vhci_hcd vhci_hcd.9: disconnect device [ 186.186912][ T3627] vhci_hcd vhci_hcd.9: stop threads [ 186.186969][ T3627] vhci_hcd vhci_hcd.9: release socket [ 186.187078][ T3627] vhci_hcd vhci_hcd.9: disconnect device [ 186.212313][ T28] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 186.218150][ T9869] geneve0: entered promiscuous mode [ 186.239091][ T9869] geneve1: entered promiscuous mode [ 186.250586][ T9869] vxlan0: entered promiscuous mode [ 186.250819][ T9869] netdevsim netdevsim7 eth0: entered promiscuous mode [ 186.250898][ T9869] netdevsim netdevsim7 eth1: entered promiscuous mode [ 186.251062][ T9869] netdevsim netdevsim7 eth2: entered promiscuous mode [ 186.251185][ T9869] netdevsim netdevsim7 eth3: entered promiscuous mode [ 186.251340][ T9869] dummy1: entered promiscuous mode [ 186.251486][ T9869] ip6erspan0: entered promiscuous mode [ 186.254182][ T9869] bridge0: entered promiscuous mode [ 186.256007][ T9869] syzkaller0: entered promiscuous mode [ 186.282230][ T9869] bond1: entered promiscuous mode [ 186.284889][ T9869] bridge1: entered promiscuous mode [ 186.330129][ T9869] bond2: entered promiscuous mode [ 186.359250][ T9869] bond3: entered promiscuous mode [ 186.419531][ T9886] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2248'. [ 186.419595][ T9886] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2248'. [ 186.422558][ T3623] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.423547][ T3623] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.423652][ T3623] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.423707][ T3623] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.573686][ T9919] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 186.600942][ T9916] loop8: detected capacity change from 0 to 512 [ 186.605183][ T9916] EXT4-fs: Ignoring removed bh option [ 186.607191][ T9916] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 186.730581][ T9926] FAULT_INJECTION: forcing a failure. [ 186.730581][ T9926] name fail_futex, interval 1, probability 0, space 0, times 0 [ 186.730621][ T9926] CPU: 1 UID: 0 PID: 9926 Comm: syz.3.2263 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 186.730657][ T9926] Tainted: [W]=WARN [ 186.730670][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.730691][ T9926] Call Trace: [ 186.730703][ T9926] [ 186.730740][ T9926] __dump_stack+0x1d/0x30 [ 186.730769][ T9926] dump_stack_lvl+0x95/0xd0 [ 186.730794][ T9926] dump_stack+0x15/0x1b [ 186.730894][ T9926] should_fail_ex+0x259/0x270 [ 186.730936][ T9926] should_fail+0xb/0x20 [ 186.730963][ T9926] get_futex_key+0x12c/0xc40 [ 186.730995][ T9926] futex_wake+0x89/0x400 [ 186.731065][ T9926] do_futex+0x3f8/0x460 [ 186.731092][ T9926] __se_sys_futex+0x2f6/0x370 [ 186.731131][ T9926] __x64_sys_futex+0x78/0x90 [ 186.731211][ T9926] x64_sys_call+0x22e2/0x2550 [ 186.731303][ T9926] do_syscall_64+0x112/0x360 [ 186.731350][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.731380][ T9926] RIP: 0033:0x7f6ef772f559 [ 186.731454][ T9926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.731483][ T9926] RSP: 002b:00007f6ef617f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 186.731512][ T9926] RAX: ffffffffffffffda RBX: 00007f6ef79b5fa8 RCX: 00007f6ef772f559 [ 186.731529][ T9926] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6ef79b5fac [ 186.731562][ T9926] RBP: 00007f6ef79b5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 186.731583][ T9926] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 186.731602][ T9926] R13: 00007f6ef79b6038 R14: 00007fff590021a0 R15: 00007fff59002288 [ 186.731623][ T9926] [ 186.732355][ T9922] loop7: detected capacity change from 0 to 128 [ 186.771483][ T9922] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.786825][ T9922] ext4 filesystem being mounted at /381/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.016825][ T9934] FAULT_INJECTION: forcing a failure. [ 187.016825][ T9934] name failslab, interval 1, probability 0, space 0, times 0 [ 187.016859][ T9934] CPU: 1 UID: 0 PID: 9934 Comm: syz.9.2267 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 187.016990][ T9934] Tainted: [W]=WARN [ 187.017000][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 187.017037][ T9934] Call Trace: [ 187.017049][ T9934] [ 187.017099][ T9934] __dump_stack+0x1d/0x30 [ 187.017137][ T9934] dump_stack_lvl+0x95/0xd0 [ 187.017164][ T9934] dump_stack+0x15/0x1b [ 187.017207][ T9934] should_fail_ex+0x259/0x270 [ 187.017345][ T9934] ? x509_cert_parse+0x1fd/0x450 [ 187.017394][ T9934] should_failslab+0x8c/0xb0 [ 187.017468][ T9934] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 187.017512][ T9934] ? x509_cert_parse+0x1fd/0x450 [ 187.017625][ T9934] kmemdup_noprof+0x2b/0x70 [ 187.017734][ T9934] x509_cert_parse+0x1fd/0x450 [ 187.017783][ T9934] x509_key_preparse+0x3c/0x420 [ 187.017831][ T9934] asymmetric_key_preparse+0x68/0xb0 [ 187.017933][ T9934] __key_create_or_update+0x29e/0x820 [ 187.017975][ T9934] ? key_task_permission+0x2ac/0x2c0 [ 187.018042][ T9934] key_create_or_update+0x42/0x60 [ 187.018098][ T9934] __se_sys_add_key+0x2a5/0x360 [ 187.018133][ T9934] __x64_sys_add_key+0x67/0x80 [ 187.018164][ T9934] x64_sys_call+0x1fa9/0x2550 [ 187.018217][ T9934] do_syscall_64+0x112/0x360 [ 187.018261][ T9934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.018295][ T9934] RIP: 0033:0x7f5a0efbf559 [ 187.018322][ T9934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.018407][ T9934] RSP: 002b:00007f5a0da17028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 187.018442][ T9934] RAX: ffffffffffffffda RBX: 00007f5a0f245fa0 RCX: 00007f5a0efbf559 [ 187.018462][ T9934] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 187.018511][ T9934] RBP: 00007f5a0f056b20 R08: ffffffffffffffff R09: 0000000000000000 [ 187.018528][ T9934] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 187.018604][ T9934] R13: 00007f5a0f246038 R14: 00007f5a0f245fa0 R15: 00007fff41c23118 [ 187.018629][ T9934] [ 187.248939][ T9922] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.329706][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 187.329727][ T29] audit: type=1326 audit(1793432455.187:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.8.2270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 187.329800][ T29] audit: type=1326 audit(1793432455.187:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.8.2270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 187.330101][ T29] audit: type=1326 audit(1793432455.187:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.8.2270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 187.330488][ T29] audit: type=1326 audit(1793432455.187:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.8.2270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 187.330704][ T29] audit: type=1326 audit(1793432455.187:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.8.2270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 187.330926][ T29] audit: type=1326 audit(1793432455.187:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.8.2270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 187.331434][ T29] audit: type=1326 audit(1793432455.187:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.8.2270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 187.331549][ T29] audit: type=1326 audit(1793432455.187:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.8.2270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 187.332138][ T29] audit: type=1326 audit(1793432455.187:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.8.2270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 187.332313][ T29] audit: type=1326 audit(1793432455.187:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9945 comm="syz.8.2270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 187.345083][ T9946] loop8: detected capacity change from 0 to 512 [ 187.370757][ T9943] loop7: detected capacity change from 0 to 512 [ 187.373541][ T9943] EXT4-fs: Ignoring removed bh option [ 187.417547][ T9943] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 187.542817][ T9946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.543074][ T9946] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.698846][ T9953] loop9: detected capacity change from 0 to 736 [ 187.765894][ T9960] FAULT_INJECTION: forcing a failure. [ 187.765894][ T9960] name fail_futex, interval 1, probability 0, space 0, times 0 [ 187.765966][ T9960] CPU: 0 UID: 0 PID: 9960 Comm: syz.7.2275 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 187.766041][ T9960] Tainted: [W]=WARN [ 187.766050][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 187.766065][ T9960] Call Trace: [ 187.766073][ T9960] [ 187.766082][ T9960] __dump_stack+0x1d/0x30 [ 187.766116][ T9960] dump_stack_lvl+0x95/0xd0 [ 187.766241][ T9960] dump_stack+0x15/0x1b [ 187.766272][ T9960] should_fail_ex+0x259/0x270 [ 187.766311][ T9960] should_fail+0xb/0x20 [ 187.766354][ T9960] get_futex_key+0x12c/0xc40 [ 187.766378][ T9960] futex_wake+0x89/0x400 [ 187.766454][ T9960] do_futex+0x3f8/0x460 [ 187.766482][ T9960] __se_sys_futex+0x2f6/0x370 [ 187.766525][ T9960] __x64_sys_futex+0x78/0x90 [ 187.766645][ T9960] x64_sys_call+0x22e2/0x2550 [ 187.766680][ T9960] do_syscall_64+0x112/0x360 [ 187.766786][ T9960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.766887][ T9960] RIP: 0033:0x7f3b80abf559 [ 187.766977][ T9960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.767182][ T9960] RSP: 002b:00007f3b7f50f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 187.767215][ T9960] RAX: ffffffffffffffda RBX: 00007f3b80d45fa8 RCX: 00007f3b80abf559 [ 187.767237][ T9960] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3b80d45fac [ 187.767258][ T9960] RBP: 00007f3b80d45fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 187.767350][ T9960] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 187.767368][ T9960] R13: 00007f3b80d46038 R14: 00007ffdb7c29f90 R15: 00007ffdb7c2a078 [ 187.767391][ T9960] [ 188.053913][ T9947] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2272'. [ 188.053995][ T9947] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2272'. [ 188.113458][ T9964] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 188.113576][ T9964] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 188.113666][ T9964] vhci_hcd vhci_hcd.0: Device attached [ 188.144974][ T9954] rxe_eth0 speed is unknown, defaulting to 1000 [ 188.153307][ T9964] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(16) [ 188.153350][ T9964] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 188.155888][ T9964] vhci_hcd vhci_hcd.0: Device attached [ 188.204165][ T9966] vhci_hcd: connection closed [ 188.204390][ T9970] vhci_hcd: connection closed [ 188.212326][ T678] vhci_hcd vhci_hcd.7: stop threads [ 188.212406][ T678] vhci_hcd vhci_hcd.7: release socket [ 188.212425][ T678] vhci_hcd vhci_hcd.7: disconnect device [ 188.214012][ T678] vhci_hcd vhci_hcd.7: stop threads [ 188.214044][ T678] vhci_hcd vhci_hcd.7: release socket [ 188.214061][ T678] vhci_hcd vhci_hcd.7: disconnect device [ 188.318741][ T9975] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2280'. [ 188.463188][ T9983] loop3: detected capacity change from 0 to 512 [ 188.465788][ T9983] EXT4-fs: Ignoring removed bh option [ 188.470027][ T9983] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 188.650244][ T9997] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2291'. [ 188.726877][T10000] FAULT_INJECTION: forcing a failure. [ 188.726877][T10000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.726915][T10000] CPU: 1 UID: 0 PID: 10000 Comm: syz.6.2293 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 188.726993][T10000] Tainted: [W]=WARN [ 188.727006][T10000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 188.727094][T10000] Call Trace: [ 188.727103][T10000] [ 188.727113][T10000] __dump_stack+0x1d/0x30 [ 188.727151][T10000] dump_stack_lvl+0x95/0xd0 [ 188.727265][T10000] dump_stack+0x15/0x1b [ 188.727298][T10000] should_fail_ex+0x259/0x270 [ 188.727329][T10000] should_fail+0xb/0x20 [ 188.727355][T10000] should_fail_usercopy+0x1a/0x20 [ 188.727458][T10000] _copy_from_user+0x1c/0xb0 [ 188.727499][T10000] kvmemdup_bpfptr_noprof+0x86/0xf0 [ 188.727530][T10000] map_update_elem+0x4ea/0x710 [ 188.727566][T10000] __sys_bpf+0x7f8/0xc50 [ 188.727655][T10000] __x64_sys_bpf+0x69/0x80 [ 188.727748][T10000] x64_sys_call+0xf26/0x2550 [ 188.727787][T10000] do_syscall_64+0x112/0x360 [ 188.727908][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.727934][T10000] RIP: 0033:0x7f47391ff559 [ 188.727958][T10000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.727989][T10000] RSP: 002b:00007f4737c57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.728052][T10000] RAX: ffffffffffffffda RBX: 00007f4739485fa0 RCX: 00007f47391ff559 [ 188.728076][T10000] RDX: 0000000000000020 RSI: 0000200000000600 RDI: 