last executing test programs: 41.094999358s ago: executing program 1 (id=421): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x40, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="140100002a0001000000000000000000040100800d0018002f21233a254c3a2c00000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/mtrr\x00', 0x2, 0x0) close(0x3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x24, r4, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x2404c0c0) close(r2) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x0, 0x5, 0x80000001, 0x7}, 0x41}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000006c0)=0x200800, 0x4) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000380), 0x56) sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f0000000400)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)="27030200dc0f14000e0003000324c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) ioctl$SG_IO(0xffffffffffffffff, 0x301, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 40.890820359s ago: executing program 1 (id=424): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r1}, &(0x7f0000000b40), &(0x7f0000000b80)=r0}, 0x20) 40.791689729s ago: executing program 1 (id=425): syz_open_dev$hiddev(&(0x7f0000000140), 0xe067, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000900)='./sys\x00', &(0x7f0000000940)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) write(r0, &(0x7f00000009c0)='1', 0x1) 40.54917468s ago: executing program 1 (id=430): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) unshare(0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='27', 0x2) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) add_key(&(0x7f0000000640)='asymmetric\x00', 0x0, &(0x7f0000000680)="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", 0x559, 0xfffffffffffffffd) 40.50848625s ago: executing program 0 (id=432): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0x207, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000004a80)="05031c00d1fd140000", 0x9, 0x4, &(0x7f0000004ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) perf_event_open(&(0x7f0000004b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x1000000, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) lsm_list_modules(0x0, &(0x7f0000004b80), 0x0) sendmsg$nl_route(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000004c40)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004dc0)={&(0x7f0000004e00)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e40)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004ec0)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000004640)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x1d0, 0xc8, 0x8, 0x1d0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x7ffffffe, 'snmp\x00', 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000700)=[{&(0x7f0000005040)="99a82b7ca6a7e841d4c1b7df1799e8c9b404f5f1cbcc913fff1759abbcfd9d0f16915f6549c6a1fd9a5f520fd6b0e96928b2859b3fe57153c7c2248d397f2746d91a08be3ac7e3b2f2d90ba6fe91a46d7d109a4c2708e5422c2b6b500fa765aa61bd914b3d", 0x65}], 0x1, 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000005100)=0xffffffffffffffff, 0x4) ptrace$setsig(0x4203, 0x0, 0xec, &(0x7f0000000000)={0x1, 0x88d, 0x1ff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005180)={&(0x7f00000051c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r6 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac3(r6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000005200)={0x0, 0x0, &(0x7f0000005240)=[{0x0}, {&(0x7f00000052c0)="11c9064268e9", 0x6}], 0x2}, 0x8040050) 40.251756201s ago: executing program 1 (id=434): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000019b40)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000019bc0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @empty}, 0x8, 0x0, 0x0, 0x0, 0xdf, &(0x7f0000019c40)='ipvlan1\x00', 0x0, 0x8000000000000001, 0x7}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019c80)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000019cc0)='./proc\x00', &(0x7f0000019d00)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000019d80)='3', 0x4e) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000019dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800, 0xc5}, 0x90a4, 0x400, 0x7d5d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000019e40), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 40.247311821s ago: executing program 4 (id=435): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r1}, &(0x7f0000000b40), &(0x7f0000000b80)=r0}, 0x20) 40.139298262s ago: executing program 4 (id=436): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x40, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="140100002a0001000000000000000000040100800d0018002f21233a254c3a2c00000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/mtrr\x00', 0x2, 0x0) close(0x3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x24, r4, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x2404c0c0) close(r2) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x0, 0x5, 0x80000001, 0x7}, 0x41}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000006c0)=0x200800, 0x4) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000380), 0x56) sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f0000000400)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)="27030200dc0f14000e0003000324c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) ioctl$SG_IO(0xffffffffffffffff, 0x301, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 39.837591263s ago: executing program 1 (id=438): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r0, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe8000000000000000000000000000aab0000280090001800c0000", @ANYRES8=r0], 0xec}}, 0xc804) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xc9, 0x0) socket$inet(0x2, 0x2, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 39.837321272s ago: executing program 4 (id=439): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./trace\x00', &(0x7f00000009c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./trace/trace\x00', 0x0, 0x42) preadv(r5, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./tracing\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) readv(r8, &(0x7f0000000900)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r9 = dup(r7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x6}, 0x90) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r11, 0xffffffffffffffff, 0x0) kexec_load(0x20000000, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) 39.318129554s ago: executing program 0 (id=441): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="8184f07ac61f68e9fc02c5dd", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000010100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000800)='GPL\x00', 0x9, 0x71, &(0x7f0000000840)=""/113, 0x41000, 0x16, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x1, 0x5, 0x4c1, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000cc0)=[{0x1, 0x2, 0xa}], 0x10, 0x4}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000580)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) 39.158587495s ago: executing program 0 (id=443): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0x207, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000004a80)="05031c00d1fd140000", 0x9, 0x4, &(0x7f0000004ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) perf_event_open(&(0x7f0000004b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x1000000, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) lsm_list_modules(0x0, &(0x7f0000004b80), 0x0) sendmsg$nl_route(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000004c40)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004ec0)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000004640)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1d0, 0xc8, 0x8, 0x1d0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x168, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x1, {0x80000}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x7ffffffe, 'snmp\x00', 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000700)=[{&(0x7f0000005040)="99a82b7ca6a7e841d4c1b7df1799e8c9b404f5f1cbcc913fff1759abbcfd9d0f16915f6549c6a1fd9a5f520fd6b0e96928b2859b3fe57153c7c2248d397f2746d91a08be3ac7e3b2f2d90ba6fe91a46d7d109a4c2708e5422c2b6b500fa765aa61bd914b3d", 0x65}], 0x1, 0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000005100)=0xffffffffffffffff, 0x4) ptrace$setsig(0x4203, 0x0, 0xec, &(0x7f0000000000)={0x1, 0x88d, 0x1ff}) sendmmsg$inet(r3, 0x0, 0x0, 0x4008440) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005180)={&(0x7f00000051c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r6 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac3(r6, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000005200)={0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000005280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a00100000", 0x27}, {0x0}], 0x2}, 0x8040050) 38.317610978s ago: executing program 0 (id=459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0xffffffff, 0x9, 0x800001, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$inet6(0xa, 0x2, 0x3a) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001e80), 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000001f00)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffe, 0xb92}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000002140)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x3, 0x5284, 0x0, 0x4, 0x18, 0x8, 0x6}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x2f, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000310d0000000000800500", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900", @ANYRES32, @ANYBLOB="0000000000000000b7080000009300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018260000", @ANYRES32=0x1, @ANYBLOB="0000000005000000850000005100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018630000030000000000000001000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000940)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000980)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff, 0x1, r0, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x4, 0x3, 0x1, 0x1}, {0x0, 0x4, 0x4, 0x4}], 0x10, 0x2}, 0x94) clock_nanosleep(0x3, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0x0, 0x9c, 0x10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x2, 0x30}, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) 38.284314858s ago: executing program 0 (id=450): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000019b40)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000019bc0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @empty}, 0x8, 0x0, 0x0, 0x0, 0xdf, &(0x7f0000019c40)='ipvlan1\x00', 0x0, 0x8000000000000001, 0x7}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019c80)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000019cc0)='./proc\x00', &(0x7f0000019d00)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000019d80)='3', 0x4e) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000019dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800, 0xc5}, 0x90a4, 0x400, 0x7d5d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000019e40), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 38.061721439s ago: executing program 0 (id=451): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0x207, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000004a80)="05031c00d1fd140000", 0x9, 0x4, &(0x7f0000004ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) perf_event_open(&(0x7f0000004b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x1000000, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) lsm_list_modules(0x0, &(0x7f0000004b80), 0x0) sendmsg$nl_route(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000004c40)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004dc0)={&(0x7f0000004e00)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e40)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004ec0)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000004640)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x1d0, 0xc8, 0x8, 0x1d0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x7ffffffe, 'snmp\x00', 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000700)=[{&(0x7f0000005040)="99a82b7ca6a7e841d4c1b7df1799e8c9b404f5f1cbcc913fff1759abbcfd9d0f16915f6549c6a1fd9a5f520fd6b0e96928b2859b3fe57153c7c2248d397f2746d91a08be3ac7e3b2f2d90ba6fe91a46d7d109a4c2708e5422c2b6b500fa765aa61bd914b3d", 0x65}], 0x1, 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000005100)=0xffffffffffffffff, 0x4) ptrace$setsig(0x4203, 0x0, 0xec, &(0x7f0000000000)={0x1, 0x88d, 