0000000000000002 [ 188.728098][T10000] RBP: 00007f4739296b20 R08: 0000000000000000 R09: 0000000000000000 [ 188.728188][T10000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.728204][T10000] R13: 00007f4739486038 R14: 00007f4739485fa0 R15: 00007fff5ab23b98 [ 188.728226][T10000] [ 188.731464][T10006] netlink: 'syz.9.2294': attribute type 1 has an invalid length. [ 188.840904][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2294'. [ 188.961561][T10006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.008829][T10008] bridge1: entered promiscuous mode [ 189.043539][ T5824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.121730][T10008] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 189.146344][T10013] loop3: detected capacity change from 0 to 736 [ 189.363972][T10011] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2296'. [ 189.364003][T10011] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2296'. [ 189.679887][T10038] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(12) [ 189.679924][T10038] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.682774][T10040] loop9: detected capacity change from 0 to 128 [ 189.706195][T10038] vhci_hcd vhci_hcd.0: Device attached [ 189.761278][T10040] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.783056][T10040] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.876109][T10038] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(16) [ 189.876146][T10038] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.876284][T10038] vhci_hcd vhci_hcd.0: Device attached [ 189.881532][T10049] vhci_hcd: connection closed [ 189.881704][T10043] vhci_hcd: connection closed [ 189.904688][ T3623] vhci_hcd vhci_hcd.8: stop threads [ 189.904887][ T3623] vhci_hcd vhci_hcd.8: release socket [ 189.904998][ T3623] vhci_hcd vhci_hcd.8: disconnect device [ 189.909011][ T3623] vhci_hcd vhci_hcd.8: stop threads [ 189.909074][ T3623] vhci_hcd vhci_hcd.8: release socket [ 189.909205][ T3623] vhci_hcd vhci_hcd.8: disconnect device [ 189.914821][ T3388] usb 17-1: new high-speed USB device number 2 using vhci_hcd [ 189.914936][ T3388] usb 17-1: enqueue for inactive port 0 [ 189.915027][ T3388] usb 17-1: enqueue for inactive port 0 [ 189.915180][ T3388] usb 17-1: enqueue for inactive port 0 [ 189.927569][T10054] FAULT_INJECTION: forcing a failure. [ 189.927569][T10054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.927729][T10054] CPU: 0 UID: 0 PID: 10054 Comm: syz.3.2313 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 189.927848][T10054] Tainted: [W]=WARN [ 189.927880][T10054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 189.927931][T10054] Call Trace: [ 189.927961][T10054] [ 189.928051][T10054] __dump_stack+0x1d/0x30 [ 189.928151][T10054] dump_stack_lvl+0x95/0xd0 [ 189.928290][T10054] dump_stack+0x15/0x1b [ 189.928371][T10054] should_fail_ex+0x259/0x270 [ 189.928473][T10054] should_fail+0xb/0x20 [ 189.928573][T10054] should_fail_usercopy+0x1a/0x20 [ 189.928696][T10054] _copy_from_user+0x1c/0xb0 [ 189.928910][T10054] map_update_elem+0x42e/0x710 [ 189.929016][T10054] __sys_bpf+0x7f8/0xc50 [ 189.929168][T10054] __x64_sys_bpf+0x69/0x80 [ 189.929355][T10054] x64_sys_call+0xf26/0x2550 [ 189.929395][T10054] do_syscall_64+0x112/0x360 [ 189.929444][T10054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.929581][T10054] RIP: 0033:0x7f6ef772f559 [ 189.929605][T10054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.929644][T10054] RSP: 002b:00007f6ef617f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.929767][T10054] RAX: ffffffffffffffda RBX: 00007f6ef79b5fa0 RCX: 00007f6ef772f559 [ 189.929841][T10054] RDX: 0000000000000020 RSI: 0000200000000600 RDI: 0000000000000002 [ 189.929902][T10054] RBP: 00007f6ef77c6b20 R08: 0000000000000000 R09: 0000000000000000 [ 189.929952][T10054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.930005][T10054] R13: 00007f6ef79b6038 R14: 00007f6ef79b5fa0 R15: 00007fff59002288 [ 189.930076][T10054] [ 189.942305][T10040] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.984684][ T3388] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 190.375925][T10070] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.427916][T10073] netlink: 'syz.7.2321': attribute type 1 has an invalid length. [ 190.462832][T10074] loop6: detected capacity change from 0 to 512 [ 190.463713][T10074] EXT4-fs: Ignoring removed orlov option [ 190.463754][T10074] ext4: Unknown parameter 'grpquota2' [ 190.549634][T10073] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.693171][T10084] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 190.863141][T10092] FAULT_INJECTION: forcing a failure. [ 190.863141][T10092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.863210][T10092] CPU: 1 UID: 0 PID: 10092 Comm: syz.8.2330 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 190.863313][T10092] Tainted: [W]=WARN [ 190.863324][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 190.863356][T10092] Call Trace: [ 190.863366][T10092] [ 190.863377][T10092] __dump_stack+0x1d/0x30 [ 190.863420][T10092] dump_stack_lvl+0x95/0xd0 [ 190.863532][T10092] dump_stack+0x15/0x1b [ 190.863566][T10092] should_fail_ex+0x259/0x270 [ 190.863605][T10092] should_fail+0xb/0x20 [ 190.863717][T10092] should_fail_usercopy+0x1a/0x20 [ 190.863751][T10092] _copy_to_user+0x20/0xa0 [ 190.863847][T10092] copy_to_sockptr_offset+0x4c/0x60 [ 190.863892][T10092] ipv6_flowlabel_opt+0x19bb/0x1b30 [ 190.863933][T10092] ? ring_buffer_unlock_commit+0x3cc/0x450 [ 190.864075][T10092] ? lock_sock_nested+0x7f/0x110 [ 190.864107][T10092] do_ipv6_setsockopt+0x75d/0x1d30 [ 190.864157][T10092] ? __rcu_read_unlock+0x4e/0x70 [ 190.864186][T10092] ? avc_has_perm_noaudit+0xac/0x160 [ 190.864318][T10092] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 190.864375][T10092] ipv6_setsockopt+0x59/0x130 [ 190.864414][T10092] rawv6_setsockopt+0x1cc/0x3f0 [ 190.864474][T10092] sock_common_setsockopt+0x69/0x80 [ 190.864509][T10092] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 190.864611][T10092] __sys_setsockopt+0x184/0x200 [ 190.864655][T10092] __x64_sys_setsockopt+0x64/0x80 [ 190.864720][T10092] x64_sys_call+0x248f/0x2550 [ 190.864748][T10092] do_syscall_64+0x112/0x360 [ 190.864838][T10092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.864882][T10092] RIP: 0033:0x7fe07d8bf559 [ 190.864977][T10092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.865005][T10092] RSP: 002b:00007fe07c317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.865116][T10092] RAX: ffffffffffffffda RBX: 00007fe07db45fa0 RCX: 00007fe07d8bf559 [ 190.865256][T10092] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000004 [ 190.865277][T10092] RBP: 00007fe07d956b20 R08: 0000000000000020 R09: 0000000000000000 [ 190.865298][T10092] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 190.865320][T10092] R13: 00007fe07db46038 R14: 00007fe07db45fa0 R15: 00007ffe61b16218 [ 190.865408][T10092] [ 191.318838][T10102] loop9: detected capacity change from 0 to 512 [ 191.333178][T10102] EXT4-fs: Ignoring removed bh option [ 191.338971][T10102] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 191.514333][T10110] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 191.666095][T10114] loop7: detected capacity change from 0 to 128 [ 191.697060][T10114] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.699643][T10114] ext4 filesystem being mounted at /395/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.818218][T10114] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.842761][T10130] loop3: detected capacity change from 0 to 512 [ 191.843487][T10130] EXT4-fs: Ignoring removed bh option [ 191.847462][T10130] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 191.975127][T10137] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 192.069265][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2352'. [ 192.094290][T10140] bridge1: entered promiscuous mode [ 192.134665][T10144] FAULT_INJECTION: forcing a failure. [ 192.134665][T10144] name failslab, interval 1, probability 0, space 0, times 0 [ 192.134710][T10144] CPU: 0 UID: 0 PID: 10144 Comm: syz.9.2354 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 192.134806][T10144] Tainted: [W]=WARN [ 192.134818][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 192.134834][T10144] Call Trace: [ 192.134847][T10144] [ 192.134858][T10144] __dump_stack+0x1d/0x30 [ 192.134959][T10144] dump_stack_lvl+0x95/0xd0 [ 192.135073][T10144] dump_stack+0x15/0x1b [ 192.135125][T10144] should_fail_ex+0x259/0x270 [ 192.135167][T10144] ? ipv6_flowlabel_opt+0x13dd/0x1b30 [ 192.135208][T10144] should_failslab+0x8c/0xb0 [ 192.135283][T10144] __kmalloc_cache_noprof+0x5d/0x3e0 [ 192.135321][T10144] ? ipv6_flowlabel_opt+0x13dd/0x1b30 [ 192.135353][T10144] ipv6_flowlabel_opt+0x13dd/0x1b30 [ 192.135420][T10144] ? hrtimer_start_range_ns+0xfd/0x120 [ 192.135460][T10144] ? _raw_spin_unlock+0x9/0x30 [ 192.135531][T10144] ? finish_task_switch+0x121/0x340 [ 192.135585][T10144] ? __schedule+0x7a9/0xd40 [ 192.135644][T10144] ? lock_sock_nested+0x7f/0x110 [ 192.135682][T10144] do_ipv6_setsockopt+0x75d/0x1d30 [ 192.135720][T10144] ? __rcu_read_unlock+0x4e/0x70 [ 192.135792][T10144] ? avc_has_perm_noaudit+0xac/0x160 [ 192.135882][T10144] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 192.135982][T10144] ipv6_setsockopt+0x59/0x130 [ 192.136165][T10144] rawv6_setsockopt+0x1cc/0x3f0 [ 192.136215][T10144] sock_common_setsockopt+0x69/0x80 [ 192.136324][T10144] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 192.136371][T10144] __sys_setsockopt+0x184/0x200 [ 192.136408][T10144] __x64_sys_setsockopt+0x64/0x80 [ 192.136465][T10144] x64_sys_call+0x248f/0x2550 [ 192.136512][T10144] do_syscall_64+0x112/0x360 [ 192.136602][T10144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.136664][T10144] RIP: 0033:0x7f5a0efbf559 [ 192.136683][T10144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.136728][T10144] RSP: 002b:00007f5a0da17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.136818][T10144] RAX: ffffffffffffffda RBX: 00007f5a0f245fa0 RCX: 00007f5a0efbf559 [ 192.136978][T10144] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000004 [ 192.136994][T10144] RBP: 00007f5a0f056b20 R08: 0000000000000020 R09: 0000000000000000 [ 192.137019][T10144] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 192.137037][T10144] R13: 00007f5a0f246038 R14: 00007f5a0f245fa0 R15: 00007fff41c23118 [ 192.137114][T10144] [ 192.402938][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2356'. [ 192.485527][T10150] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2356'. [ 192.485562][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2356'. [ 192.573839][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2356'. [ 192.587425][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2356'. [ 192.711051][T10167] loop3: detected capacity change from 0 to 512 [ 192.711779][T10167] EXT4-fs: Ignoring removed bh option [ 192.719392][T10167] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 192.919271][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.023172][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2369'. [ 193.056431][T10180] bridge1: entered promiscuous mode [ 193.207129][T10189] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 193.207245][T10189] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 193.207403][T10189] vhci_hcd vhci_hcd.0: Device attached [ 193.289827][T10200] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.371607][T10201] loop9: detected capacity change from 0 to 512 [ 193.372221][T10201] EXT4-fs: Ignoring removed bh option [ 193.401202][T10201] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 193.449255][ T131] usb 15-1: new high-speed USB device number 2 using vhci_hcd [ 193.588340][T10192] vhci_hcd: connection reset by peer [ 193.594542][ T3623] vhci_hcd vhci_hcd.7: stop threads [ 193.594570][ T3623] vhci_hcd vhci_hcd.7: release socket [ 193.594673][ T3623] vhci_hcd vhci_hcd.7: disconnect device [ 193.837274][T10224] FAULT_INJECTION: forcing a failure. [ 193.837274][T10224] name failslab, interval 1, probability 0, space 0, times 0 [ 193.837317][T10224] CPU: 0 UID: 0 PID: 10224 Comm: syz.3.2387 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 193.837425][T10224] Tainted: [W]=WARN [ 193.837437][T10224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 193.837469][T10224] Call Trace: [ 193.837481][T10224] [ 193.837495][T10224] __dump_stack+0x1d/0x30 [ 193.837535][T10224] dump_stack_lvl+0x95/0xd0 [ 193.837567][T10224] dump_stack+0x15/0x1b [ 193.837599][T10224] should_fail_ex+0x259/0x270 [ 193.837692][T10224] ? x509_get_sig_params+0x8b/0x2c0 [ 193.837727][T10224] should_failslab+0x8c/0xb0 [ 193.837816][T10224] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 193.837865][T10224] ? sha256+0x92/0xc0 [ 193.837918][T10224] ? x509_get_sig_params+0x8b/0x2c0 [ 193.837963][T10224] kmemdup_noprof+0x2b/0x70 [ 193.837989][T10224] x509_get_sig_params+0x8b/0x2c0 [ 193.838023][T10224] x509_cert_parse+0x2f9/0x450 [ 193.838124][T10224] x509_key_preparse+0x3c/0x420 [ 193.838152][T10224] ? selinux_key_permission+0x161/0x190 [ 193.838202][T10224] asymmetric_key_preparse+0x68/0xb0 [ 193.838286][T10224] __key_create_or_update+0x29e/0x820 [ 193.838330][T10224] ? key_task_permission+0x2ac/0x2c0 [ 193.838432][T10224] key_create_or_update+0x42/0x60 [ 193.838479][T10224] __se_sys_add_key+0x2a5/0x360 [ 193.838509][T10224] __x64_sys_add_key+0x67/0x80 [ 193.838535][T10224] x64_sys_call+0x1fa9/0x2550 [ 193.838577][T10224] do_syscall_64+0x112/0x360 [ 193.838621][T10224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.838724][T10224] RIP: 0033:0x7f6ef772f559 [ 193.838748][T10224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.838770][T10224] RSP: 002b:00007f6ef617f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 193.838795][T10224] RAX: ffffffffffffffda RBX: 00007f6ef79b5fa0 RCX: 00007f6ef772f559 [ 193.838814][T10224] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 193.838907][T10224] RBP: 00007f6ef77c6b20 R08: ffffffffffffffff R09: 0000000000000000 [ 193.838925][T10224] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 193.838941][T10224] R13: 00007f6ef79b6038 R14: 00007f6ef79b5fa0 R15: 00007fff59002288 [ 193.838967][T10224] [ 193.940643][T10218] loop9: detected capacity change from 0 to 128 [ 194.058916][T10225] netlink: 'syz.8.2386': attribute type 1 has an invalid length. [ 194.064029][T10218] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.068507][T10218] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.076339][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 194.076353][ T29] audit: type=1326 audit(1793432461.937:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.6.2388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 194.076400][ T29] audit: type=1326 audit(1793432461.937:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.6.2388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 194.076446][ T29] audit: type=1326 audit(1793432461.937:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.6.2388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 194.084808][ T29] audit: type=1326 audit(1793432461.937:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.6.2388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 194.084933][ T29] audit: type=1326 audit(1793432461.937:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.6.2388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 194.085007][ T29] audit: type=1326 audit(1793432461.937:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.6.2388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 194.085145][ T29] audit: type=1326 audit(1793432461.937:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.6.2388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 194.085201][ T29] audit: type=1326 audit(1793432461.957:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.6.2388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 194.085233][ T29] audit: type=1326 audit(1793432461.957:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.6.2388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 194.100161][ T29] audit: type=1326 audit(1793432461.957:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10226 comm="syz.6.2388" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 194.146655][T10225] __nla_validate_parse: 5 callbacks suppressed [ 194.146703][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2386'. [ 194.200482][T10227] loop6: detected capacity change from 0 to 512 [ 194.339206][T10225] bridge1: entered promiscuous mode [ 194.361815][T10227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.362188][T10227] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.480926][T10237] lo: left promiscuous mode [ 194.647159][T10218] rxe_eth0 speed is unknown, defaulting to 1000 [ 194.666197][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2393'. [ 194.763614][T10246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2393'. [ 194.763646][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2393'. [ 194.817808][T10254] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2397'. [ 194.817853][T10254] FAULT_INJECTION: forcing a failure. [ 194.817853][T10254] name failslab, interval 1, probability 0, space 0, times 0 [ 194.817885][T10254] CPU: 0 UID: 0 PID: 10254 Comm: syz.8.2397 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 194.817917][T10254] Tainted: [W]=WARN [ 194.817926][T10254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 194.817972][T10254] Call Trace: [ 194.817984][T10254] [ 194.817995][T10254] __dump_stack+0x1d/0x30 [ 194.818027][T10254] dump_stack_lvl+0x95/0xd0 [ 194.818065][T10254] dump_stack+0x15/0x1b [ 194.818123][T10254] should_fail_ex+0x259/0x270 [ 194.818154][T10254] ? __nf_conntrack_alloc+0xba/0x2b0 [ 194.818235][T10254] should_failslab+0x8c/0xb0 [ 194.818354][T10254] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 194.818387][T10254] ? __nf_conntrack_alloc+0xba/0x2b0 [ 194.818496][T10254] __nf_conntrack_alloc+0xba/0x2b0 [ 194.818586][T10254] nf_conntrack_alloc+0x38/0x50 [ 194.818689][T10254] ctnetlink_new_conntrack+0x3a5/0x15c0 [ 194.818737][T10254] ? __nla_parse+0x40/0x60 [ 194.818921][T10254] nfnetlink_rcv_msg+0x4e2/0x5b0 [ 194.818986][T10254] netlink_rcv_skb+0x11e/0x220 [ 194.819076][T10254] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 194.819127][T10254] nfnetlink_rcv+0x15f/0x1740 [ 194.819160][T10254] ? trace_event_buffer_commit+0x174/0x590 [ 194.819347][T10254] ? trace_event_raw_event_net_dev_xmit+0x1b1/0x230 [ 194.819388][T10254] ? dev_hard_start_xmit+0x34e/0x380 [ 194.819469][T10254] ? __dev_queue_xmit+0x1361/0x1ec0 [ 194.819530][T10254] ? __dev_queue_xmit+0x151/0x1ec0 [ 194.819569][T10254] ? __netlink_deliver_tap+0x3a7/0x3e0 [ 194.819675][T10254] netlink_unicast+0x665/0x740 [ 194.819722][T10254] netlink_sendmsg+0x5ef/0x740 [ 194.819763][T10254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.819789][T10254] ____sys_sendmsg+0x54a/0x590 [ 194.819823][T10254] ___sys_sendmsg+0x195/0x1e0 [ 194.819866][T10254] __x64_sys_sendmsg+0xd4/0x160 [ 194.819915][T10254] x64_sys_call+0x22ab/0x2550 [ 194.819943][T10254] do_syscall_64+0x112/0x360 [ 194.819990][T10254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.820074][T10254] RIP: 0033:0x7fe07d8bf559 [ 194.820098][T10254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.820126][T10254] RSP: 002b:00007fe07c317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.820160][T10254] RAX: ffffffffffffffda RBX: 00007fe07db45fa0 RCX: 00007fe07d8bf559 [ 194.820183][T10254] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 194.820270][T10254] RBP: 00007fe07d956b20 R08: 0000000000000000 R09: 0000000000000000 [ 194.820308][T10254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.820324][T10254] R13: 00007fe07db46038 R14: 00007fe07db45fa0 R15: 00007ffe61b16218 [ 194.820360][T10254] [ 194.854576][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2393'. [ 194.879072][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2393'. [ 195.205058][T10243] rxe_eth0 speed is unknown, defaulting to 1000 [ 195.261001][T10264] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2402'. [ 195.261107][T10264] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2402'. [ 195.444858][T10273] netlink: 'syz.8.2405': attribute type 1 has an invalid length. [ 195.466067][T10276] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 195.486433][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2405'. [ 195.523159][T10273] bridge1: entered promiscuous mode [ 195.615535][T10284] FAULT_INJECTION: forcing a failure. [ 195.615535][T10284] name failslab, interval 1, probability 0, space 0, times 0 [ 195.615639][T10284] CPU: 1 UID: 0 PID: 10284 Comm: syz.3.2409 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 195.615789][T10284] Tainted: [W]=WARN [ 195.615804][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 195.615827][T10284] Call Trace: [ 195.615890][T10284] [ 195.615903][T10284] __dump_stack+0x1d/0x30 [ 195.615941][T10284] dump_stack_lvl+0x95/0xd0 [ 195.615973][T10284] dump_stack+0x15/0x1b [ 195.615997][T10284] should_fail_ex+0x259/0x270 [ 195.616104][T10284] ? do_getname+0x2e/0x1c0 [ 195.616128][T10284] should_failslab+0x8c/0xb0 [ 195.616221][T10284] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 195.616354][T10284] ? do_getname+0x2e/0x1c0 [ 195.616412][T10284] do_getname+0x2e/0x1c0 [ 195.616447][T10284] user_path_at+0x28/0x100 [ 195.616633][T10284] __se_sys_mount+0x25b/0x2e0 [ 195.616664][T10284] __x64_sys_mount+0x67/0x80 [ 195.616688][T10284] x64_sys_call+0xc3b/0x2550 [ 195.616731][T10284] do_syscall_64+0x112/0x360 [ 195.616795][T10284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.616824][T10284] RIP: 0033:0x7f6ef772f559 [ 195.616850][T10284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.616969][T10284] RSP: 002b:00007f6ef617f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 195.617008][T10284] RAX: ffffffffffffffda RBX: 00007f6ef79b5fa0 RCX: 00007f6ef772f559 [ 195.617102][T10284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.617123][T10284] RBP: 00007f6ef77c6b20 R08: 0000200000000300 R09: 0000000000000000 [ 195.617147][T10284] R10: 00000000001e4062 R11: 0000000000000246 R12: 0000000000000000 [ 195.617169][T10284] R13: 00007f6ef79b6038 R14: 00007f6ef79b5fa0 R15: 00007fff59002288 [ 195.617194][T10284] [ 195.705302][T10285] loop7: detected capacity change from 0 to 736 [ 196.000850][T10289] FAULT_INJECTION: forcing a failure. [ 196.000850][T10289] name failslab, interval 1, probability 0, space 0, times 0 [ 196.000889][T10289] CPU: 0 UID: 0 PID: 10289 Comm: syz.3.2411 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 196.000975][T10289] Tainted: [W]=WARN [ 196.000987][T10289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 196.001006][T10289] Call Trace: [ 196.001024][T10289] [ 196.001036][T10289] __dump_stack+0x1d/0x30 [ 196.001148][T10289] dump_stack_lvl+0x95/0xd0 [ 196.001259][T10289] dump_stack+0x15/0x1b [ 196.001288][T10289] should_fail_ex+0x259/0x270 [ 196.001326][T10289] ? __nf_conntrack_alloc+0xba/0x2b0 [ 196.001422][T10289] should_failslab+0x8c/0xb0 [ 196.001469][T10289] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 196.001535][T10289] ? __nf_conntrack_alloc+0xba/0x2b0 [ 196.001575][T10289] __nf_conntrack_alloc+0xba/0x2b0 [ 196.001622][T10289] nf_conntrack_alloc+0x38/0x50 [ 196.001660][T10289] ctnetlink_new_conntrack+0x3a5/0x15c0 [ 196.001747][T10289] ? __nla_parse+0x40/0x60 [ 196.001781][T10289] nfnetlink_rcv_msg+0x4e2/0x5b0 [ 196.001877][T10289] netlink_rcv_skb+0x11e/0x220 [ 196.001927][T10289] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 196.001989][T10289] nfnetlink_rcv+0x15f/0x1740 [ 196.002025][T10289] ? trace_event_buffer_commit+0x174/0x590 [ 196.002120][T10289] ? trace_event_raw_event_net_dev_xmit+0x1b1/0x230 [ 196.002168][T10289] ? dev_hard_start_xmit+0x34e/0x380 [ 196.002207][T10289] ? __dev_queue_xmit+0x1361/0x1ec0 [ 196.002237][T10289] ? __dev_queue_xmit+0x151/0x1ec0 [ 196.002318][T10289] ? __netlink_deliver_tap+0x3a7/0x3e0 [ 196.002353][T10289] netlink_unicast+0x665/0x740 [ 196.002401][T10289] netlink_sendmsg+0x5ef/0x740 [ 196.002429][ T9054] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.002434][T10289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.002516][T10289] ____sys_sendmsg+0x54a/0x590 [ 196.002546][T10289] ___sys_sendmsg+0x195/0x1e0 [ 196.002766][T10289] __x64_sys_sendmsg+0xd4/0x160 [ 196.002799][T10289] x64_sys_call+0x22ab/0x2550 [ 196.002871][T10289] do_syscall_64+0x112/0x360 [ 196.002921][T10289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.002947][T10289] RIP: 0033:0x7f6ef772f559 [ 196.002972][T10289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.003006][T10289] RSP: 002b:00007f6ef617f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.003042][T10289] RAX: ffffffffffffffda RBX: 00007f6ef79b5fa0 RCX: 00007f6ef772f559 [ 196.003103][T10289] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 196.003121][T10289] RBP: 00007f6ef77c6b20 R08: 0000000000000000 R09: 0000000000000000 [ 196.003137][T10289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.003153][T10289] R13: 00007f6ef79b6038 R14: 00007f6ef79b5fa0 R15: 00007fff59002288 [ 196.003178][T10289] [ 196.349811][T10293] loop9: detected capacity change from 0 to 256 [ 196.364629][T10293] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.375038][ T4687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.504800][T10295] loop8: detected capacity change from 0 to 512 [ 196.531491][T10295] EXT4-fs: Ignoring removed bh option [ 196.561010][T10295] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 196.989571][T10319] rxe_eth0 speed is unknown, defaulting to 1000 [ 197.028540][T10326] netlink: 'syz.8.2425': attribute type 1 has an invalid length. [ 197.116277][T10326] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.157389][T10330] bridge1: entered promiscuous mode [ 197.258158][T10336] loop6: detected capacity change from 0 to 512 [ 197.265174][T10336] EXT4-fs: Ignoring removed bh option [ 197.273543][T10336] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 197.560295][T10346] FAULT_INJECTION: forcing a failure. [ 197.560295][T10346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.560329][T10346] CPU: 0 UID: 0 PID: 10346 Comm: syz.6.2434 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 197.560362][T10346] Tainted: [W]=WARN [ 197.560407][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 197.560428][T10346] Call Trace: [ 197.560441][T10346] [ 197.560455][T10346] __dump_stack+0x1d/0x30 [ 197.560568][T10346] dump_stack_lvl+0x95/0xd0 [ 197.560594][T10346] dump_stack+0x15/0x1b [ 197.560623][T10346] should_fail_ex+0x259/0x270 [ 197.560697][T10346] should_fail+0xb/0x20 [ 197.560731][T10346] should_fail_usercopy+0x1a/0x20 [ 197.560773][T10346] strncpy_from_user+0x27/0x250 [ 197.560879][T10346] do_getname+0x59/0x1c0 [ 197.560963][T10346] user_path_at+0x28/0x100 [ 197.561004][T10346] __se_sys_mount+0x25b/0x2e0 [ 197.561094][T10346] __x64_sys_mount+0x67/0x80 [ 197.561202][T10346] x64_sys_call+0xc3b/0x2550 [ 197.561232][T10346] do_syscall_64+0x112/0x360 [ 197.561366][T10346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.561400][T10346] RIP: 0033:0x7f47391ff559 [ 197.561426][T10346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.561500][T10346] RSP: 002b:00007f4737c57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 197.561533][T10346] RAX: ffffffffffffffda RBX: 00007f4739485fa0 RCX: 00007f47391ff559 [ 197.561558][T10346] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 197.561652][T10346] RBP: 00007f4739296b20 R08: 0000000000000000 R09: 0000000000000000 [ 197.561675][T10346] R10: 00000000001e4062 R11: 0000000000000246 R12: 0000000000000000 [ 197.561697][T10346] R13: 00007f4739486038 R14: 00007f4739485fa0 R15: 00007fff5ab23b98 [ 197.561721][T10346] [ 197.898169][T10356] loop3: detected capacity change from 0 to 256 [ 197.899298][T10356] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.039364][T10359] loop8: detected capacity change from 0 to 512 [ 198.052663][T10359] EXT4-fs: Ignoring removed bh option [ 198.063713][T10359] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 198.145705][T10365] netlink: 'syz.3.2441': attribute type 1 has an invalid length. [ 198.268442][T10365] 8021q: adding VLAN 0 to HW filter on device bond8 [ 198.299415][T10369] loop7: detected capacity change from 0 to 512 [ 198.300355][T10369] EXT4-fs: Ignoring removed bh option [ 198.320799][T10369] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 198.336861][T10370] bridge6: entered promiscuous mode [ 198.581438][ T131] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 198.637203][T10388] loop3: detected capacity change from 0 to 736 [ 198.705375][T10390] FAULT_INJECTION: forcing a failure. [ 198.705375][T10390] name fail_futex, interval 1, probability 0, space 0, times 0 [ 198.705424][T10390] CPU: 0 UID: 0 PID: 10390 Comm: syz.6.2452 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 198.705521][T10390] Tainted: [W]=WARN [ 198.705533][T10390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 198.705553][T10390] Call Trace: [ 198.705568][T10390] [ 198.705582][T10390] __dump_stack+0x1d/0x30 [ 198.705620][T10390] dump_stack_lvl+0x95/0xd0 [ 198.705674][T10390] dump_stack+0x15/0x1b [ 198.705701][T10390] should_fail_ex+0x259/0x270 [ 198.705744][T10390] should_fail+0xb/0x20 [ 198.705784][T10390] get_futex_key+0x12c/0xc40 [ 198.705844][T10390] ? ring_buffer_unlock_commit+0x3cc/0x450 [ 198.705886][T10390] futex_wait_setup+0x49/0x3e0 [ 198.705996][T10390] __futex_wait+0xb2/0x2a0 [ 198.706044][T10390] ? __pfx_futex_wake_mark+0x10/0x10 [ 198.706091][T10390] futex_wait+0x98/0x1c0 [ 198.706140][T10390] do_futex+0x391/0x460 [ 198.706259][T10390] __se_sys_futex+0x2f6/0x370 [ 198.706317][T10390] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 198.706417][T10390] __x64_sys_futex+0x78/0x90 [ 198.706461][T10390] x64_sys_call+0x22e2/0x2550 [ 198.706568][T10390] do_syscall_64+0x112/0x360 [ 198.706617][T10390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.706652][T10390] RIP: 0033:0x7f47391ff559 [ 198.706676][T10390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.706700][T10390] RSP: 002b:00007f4737c570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 198.706747][T10390] RAX: ffffffffffffffda RBX: 00007f4739485fa8 RCX: 00007f47391ff559 [ 198.706784][T10390] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4739485fa8 [ 198.706801][T10390] RBP: 00007f4739485fa0 R08: 0000000000000000 R09: 0000000000000000 [ 198.706835][T10390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.706857][T10390] R13: 00007f4739486038 R14: 00007fff5ab23ab0 R15: 00007fff5ab23b98 [ 198.706884][T10390] [ 199.171093][T10388] __nla_validate_parse: 16 callbacks suppressed [ 199.171121][T10388] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2451'. [ 199.171151][T10388] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2451'. [ 199.179694][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2453'. [ 199.804411][T10418] loop6: detected capacity change from 0 to 128 [ 199.850482][T10418] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.854740][T10418] ext4 filesystem being mounted at /381/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.902636][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2464'. [ 199.931823][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 199.931843][ T29] audit: type=1326 audit(1793432467.805:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.8.2465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 199.931899][ T29] audit: type=1326 audit(1793432467.805:4456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.8.2465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 199.975910][ T29] audit: type=1326 audit(1793432467.815:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.8.2465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 199.975962][ T29] audit: type=1326 audit(1793432467.815:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.8.2465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 199.976018][ T29] audit: type=1326 audit(1793432467.815:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.8.2465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 199.976064][ T29] audit: type=1326 audit(1793432467.815:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.8.2465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 199.976108][ T29] audit: type=1326 audit(1793432467.815:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.8.2465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 199.976224][ T29] audit: type=1326 audit(1793432467.815:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.8.2465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 199.976260][ T29] audit: type=1326 audit(1793432467.815:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.8.2465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 199.976355][ T29] audit: type=1326 audit(1793432467.815:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.8.2465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe07d8bf559 code=0x7ffc0000 [ 200.210622][T10425] loop8: detected capacity change from 0 to 512 [ 200.327069][T10425] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.327297][T10425] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.522881][T10418] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.723175][T10432] rxe_eth0 speed is unknown, defaulting to 1000 [ 200.848954][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2468'. [ 200.934010][T10438] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2468'. [ 200.934040][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2468'. [ 201.162471][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2468'. [ 201.222677][T10444] FAULT_INJECTION: forcing a failure. [ 201.222677][T10444] name failslab, interval 1, probability 0, space 0, times 0 [ 201.222792][T10444] CPU: 1 UID: 0 PID: 10444 Comm: syz.7.2470 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 201.222842][T10444] Tainted: [W]=WARN [ 201.222856][T10444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 201.222876][T10444] Call Trace: [ 201.222885][T10444] [ 201.222899][T10444] __dump_stack+0x1d/0x30 [ 201.222938][T10444] dump_stack_lvl+0x95/0xd0 [ 201.222970][T10444] dump_stack+0x15/0x1b [ 201.223029][T10444] should_fail_ex+0x259/0x270 [ 201.223072][T10444] ? x509_get_sig_params+0x1cd/0x2c0 [ 201.223151][T10444] should_failslab+0x8c/0xb0 [ 201.223195][T10444] __kmalloc_noprof+0xb6/0x4b0 [ 201.223253][T10444] ? crypto_alloc_tfm_node+0x24f/0x280 [ 201.223283][T10444] ? x509_get_sig_params+0x1cd/0x2c0 [ 201.223310][T10444] x509_get_sig_params+0x1cd/0x2c0 [ 201.223338][T10444] x509_cert_parse+0x2f9/0x450 [ 201.223416][T10444] x509_key_preparse+0x3c/0x420 [ 201.223450][T10444] asymmetric_key_preparse+0x68/0xb0 [ 201.223507][T10444] __key_create_or_update+0x29e/0x820 [ 201.223543][T10444] ? key_task_permission+0x2ac/0x2c0 [ 201.223655][T10444] key_create_or_update+0x42/0x60 [ 201.223776][T10444] __se_sys_add_key+0x2a5/0x360 [ 201.223812][T10444] __x64_sys_add_key+0x67/0x80 [ 201.223832][T10444] x64_sys_call+0x1fa9/0x2550 [ 201.223859][T10444] do_syscall_64+0x112/0x360 [ 201.223954][T10444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.223987][T10444] RIP: 0033:0x7f3b80abf559 [ 201.224007][T10444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.224028][T10444] RSP: 002b:00007f3b7f50f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 201.224052][T10444] RAX: ffffffffffffffda RBX: 00007f3b80d45fa0 RCX: 00007f3b80abf559 [ 201.224112][T10444] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 201.224129][T10444] RBP: 00007f3b80b56b20 R08: ffffffffffffffff R09: 0000000000000000 [ 201.224150][T10444] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 201.224170][T10444] R13: 00007f3b80d46038 R14: 00007f3b80d45fa0 R15: 00007ffdb7c2a078 [ 201.224235][T10444] [ 201.705681][T10456] loop7: detected capacity change from 0 to 128 [ 201.706694][T10456] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 201.730280][T10456] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 202.002008][T10458] loop6: detected capacity change from 0 to 4096 [ 202.063778][T10458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.273949][ T4687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.424506][T10474] loop7: detected capacity change from 0 to 512 [ 202.425515][T10474] EXT4-fs: Ignoring removed orlov option [ 202.425660][T10474] ext4: Unknown parameter 'grpquota2' [ 202.439544][ T5824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.562917][T10477] loop6: detected capacity change from 0 to 736 [ 202.911318][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2486'. [ 202.947192][T10477] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2482'. [ 202.993503][T10488] loop8: detected capacity change from 0 to 128 [ 203.003027][T10488] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 203.030681][T10488] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 203.907278][T10518] loop3: detected capacity change from 0 to 128 [ 203.926365][T10518] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 203.948191][T10518] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 203.953201][T10506] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 203.953235][T10506] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 203.953309][T10506] vhci_hcd vhci_hcd.0: Device attached [ 204.080477][T10506] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(16) [ 204.080522][T10506] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.096199][T10506] vhci_hcd vhci_hcd.0: Device attached [ 204.209621][T10527] __nla_validate_parse: 5 callbacks suppressed [ 204.209645][T10527] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2501'. [ 204.209684][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2501'. [ 204.213465][ T11] usb 15-1: new high-speed USB device number 3 using vhci_hcd [ 204.340477][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2501'. [ 204.490969][T10523] vhci_hcd: connection closed [ 204.491415][ T678] vhci_hcd vhci_hcd.7: stop threads [ 204.491438][ T678] vhci_hcd vhci_hcd.7: release socket [ 204.491689][ T678] vhci_hcd vhci_hcd.7: disconnect device [ 204.491776][T10519] vhci_hcd: connection reset by peer [ 204.492271][ T678] vhci_hcd vhci_hcd.7: stop threads [ 204.492288][ T678] vhci_hcd vhci_hcd.7: release socket [ 204.492381][ T678] vhci_hcd vhci_hcd.7: disconnect device [ 204.855578][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2511'. [ 204.856754][T10553] loop3: detected