0x1ff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005180)={&(0x7f00000051c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r6 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac3(r6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000005200)={0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000005280)}, {&(0x7f00000052c0)="11c9064268e9", 0x6}], 0x2}, 0x8040050) 36.730946463s ago: executing program 4 (id=460): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000001300), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001340)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001380)={0x20000014}) poll(&(0x7f0000001400)=[{r3, 0x8}], 0x1, 0x8000007) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x10) write(0xffffffffffffffff, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f0000001200)) 35.913936196s ago: executing program 4 (id=463): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000019b40)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000019bc0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @empty}, 0x8, 0x0, 0x0, 0x0, 0xdf, &(0x7f0000019c40)='ipvlan1\x00', 0x0, 0x8000000000000001, 0x7}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019c80)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000019cc0)='./proc\x00', &(0x7f0000019d00)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000019d80)='3', 0x4e) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000019dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800, 0xc5}, 0x90a4, 0x400, 0x7d5d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000019e40), 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000019e80)={&(0x7f0000019ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000000) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 35.140573479s ago: executing program 4 (id=465): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="8184f07ac61f68e9fc02c5dd", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000010100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000800)='GPL\x00', 0x9, 0x71, &(0x7f0000000840)=""/113, 0x41000, 0x16, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x1, 0x5, 0x4c1, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000cc0)=[{0x1, 0x2, 0xa}], 0x10, 0x4}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000580)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) 24.782545575s ago: executing program 32 (id=438): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r0, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe8000000000000000000000000000aab0000280090001800c0000", @ANYRES8=r0], 0xec}}, 0xc804) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xc9, 0x0) socket$inet(0x2, 0x2, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 24.777219224s ago: executing program 3 (id=478): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000640)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./trace\x00', &(0x7f00000009c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./trace/trace\x00', 0x0, 0x42) preadv(r5, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./tracing\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) readv(r8, &(0x7f0000000900)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r9 = dup(r7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x6}, 0x90) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r11, 0xffffffffffffffff, 0x0) kexec_load(0x20000000, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) 24.592289765s ago: executing program 3 (id=479): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) r0 = open(&(0x7f0000001580)='./file1\x00', 0x66842, 0x21) pwritev2(r0, 0x0, 0x0, 0x5a00, 0x0, 0x3) 24.526707335s ago: executing program 3 (id=480): syz_emit_ethernet(0x76, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x4d, 0x1, 0x3, 0x80000000}]}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.empty_time\x00', 0x275a, 0x0) setresgid(0x0, 0xee00, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000200)=r3, 0x4) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000240)={0x56, 0x3d, 0x3, {0xf1f, 0x10}, {0x0, 0xff}, @ramp={0x9, 0x200, {0x0, 0xfeff, 0x843, 0x7}}}) setreuid(0xffffffffffffffff, 0xee01) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xd0, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x144}}, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x8000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x20000000, 0x1, &(0x7f0000000440)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) sync() 23.603791388s ago: executing program 3 (id=481): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r0, &(0x7f0000000080)=@unlock_all, 0xb) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20842, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa4, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0xc, 0x2000000006, 0x6) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000300)="e1", 0x5603d}], 0x1) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20842, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r5, &(0x7f0000000440)="f761ed02a5e4cb1074dd9020dc8efad486160d6439baa15a12614f621e2674fba50f919596b23aa738055ff452be6df1678490780e0324ff2e66deb6ff9908f375c353d7ab9095769b6407c5453f0c34fe2559f343da1c63eefc3f1eb8be3067c4d4032e", 0x0}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='mountinfo\x00') setresuid(0xee01, 0xee00, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x815, &(0x7f0000000580)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}, {@bh}]}, 0x9, 0x624, &(0x7f0000000600)="$eJzs3ctvVNUfAPDvvZ0+aH8/W4hB2UgTYyBRWlrAEGMixC0h+Ni5qrQQpFBCa7RIQklwozFuXJi4ciH+F0ri1oVbF25cGEPSGMNCDMqYO71TZjqddvqYmT4+n+S299G553vbfHvOnDnn3gB2rcHsSxpxICKuJRH9FccKkR8cXPi5B3/ePJ8tSRSLb/2RxM1byVzluZL8e1/+4n/7I/kpjdjXUVvu9OyNy2OTkxPX8+3hmSvXhqdnbxy5dGXs4sTFiaujL4+ePHH8xMmRoxu6vkLF+pk7733Q/8nZd7756lEy8u0vZ5M4FY/z2LLrWvra7g2VnP3OBqO44OGTvWnp68kNnnur+Ku/+necSZbuYMu6EBH7I6IzIp6J/uio+Gv2x8dvtDU4oKmKSZTrKGDXSVbP/87aXT3NCQZooXI7oPzefrn3wbXSJrdKgFaYP73QSbaQ+50RUc7/wkLfYPSU+gZ6HyRV/TxJRGysZ25BVsaPP5y9ky1Rpx8OaI652+Ve7qX1f1LKzYHoKW31Pkir8j+tWLL9b66z/MEl2/IfWmfudkQ8m9f/XbHu/H93neXLfwAAAAAAANg8905HxEvLjf9LF8f/dC0z/qcvIk5tQvmrf/6X3s9Xkk0oDqgwfzri1Zrxv/9Ujg4e6Mg/5/9/aTxAZ3rh0uTE0Yh4KiIOR2d3tj1SfdqqAcJHPtv3Zb3yK8f/ZUtWfnksYH6q+4UlE3HHx2bGNufqYXebvx3xsDT+92C+p3r8T1b/JzX1/6evZwl+rcEy9r1w91zVjt+e/HtYPf+BZil+HXFo2fk/T5rbycr35xgutQeGy62CWs999Pl39cqX/9A+Wf3fu3L+dyeV9+uZXtv5uyLi2GyhWO/4etv/XcnbHeXzZz4cm5m5PhLRlZyp3T+6tphhpyrnQzlfsvw//PzK/X+L7f+KPNwTEXMNlrn/cd+v9Y6p/6F9svwfX7n+H6iu/9e60hOjdwe+z28xVuNcQ/X/8VKdfjjfo/8PKtXej6PRBG1LuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwzaUR8b9I0qHF9TQdGoroi4inozednJqeefHC1PtXx7Nj1c//71/YTsrP/x+o2B5dsn0sIvZGxBcde0rbQ+enJsfbffEAAAAAAAAAAAAAAAAAAACwRfSV5vwXu5fO/8/83tHu6ICmK+Tf5TvsPoV1v7LYvamBAC23/vwHtrvG87+zqXEArVc//x8+Kpa0NByghbT/YfdaZ/77uAB2APU/7FYN9un1NDsOoB0arv/nmxsHAAAAAACwKfYevPdzEhFzr+wpLZmu/JjB/rCzpe0OAGgbY3hh9ypMtTsCoF28xweSxbW/l53sX3/0f9KcgAAAAAAAAAAAAACAGocOrH3+/5xJg7AjpBErPMLb2H7YyVaoypdLfjU/7CD1H/3RSN2faCHANmb+P7BaPb7x+f/FW2sKCAAAAAAAAAAAAACo1XPj8tjk5MT16dntt/La1ghjbStzY1sijE1debzaz5QfM7+2M3dGxNa4wFavlG/B0cYw2vg/CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqPJfAAAA//8MwS/R") syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0xfff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0b000000b900000001000100090000", @ANYRES32, @ANYRES32], 0x50) syz_mount_image$iso9660(&(0x7f0000000c80), &(0x7f0000000cc0)='./file0\x00', 0x10004, &(0x7f0000000d00)=ANY=[@ANYBLOB=' '], 0x0, 0x57a, &(0x7f0000000d40)="$eJzs3V9v0+odwPGfSwtRJlVoTAhVBR7KJrVSCU4CQRFXnvMkfSCxI9tB7RWqaIoqUpgok9beMG7YJm23u98udzGdV3DeETqv4Igj20kb2vw5/d/T8/1U1E+cn58/TuQfTuPHAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHIrtp23pG681rIazq0EfmPvYXfr/hXf1f4f7Fa7MLZdESv+J5mM3EpX3frd3tM3419zMps+mpVMvMjIzm9uXn96Y3Kit/2IDh/Kf49Y09b2zpvVTqf9/qQ6cgFc3ffa3r42PLamPRP6puHUtDKhr8qlkv1wqRqqqqnrcCWMdEO5gXYiP1Dz7oLKl8tFpXMrfsurVZy67q188qBg2yX1LNe86gSh7z18lgvdJVOvG6+WxMRPxzFP4jficxOpSDsNpdY3Ou3iuAHFQfmfE1QYF1SwC4V8vlDIlx6XHz+x7ckDK+x95EDEyb1p8ct0Ysdu4Lgmuvlf6mLEk5Ysixr440pFAvGlMeT5rm7iX/jDQz2y3f7838vyt/aenpEk/99JH90Zlv+H9OVIP197bR9mqy3Zlh15I6vSkY605f2gKOsoNe/t1RMc44n/1ESLJ0ZC8cVIQ5xkjequUVKWkpTElpeyJFUJRUlVjNRFSygrEkokOnlHuRKIFkci8SUQJfPiyoIoyUtZylIUJVpysiK+tMSTmlTESWpZl41kvxdFWUP34bpcT4LyQ4eR7b1CbSmMGC35H8d37GM2cFK+9vI/AAAAAAC4tKzk0/f4/H9Kbielqqlr+7y7BQAAAAAATlDyl//ZeDEVl26Lxfk/AAAAAACXjZVcY2eJSFbupqV1sZLLpfgQAAAAAACASyL5+/+deJHMgXJXrN05VTj/BwAAAADgkvj72Dn2w+Y16/sfJAimrE/N5d9bm8ncvM7mlXS7K/trjKoz1nS3kmRRSheTk66etTJp0O4kmF+6i/Vx/bD2OuDsduCvh+nAjUn5p9xLY+6tpcu13jNpK9mqqeuc69ef5sVxpicivRz9+e3GXyQZ/j+8xrSVkY1OO/fqXWct6cunuJZPm90JFA/MoziiLx+S+RaSay4GjngquRCj227WkvWNTtvuH/9EuvnEty1+nB7R5meZS6PmujPeZr8dfyZuM58bNvpuL/LHHPlnuZ/G3J+/ny4G9KIwrheF/l4M3hfH70VxXC+Kx+wFAJyX9TFZyJIDefcIR7mjZXc5ZHb/LPNpzPxMcmCNfx04otvjjuj2MbPb/3bvgdALHpZj43b/1Z9Ve+ngP0PbDesFK96FVz5s/klubm3vPNjYXH3dft1+WygUS/Yj235ckKlkGN0FuQcAMED/PXasgfm/F/Hjv9PAg7n70Ziz6t/ufqUgJ6/knXRkTRaTqw2SbxwM/B9Btu9rCItjzlqzSZpM7/CyOOKs7mpylUOv3sLI2G/7UDz9FwIAgDM0NyYPW+Pvwmct7j/vnhmWR+NcPvrseC82f8Z7AgCAXw8dfLGy0d+sIDDNl/lyOe9ES1oFvvtcBaZS08p4kQ7cJceradUM/Mh3/XpceGEqOlRhq9n0g0hV/UA1/dAsJ9MHqu6t30PdcLzIuL2PsV3fixw3UhUTuqrZ+mPdhEs6SDYOm9o1VeM6kfE9FfqtwNU5pUKt+wJNRXuRqZq46KlmYBpOkFEv/HqroVVFh25gmpGfVthry3hVP2gk1ebOeV8DAHBRbG3vvFntdNrvT7EwsOHMmQ8VAAB0jcnSAAAAAAAAAAAAAAAAAAAAAADgAjiL6/8onE0hfj3PpfXeVNAXYScctpC5GN24eIWxh46Pp31sAnC6fgoAAP//WHxK5g==") sendfile(r6, r6, &(0x7f00000012c0)=0xa01f, 0x100000110) writev(r4, &(0x7f0000001300)=[{&(0x7f0000001340)="e1", 0x5603d}], 0x1) socket$kcm(0x10, 0x2, 0x0) 23.369408409s ago: executing program 3 (id=482): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000019b40)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000019bc0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @empty}, 0x8, 0x0, 0x0, 0x0, 0xdf, &(0x7f0000019c40)='ipvlan1\x00', 0x0, 0x8000000000000001, 0x7}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019c80)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000019cc0)='./proc\x00', &(0x7f0000019d00)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000019d80)='3', 0x4e) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000019dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800, 0xc5}, 0x90a4, 0x400, 0x7d5d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000019e80)={&(0x7f0000019ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000000) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 22.644043711s ago: executing program 33 (id=451): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0x207, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000004a80)="05031c00d1fd140000", 0x9, 0x4, &(0x7f0000004ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) perf_event_open(&(0x7f0000004b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x1000000, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) lsm_list_modules(0x0, &(0x7f0000004b80), 0x0) sendmsg$nl_route(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000004c40)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004dc0)={&(0x7f0000004e00)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e40)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004ec0)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000004640)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x1d0, 0xc8, 0x8, 0x1d0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x7ffffffe, 'snmp\x00', 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000700)=[{&(0x7f0000005040)="99a82b7ca6a7e841d4c1b7df1799e8c9b404f5f1cbcc913fff1759abbcfd9d0f16915f6549c6a1fd9a5f520fd6b0e96928b2859b3fe57153c7c2248d397f2746d91a08be3ac7e3b2f2d90ba6fe91a46d7d109a4c2708e5422c2b6b500fa765aa61bd914b3d", 0x65}], 0x1, 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000005100)=0xffffffffffffffff, 0x4) ptrace$setsig(0x4203, 0x0, 0xec, &(0x7f0000000000)={0x1, 0x88d, 0x1ff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005180)={&(0x7f00000051c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r6 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac3(r6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000005200)={0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000005280)}, {&(0x7f00000052c0)="11c9064268e9", 0x6}], 0x2}, 0x8040050) 22.616720132s ago: executing program 3 (id=484): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./trace\x00', &(0x7f00000009c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./trace/trace\x00', 0x0, 0x42) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./tracing\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) readv(r5, &(0x7f0000000900)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r6 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x6}, 0x90) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r8, 