capacity change from 0 to 128 [ 204.877545][T10553] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.897354][T10553] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 205.293735][T10566] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2519'. [ 205.437519][T10566] rxe_eth0 speed is unknown, defaulting to 1000 [ 205.650222][T10578] loop7: detected capacity change from 0 to 128 [ 205.676897][T10578] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.678975][T10578] ext4 filesystem being mounted at /432/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.819645][T10578] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.877747][T10565] rxe_eth0 speed is unknown, defaulting to 1000 [ 205.894431][T10576] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 205.894467][T10576] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.895266][T10576] vhci_hcd vhci_hcd.0: Device attached [ 206.091775][T10582] vhci_hcd: connection closed [ 206.092389][ T3626] vhci_hcd vhci_hcd.6: stop threads [ 206.092481][ T3626] vhci_hcd vhci_hcd.6: release socket [ 206.092537][ T3626] vhci_hcd vhci_hcd.6: disconnect device [ 206.132640][ T131] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 206.132685][ T131] usb 13-1: enqueue for inactive port 0 [ 206.132719][ T131] usb 13-1: enqueue for inactive port 0 [ 206.132875][ T131] usb 13-1: enqueue for inactive port 0 [ 206.200764][ T131] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 206.254507][T10587] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2526'. [ 206.428729][T10589] loop3: detected capacity change from 0 to 128 [ 206.429794][T10589] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 206.457204][T10589] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 206.960882][T10598] FAULT_INJECTION: forcing a failure. [ 206.960882][T10598] name failslab, interval 1, probability 0, space 0, times 0 [ 206.960925][T10598] CPU: 1 UID: 0 PID: 10598 Comm: syz.3.2530 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 206.961046][T10598] Tainted: [W]=WARN [ 206.961060][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 206.961082][T10598] Call Trace: [ 206.961145][T10598] [ 206.961156][T10598] __dump_stack+0x1d/0x30 [ 206.961184][T10598] dump_stack_lvl+0x95/0xd0 [ 206.961215][T10598] dump_stack+0x15/0x1b [ 206.961262][T10598] should_fail_ex+0x259/0x270 [ 206.961365][T10598] ? x509_get_sig_params+0x1cd/0x2c0 [ 206.961396][T10598] should_failslab+0x8c/0xb0 [ 206.961520][T10598] __kmalloc_noprof+0xb6/0x4b0 [ 206.961562][T10598] ? crypto_alloc_tfm_node+0x24f/0x280 [ 206.961644][T10598] ? x509_get_sig_params+0x1cd/0x2c0 [ 206.961722][T10598] x509_get_sig_params+0x1cd/0x2c0 [ 206.961813][T10598] x509_cert_parse+0x2f9/0x450 [ 206.961909][T10598] x509_key_preparse+0x3c/0x420 [ 206.961932][T10598] ? selinux_key_permission+0x161/0x190 [ 206.962006][T10598] asymmetric_key_preparse+0x68/0xb0 [ 206.962097][T10598] __key_create_or_update+0x29e/0x820 [ 206.962131][T10598] ? key_task_permission+0x2ac/0x2c0 [ 206.962177][T10598] key_create_or_update+0x42/0x60 [ 206.962224][T10598] __se_sys_add_key+0x2a5/0x360 [ 206.962348][T10598] __x64_sys_add_key+0x67/0x80 [ 206.962395][T10598] x64_sys_call+0x1fa9/0x2550 [ 206.962497][T10598] do_syscall_64+0x112/0x360 [ 206.962533][T10598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.962585][T10598] RIP: 0033:0x7f6ef772f559 [ 206.962611][T10598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.962647][T10598] RSP: 002b:00007f6ef617f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 206.962781][T10598] RAX: ffffffffffffffda RBX: 00007f6ef79b5fa0 RCX: 00007f6ef772f559 [ 206.962799][T10598] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 206.962815][T10598] RBP: 00007f6ef77c6b20 R08: ffffffffffffffff R09: 0000000000000000 [ 206.962836][T10598] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 206.962858][T10598] R13: 00007f6ef79b6038 R14: 00007f6ef79b5fa0 R15: 00007fff59002288 [ 206.962935][T10598] [ 207.500492][T10606] rxe_eth0 speed is unknown, defaulting to 1000 [ 207.644592][T10608] netlink: 'syz.8.2533': attribute type 178 has an invalid length. [ 207.682871][T10614] loop6: detected capacity change from 0 to 512 [ 207.696517][T10614] EXT4-fs: Ignoring removed bh option [ 207.697254][T10614] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 207.871974][T10616] loop7: detected capacity change from 0 to 128 [ 207.885757][T10616] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 207.886448][T10616] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 208.038363][T10620] loop3: detected capacity change from 0 to 128 [ 208.042919][T10620] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.065059][T10620] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 208.302572][T10623] loop6: detected capacity change from 0 to 512 [ 208.304162][T10624] loop7: detected capacity change from 0 to 512 [ 208.326207][T10623] EXT4-fs: Ignoring removed bh option [ 208.326837][T10624] EXT4-fs: Ignoring removed orlov option [ 208.326877][T10624] ext4: Unknown parameter 'grpquota2' [ 208.348915][T10623] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 208.601733][T10631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 208.700496][T10632] loop9: detected capacity change from 0 to 736 [ 209.036622][T10643] netlink: 'syz.6.2549': attribute type 1 has an invalid length. [ 209.128500][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2549'. [ 209.218280][T10643] bridge7: entered promiscuous mode [ 209.253170][T10632] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2546'. [ 209.253237][T10632] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2546'. [ 209.287807][ T11] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 209.330105][T10639] loop8: detected capacity change from 0 to 4096 [ 209.409473][T10639] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.560959][ T5824] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.629728][T10649] FAULT_INJECTION: forcing a failure. [ 209.629728][T10649] name failslab, interval 1, probability 0, space 0, times 0 [ 209.629761][T10649] CPU: 1 UID: 0 PID: 10649 Comm: syz.6.2550 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 209.629885][T10649] Tainted: [W]=WARN [ 209.629895][T10649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 209.629914][T10649] Call Trace: [ 209.629928][T10649] [ 209.629943][T10649] __dump_stack+0x1d/0x30 [ 209.629982][T10649] dump_stack_lvl+0x95/0xd0 [ 209.630036][T10649] dump_stack+0x15/0x1b [ 209.630070][T10649] should_fail_ex+0x259/0x270 [ 209.630109][T10649] ? x509_get_sig_params+0x1cd/0x2c0 [ 209.630194][T10649] should_failslab+0x8c/0xb0 [ 209.630241][T10649] __kmalloc_noprof+0xb6/0x4b0 [ 209.630312][T10649] ? crypto_alloc_tfm_node+0x24f/0x280 [ 209.630343][T10649] ? x509_get_sig_params+0x1cd/0x2c0 [ 209.630444][T10649] x509_get_sig_params+0x1cd/0x2c0 [ 209.630479][T10649] x509_cert_parse+0x2f9/0x450 [ 209.630558][T10649] x509_key_preparse+0x3c/0x420 [ 209.630581][T10649] ? selinux_key_permission+0x161/0x190 [ 209.630695][T10649] asymmetric_key_preparse+0x68/0xb0 [ 209.630808][T10649] __key_create_or_update+0x29e/0x820 [ 209.630911][T10649] ? key_task_permission+0x2ac/0x2c0 [ 209.630947][T10649] key_create_or_update+0x42/0x60 [ 209.630987][T10649] __se_sys_add_key+0x2a5/0x360 [ 209.631089][T10649] __x64_sys_add_key+0x67/0x80 [ 209.631156][T10649] x64_sys_call+0x1fa9/0x2550 [ 209.631193][T10649] do_syscall_64+0x112/0x360 [ 209.631271][T10649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.631295][T10649] RIP: 0033:0x7f47391ff559 [ 209.631318][T10649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.631402][T10649] RSP: 002b:00007f4737c57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 209.631437][T10649] RAX: ffffffffffffffda RBX: 00007f4739485fa0 RCX: 00007f47391ff559 [ 209.631460][T10649] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 209.631477][T10649] RBP: 00007f4739296b20 R08: ffffffffffffffff R09: 0000000000000000 [ 209.631493][T10649] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 209.631534][T10649] R13: 00007f4739486038 R14: 00007f4739485fa0 R15: 00007fff5ab23b98 [ 209.631567][T10649] [ 210.282538][T10663] FAULT_INJECTION: forcing a failure. [ 210.282538][T10663] name failslab, interval 1, probability 0, space 0, times 0 [ 210.282585][T10663] CPU: 1 UID: 0 PID: 10663 Comm: syz.6.2556 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 210.282706][T10663] Tainted: [W]=WARN [ 210.282716][T10663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 210.282732][T10663] Call Trace: [ 210.282741][T10663] [ 210.282751][T10663] __dump_stack+0x1d/0x30 [ 210.282783][T10663] dump_stack_lvl+0x95/0xd0 [ 210.282833][T10663] dump_stack+0x15/0x1b [ 210.282864][T10663] should_fail_ex+0x259/0x270 [ 210.282899][T10663] ? x509_get_sig_params+0x1cd/0x2c0 [ 210.282999][T10663] should_failslab+0x8c/0xb0 [ 210.283034][T10663] __kmalloc_noprof+0xb6/0x4b0 [ 210.283196][T10663] ? crypto_alloc_tfm_node+0x24f/0x280 [ 210.283220][T10663] ? x509_get_sig_params+0x1cd/0x2c0 [ 210.283324][T10663] x509_get_sig_params+0x1cd/0x2c0 [ 210.283358][T10663] x509_cert_parse+0x2f9/0x450 [ 210.283463][T10663] x509_key_preparse+0x3c/0x420 [ 210.283490][T10663] ? selinux_key_permission+0x161/0x190 [ 210.283570][T10663] asymmetric_key_preparse+0x68/0xb0 [ 210.283614][T10663] __key_create_or_update+0x29e/0x820 [ 210.283699][T10663] ? key_task_permission+0x2ac/0x2c0 [ 210.283742][T10663] key_create_or_update+0x42/0x60 [ 210.283862][T10663] __se_sys_add_key+0x2a5/0x360 [ 210.283921][T10663] __x64_sys_add_key+0x67/0x80 [ 210.283951][T10663] x64_sys_call+0x1fa9/0x2550 [ 210.283989][T10663] do_syscall_64+0x112/0x360 [ 210.284108][T10663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.284139][T10663] RIP: 0033:0x7f47391ff559 [ 210.284163][T10663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.284186][T10663] RSP: 002b:00007f4737c57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 210.284217][T10663] RAX: ffffffffffffffda RBX: 00007f4739485fa0 RCX: 00007f47391ff559 [ 210.284271][T10663] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 210.284288][T10663] RBP: 00007f4739296b20 R08: ffffffffffffffff R09: 0000000000000000 [ 210.284308][T10663] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 210.284343][T10663] R13: 00007f4739486038 R14: 00007f4739485fa0 R15: 00007fff5ab23b98 [ 210.284372][T10663] [ 210.501628][T10662] loop9: detected capacity change from 0 to 512 [ 210.536720][T10662] EXT4-fs: Ignoring removed bh option [ 210.552387][T10662] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 210.716293][T10672] netlink: 'syz.6.2560': attribute type 1 has an invalid length. [ 210.743328][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2560'. [ 210.766607][T10669] netlink: 'syz.3.2558': attribute type 178 has an invalid length. [ 210.809315][T10672] bridge7: entered promiscuous mode [ 210.906679][T10667] rxe_eth0 speed is unknown, defaulting to 1000 [ 211.087595][T10683] loop6: detected capacity change from 0 to 128 [ 211.088668][T10683] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 211.090748][T10683] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 211.232774][T10678] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(12) [ 211.232801][T10678] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 211.233438][T10678] vhci_hcd vhci_hcd.0: Device attached [ 211.500654][T10687] vhci_hcd: connection closed [ 211.503096][ T65] vhci_hcd vhci_hcd.8: stop threads [ 211.503128][ T65] vhci_hcd vhci_hcd.8: release socket [ 211.503208][ T65] vhci_hcd vhci_hcd.8: disconnect device [ 211.524833][ T3397] usb 17-1: new high-speed USB device number 3 using vhci_hcd [ 211.525214][ T3397] usb 17-1: enqueue for inactive port 0 [ 211.525299][ T3397] usb 17-1: enqueue for inactive port 0 [ 211.525391][ T3397] usb 17-1: enqueue for inactive port 0 [ 211.584622][ T3397] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 211.748063][T10699] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 211.869886][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 211.869905][ T29] audit: type=1326 audit(1793432479.762:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.6.2571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 211.870002][ T29] audit: type=1326 audit(1793432479.762:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.6.2571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 211.870742][ T29] audit: type=1326 audit(1793432479.762:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.6.2571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 211.870791][ T29] audit: type=1326 audit(1793432479.762:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.6.2571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 211.870844][ T29] audit: type=1326 audit(1793432479.762:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.6.2571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 