0xffffffffffffffff, 0x0) kexec_load(0x20000000, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) 21.785604225s ago: executing program 5 (id=476): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe8000000000000000000000000000aab0000280090001800c0000000000000008000000000000001b000000000000000800000000000000080000000000000018000280140001800900", @ANYRES8=r0], 0xec}}, 0xc804) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xc9, 0x0) socket$inet(0x2, 0x2, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 20.827527608s ago: executing program 5 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0x207, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000004a80)="05031c00d1fd140000", 0x9, 0x4, &(0x7f0000004ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) perf_event_open(&(0x7f0000004b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x1000000, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) lsm_list_modules(0x0, &(0x7f0000004b80), 0x0) sendmsg$nl_route(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000004c40)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004dc0)={&(0x7f0000004e00)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e40)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004ec0)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000004640)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x1d0, 0xc8, 0x8, 0x1d0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x7ffffffe, 'snmp\x00', 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000700)=[{&(0x7f0000005040)="99a82b7ca6a7e841d4c1b7df1799e8c9b404f5f1cbcc913fff1759abbcfd9d0f16915f6549c6a1fd9a5f520fd6b0e96928b2859b3fe57153c7c2248d397f2746d91a08be3ac7e3b2f2d90ba6fe91a46d7d109a4c2708e5422c2b6b500fa765aa61bd914b3d", 0x65}], 0x1, 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000005100)=0xffffffffffffffff, 0x4) ptrace$setsig(0x4203, 0x0, 0xec, &(0x7f0000000000)={0x1, 0x88d, 0x1ff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005180)={&(0x7f00000051c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r6 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac3(r6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000005200)={0x0, 0x0, 0x0}, 0x8040050) 20.032685291s ago: executing program 34 (id=465): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="8184f07ac61f68e9fc02c5dd", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000010100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000800)='GPL\x00', 0x9, 0x71, &(0x7f0000000840)=""/113, 0x41000, 0x16, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x1, 0x5, 0x4c1, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000cc0)=[{0x1, 0x2, 0xa}], 0x10, 0x4}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000580)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) 19.592042092s ago: executing program 5 (id=493): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500), 0xf501}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x7}, 0x38) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000001000)=@newtaction={0x1f4, 0x30, 0x300, 0x300, 0x25dfdbfd, {}, [{0x1e0, 0x1, [@m_mpls={0x1dc, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x1af, 0x4, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000b00)}], 0x1, 0xe, 0x6) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="68000000107ac28f9022e7c089772234ffa67fff88851f3481783281a73ec6e5f87625e865", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf25010000000000000007410000004c00180000004062726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000004c0)={0x5, &(0x7f00000000c0)=[{0x8001, 0x2, 0x6, 0xfffff001}, {0xfff3, 0x5, 0x6, 0x400}, {0x0, 0xb1, 0xa}, {0x8, 0x6, 0x4, 0x80000001}, {0x16, 0x2, 0xda, 0x215}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000840)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffac}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x7fffffff, 0x400, 0x4}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x80000000, 0x3, 0x6}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xe7, 0x1000, 0x48000000, 0xffffffff, 0xde, 0x5}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) lsetxattr(&(0x7f0000000500)='.\x00', &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f00000005c0)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000640), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_256={{0x303}, "6e93985104a4f04e", "d10c7c79fe45a46cbab02c3181ca0a91964de377dd4b49e01e682e4eab01e709", "f4c37363", "156870cb59bb8038"}, 0x38) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000800)=0x8) unshare(0x26020480) 19.492523273s ago: executing program 5 (id=494): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000019b40)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000019bc0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @empty}, 0x8, 0x0, 0x0, 0x0, 0xdf, &(0x7f0000019c40)='ipvlan1\x00', 0x0, 0x8000000000000001, 0x7}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019c80)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000019cc0)='./proc\x00', &(0x7f0000019d00)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000019d80)='3', 0x4e) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000019dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800, 0xc5}, 0x90a4, 0x400, 0x7d5d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000019e80)={&(0x7f0000019ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000000) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 19.188159773s ago: executing program 5 (id=495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000090601020000000000000000020008000900020073797a3000000042240007800c00018008000140e00000020c00028008000140ffffffff08000a40000000010500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x40050}, 0x800) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xffff7ffa, 0x9, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = semget$private(0x0, 0x20000000102, 0x0) r3 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000780)=[0x7, 0x7f, 0x1, 0x9d]) semtimedop(r2, &(0x7f00000007c0)=[{0x7, 0x4, 0x800}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24048001) splice(r1, &(0x7f0000000800)=0x8, r1, &(0x7f0000000840)=0x7, 0x7, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000000206050400000000000000000a00"], 0x48}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="2cbc141caa0000000000000004"], 0x18) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "202f3b0cb176c2b7", "3e202d2ca86d163d7479d7c1e58c22ba", "ae3e6d0a", "2130d01151a6a861"}, 0x28) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000980)=0xa, 0x1959cc36) connect$inet6(r4, &(0x7f00000009c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x80000003) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000000a00)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000a40)={0xa, 0x4e24, 0xd, @empty, 0x4000005}, 0x1c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000000000/0x4000)=nil) syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x200000, &(0x7f0000000b00)=ANY=[@ANYRES64=r6], 0x1, 0x3a4, &(0x7f0000000b40)="$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") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0xb) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0a00cae30571000020000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) 7.480144674s ago: executing program 35 (id=484): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./trace\x00', &(0x7f00000009c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./trace/trace\x00', 0x0, 0x42) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./tracing\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) readv(r5, &(0x7f0000000900)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r6 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x6}, 0x90) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r8, 0xffffffffffffffff, 0x0) kexec_load(0x20000000, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) 6.319375998s ago: executing program 7 (id=564): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000019b40)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000019bc0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @empty}, 0x8, 0x0, 0x0, 0x0, 0xdf, &(0x7f0000019c40)='ipvlan1\x00', 0x0, 0x8000000000000001, 0x7}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019c80)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000019cc0)='./proc\x00', &(0x7f0000019d00)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000019d80)='3', 0x4e) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000019dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800, 0xc5}, 0x90a4, 0x400, 0x7d5d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000019e40), 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000019e80)={&(0x7f0000019ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000000) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.79478785s ago: executing program 7 (id=568): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./trace\x00', &(0x7f00000009c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./trace/trace\x00', 0x0, 0x42) preadv(r5, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./tracing\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) readv(r8, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r9 = dup(r7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x6}, 0x90) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r11, 0xffffffffffffffff, 0x0) kexec_load(0x20000000, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) 5.451132791s ago: executing program 7 (id=569): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x0, 0x9, 0x10, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000002}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.309181611s ago: executing program 7 (id=570): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0100000003ece1e40ad8871061ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) mmap(&(0x7f0000489000/0x1000)=nil, 0x1000, 0x1, 0x8031, 0xffffffffffffffff, 0x3000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x4b0, 0xffffffff, 0x0, 0x308, 0x238, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0x0, 0xffffffff], [], '\x00', '\x00', {}, {}, 0x60, 0x0, 0x1}, 0x0, 0x210, 0x238, 0x0, {}, [@common=@rt={{0x138}, {0x3b3d483d, [0x91a, 0x80000000], 0x8, 0x8, 0x2, [@remote, @private0, @private1, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @rand_addr=' \x01\x00', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xd}, @mcast2, @mcast1, @loopback, @local], 0xc}}, @common=@ah={{0x30}, {[0x4d5, 0x4d4], 0x8, 0x6, 0x6}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xffffff00, 0xff000000, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], 'veth1_virt_wifi\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x7, 0x1, 0x22}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x7, 0x5, 0x5}, {0x2, 0x6, 0x4}, 0x6a7f, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffc}]}, 0x2c}}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001800)=@nat={'nat\x00', 0x19, 0x4, 0xed8, [0x200000000900, 0x0, 0x0, 0x200000000ab0, 0x200000000d28], 0x0, &(0x7f0000000080), &(0x7f0000000900)=ANY=[@ANYBLOB="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"/3771]}, 0xf33) 5.230322272s ago: executing program 7 (id=571): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000019b40)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000019bc0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @empty}, 0x8, 0x0, 0x0, 0x0, 0xdf, &(0x7f0000019c40)='ipvlan1\x00', 0x0, 0x8000000000000001, 0x7}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019c80)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000019cc0)='./proc\x00', &(0x7f0000019d00)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000019d80)='3', 0x4e) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000019dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800, 0xc5}, 0x90a4, 0x400, 0x7d5d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000019e40), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.746645483s ago: executing program 7 (id=573): syz_usbip_server_init(0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x6c7, 0x80}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180), 0x4, 0xbaf, &(0x7f00000009c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c4400000000002020207b1af8ff00000000aaa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r2 = open(&(0x7f0000001580)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) r3 = open(&(0x7f0000001640)='./file1\x00', 0x4000, 0xd7) preadv2(r3, &(0x7f0000001680)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffe, 0x0) 4.429837564s ago: executing