211.872703][ T29] audit: type=1326 audit(1793432479.762:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.6.2571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 211.872759][ T29] audit: type=1326 audit(1793432479.762:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.6.2571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 211.872808][ T29] audit: type=1326 audit(1793432479.762:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.6.2571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 212.025735][ T29] audit: type=1326 audit(1793432479.902:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.6.2571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 212.031316][ T29] audit: type=1326 audit(1793432479.902:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.6.2571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 212.157301][T10702] loop6: detected capacity change from 0 to 512 [ 212.201253][T10702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.201405][T10702] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.321739][T10711] EXT4-fs: Ignoring removed bh option [ 212.330612][T10711] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 212.403129][T10714] netlink: 'syz.3.2575': attribute type 1 has an invalid length. [ 212.446366][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2575'. [ 212.504467][T10714] bridge6: entered promiscuous mode [ 212.550874][T10720] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 212.556722][T10720] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 212.800856][T10724] set_capacity_and_notify: 2 callbacks suppressed [ 212.800879][T10724] loop7: detected capacity change from 0 to 512 [ 212.837721][T10715] rxe_eth0 speed is unknown, defaulting to 1000 [ 212.883220][T10724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.883401][T10724] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.394296][T10737] rxe_eth0 speed is unknown, defaulting to 1000 [ 213.738999][T10745] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(12) [ 213.739028][T10745] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 213.739159][T10745] vhci_hcd vhci_hcd.0: Device attached [ 213.993170][ T3422] usb 17-1: new high-speed USB device number 4 using vhci_hcd [ 214.054434][T10747] vhci_hcd: connection reset by peer [ 214.056212][ T12] vhci_hcd vhci_hcd.8: stop threads [ 214.056283][ T12] vhci_hcd vhci_hcd.8: release socket [ 214.056710][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 214.249156][ T4687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.277884][T10750] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2587'. [ 214.383459][T10753] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 214.518434][T10758] netlink: 'syz.9.2591': attribute type 1 has an invalid length. [ 214.531084][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2591'. [ 214.563242][T10758] bridge3: entered promiscuous mode [ 214.624783][T10756] loop3: detected capacity change from 0 to 128 [ 214.734768][T10756] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.735248][T10756] ext4 filesystem being mounted at /583/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 214.939915][T10756] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.044790][T10772] loop8: detected capacity change from 0 to 128 [ 215.045895][T10772] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.068657][T10772] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.251270][T10779] loop8: detected capacity change from 0 to 512 [ 215.251924][T10779] EXT4-fs: Ignoring removed bh option [ 215.267496][T10779] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 215.276104][ T4738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.386353][T10781] netlink: 'syz.6.2604': attribute type 1 has an invalid length. [ 215.441883][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2604'. [ 215.542290][T10788] netlink: 'syz.3.2603': attribute type 1 has an invalid length. [ 215.572650][T10782] bridge7: entered promiscuous mode [ 215.638709][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2603'. [ 215.745227][T10788] bridge6: entered promiscuous mode [ 216.197996][T10812] loop6: detected capacity change from 0 to 512 [ 216.208073][T10806] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 216.208108][T10806] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.208202][T10806] vhci_hcd vhci_hcd.0: Device attached [ 216.236259][T10812] EXT4-fs: Ignoring removed bh option [ 216.244526][T10812] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 216.438769][T10820] netlink: 'syz.7.2618': attribute type 1 has an invalid length. [ 216.444907][T10814] vhci_hcd: connection closed [ 216.446219][ T65] vhci_hcd vhci_hcd.9: stop threads [ 216.446248][ T65] vhci_hcd vhci_hcd.9: release socket [ 216.446451][ T65] vhci_hcd vhci_hcd.9: disconnect device [ 216.447286][ T9] usb 19-1: new high-speed USB device number 3 using vhci_hcd [ 216.447347][ T9] usb 19-1: enqueue for inactive port 0 [ 216.447379][ T9] usb 19-1: enqueue for inactive port 0 [ 216.447417][ T9] usb 19-1: enqueue for inactive port 0 [ 216.503334][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2618'. [ 216.517028][ T9] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 216.561606][T10820] bridge5: entered promiscuous mode [ 216.603823][T10825] netlink: 'syz.6.2620': attribute type 12 has an invalid length. [ 216.604130][T10832] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2621'. [ 216.719712][T10832] rxe_eth0 speed is unknown, defaulting to 1000 [ 216.802288][T10835] loop6: detected capacity change from 0 to 512 [ 216.858706][T10835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.858956][T10835] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.892735][ T29] kauditd_printk_skb: 723 callbacks suppressed [ 216.892821][ T29] audit: type=1326 audit(1793432484.798:5534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10834 comm="syz.6.2622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f47391bfd8e code=0x7ffc0000 [ 216.893139][ T29] audit: type=1326 audit(1793432484.798:5535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10834 comm="syz.6.2622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 216.952871][ T29] audit: type=1326 audit(1793432484.808:5536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10834 comm="syz.6.2622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 216.953011][ T29] audit: type=1326 audit(1793432484.828:5537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10834 comm="syz.6.2622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 217.008575][ T29] audit: type=1326 audit(1793432484.888:5538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10834 comm="syz.6.2622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 217.008658][ T29] audit: type=1326 audit(1793432484.888:5539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10834 comm="syz.6.2622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f47391ff2c2 code=0x7ffc0000 [ 217.008717][ T29] audit: type=1326 audit(1793432484.888:5540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10834 comm="syz.6.2622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f47391ff357 code=0x7ffc0000 [ 217.008818][ T29] audit: type=1326 audit(1793432484.888:5541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10834 comm="syz.6.2622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f47391bc251 code=0x7ffc0000 [ 217.008865][ T29] audit: type=1326 audit(1793432484.888:5542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10834 comm="syz.6.2622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f4739200349 code=0x7ffc0000 [ 217.008989][ T29] audit: type=1326 audit(1793432484.888:5543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10834 comm="syz.6.2622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f47391bc2bb code=0x7ffc0000 [ 217.199958][T10849] loop7: detected capacity change from 0 to 736 [ 217.337632][T10851] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2627'. [ 217.410277][T10853] FAULT_INJECTION: forcing a failure. [ 217.410277][T10853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.410328][T10853] CPU: 1 UID: 0 PID: 10853 Comm: syz.9.2628 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 217.410372][T10853] Tainted: [W]=WARN [ 217.410386][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 217.410466][T10853] Call Trace: [ 217.410478][T10853] [ 217.410492][T10853] __dump_stack+0x1d/0x30 [ 217.410558][T10853] dump_stack_lvl+0x95/0xd0 [ 217.410737][T10853] dump_stack+0x15/0x1b [ 217.410762][T10853] should_fail_ex+0x259/0x270 [ 217.410820][T10853] should_fail+0xb/0x20 [ 217.410857][T10853] should_fail_usercopy+0x1a/0x20 [ 217.410938][T10853] _copy_from_user+0x1c/0xb0 [ 217.410981][T10853] map_update_elem+0x42e/0x710 [ 217.411073][T10853] __sys_bpf+0x7f8/0xc50 [ 217.411116][T10853] __x64_sys_bpf+0x69/0x80 [ 217.411166][T10853] x64_sys_call+0xf26/0x2550 [ 217.411206][T10853] do_syscall_64+0x112/0x360 [ 217.411283][T10853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.411316][T10853] RIP: 0033:0x7f5a0efbf559 [ 217.411334][T10853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.411363][T10853] RSP: 002b:00007f5a0da17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.411398][T10853] RAX: ffffffffffffffda RBX: 00007f5a0f245fa0 RCX: 00007f5a0efbf559 [ 217.411448][T10853] RDX: 0000000000000020 RSI: 0000200000000600 RDI: 0000000000000002 [ 217.411465][T10853] RBP: 00007f5a0f056b20 R08: 0000000000000000 R09: 0000000000000000 [ 217.411480][T10853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.411494][T10853] R13: 00007f5a0f246038 R14: 00007f5a0f245fa0 R15: 00007fff41c23118 [ 217.411521][T10853] [ 217.623702][T10848] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2626'. [ 217.623784][T10848] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2626'. [ 217.764735][T10846] rxe_eth0 speed is unknown, defaulting to 1000 [ 218.053434][T10870] netlink: 'syz.8.2633': attribute type 1 has an invalid length. [ 218.092705][T10871] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 218.153274][T10870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.321885][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2635'. [ 218.774146][T10904] loop9: detected capacity change from 0 to 512 [ 218.820950][T10904] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.828526][T10904] ext4 filesystem being mounted at /97/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.912893][ T4687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.095640][ T9054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.124103][ T3422] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 219.150925][T10913] rxe_eth0 speed is unknown, defaulting to 1000 [ 219.273117][T10925] loop9: detected capacity change from 0 to 128 [ 219.317132][T10925] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.333684][T10925] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 219.506783][ T9054] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.631369][T10932] __nla_validate_parse: 4 callbacks suppressed [ 219.631460][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2653'. [ 219.671076][T10932] bridge3: entered promiscuous mode [ 219.868569][T10945] loop6: detected capacity change from 0 to 512 [ 221.261054][T10964] tmpfs: Bad value for 'mpol' [ 221.543825][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2667'. [ 221.581875][T10972] bridge3: entered promiscuous mode [ 221.656367][T10958] rxe_eth0 speed is unknown, defaulting to 1000 [ 222.050644][ T3300] syz_tun (unregistering): left allmulticast mode [ 222.124446][T10987] loop9: detected capacity change from 0 to 128 [ 222.128560][T10987] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 222.137546][T10987] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 222.312367][T10958] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.312410][T10958] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.315971][T10958] bridge_slave_0: entered allmulticast mode [ 222.353710][T10958] bridge_slave_0: entered promiscuous mode [ 222.389115][ T32] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.394786][T11000] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2674'. [ 222.411822][T10958] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.411965][T10958] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.418187][T10958] bridge_slave_1: entered allmulticast mode [ 222.445026][T10958] bridge_slave_1: entered promiscuous mode [ 222.555968][T10958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.572346][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2677'. [ 222.592350][T10958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.620163][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 222.620216][ T29] audit: type=1400 audit(1793432490.526:5837): avc: denied { setopt } for pid=11002 comm="syz.9.