program 8 (id=552): syz_usbip_server_init(0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x6c7, 0x80}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180), 0x4, 0xbaf, &(0x7f00000009c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c4400000000002020207b1af8ff00000000aaa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r2 = open(&(0x7f0000001580)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) r3 = open(&(0x7f0000001640)='./file1\x00', 0x4000, 0xd7) preadv2(r3, &(0x7f0000001680)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffe, 0x0) 4.050512475s ago: executing program 36 (id=495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c000000090601020000000000000000020008000900020073797a3000000042240007800c00018008000140e00000020c00028008000140ffffffff08000a40000000010500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x40050}, 0x800) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xffff7ffa, 0x9, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = semget$private(0x0, 0x20000000102, 0x0) r3 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000780)=[0x7, 0x7f, 0x1, 0x9d]) semtimedop(r2, &(0x7f00000007c0)=[{0x7, 0x4, 0x800}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24048001) splice(r1, &(0x7f0000000800)=0x8, r1, &(0x7f0000000840)=0x7, 0x7, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000000206050400000000000000000a00"], 0x48}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="2cbc141caa0000000000000004"], 0x18) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "202f3b0cb176c2b7", "3e202d2ca86d163d7479d7c1e58c22ba", "ae3e6d0a", "2130d01151a6a861"}, 0x28) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000980)=0xa, 0x1959cc36) connect$inet6(r4, &(0x7f00000009c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x80000003) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000000a00)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000a40)={0xa, 0x4e24, 0xd, @empty, 0x4000005}, 0x1c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000000000/0x4000)=nil) syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x200000, &(0x7f0000000b00)=ANY=[@ANYRES64=r6], 0x1, 0x3a4, &(0x7f0000000b40)="$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") write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0xb) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0a00cae30571000020000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) 3.175200048s ago: executing program 8 (id=578): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./trace\x00', &(0x7f00000009c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./trace/trace\x00', 0x0, 0x42) preadv(r5, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./tracing\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) readv(r8, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r9 = dup(r7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x6}, 0x90) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r11, 0xffffffffffffffff, 0x0) kexec_load(0x20000000, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) 3.046759749s ago: executing program 6 (id=581): syz_emit_ethernet(0x76, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x4d, 0x1, 0x3, 0x80000000}]}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.empty_time\x00', 0x275a, 0x0) setresgid(0x0, 0xee00, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000200)=r3, 0x4) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000240)={0x56, 0x3d, 0x3, {0xf1f, 0x10}, {0x0, 0xff}, @ramp={0x9, 0x200, {0x0, 0xfeff, 0x843, 0x7}}}) setreuid(0xffffffffffffffff, 0xee01) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xd0, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x144}}, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x8000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x20000000, 0x1, &(0x7f0000000440)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) sync() 2.76224949s ago: executing program 8 (id=583): openat$sndseq(0xffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10030, 0x1000000, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000880)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005"], 0xbc}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setns(0xc9, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x6c, 0x0, @private=0xa010101, @broadcast}}}, 0x22) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c40)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x2b8, 0x2b8, 0xfeffffff, 0x200, 0xf0, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x1e6}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000003]}}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @port, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0xfdfdffff) sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0xf, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @loopback}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x8900, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x1ff}, 0x400, 0x1, 0x4, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000300)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x871e, 0x7f}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0xc, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, r7, 0x0) 2.54385586s ago: executing program 2 (id=584): openat$sndseq(0xffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10030, 0x1000000, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000880)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005"], 0xbc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x6c, 0x0, @private=0xa010101, @broadcast}}}, 0x22) 2.493851061s ago: executing program 8 (id=585): openat$sndseq(0xffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10030, 0x1000000, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000880)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005"], 0xbc}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setns(0xc9, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x6c, 0x0, @private=0xa010101, @broadcast}}}, 0x22) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c40)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x2b8, 0x2b8, 0xfeffffff, 0x200, 0xf0, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x1e6}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000003]}}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @port, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x10}, 0x4000000) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x92202, 0x0) ioctl$TCXONC(r7, 0x540a, 0xfdfdffff) sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0xf, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @loopback}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x8900, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x1ff}, 0x400, 0x1, 0x4, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000300)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x871e, 0x7f}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0xc, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, r8, 0x0) 2.319680222s ago: executing program 2 (id=586): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000019b40)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000019bc0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @empty}, 0x8, 0x0, 0x0, 0x0, 0xdf, &(0x7f0000019c40)='ipvlan1\x00', 0x0, 0x8000000000000001, 0x7}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019c80)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000019cc0)='./proc\x00', &(0x7f0000019d00)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000019dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800, 0xc5}, 0x90a4, 0x400, 0x7d5d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000019e40), 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000019e80)={&(0x7f0000019ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000000) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.968166613s ago: executing program 2 (id=587): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x40000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB], 0x60}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000800) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r5 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x55b7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$key(r5, &(0x7f0000000580)={0x10000000, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e0080150000000200000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400", @ANYRES64=r5], 0xa8}}, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000440)={0x0, @private, @empty}, &(0x7f0000000500)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x325f835cc5c42188, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r7], 0x4c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) 1.961872703s ago: executing program 8 (id=588): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r0, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe8000000000000000000000000000aab0000280090001800c0000000000000008000000000000001b000000000000000800000000000000080000000000000018000280140001800900", @ANYRES8=r0], 0xec}}, 0xc804) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xc9, 0x0) socket$inet(0x2, 0x2, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.949949413s ago: executing program 6 (id=589): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x0, 0x9, 0x10, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000002}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.867134103s ago: executing program 6 (id=590): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0100000003ece1e40ad8871061ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) mmap(&(0x7f0000489000/0x1000)=nil, 0x1000, 0x1, 0x8031, 0xffffffffffffffff, 0x3000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x4b0, 0xffffffff, 0x0, 0x308, 0x238, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0x0, 0xffffffff], [], '\x00', '\x00', {}, {}, 0x60, 0x0, 0x1}, 0x0, 0x210, 0x238, 0x0, {}, [@common=@rt={{0x138}, {0x3b3d483d, [0x91a, 0x80000000], 0x8, 0x8, 0x2, [@remote, @private0, @private1, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @rand_addr=' \x01\x00', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xd}, @mcast2, @mcast1, @loopback, @local], 0xc}}, @common=@ah={{0x30}, {[0x4d5, 0x4d4], 0x8, 0x6, 0x6}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@remote, @mcast1, [0xffffffff, 0xffffff00, 0xff000000, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], 'veth1_virt_wifi\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x7, 0x1, 0x22}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x7, 0x5, 0x5}, {0x2, 0x6, 0x4}, 0x6a7f, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffc}]}, 0x2c}}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001800)=@nat={'nat\x00', 0x19, 0x4, 0xed8, [0x200000000900, 0x0, 0x0, 0x200000000ab0, 0x200000000d28], 0x0, &(0x7f0000000080), &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, 0xf42) 1.702477194s ago: executing program 6 (id=591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB], 0x2c}}, 0x0) ptrace(0x10, r1) waitid(0x0, r1, 0x0, 0x61000006, 0x0) ptrace$getregset(0x4205, r1, 0x201, &(0x7f00000001c0)={0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22282, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000080)=0x0) sched_rr_get_interval(r6, &(0x7f0000000180)) write$9p(0xffffffffffffffff, &(0x7f0000000140), 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010003704000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="c3040500000000002000128008000100b7c867988c5a677265001400028006000e000200000008000700ac1e0101"], 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 723.703707ms ago: executing program 8 (id=592): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f00000018c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x5, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000001a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40) 389.789128ms ago: executing program 2 (id=593): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000980)='./trace\x00', &(0x7f00000009c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./trace/trace\x00', 0x0, 0x42) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./tracing\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000900)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r6 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x6}, 0x90) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r8, 0xffffffffffffffff, 0x0) kexec_load(0x20000000, 0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x200000000, 0x3e0000}], 0x0) 354.475818ms ago: executing program 6 (id=594): openat$sndseq(0xffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10030, 