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.650011][ T29] audit: type=1400 audit(1793432490.546:5838): avc: denied { getopt } for pid=11002 comm="syz.9.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.735001][T10958] team0: Port device team_slave_0 added [ 222.736928][T11000] rxe_eth0 speed is unknown, defaulting to 1000 [ 222.761682][T10958] team0: Port device team_slave_1 added [ 222.765747][T11007] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2677'. [ 222.765769][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2677'. [ 222.821376][T11011] loop9: detected capacity change from 0 to 1024 [ 222.824244][T11011] EXT4-fs: Ignoring removed bh option [ 222.902018][T11011] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.922023][T10958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.922040][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.922090][T10958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.925633][T10958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.925655][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.961935][T10958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.259900][T11019] loop7: detected capacity change from 0 to 128 [ 223.290042][T11019] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.290458][T11019] ext4 filesystem being mounted at /456/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 223.408829][ T9054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.415352][ T32] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.542582][T10958] hsr_slave_0: entered promiscuous mode [ 223.544809][T10958] hsr_slave_1: entered promiscuous mode [ 223.546072][T10958] debugfs: 'hsr0' already exists in 'hsr' [ 223.546090][T10958] Cannot create hsr debugfs directory [ 223.619855][ T32] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.719126][T11028] loop6: detected capacity change from 0 to 128 [ 223.721855][T11028] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 223.726866][T11018] rxe_eth0 speed is unknown, defaulting to 1000 [ 223.739905][T11028] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 223.810190][ T32] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.115031][T11019] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.182775][T11041] loop6: detected capacity change from 0 to 736 [ 224.274234][ T32] bridge_slave_1: left allmulticast mode [ 224.274275][ T32] bridge_slave_1: left promiscuous mode [ 224.274526][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.314551][ T32] bridge_slave_0: left allmulticast mode [ 224.314575][ T32] bridge_slave_0: left promiscuous mode [ 224.314843][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.341380][T11046] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2689'. [ 224.405878][ T32] batman_adv: batadv0: Interface deactivated: gretap1 [ 224.452292][T11054] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2689'. [ 224.452318][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2689'. [ 224.543378][ T32] batman_adv: batadv0: Removing interface: gretap1 [ 224.622377][ T32] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 224.664489][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.684112][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.693979][ T32] bond0 (unregistering): Released all slaves [ 224.701068][ T32] bond1 (unregistering): Released all slaves [ 224.715628][ T32] bond2 (unregistering): Released all slaves [ 224.726650][ T32] bond3 (unregistering): Released all slaves [ 224.731654][ T32] bond4 (unregistering): Released all slaves [ 224.741804][ T32] bond5 (unregistering): Released all slaves [ 224.757763][ T32] bond6 (unregistering): Released all slaves [ 224.763162][ T32] bond7 (unregistering): Released all slaves [ 224.773913][ T32] bond8 (unregistering): Released all slaves [ 224.803445][T11041] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2687'. [ 224.803516][T11041] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2687'. [ 224.902836][T11069] loop8: detected capacity change from 0 to 512 [ 224.914831][T11069] EXT4-fs: dax option not supported [ 225.064607][T11072] loop8: detected capacity change from 0 to 512 [ 225.093082][ T32] hsr_slave_0: left promiscuous mode [ 225.104693][ T32] hsr_slave_1: left promiscuous mode [ 225.112448][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2694'. [ 225.114702][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.114739][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.143509][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.143526][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.196640][ T32] veth1_macvtap: left promiscuous mode [ 225.196708][ T32] veth0_macvtap: left promiscuous mode [ 225.196972][ T32] veth1_vlan: left promiscuous mode [ 225.197014][ T32] veth0_vlan: left promiscuous mode [ 225.206715][T11082] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2698'. [ 225.255852][T11083] FAULT_INJECTION: forcing a failure. [ 225.255852][T11083] name failslab, interval 1, probability 0, space 0, times 0 [ 225.255897][T11083] CPU: 1 UID: 0 PID: 11083 Comm: syz.9.2697 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 225.255967][T11083] Tainted: [W]=WARN [ 225.255982][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 225.256002][T11083] Call Trace: [ 225.256011][T11083] [ 225.256021][T11083] __dump_stack+0x1d/0x30 [ 225.256116][T11083] dump_stack_lvl+0x95/0xd0 [ 225.256148][T11083] dump_stack+0x15/0x1b [ 225.256174][T11083] should_fail_ex+0x259/0x270 [ 225.256337][T11083] ? hugetlb_cgroup_css_alloc+0x3e/0x5b0 [ 225.256377][T11083] should_failslab+0x8c/0xb0 [ 225.256533][T11083] __kmalloc_noprof+0xb6/0x4b0 [ 225.256610][T11083] ? hugetlb_cgroup_css_alloc+0x3e/0x5b0 [ 225.256651][T11083] hugetlb_cgroup_css_alloc+0x3e/0x5b0 [ 225.256718][T11083] ? css_populate_dir+0x1e8/0x230 [ 225.256762][T11083] cgroup_apply_control_enable+0x1f9/0x8b0 [ 225.256827][T11083] cgroup_mkdir+0x1104/0x11b0 [ 225.256903][T11083] ? __pfx_cgroup_mkdir+0x10/0x10 [ 225.256947][T11083] kernfs_iop_mkdir+0x11e/0x1c0 [ 225.256997][T11083] vfs_mkdir+0x29d/0x3e0 [ 225.257049][T11083] filename_mkdirat+0x138/0x300 [ 225.257188][T11083] __se_sys_mkdirat+0x32/0xf0 [ 225.257240][T11083] __x64_sys_mkdirat+0x43/0x50 [ 225.257355][T11083] x64_sys_call+0x368/0x2550 [ 225.257393][T11083] do_syscall_64+0x112/0x360 [ 225.257438][T11083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.257518][T11083] RIP: 0033:0x7f5a0efbf559 [ 225.257545][T11083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.257578][T11083] RSP: 002b:00007f5a0da17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 225.257611][T11083] RAX: ffffffffffffffda RBX: 00007f5a0f245fa0 RCX: 00007f5a0efbf559 [ 225.257632][T11083] RDX: 00000000000001ff RSI: 0000200000000880 RDI: ffffffffffffff9c [ 225.257697][T11083] RBP: 00007f5a0f056b20 R08: 0000000000000000 R09: 0000000000000000 [ 225.257715][T11083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.257735][T11083] R13: 00007f5a0f246038 R14: 00007f5a0f245fa0 R15: 00007fff41c23118 [ 225.257769][T11083] [ 225.630248][ T32] team0 (unregistering): Port device team_slave_1 removed [ 225.657612][ T32] team0 (unregistering): Port device team_slave_0 removed [ 225.660580][ T29] audit: type=1400 audit(1793432493.570:5839): avc: denied { write } for pid=11089 comm="syz.9.2700" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 225.841378][T11076] bridge7: entered promiscuous mode [ 225.863397][T11092] FAULT_INJECTION: forcing a failure. [ 225.863397][T11092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.863460][T11092] CPU: 1 UID: 0 PID: 11092 Comm: syz.9.2701 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 225.863497][T11092] Tainted: [W]=WARN [ 225.863566][T11092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 225.863588][T11092] Call Trace: [ 225.863600][T11092] [ 225.863612][T11092] __dump_stack+0x1d/0x30 [ 225.863639][T11092] dump_stack_lvl+0x95/0xd0 [ 225.863742][T11092] dump_stack+0x15/0x1b [ 225.863766][T11092] should_fail_ex+0x259/0x270 [ 225.863827][T11092] should_fail+0xb/0x20 [ 225.863883][T11092] should_fail_usercopy+0x1a/0x20 [ 225.863928][T11092] _copy_from_user+0x1c/0xb0 [ 225.864013][T11092] map_update_elem+0x42e/0x710 [ 225.864052][T11092] __sys_bpf+0x7f8/0xc50 [ 225.864098][T11092] __x64_sys_bpf+0x69/0x80 [ 225.864198][T11092] x64_sys_call+0xf26/0x2550 [ 225.864236][T11092] do_syscall_64+0x112/0x360 [ 225.864298][T11092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.864327][T11092] RIP: 0033:0x7f5a0efbf559 [ 225.864385][T11092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.864413][T11092] RSP: 002b:00007f5a0da17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.864437][T11092] RAX: ffffffffffffffda RBX: 00007f5a0f245fa0 RCX: 00007f5a0efbf559 [ 225.864514][T11092] RDX: 0000000000000020 RSI: 0000200000000600 RDI: 0000000000000002 [ 225.864531][T11092] RBP: 00007f5a0f056b20 R08: 0000000000000000 R09: 0000000000000000 [ 225.864552][T11092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.864573][T11092] R13: 00007f5a0f246038 R14: 00007f5a0f245fa0 R15: 00007fff41c23118 [ 225.864602][T11092] [ 225.977634][T11084] syz.8.2695: attempt to access beyond end of device [ 225.977634][T11084] loop8: rw=2049, sector=560, nr_sectors = 32 limit=512 [ 225.978332][T11084] syz.8.2695: attempt to access beyond end of device [ 225.978332][T11084] loop8: rw=2049, sector=624, nr_sectors = 32 limit=512 [ 225.995167][T11084] syz.8.2695: attempt to access beyond end of device [ 225.995167][T11084] loop8: rw=2049, sector=688, nr_sectors = 32 limit=512 [ 226.007652][T11084] syz.8.2695: attempt to access beyond end of device [ 226.007652][T11084] loop8: rw=2049, sector=752, nr_sectors = 32 limit=512 [ 226.008071][T11084] syz.8.2695: attempt to access beyond end of device [ 226.008071][T11084] loop8: rw=2049, sector=816, nr_sectors = 32 limit=512 [ 226.008507][T11084] syz.8.2695: attempt to access beyond end of device [ 226.008507][T11084] loop8: rw=2049, sector=880, nr_sectors = 32 limit=512 [ 226.026129][T11084] syz.8.2695: attempt to access beyond end of device [ 226.026129][T11084] loop8: rw=2049, sector=944, nr_sectors = 32 limit=512 [ 226.026542][T11084] syz.8.2695: attempt to access beyond end of device [ 226.026542][T11084] loop8: rw=2049, sector=1008, nr_sectors = 32 limit=512 [ 226.045233][T11084] syz.8.2695: attempt to access beyond end of device [ 226.045233][T11084] loop8: rw=2049, sector=1072, nr_sectors = 32 limit=512 [ 226.046007][T11084] syz.8.2695: attempt to access beyond end of device [ 226.046007][T11084] loop8: rw=2049, sector=1136, nr_sectors = 32 limit=512 [ 226.195764][T11082] rxe_eth0 speed is unknown, defaulting to 1000 [ 226.504411][T10958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.529260][T10958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.541285][T10958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.570605][T10958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.578422][T10958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.623234][T10958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.632026][T10958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.685757][T10958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.693625][ T29] audit: type=1400 audit(1793432494.601:5840): avc: denied { write } for pid=11095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.749471][T11121] ================================================================== [ 226.749504][T11121] BUG: KCSAN: data-race in __set_task_comm / strlen [ 226.749557][T11121] [ 226.749567][T11121] read to 0xffff8881026fbb9b of 1 bytes by task 10958 on cpu 1: [ 226.749591][T11121] strlen+0x19/0x40 [ 226.749609][T11121] trace_event_raw_event_sched_stat_runtime+0x5a/0x150 [ 226.749643][T11121] update_se+0x14f/0x3b0 [ 226.749672][T11121] update_curr+0x1e/0x210 [ 226.749717][T11121] enqueue_task_fair+0x77/0x850 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 226.749739][T11121] ttwu_do_activate+0xa7/0x230 [ 226.749765][T11121] try_to_wake_up+0x3f1/0x660 [ 226.749791][T11121] __kthread_create_on_node+0x1ad/0x240 [ 226.749820][T11121] kthread_create_on_node+0x89/0xc0 [ 226.749853][T11121] netif_napi_add_weight_locked+0x3e0/0x570 [ 226.749890][T11121] wg_peer_create+0x2f9/0x430 [ 226.749928][T11121] wg_set_device_doit+0x9f1/0x1300 [ 226.749954][T11121] genl_family_rcv_msg_doit+0x187/0x1f0 [ 226.749991][T11121] genl_rcv_msg+0x42f/0x470 [ 226.750025][T11121] netlink_rcv_skb+0x11e/0x220 [ 226.750057][T11121] genl_rcv+0x28/0x40 [ 226.750086][T11121] netlink_unicast+0x665/0x740 [ 226.750124][T11121] netlink_sendmsg+0x5ef/0x740 [ 226.750143][T11121] __sys_sendto+0x429/0x480 [ 226.750172][T11121] __x64_sys_sendto+0x76/0x90 [ 226.750209][T11121] x64_sys_call+0x200c/0x2550 [ 226.750235][T11121] do_syscall_64+0x112/0x360 [ 