0x1000000, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000880)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005"], 0xbc}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setns(0xc9, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x6c, 0x0, @private=0xa010101, @broadcast}}}, 0x22) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000c40)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x2b8, 0x2b8, 0xfeffffff, 0x200, 0xf0, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x1e6}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000003]}}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @port, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0xfdfdffff) sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0xf, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @loopback}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x8900, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x1ff}, 0x400, 0x1, 0x4, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000300)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x871e, 0x7f}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0xc, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, r7, 0x0) 186.304409ms ago: executing program 2 (id=595): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x40, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="140100002a0001000000000000000000040100800d0018002f21233a254c3a2c00000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/mtrr\x00', 0x2, 0x0) close(0x3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x24, r4, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x2404c0c0) close(r2) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) 26.871829ms ago: executing program 6 (id=596): openat$sndseq(0xffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10030, 0x1000000, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000880)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005"], 0xbc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x6c, 0x0, @private=0xa010101, @broadcast}}}, 0x22) 0s ago: executing program 2 (id=597): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000019b40)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000019bc0)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @empty}, 0x8, 0x0, 0x0, 0x0, 0xdf, &(0x7f0000019c40)='ipvlan1\x00', 0x0, 0x8000000000000001, 0x7}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019c80)='./proc\x00', 0x1fd) perf_event_open(&(0x7f0000019dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800, 0xc5}, 0x90a4, 0x400, 0x7d5d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000019e40), 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000019e80)={&(0x7f0000019ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000000) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): c93b4daa8 [ 66.770235][ T4525] [ 67.109845][ T4540] loop3: detected capacity change from 0 to 512 [ 67.228463][ T4558] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 67.228491][ T4558] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 67.228524][ T4558] vhci_hcd vhci_hcd.0: Device attached [ 67.247053][ T4557] loop0: detected capacity change from 0 to 128 [ 67.287805][ T29] audit: type=1400 audit(1792232332.883:1750): avc: denied { write } for pid=4549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.327819][ T4557] xt_l2tp: unknown flags: 1a [ 67.347011][ T29] audit: type=1400 audit(1792232332.943:1751): avc: denied { write } for pid=4566 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.377925][ T4558] loop4: detected capacity change from 0 to 4096 [ 67.386616][ T4569] FAULT_INJECTION: forcing a failure. [ 67.386616][ T4569] name failslab, interval 1, probability 0, space 0, times 0 [ 67.386644][ T4569] CPU: 0 UID: 0 PID: 4569 Comm: syz.3.275 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.386671][ T4569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.386714][ T4569] Call Trace: [ 67.386721][ T4569] [ 67.386748][ T4569] __dump_stack+0x1d/0x30 [ 67.386774][ T4569] dump_stack_lvl+0x95/0xd0 [ 67.386857][ T4569] dump_stack+0x15/0x1b [ 67.386879][ T4569] should_fail_ex+0x262/0x280 [ 67.386910][ T4569] ? x509_key_preparse+0x168/0x420 [ 67.386990][ T4569] should_failslab+0x8c/0xb0 [ 67.387024][ T4569] __kmalloc_noprof+0xd0/0x4d0 [ 67.387057][ T4569] ? x509_key_preparse+0x168/0x420 [ 67.387086][ T4569] x509_key_preparse+0x168/0x420 [ 67.387130][ T4569] ? selinux_key_permission+0x161/0x190 [ 67.387154][ T4569] asymmetric_key_preparse+0x68/0xb0 [ 67.387175][ T4569] __key_create_or_update+0x29e/0x820 [ 67.387227][ T4569] ? key_task_permission+0x2ac/0x2c0 [ 67.387263][ T4569] key_create_or_update+0x42/0x60 [ 67.387355][ T4569] __se_sys_add_key+0x2a5/0x360 [ 67.387384][ T4569] __x64_sys_add_key+0x67/0x80 [ 67.387471][ T4569] x64_sys_call+0x1fa9/0x2550 [ 67.387498][ T4569] do_syscall_64+0x112/0x360 [ 67.387528][ T4569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.387552][ T4569] RIP: 0033:0x7f3655c7e559 [ 67.387620][ T4569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.387640][ T4569] RSP: 002b:00007f36546d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 67.387662][ T4569] RAX: ffffffffffffffda RBX: 00007f3655f05fa0 RCX: 00007f3655c7e559 [ 67.387686][ T4569] RDX: 0000200000000680 RSI: 0000000000000000 RDI: 0000200000000640 [ 67.387701][ T4569] RBP: 00007f3655d15ab8 R08: fffffffffffffffd R09: 0000000000000000 [ 67.387716][ T4569] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 67.387762][ T4569] R13: 00007f3655f06038 R14: 00007f3655f05fa0 R15: 00007ffd534434e8 [ 67.387782][ T4569] [ 67.408904][ T37] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 67.421489][ T4558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.426680][ T29] audit: type=1400 audit(1792232333.023:1752): avc: denied { write } for pid=4556 comm="syz.4.274" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.439980][ T4559] vhci_hcd: connection closed [ 67.445814][ T182] vhci_hcd vhci_hcd.4: stop threads [ 67.445832][ T182] vhci_hcd vhci_hcd.4: release socket [ 67.445857][ T182] vhci_hcd vhci_hcd.4: disconnect device [ 67.461758][ T37] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 67.461801][ T37] usb 9-1: enqueue for inactive port 0 [ 67.461824][ T37] usb 9-1: enqueue for inactive port 0 [ 67.461838][ T37] usb 9-1: enqueue for inactive port 0 [ 67.468162][ T4574] batadv_slave_0: entered promiscuous mode [ 67.548442][ T37] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 67.718008][ T29] audit: type=1400 audit(1792232333.313:1753): avc: denied { write } for pid=4573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.758820][ T29] audit: type=1400 audit(1792232333.353:1754): avc: denied { write } for pid=4588 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.855367][ T29] audit: type=1400 audit(1792232333.453:1755): avc: denied { create } for pid=4555 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.896270][ T4591] loop0: detected capacity change from 0 to 164 [ 67.898260][ T4591] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿ01777777777777777777777ÿÿ18446744073709551615ÿÿÿÿ² ëjÇX²b&㯳”§–ºóÆÎcÆ4/ÎîÞÎA%~‚® +±Ù¼î<ŒÇ©šT‡ÈFÍõ¶' [ 67.950186][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.011096][ T4595] Cannot find set identified by id 0 to match [ 68.041072][ T4593] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 68.288339][ T4572] batadv_slave_0: left promiscuous mode [ 68.309771][ T4642] netlink: 'syz.3.281': attribute type 27 has an invalid length. [ 68.623206][ T4650] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 68.646807][ T4645] loop4: detected capacity change from 0 to 512 [ 68.751990][ T4660] FAULT_INJECTION: forcing a failure. [ 68.751990][ T4660] name failslab, interval 1, probability 0, space 0, times 0 [ 68.752008][ T4660] CPU: 1 UID: 0 PID: 4660 Comm: syz.0.286 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.752097][ T4660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.752105][ T4660] Call Trace: [ 68.752109][ T4660] [ 68.752113][ T4660] __dump_stack+0x1d/0x30 [ 68.752188][ T4660] dump_stack_lvl+0x95/0xd0 [ 68.752273][ T4660] dump_stack+0x15/0x1b [ 68.752285][ T4660] should_fail_ex+0x262/0x280 [ 68.752324][ T4660] ? x509_key_preparse+0x168/0x420 [ 68.752339][ T4660] should_failslab+0x8c/0xb0 [ 68.752412][ T4660] __kmalloc_noprof+0xd0/0x4d0 [ 68.752431][ T4660] ? x509_key_preparse+0x168/0x420 [ 68.752447][ T4660] x509_key_preparse+0x168/0x420 [ 68.752541][ T4660] ? selinux_key_permission+0x161/0x190 [ 68.752555][ T4660] asymmetric_key_preparse+0x68/0xb0 [ 68.752597][ T4660] __key_create_or_update+0x29e/0x820 [ 68.752608][ T4660] ? key_task_permission+0x2ac/0x2c0 [ 68.752656][ T4660] key_create_or_update+0x42/0x60 [ 68.752751][ T4660] __se_sys_add_key+0x2a5/0x360 [ 68.752767][ T4660] __x64_sys_add_key+0x67/0x80 [ 68.752781][ T4660] x64_sys_call+0x1fa9/0x2550 [ 68.752868][ T4660] do_syscall_64+0x112/0x360 [ 68.752884][ T4660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.752935][ T4660] RIP: 0033:0x7f89592ce559 [ 68.752945][ T4660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.752957][ T4660] RSP: 002b:00007f8957d27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 68.752970][ T4660] RAX: ffffffffffffffda RBX: 00007f8959555fa0 RCX: 00007f89592ce559 [ 68.752978][ T4660] RDX: 0000200000000680 RSI: 0000000000000000 RDI: 0000200000000640 [ 68.752986][ T4660] RBP: 00007f8959365ab8 R08: fffffffffffffffd R09: 0000000000000000 [ 68.752994][ T4660] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 68.753070][ T4660] R13: 00007f8959556038 R14: 00007f8959555fa0 R15: 00007fff00ccfba8 [ 68.753083][ T4660] [ 69.227756][ T4669] __nla_validate_parse: 5 callbacks suppressed [ 69.227774][ T4669] netlink: 40 bytes leftover after parsing attributes in process `syz.3.288'. [ 69.309692][ T4672] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 69.309784][ T4672] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.309811][ T4672] vhci_hcd vhci_hcd.0: Device attached [ 69.351417][ T4672] loop2: detected capacity change from 0 to 4096 [ 69.371307][ T4672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.393256][ T4673] vhci_hcd: connection closed [ 69.393469][ T182] vhci_hcd vhci_hcd.2: stop threads [ 69.393487][ T182] vhci_hcd vhci_hcd.2: release socket [ 69.393505][ T182] vhci_hcd vhci_hcd.2: disconnect device [ 69.428524][ T4677] Cannot find set identified by id 0 to match [ 69.583346][ T4697] loop3: detected capacity change from 0 to 512 [ 69.587489][ T4697] vfat: Unknown parameter '' [ 69.900793][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.906859][ T4737] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 69.906883][ T4737] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.906915][ T4737] vhci_hcd vhci_hcd.0: Device attached [ 69.975674][ T4737] loop3: detected capacity change from 0 to 4096 [ 69.985090][ T4737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.001689][ T4738] vhci_hcd: connection closed [ 70.001915][ T51] vhci_hcd vhci_hcd.3: stop threads [ 70.001934][ T51] vhci_hcd vhci_hcd.3: release socket [ 70.001950][ T51] vhci_hcd vhci_hcd.3: disconnect device [ 70.062264][ T4745] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 70.062288][ T4745] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 70.062401][ T4745] vhci_hcd vhci_hcd.0: Device attached [ 70.142588][ T4745] loop1: detected capacity change from 0 to 4096 [ 70.160047][ T4745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.189631][ T4746] vhci_hcd: connection closed [ 70.190088][ T71] vhci_hcd vhci_hcd.1: stop threads [ 70.190107][ T71] vhci_hcd vhci_hcd.1: release socket [ 70.190206][ T71] vhci_hcd vhci_hcd.1: disconnect device [ 70.245309][ T4741] loop2: detected capacity change from 0 to 8192 [ 70.250304][ T37] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 70.527115][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.707955][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.839587][ T4766] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.887189][ T4764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.913240][ T4765] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 71.432732][ T4769] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 71.432758][ T4769] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.432786][ T4769] vhci_hcd vhci_hcd.0: Device attached [ 71.437431][ T4770] vhci_hcd: connection closed [ 71.437792][ T182] vhci_hcd vhci_hcd.2: stop threads [ 71.437810][ T182] vhci_hcd vhci_hcd.2: release socket [ 71.437825][ T182] vhci_hcd vhci_hcd.2: disconnect device [ 71.465624][ T4774] netlink: 104 bytes leftover after parsing attributes in process `syz.3.302'. [ 71.465641][ T4774] netlink: 