226.750264][T11121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.750293][T11121] [ 226.750303][T11121] write to 0xffff8881026fbb9b of 13 bytes by task 11121 on cpu 0: [ 226.750325][T11121] __set_task_comm+0x92/0x180 [ 226.750352][T11121] begin_new_exec+0xec6/0x1200 [ 226.750380][T11121] load_elf_binary+0x5e2/0x18f0 [ 226.750403][T11121] bprm_execve+0x46b/0xa50 [ 226.750431][T11121] do_execveat_common+0x7b5/0x8b0 [ 226.750472][T11121] __x64_sys_execve+0x5f/0x80 [ 226.750522][T11121] x64_sys_call+0x1cd2/0x2550 [ 226.750550][T11121] do_syscall_64+0x112/0x360 [ 226.750580][T11121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.750620][T11121] [ 226.750628][T11121] Reported by Kernel Concurrency Sanitizer on: [ 226.750645][T11121] CPU: 0 UID: 0 PID: 11121 Comm: cmppcd-run-hook Tainted: G W syzkaller #0 PREEMPT(lazy) [ 226.750691][T11121] Tainted: [W]=WARN [ 226.750704][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 226.750724][T11121] ================================================================== [ 227.182277][ T29] audit: type=1326 audit(1793432495.092:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.6.2708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 227.182334][ T29] audit: type=1326 audit(1793432495.092:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.6.2708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 227.212235][ T29] audit: type=1326 audit(1793432495.132:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.6.2708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 227.212439][ T29] audit: type=1326 audit(1793432495.132:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.6.2708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 227.231398][ T29] audit: type=1326 audit(1793432495.132:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.6.2708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 227.231510][ T29] audit: type=1326 audit(1793432495.132:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11126 comm="syz.6.2708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47391ff559 code=0x7ffc0000 [ 227.364484][T11127] loop6: detected capacity change from 0 to 512 [ 227.457390][T11127] EXT4-fs warning (device loop6): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop6. [ 227.898219][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 227.898270][ T29] audit: type=1400 audit(1793432495.813:5861): avc: denied { write } for pid=11132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.061781][ T29] audit: type=1400 audit(1793432495.973:5862): avc: denied { write } for pid=11143 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.510898][ T12] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 228.574652][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.595110][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.613054][ T12] bond0 (unregistering): Released all slaves [ 228.625340][ T12] bond1 (unregistering): Released all slaves [ 228.642268][ T12] bond2 (unregistering): Released all slaves [ 228.658425][ T12] bond3 (unregistering): Released all slaves [ 228.677059][ T12] bond4 (unregistering): Released all slaves [ 228.694715][ T12] bond5 (unregistering): Released all slaves [ 228.706489][ T12] bond6 (unregistering): Released all slaves [ 228.963810][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.963831][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.969790][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.969841][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.112696][ T29] audit: type=1400 audit(1793432497.034:5863): avc: denied { write } for pid=11146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.179133][ T29] audit: type=1400 audit(1793432497.094:5864): avc: denied { write } for pid=11157 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.476278][ T12] team0 (unregistering): Port device team_slave_1 removed [ 229.499548][ T12] team0 (unregistering): Port device team_slave_0 removed [ 229.615730][ T3024] 8021q: adding VLAN 0 to HW filter on device eth13 [ 229.860145][ T29] audit: type=1400 audit(1793432497.765:5865): avc: denied { write } for pid=11160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.904329][ T12] IPVS: stop unused estimator thread 0... [ 229.936849][ T29] audit: type=1400 audit(1793432497.845:5866): avc: denied { write } for pid=11171 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.995535][ T3024] 8021q: adding VLAN 0 to HW filter on device eth14 [ 230.192297][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.235960][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.263551][ T29] audit: type=1400 audit(1793432498.176:5867): avc: denied { write } for pid=11174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.300427][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.327543][ T29] audit: type=1400 audit(1793432498.246:5868): avc: denied { write } for pid=11185 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.376439][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.384124][ T3024] 8021q: adding VLAN 0 to HW filter on device eth15 [ 230.509038][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.561390][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.589737][ T29] audit: type=1400 audit(1793432498.506:5869): avc: denied { write } for pid=11188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.627448][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.660351][ T29] audit: type=1400 audit(1793432498.576:5870): avc: denied { write } for pid=11199 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.706642][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.716373][ T3024] 8021q: adding VLAN 0 to HW filter on device eth16 [ 231.003356][ T3024] 8021q: adding VLAN 0 to HW filter on device eth17 [ 231.123932][ T12] bridge_slave_1: left allmulticast mode [ 231.123961][ T12] bridge_slave_1: left promiscuous mode [ 231.124223][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.132351][ T12] bridge_slave_0: left allmulticast mode [ 231.132447][ T12] bridge_slave_0: left promiscuous mode [ 231.132762][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.160461][ T12] bridge_slave_1: left allmulticast mode [ 231.160540][ T12] bridge_slave_1: left promiscuous mode [ 231.160884][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.180278][ T12] bridge_slave_0: left allmulticast mode [ 231.180347][ T12] bridge_slave_0: left promiscuous mode [ 231.180651][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.209124][ T12] bridge_slave_1: left allmulticast mode [ 231.209161][ T12] bridge_slave_1: left promiscuous mode [ 231.209358][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.211899][ T12] bridge_slave_0: left allmulticast mode [ 231.211971][ T12] bridge_slave_0: left promiscuous mode [ 231.212136][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.435573][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.450120][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.454104][ T12] bond0 (unregistering): Released all slaves [ 231.513705][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.527853][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.531818][ T12] bond0 (unregistering): Released all slaves [ 231.534612][ T12] bond1 (unregistering): Released all slaves [ 231.542076][ T12] bond2 (unregistering): Released all slaves [ 231.551955][ T12] bond3 (unregistering): Released all slaves [ 231.609542][ T12] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 231.630187][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.634858][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.645850][ T12] bond0 (unregistering): Released all slaves [ 231.654127][ T12] bond1 (unregistering): Released all slaves [ 231.722660][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.726058][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.733427][ T12] bond0 (unregistering): Released all slaves [ 231.741127][ T12] bond1 (unregistering): Released all slaves [ 231.753816][ T12] bond2 (unregistering): Released all slaves [ 231.763503][ T12] bond3 (unregistering): Released all slaves [ 231.773764][ T12] bond4 (unregistering): Released all slaves [ 231.785490][ T3024] 8021q: adding VLAN 0 to HW filter on device eth18 [ 232.065490][ T12] hsr_slave_0: left promiscuous mode [ 232.088428][ T12] hsr_slave_1: left promiscuous mode [ 232.105018][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.114149][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.132431][ T12] hsr_slave_0: left promiscuous mode [ 232.134056][ T12] hsr_slave_1: left promiscuous mode [ 232.135771][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.135868][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.139964][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.140022][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.187406][ T12] hsr_slave_0: left promiscuous mode [ 232.188701][ T12] hsr_slave_1: left promiscuous mode [ 232.190252][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.190274][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.191608][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.191655][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.224570][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.233071][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.291857][ T12] veth1_macvtap: left promiscuous mode [ 232.291894][ T12] veth0_macvtap: left promiscuous mode [ 232.292010][ T12] veth1_vlan: left promiscuous mode [ 232.292042][ T12] veth0_vlan: left promiscuous mode [ 232.292731][ T12] veth1_macvtap: left promiscuous mode [ 232.292752][ T12] veth0_macvtap: left promiscuous mode [ 232.292809][ T12] veth1_vlan: left promiscuous mode [ 232.292921][ T12] veth0_vlan: left promiscuous mode [ 232.509145][ T12] team0 (unregistering): Port device team_slave_1 removed [ 232.519754][ T12] team0 (unregistering): Port device team_slave_0 removed [ 232.638195][ T12] team0 (unregistering): Port device team_slave_1 removed [ 232.644460][ T12] team0 (unregistering): Port device team_slave_0 removed [ 232.772914][ T12] team0 (unregistering): Port device team_slave_1 removed [ 232.788404][ T12] team0 (unregistering): Port device team_slave_0 removed [ 232.911803][ T12] team0 (unregistering): Port device team_slave_1 removed [ 232.926570][ T12] team0 (unregistering): Port device team_slave_0 removed [ 232.986825][ T3024] 8021q: adding VLAN 0 to HW filter on device eth19 [ 233.151679][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 233.151697][ T29] audit: type=1400 audit(1793432501.069:5877): avc: denied { write } for pid=11249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.208745][ T29] audit: type=1400 audit(1793432501.129:5878): avc: denied { write } for pid=11260 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.260803][ T3024] 8021q: adding VLAN 0 to HW filter on device eth20 [ 233.424740][ T29] audit: type=1400 audit(1793432501.340:5879): avc: denied { write } for pid=11263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.488086][ T29] audit: type=1400 audit(1793432501.410:5880): avc: denied { write } for pid=11274 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.541692][ T3024] 8021q: adding VLAN 0 to HW filter on device eth21 [ 233.713682][ T29] audit: type=1400 audit(1793432501.630:5881): avc: denied { write } for pid=11277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.769311][ T29] audit: type=1400 audit(1793432501.690:5882): avc: denied { write } for pid=11288 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.817130][ T3024] 8021q: adding VLAN 0 to HW filter on device eth22 [ 233.994909][ T29] audit: type=1400 audit(1793432501.920:5883): avc: denied { write } for pid=11292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.049339][ T29] audit: type=1400 audit(1793432501.970:5884): avc: denied { write } for pid=11303 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.100462][ T3024] 8021q: adding VLAN 0 to HW filter on device eth23 [ 234.262445][ T29] audit: type=1400 audit(1793432502.181:5885): avc: denied { write } for pid=11306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.324850][ T29] audit: type=1400 audit(1793432502.251:5886): avc: denied { write } for pid=11317 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.367122][ T3024] 8021q: adding VLAN 0 to HW filter on device eth24 [ 234.625751][ T3024] 8021q: adding VLAN 0 to HW filter on device eth25 [ 234.869121][ T3024] 8021q: adding VLAN 0 to HW filter on device eth26 [ 235.105727][ T3024] 8021q: adding VLAN 0 to HW filter on device eth27 [ 235.344681][ T3024] 8021q: adding VLAN 0 to HW filter on device eth28 [ 235.581102][ T3024] 8021q: adding VLAN 0 to HW filter on device eth29 [ 235.815539][ T3024] 8021q: adding VLAN 0 to HW filter on device eth30 [ 236.080192][ T3024] 8021q: adding VLAN 0 to HW filter on device eth31 [ 236.310647][ T3024] 8021q: adding VLAN 0 to HW filter on device eth32