'syz.3.302': attribute type 4 has an invalid length. [ 71.947210][ T4786] netlink: 40 bytes leftover after parsing attributes in process `syz.4.305'. [ 72.160038][ T4800] loop4: detected capacity change from 0 to 1024 [ 72.160724][ T4800] EXT4-fs: inline encryption not supported [ 72.168276][ T4800] __quota_error: 18 callbacks suppressed [ 72.168290][ T4800] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 72.168312][ T4800] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 72.168329][ T4800] EXT4-fs error (device loop4): ext4_acquire_dquot:7079: comm syz.4.310: Failed to acquire dquot type 0 [ 72.168407][ T4800] loop4: lost filesystem error report for type 5 error -117 [ 72.168685][ T4800] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 72.169031][ T4800] EXT4-fs (loop4): 1 truncate cleaned up [ 72.169372][ T4800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.199394][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.238434][ T4804] netlink: 40 bytes leftover after parsing attributes in process `syz.4.311'. [ 72.427520][ T4807] netlink: 196 bytes leftover after parsing attributes in process `syz.4.312'. [ 72.697095][ T4813] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 72.980733][ T4820] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 72.980793][ T4820] netlink: 220 bytes leftover after parsing attributes in process `syz.2.314'. [ 73.228778][ T4829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.319'. [ 73.387635][ T4837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.323'. [ 73.424810][ T4845] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 73.424832][ T4845] netlink: 220 bytes leftover after parsing attributes in process `syz.0.326'. [ 73.586812][ T4849] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 73.608318][ T4855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 74.228962][ T4860] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 74.447370][ T4868] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 74.447388][ T4868] netlink: 220 bytes leftover after parsing attributes in process `syz.1.333'. [ 74.765225][ T4880] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 74.765256][ T4880] netlink: 220 bytes leftover after parsing attributes in process `syz.1.337'. [ 74.788103][ T4882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.336'. [ 74.864804][ T29] audit: type=1326 audit(1792232340.463:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.1.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5291f3e559 code=0x7ffc0000 [ 74.864880][ T29] audit: type=1326 audit(1792232340.463:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.1.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5291f3e559 code=0x7ffc0000 [ 74.865086][ T29] audit: type=1326 audit(1792232340.463:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.1.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5291f3e559 code=0x7ffc0000 [ 74.865170][ T29] audit: type=1326 audit(1792232340.463:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.1.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5291f3e559 code=0x7ffc0000 [ 74.865311][ T29] audit: type=1326 audit(1792232340.463:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.1.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5291f3e559 code=0x7ffc0000 [ 74.865952][ T29] audit: type=1326 audit(1792232340.463:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.1.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5291f3e559 code=0x7ffc0000 [ 74.866074][ T29] audit: type=1326 audit(1792232340.463:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.1.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5291f3e559 code=0x7ffc0000 [ 74.866242][ T29] audit: type=1326 audit(1792232340.463:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.1.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5291f3e559 code=0x7ffc0000 [ 74.954104][ T4884] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 75.098018][ T4891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 75.699506][ T4904] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.044177][ T4911] netlink: 32 bytes leftover after parsing attributes in process `syz.1.348'. [ 76.408486][ T4917] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 76.408526][ T4917] netlink: 220 bytes leftover after parsing attributes in process `syz.0.351'. [ 76.445483][ T4915] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.518648][ T4919] Cannot find set identified by id 0 to match [ 76.594213][ T4936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.353'. [ 77.048584][ T4980] netlink: 40 bytes leftover after parsing attributes in process `syz.3.358'. [ 77.326441][ T4988] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 78.032182][ T4991] netlink: 'syz.3.362': attribute type 10 has an invalid length. [ 78.994903][ T5009] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 79.768433][ T29] kauditd_printk_skb: 677 callbacks suppressed [ 79.768493][ T29] audit: type=1326 audit(1792232345.363:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655c7e559 code=0x7ffc0000 [ 79.768517][ T29] audit: type=1326 audit(1792232345.363:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655c7e559 code=0x7ffc0000 [ 79.768608][ T29] audit: type=1326 audit(1792232345.363:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655c7e559 code=0x7ffc0000 [ 79.768631][ T29] audit: type=1326 audit(1792232345.363:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3655c7e559 code=0x7ffc0000 [ 79.769021][ T29] audit: type=1326 audit(1792232345.363:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655c7e559 code=0x7ffc0000 [ 79.769213][ T29] audit: type=1326 audit(1792232345.363:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655c7e559 code=0x7ffc0000 [ 79.769725][ T29] audit: type=1326 audit(1792232345.363:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655c7e559 code=0x7ffc0000 [ 79.769858][ T29] audit: type=1326 audit(1792232345.363:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655c7e559 code=0x7ffc0000 [ 79.769944][ T29] audit: type=1326 audit(1792232345.363:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3655c7e559 code=0x7ffc0000 [ 79.769990][ T29] audit: type=1326 audit(1792232345.363:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.3.373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3655c7e559 code=0x7ffc0000 [ 79.775768][ T5026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.371'. [ 80.638057][ T5040] netlink: 40 bytes leftover after parsing attributes in process `syz.3.377'. [ 80.964746][ T5050] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 81.479699][ T5052] netlink: 40 bytes leftover after parsing attributes in process `syz.0.380'. [ 81.703493][ T5059] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 81.800887][ T5060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.381'. [ 82.599715][ T5077] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.539990][ T5085] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 84.101122][ T5095] hub 1-0:1.0: USB hub found [ 84.101331][ T5095] hub 1-0:1.0: 8 ports detected [ 84.173377][ T5100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'. [ 85.000768][ T5110] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 85.000877][ T5110] netlink: 220 bytes leftover after parsing attributes in process `syz.2.398'. [ 85.007681][ T5113] netlink: 40 bytes leftover after parsing attributes in process `syz.4.400'. [ 85.171308][ T5119] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 85.375479][ T5125] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 85.375931][ T5125] netlink: 'syz.4.404': attribute type 10 has an invalid length. [ 85.377219][ T5125] team0: Port device dummy0 added [ 85.399874][ T5124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.545985][ T29] kauditd_printk_skb: 1226 callbacks suppressed [ 85.546001][ T29] audit: type=1400 audit(1792232351.143:3695): avc: denied { getopt } for pid=5132 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.660570][ T5143] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 85.755102][ T5150] netlink: 40 bytes leftover after parsing attributes in process `syz.1.414'. [ 85.987886][ T5158] FAULT_INJECTION: forcing a failure. [ 85.987886][ T5158] name failslab, interval 1, probability 0, space 0, times 0 [ 85.987917][ T5158] CPU: 1 UID: 0 PID: 5158 Comm: syz.4.417 Not tainted syzkaller #0 PREEMPT(lazy) [ 85.987958][ T5158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.987971][ T5158] Call Trace: [ 85.987978][ T5158] [ 85.987987][ T5158] __dump_stack+0x1d/0x30 [ 85.988081][ T5158] dump_stack_lvl+0x95/0xd0 [ 85.988106][ T5158] dump_stack+0x15/0x1b [ 85.988129][ T5158] should_fail_ex+0x262/0x280 [ 85.988161][ T5158] ? x509_get_sig_params+0x1df/0x290 [ 85.988191][ T5158] should_failslab+0x8c/0xb0 [ 85.988300][ T5158] __kmalloc_noprof+0xd0/0x4d0 [ 85.988369][ T5158] ? crypto_alloc_tfm_node+0x24f/0x280 [ 85.988436][ T5158] ? x509_get_sig_params+0x1df/0x290 [ 85.988475][ T5158] x509_get_sig_params+0x1df/0x290 [ 85.988505][ T5158] x509_cert_parse+0x2f9/0x450 [ 85.988575][ T5158] x509_key_preparse+0x3c/0x420 [ 85.988603][ T5158] ? selinux_key_permission+0x161/0x190 [ 85.988719][ T5158] asymmetric_key_preparse+0x68/0xb0 [ 85.988740][ T5158] __key_create_or_update+0x29e/0x820 [ 85.988762][ T5158] ? key_task_permission+0x2ac/0x2c0 [ 85.988795][ T5158] key_create_or_update+0x42/0x60 [ 85.988845][ T5158] __se_sys_add_key+0x2a5/0x360 [ 85.988873][ T5158] __x64_sys_add_key+0x67/0x80 [ 85.988896][ T5158] x64_sys_call+0x1fa9/0x2550 [ 85.988988][ T5158] do_syscall_64+0x112/0x360 [ 85.989086][ T5158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.989106][ T5158] RIP: 0033:0x7fc77b0de559 [ 85.989121][ T5158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.989138][ T5158] RSP: 002b:00007fc779b37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 85.989158][ T5158] RAX: ffffffffffffffda RBX: 00007fc77b365fa0 RCX: 00007fc77b0de559 [ 85.989187][ T5158] RDX: 0000200000000680 RSI: 0000000000000000 RDI: 0000200000000640 [ 85.989199][ T5158] RBP: 00007fc77b175ab8 R08: fffffffffffffffd R09: 0000000000000000 [ 85.989217][ T5158] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 85.989229][ T5158] R13: 00007fc77b366038 R14: 00007fc77b365fa0 R15: 00007ffc3d910d58 [ 85.989258][ T5158] [ 86.032907][ T5161] FAULT_INJECTION: forcing a failure. [ 86.032907][ T5161] name failslab, interval 1, probability 0, space 0, times 0 [ 86.033070][ T5161] CPU: 0 UID: 0 PID: 5161 Comm: syz.4.419 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.033096][ T5161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.033109][ T5161] Call Trace: [ 86.033116][ T5161] [ 86.033124][ T5161] __dump_stack+0x1d/0x30 [ 86.033228][ T5161] dump_stack_lvl+0x95/0xd0 [ 86.033255][ T5161] dump_stack+0x15/0x1b [ 86.033276][ T5161] should_fail_ex+0x262/0x280 [ 86.033350][ T5161] ? x509_get_sig_params+0x1df/0x290 [ 86.033378][ T5161] should_failslab+0x8c/0xb0 [ 86.033454][ T5161] __kmalloc_noprof+0xd0/0x4d0 [ 86.033496][ T5161] ? crypto_alloc_tfm_node+0x24f/0x280 [ 86.033523][ T5161] ? x509_get_sig_params+0x1df/0x290 [ 86.033552][ T5161] x509_get_sig_params+0x1df/0x290 [ 86.033654][ T5161] x509_cert_parse+0x2f9/0x450 [ 86.033682][ T5161] x509_key_preparse+0x3c/0x420 [ 86.033709][ T5161] ? selinux_key_permission+0x161/0x190 [ 86.033734][ T5161] asymmetric_key_preparse+0x68/0xb0 [ 86.033829][ T5161] __key_create_or_update+0x29e/0x820 [ 86.033849][ T5161] ? key_task_permission+0x2ac/0x2c0 [ 86.033980][ T5161] key_create_or_update+0x42/0x60 [ 86.034044][ T5161] __se_sys_add_key+0x2a5/0x360 [ 86.034073][ T5161] __x64_sys_add_key+0x67/0x80 [ 86.034099][ T5161] x64_sys_call+0x1fa9/0x2550 [ 86.034200][ T5161] do_syscall_64+0x112/0x360 [ 86.034229][ T5161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.034252][ T5161] RIP: 0033:0x7fc77b0de559 [ 86.034325][ T5161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.034345][ T5161] RSP: 002b:00007fc779b37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 86.034367][ T5161] RAX: ffffffffffffffda RBX: 00007fc77b365fa0 RCX: 00007fc77b0de559 [ 86.034383][ T5161] RDX: 0000200000000680 RSI: 0000000000000000 RDI: 0000200000000640 [ 86.034398][ T5161] RBP: 00007fc77b175ab8 R08: fffffffffffffffd R09: 0000000000000000 [ 86.034413][ T5161] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 86.034473][ T5161] R13: 00007fc77b366038 R14: 00007fc77b365fa0 R15: 00007ffc3d910d58 [ 86.034497][ T5161] [ 86.064826][ T5163] netlink: 48 bytes leftover after parsing attributes in process `syz.4.420'. [ 86.233880][ T5170] netlink: 48 bytes leftover after parsing attributes in process `syz.0.423'. [ 86.247115][ T5171] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 86.247182][ T5171] netlink: 220 bytes leftover after parsing attributes in process `syz.1.421'. [ 86.485901][ T5177] hub 1-0:1.0: USB hub found [ 86.487550][ T5177] hub 1-0:1.0: 8 ports detected [ 86.501363][ T5178] netlink: 40 bytes leftover after parsing attributes in process `syz.4.426'. [ 86.726334][ T5189] FAULT_INJECTION: forcing a failure. [ 86.726334][ T5189] name failslab, interval 1, probability 0, space 0, times 0 [ 86.726364][ T5189] CPU: 1 UID: 0 PID: 5189 Comm: syz.1.430 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.726392][ T5189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.726406][ T5189] Call Trace: [ 86.726419][ T5189] [ 86.726427][ T5189] __dump_stack+0x1d/0x30 [ 86.726454][ T5189] dump_stack_lvl+0x95/0xd0 [ 86.726478][ T5189] dump_stack+0x15/0x1b [ 86.726501][ T5189] should_fail_ex+0x262/0x280 [ 86.726559][ T5189] ? x509_get_sig_params+0x1df/0x290 [ 86.726588][ T5189] should_failslab+0x8c/0xb0 [ 86.726641][ T5189] __kmalloc_noprof+0xd0/0x4d0 [ 86.726679][ T5189] ? crypto_alloc_tfm_node+0x24f/0x280 [ 86.726731][ T5189] ? x509_get_sig_params+0x1df/0x290 [ 86.726763][ T5189] x509_get_sig_params+0x1df/0x290 [ 86.726793][ T5189] x509_cert_parse+0x2f9/0x450 [ 86.726881][ T5189] x509_key_preparse+0x3c/0x420 [ 86.726911][ T5189] ? selinux_key_permission+0x161/0x190 [ 86.726938][ T5189] asymmetric_key_preparse+0x68/0xb0 [ 86.726964][ T5189] __key_create_or_update+0x29e/0x820 [ 86.726993][ T5189] ? key_task_permission+0x2ac/0x2c0 [ 86.727107][ T5189] key_create_or_update+0x42/0x60 [ 86.727147][ T5189] __se_sys_add_key+0x2a5/0x360 [ 86.727178][ T5189] __x64_sys_add_key+0x67/0x80 [ 86.727238][ T5189] x64_sys_call+0x1fa9/0x2550 [ 86.727304][ T5189] do_syscall_64+0x112/0x360 [ 86.727336][ T5189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.727360][ T5189] RIP: 0033:0x7f5291f3e559 [ 86.727378][ T5189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.727473][ T5189] RSP: 002b:00007f5290997028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 86.727496][ T5189] RAX: ffffffffffffffda RBX: 00007f52921c5fa0 RCX: 00007f5291f3e559 [ 86.727512][ T5189] RDX: 0000200000000680 RSI: 0000000000000000 RDI: 0000200000000640 [ 86.727528][ T5189] RBP: 00007f5291fd5ab8 R08: fffffffffffffffd R09: 0000000000000000 [ 86.727543][ T5189] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 86.727558][ T5189] R13: 00007f52921c6038 R14: 00007f52921c5fa0 R15: 00007ffc93b4daa8 [ 86.727581][ T5189] [ 86.830155][ T5194] netlink: 32 bytes leftover after parsing attributes in process `syz.3.429'. [ 87.042735][ T5200] netlink: 'syz.1.434': attribute type 1 has an invalid length. [ 87.098200][ T5202] netlink: 'syz.4.436': attribute type 1 has an invalid length. [ 87.098472][ T5202] netlink: 220 bytes leftover after parsing attributes in process `syz.4.436'. [ 87.159985][ T5200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.171367][ T5203] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.180148][ T5200] FAULT_INJECTION: forcing a failure. [ 87.180148][ T5200] name failslab, interval 1, probability 0, space 0, times 0 [ 87.180221][ T5200] CPU: 1 UID: 0 PID: 5200 Comm: syz.1.434 Not tainted syzkaller #0 PREEMPT(lazy) [ 87.180263][ T5200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.180276][ T5200] Call Trace: [ 87.180290][ T5200] [ 87.180298][ T5200] __dump_stack+0x1d/0x30 [ 87.180326][ T5200] dump_stack_lvl+0x95/0xd0 [ 87.180432][ T5200] dump_stack+0x15/0x1b [ 87.180456][ T5200] should_fail_ex+0x262/0x280 [ 87.180487][ T5200] ? __get_vm_area_node+0x125/0x1f0 [ 87.180564][ T5200] should_failslab+0x8c/0xb0 [ 87.180593][ T5200] __kmalloc_cache_node_noprof+0x81/0x420 [ 87.180624][ T5200] ? try_charge_memcg+0x269/0xae0 [ 87.180695][ T5200] ? __get_vm_area_node+0x125/0x1f0 [ 87.180807][ T5200] ? __css_rstat_updated+0xbb/0x280 [ 87.180828][ T5200] __get_vm_area_node+0x125/0x1f0 [ 87.180896][ T5200] __vmalloc_node_range_noprof+0x262/0x1000 [ 87.180927][ T5200] ? copy_process+0x5a0/0x23a0 [ 87.181001][ T5200] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 87.181049][ T5200] __vmalloc_node_noprof+0x89/0xc0 [ 87.181066][ T5200] ? copy_process+0x5a0/0x23a0 [ 87.181085][ T5200] ? copy_process+0x5a0/0x23a0 [ 87.181190][ T5200] dup_task_struct+0x22a/0x750 [ 87.181213][ T5200] copy_process+0x5a0/0x23a0 [ 87.181326][ T5200] ? xfd_validate_state+0x45/0xf0 [ 87.181394][ T5200] ? ktime_get+0x212/0x240 [ 87.181420][ T5200] kernel_clone+0x1c0/0x5f0 [ 87.181498][ T5200] ? do_futex+0x3f8/0x460 [ 87.181527][ T5200] __x64_sys_clone+0x143/0x180 [ 87.181555][ T5200] x64_sys_call+0x2479/0x2550 [ 87.181601][ T5200] do_syscall_64+0x112/0x360 [ 87.181625][ T5200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.181649][ T5200] RIP: 0033:0x7f5291f3e559 [ 87.181664][ T5200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.181681][ T5200] RSP: 002b:00007f5290996fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 87.181700][ T5200] RAX: ffffffffffffffda RBX: 00007f52921c5fa0 RCX: 00007f5291f3e559 [ 87.181713][ T5200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 87.181725][ T5200] RBP: 00007f5291fd5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 87.181804][ T5200] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 87.181815][ T5200] R13: 00007f52921c6038 R14: 00007f52921c5fa0 R15: 00007ffc93b4daa8 [ 87.181833][ T5200] [ 87.189498][ T5200] syz.1.434: vmalloc error: size 16384, align 0x4000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 87.189571][ T5200] CPU: 0 UID: 0 PID: 5200 Comm: syz.1.434 Not tainted syzkaller #0 PREEMPT(lazy) [ 87.189597][ T5200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.189610][ T5200] Call Trace: [ 87.189616][ T5200] [ 87.189688][ T5200] __dump_stack+0x1d/0x30 [ 87.189713][ T5200] dump_stack_lvl+0x95/0xd0 [ 87.189766][ T5200] dump_stack+0x15/0x1b [ 87.189794][ T5200] warn_alloc+0x146/0x1c0 [ 87.189814][ T5200] ? __css_rstat_updated+0xbb/0x280 [ 87.189842][ T5200] __vmalloc_node_range_noprof+0x28a/0x1000 [ 87.190000][ T5200] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 87.190034][ T5200] __vmalloc_node_noprof+0x89/0xc0 [ 87.190054][ T5200] ? copy_process+0x5a0/0x23a0 [ 87.190077][ T5200] ? copy_process+0x5a0/0x23a0 [ 87.190158][ T5200] dup_task_struct+0x22a/0x750 [ 87.190183][ T5200] copy_process+0x5a0/0x23a0 [ 87.190209][ T5200] ? xfd_validate_state+0x45/0xf0 [ 87.190267][ T5200] ? ktime_get+0x212/0x240 [ 87.190296][ T5200] kernel_clone+0x1c0/0x5f0 [ 87.190322][ T5200] ? do_futex+0x3f8/0x460 [ 87.190389][ T5200] __x64_sys_clone+0x143/0x180 [ 87.190486][ T5200] x64_sys_call+0x2479/0x2550 [ 87.190512][ T5200] do_syscall_64+0x112/0x360 [ 87.190679][ T5200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.190702][ T5200] RIP: 0033:0x7f5291f3e559 [ 87.190776][ T5200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.190801][ T5200] RSP: 002b:00007f5290996fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 87.190821][ T5200] RAX: ffffffffffffffda RBX: 00007f52921c5fa0 RCX: 00007f5291f3e559 [ 87.190837][ T5200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 87.190851][ T5200] RBP: 00007f5291fd5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 87.190922][ T5200] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 87.190936][ T5200] R13: 00007f52921c6038 R14: 00007f52921c5fa0 R15: 00007ffc93b4daa8 [ 87.190962][ T5200] [ 87.191611][ T5200] Mem-Info: [ 87.191618][ T5200] active_anon:5396 inactive_anon:37593 isolated_anon:0 [ 87.191618][ T5200] active_file:11155 inactive_file:12091 isolated_file:0 [ 87.191618][ T5200] unevictable:0 dirty:161 writeback:0 [ 87.191618][ T5200] slab_reclaimable:3257 slab_unreclaimable:16363 [ 87.191618][ T5200] mapped:33418 shmem:36987 pagetables:1368 [ 87.191618][ T5200] sec_pagetables:0 bounce:0 [ 87.191618][ T5200] kernel_misc_reclaimable:0 [ 87.191618][ T5200] free:1846847 free_pcp:4349 free_cma:0 [ 87.191719][ T5200] Node 0 active_anon:21584kB inactive_anon:150372kB active_file:44620kB inactive_file:48364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133672kB dirty:644kB writeback:0kB shmem:147948kB kernel_stack:3696kB pagetables:5472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 87.191847][ T5200] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.191920][ T5200] lowmem_reserve[]: 0 2878 7856 7856 [ 87.192015][ T5200] Node 0 DMA32 free:2943616kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947140kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 87.192666][ T5200] lowmem_reserve[]: 0 0 4978 4978 [ 87.192768][ T5200] Node 0 Normal free:4428412kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21584kB inactive_anon:150372kB active_file:44620kB inactive_file:48364kB unevictable:0kB writepending:644kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:13872kB local_pcp:11164kB free_cma:0kB [ 87.192898][ T5200] lowmem_reserve[]: 0 0 0 0 [ 87.192999][ T5200] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 87.194268][ T5200] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 2*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943616kB [ 87.194536][ T5200] Node 0 Normal: 1*4kB (E) 1*8kB (M) 1*16kB (E) 1*32kB (M) 3*64kB (UME) 7*128kB (UE) 8*256kB (UM) 1*512kB (E) 1*1024kB (M) 2*2048kB (UE) 1079*4096kB (UM) = 4428412kB [ 87.194987][ T5200] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 87.195005][ T5200] 60229 total pagecache pages [ 87.195013][ T5200] 0 pages in swap cache [ 87.195019][ T5200] Free swap = 124996kB [ 87.195027][ T5200] Total swap = 124996kB [ 87.195065][ T5200] 2097051 pages RAM [ 87.195071][ T5200] 0 pages HighMem/MovableOnly [ 87.195078][ T5200] 81869 pages reserved [ 87.308527][ T5200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.314281][ T5200] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 87.338348][ T5200] bond1: (slave gre1): Error -95 calling set_mac_address [ 87.686371][ T5216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.440'. [ 88.246137][ T5226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 88.246370][ T5227] FAULT_INJECTION: forcing a failure. [ 88.246370][ T5227] name failslab, interval 1, probability 0, space 0, times 0 [ 88.246395][ T5227] CPU: 0 UID: 0 PID: 5227 Comm: syz.3.444 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.246479][ T5227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.246494][ T5227] Call Trace: [ 88.246501][ T5227] [ 88.246510][ T5227] __dump_stack+0x1d/0x30 [ 88.246539][ T5227] dump_stack_lvl+0x95/0xd0 [ 88.246564][ T5227] dump_stack+0x15/0x1b [ 88.246662][ T5227] should_fail_ex+0x262/0x280 [ 88.246695][ T5227] ? x509_get_sig_params+0x1df/0x290 [ 88.246721][ T5227] should_failslab+0x8c/0xb0 [ 88.246805][ T5227] __kmalloc_noprof+0xd0/0x4d0 [ 88.246980][ T5227] ? crypto_alloc_tfm_node+0x24f/0x280 [ 88.247011][ T5227] ? x509_get_sig_params+0x1df/0x290 [ 88.247043][ T5227] x509_get_sig_params+0x1df/0x290 [ 88.247073][ T5227] x509_cert_parse+0x2f9/0x450 [ 88.247134][ T5227] x509_key_preparse+0x3c/0x420 [ 88.247163][ T5227] ? selinux_key_permission+0x161/0x190 [ 88.247186][ T5227] asymmetric_key_preparse+0x68/0xb0 [ 88.247279][ T5227] __key_create_or_update+0x29e/0x820 [ 88.247298][ T5227] ? key_task_permission+0x2ac/0x2c0 [ 88.247395][ T5227] key_create_or_update+0x42/0x60 [ 88.247431][ T5227] __se_sys_add_key+0x2a5/0x360 [ 88.247514][ T5227] __x64_sys_add_key+0x67/0x80 [ 88.247538][ T5227] x64_sys_call+0x1fa9/0x2550 [ 88.247625][ T5227] do_syscall_64+0x112/0x360 [ 88.247725][ T5227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.247804][ T5227] RIP: 0033:0x7f3655c7e559 [ 88.247822][ T5227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.247844][ T5227] RSP: 002b:00007f36546d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 88.247867][ T5227] RAX: ffffffffffffffda RBX: 00007f3655f05fa0 RCX: 00007f3655c7e559 [ 88.247912][ T5227] RDX: 0000200000000680 RSI: 0000000000000000 RDI: 0000200000000640 [ 88.247925][ T5227] RBP: 00007f3655d15ab8 R08: fffffffffffffffd R09: 0000000000000000 [ 88.248006][ T5227] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 88.248022][ T5227] R13: 00007f3655f06038 R14: 00007f3655f05fa0 R15: 00007ffd534434e8 [ 88.248069][ T5227] [ 88.312222][ T5224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.591052][ T5235] netlink: 'syz.3.448': attribute type 1 has an invalid length. [ 88.596162][ T5235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.642554][ T5235] FAULT_INJECTION: forcing a failure. [ 88.642554][ T5235] name failslab, interval 1, probability 0, space 0, times 0 [ 88.642582][ T5235] CPU: 0 UID: 0 PID: 5235 Comm: syz.3.448 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.642609][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.642656][ T5235] Call Trace: [ 88.642663][ T5235] [ 88.642672][ T5235] __dump_stack+0x1d/0x30 [ 88.642698][ T5235] dump_stack_lvl+0x95/0xd0 [ 88.642718][ T5235] dump_stack+0x15/0x1b [ 88.642776][ T5235] should_fail_ex+0x262/0x280 [ 88.642807][ T5235] ? dup_task_struct+0x5a/0x750 [ 88.642830][ T5235] should_failslab+0x8c/0xb0 [ 88.642938][ T5235] kmem_cache_alloc_node_noprof+0x82/0x400 [ 88.643007][ T5235] ? __rcu_read_unlock+0x4e/0x70 [ 88.643054][ T5235] ? dup_task_struct+0x5a/0x750 [ 88.643080][ T5235] dup_task_struct+0x5a/0x750 [ 88.643104][ T5235] copy_process+0x5a0/0x23a0 [ 88.643155][ T5235] kernel_clone+0x1c0/0x5f0 [ 88.643183][ T5235] ? do_futex+0x391/0x460 [ 88.643213][ T5235] __x64_sys_clone+0x143/0x180 [ 88.643268][ T5235] x64_sys_call+0x2479/0x2550 [ 88.643297][ T5235] do_syscall_64+0x112/0x360 [ 88.643328][ T5235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.643353][ T5235] RIP: 0033:0x7f3655c7e559 [ 88.643369][ T5235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.643433][ T5235] RSP: 002b:00007f36546d6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 88.643452][ T5235] RAX: ffffffffffffffda RBX: 00007f3655f05fa0 RCX: 00007f3655c7e559 [ 88.643465][ T5235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 88.643477][ T5235] RBP: 00007f3655d15ab8 R08: 0000000000000000 R09: 0000000000000000 [ 88.643526][ T5235] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 88.643589][ T5235] R13: 00007f3655f06038 R14: 00007f3655f05fa0 R15: 00007ffd534434e8 [ 88.643611][ T5235] [ 88.717378][ T5235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.725457][ T5235] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 88.752584][ T5235] bond1: (slave gre1): Error -95 calling set_mac_address [ 88.981150][ T5243] netlink: 'syz.0.450': attribute type 1 has an invalid length. [ 88.988885][ T5243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.011056][ T5243] FAULT_INJECTION: forcing a failure. [ 89.011056][ T5243] name failslab, interval 1, probability 0, space 0, times 0 [ 89.011086][ T5243] CPU: 0 UID: 0 PID: 5243 Comm: syz.0.450 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.011154][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.011168][ T5243] Call Trace: [ 89.011175][ T5243] [ 89.011184][ T5243] __dump_stack+0x1d/0x30 [ 89.011213][ T5243] dump_stack_lvl+0x95/0xd0 [ 89.011275][ T5243] dump_stack+0x15/0x1b [ 89.011298][ T5243] should_fail_ex+0x262/0x280 [ 89.011331][ T5243] ? dup_task_struct+0x5a/0x750 [ 89.011392][ T5243] should_failslab+0x8c/0xb0 [ 89.011422][ T5243] kmem_cache_alloc_node_noprof+0x82/0x400 [ 89.011521][ T5243] ? __rcu_read_unlock+0x4e/0x70 [ 89.011556][ T5243] ? dup_task_struct+0x5a/0x750 [ 89.011676][ T5243] dup_task_struct+0x5a/0x750 [ 89.011704][ T5243] copy_process+0x5a0/0x23a0 [ 89.011761][ T5243] kernel_clone+0x1c0/0x5f0 [ 89.011784][ T5243] ? do_futex+0x391/0x460 [ 89.011814][ T5243] __x64_sys_clone+0x143/0x180 [ 89.011903][ T5243] x64_sys_call+0x2479/0x2550 [ 89.011927][ T5243] do_syscall_64+0x112/0x360 [ 89.012076][ T5243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.012103][ T5243] RIP: 0033:0x7f89592ce559 [ 89.012118][ T5243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.012136][ T5243] RSP: 002b:00007f8957d26fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 89.012192][ T5243] RAX: ffffffffffffffda RBX: 00007f8959555fa0 RCX: 00007f89592ce559 [ 89.012209][ T5243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 89.012252][ T5243] RBP: 00007f8959365ab8 R08: 0000000000000000 R09: 0000000000000000 [ 89.012266][ T5243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 89.012278][ T5243] R13: 00007f8959556038 R14: 00007f8959555fa0 R15: 00007fff00ccfba8 [ 89.012368][ T5243] [ 89.081624][ T5246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.082138][ T5246] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 89.088684][ T5246] bond1: (slave gre1): Error -95 calling set_mac_address [ 89.424048][ T5254] netlink: 'syz.3.454': attribute type 1 has an invalid length. [ 91.323690][ T5276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.357307][ T5278] netlink: 'syz.4.463': attribute type 1 has an invalid length. [ 91.377103][ T5278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.388534][ T5276] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 91.409068][ T5276] netlink: 'syz.2.462': attribute type 10 has an invalid length. [ 91.433325][ T5276] team0: Port device dummy0 added [ 91.442590][ T5278] FAULT_INJECTION: forcing a failure. [ 91.442590][ T5278] name failslab, interval 1, probability 0, space 0, times 0 [ 91.442660][ T5278] CPU: 1 UID: 0 PID: 5278 Comm: syz.4.463 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.442686][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.442700][ T5278] Call Trace: [ 91.442707][ T5278] [ 91.442714][ T5278] __dump_stack+0x1d/0x30 [ 91.442748][ T5278] dump_stack_lvl+0x95/0xd0 [ 91.442772][ T5278] dump_stack+0x15/0x1b [ 91.442794][ T5278] should_fail_ex+0x262/0x280 [ 91.442823][ T5278] ? dup_task_struct+0x5a/0x750 [ 91.442847][ T5278] should_failslab+0x8c/0xb0 [ 91.442926][ T5278] kmem_cache_alloc_node_noprof+0x82/0x400 [ 91.442995][ T5278] ? __rcu_read_unlock+0x4e/0x70 [ 91.443027][ T5278] ? dup_task_struct+0x5a/0x750 [ 91.443079][ T5278] dup_task_struct+0x5a/0x750 [ 91.443167][ T5278] copy_process+0x5a0/0x23a0 [ 91.443198][ T5278] kernel_clone+0x1c0/0x5f0 [ 91.443224][ T5278] ? do_futex+0x391/0x460 [ 91.443262][ T5278] __x64_sys_clone+0x143/0x180 [ 91.443293][ T5278] x64_sys_call+0x2479/0x2550 [ 91.443381][ T5278] do_syscall_64+0x112/0x360 [ 91.443410][ T5278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.443489][ T5278] RIP: 0033:0x7fc77b0de559 [ 91.443506][ T5278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.443525][ T5278] RSP: 002b:00007fc779b36fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 91.443547][ T5278] RAX: ffffffffffffffda RBX: 00007fc77b365fa0 RCX: 00007fc77b0de559 [ 91.443562][ T5278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 91.443576][ T5278] RBP: 00007fc77b175ab8 R08: 0000000000000000 R09: 0000000000000000 [ 91.443652][ T5278] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 91.443666][ T5278] R13: 00007fc77b366038 R14: 00007fc77b365fa0 R15: 00007ffc3d910d58 [ 91.443687][ T5278] [ 91.523370][ T5280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.523887][ T5280] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 91.524728][ T5280] bond1: (slave gre1): Error -95 calling set_mac_address [ 92.139672][ T5283] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.184959][ T5283] team0: Port device dummy0 removed [ 92.188306][ T5283] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.461905][ T5295] __nla_validate_parse: 2 callbacks suppressed [ 94.461979][ T5295] netlink: 160 bytes leftover after parsing attributes in process `syz.3.470'. [ 94.461991][ T5295] netlink: 5 bytes leftover after parsing attributes in process `syz.3.470'. [ 98.518715][ T5314] netlink: 40 bytes leftover after parsing attributes in process `syz.2.475'. [ 102.885682][ T5328] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.999788][ T71] bond0 (unregistering): Released all slaves [ 103.003985][ T71] bond1 (unregistering): Released all slaves [ 103.119835][ T71] hsr_slave_0: left promiscuous mode [ 103.120222][ T71] hsr_slave_1: left promiscuous mode [ 103.172024][ T29] audit: type=1400 audit(1792232368.773:3696): avc: denied { write } for pid=5343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.227651][ T29] audit: type=1400 audit(1792232368.823:3697): avc: denied { write } for pid=5354 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.277806][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 103.372568][ T5328] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.372602][ T5328] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.372684][ T5328] bridge_slave_0: entered allmulticast mode [ 103.373014][ T5328] bridge_slave_0: entered promiscuous mode [ 103.374942][ T5328] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.374972][ T5328] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.375026][ T5328] bridge_slave_1: entered allmulticast mode [ 103.375963][ T5328] bridge_slave_1: entered promiscuous mode [ 103.397455][ T5328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.399792][ T5328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.421555][ T5328] team0: Port device team_slave_0 added [ 103.422765][ T5328] team0: Port device team_slave_1 added [ 103.443550][ T5328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.443562][ T5328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.443629][ T5328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.445367][ T5328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.445379][ T5328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.445406][ T5328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.491127][ T5328] hsr_slave_0: entered promiscuous mode [ 103.491500][ T5328] hsr_slave_1: entered promiscuous mode [ 103.491670][ T5328] debugfs: 'hsr0' already exists in 'hsr' [ 103.491682][ T5328] Cannot create hsr debugfs directory [ 103.588777][ T29] audit: type=1400 audit(1792232369.183:3698): avc: denied { write } for pid=5360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.629953][ T29] audit: type=1400 audit(1792232369.223:3699): avc: denied { write } for pid=5375 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.776353][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 103.852170][ T5328] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.865276][ T5328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.865730][ T5328] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.870747][ T5328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.871153][ T5328] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.876588][ T5328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.877064][ T5328] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.882938][ T5328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.901913][ T5386] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 103.921757][ T5396] netlink: 'syz.3.482': attribute type 1 has an invalid length. [ 103.936205][ T5396] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.961047][ T5396] FAULT_INJECTION: forcing a failure. [ 103.961047][ T5396] name failslab, interval 1, probability 0, space 0, times 0 [ 103.961136][ T5396] CPU: 1 UID: 0 PID: 5396 Comm: syz.3.482 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.961158][ T5396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.961169][ T5396] Call Trace: [ 103.961177][ T5396] [ 103.961185][ T5396] __dump_stack+0x1d/0x30 [ 103.961226][ T5396] dump_stack_lvl+0x95/0xd0 [ 103.961252][ T5396] dump_stack+0x15/0x1b [ 103.961321][ T5396] should_fail_ex+0x262/0x280 [ 103.961371][ T5396] ? __get_vm_area_node+0x125/0x1f0 [ 103.961435][ T5396] should_failslab+0x8c/0xb0 [ 103.961472][ T5396] __kmalloc_cache_node_noprof+0x81/0x420 [ 103.961578][ T5396] ? try_charge_memcg+0x269/0xae0 [ 103.961612][ T5396] ? __get_vm_area_node+0x125/0x1f0 [ 103.961658][ T5396] ? __css_rstat_updated+0xbb/0x280 [ 103.961682][ T5396] __get_vm_area_node+0x125/0x1f0 [ 103.961712][ T5396] __vmalloc_node_range_noprof+0x262/0x1000 [ 103.961823][ T5396] ? copy_process+0x5a0/0x23a0 [ 103.961844][ T5396] ? __obj_cgroup_charge+0x194/0x250 [ 103.961869][ T5396] ? __refill_obj_stock+0x1f8/0x3d0 [ 103.961937][ T5396] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 103.961973][ T5396] __vmalloc_node_noprof+0x89/0xc0 [ 103.961993][ T5396] ? copy_process+0x5a0/0x23a0 [ 103.962014][ T5396] ? copy_process+0x5a0/0x23a0 [ 103.962079][ T5396] dup_task_struct+0x22a/0x750 [ 103.962124][ T5396] copy_process+0x5a0/0x23a0 [ 103.962242][ T5396] kernel_clone+0x1c0/0x5f0 [ 103.962288][ T5396] ? do_futex+0x3f8/0x460 [ 103.962324][ T5396] __x64_sys_clone+0x143/0x180 [ 103.962356][ T5396] x64_sys_call+0x2479/0x2550 [ 103.962378][ T5396] do_syscall_64+0x112/0x360 [ 103.962413][ T5396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.962513][ T5396] RIP: 0033:0x7f3655c7e559 [ 103.962528][ T5396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.962549][ T5396] RSP: 002b:00007f36546d6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 103.962572][ T5396] RAX: ffffffffffffffda RBX: 00007f3655f05fa0 RCX: 00007f3655c7e559 [ 103.962586][ T5396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 103.962619][ T5396] RBP: 00007f3655d15ab8 R08: 0000000000000000 R09: 0000000000000000 [ 103.962661][ T5396] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 103.962676][ T5396] R13: 00007f3655f06038 R14: 00007f3655f05fa0 R15: 00007ffd534434e8 [ 103.962698][ T5396] [ 103.968666][ T5396] syz.3.482: vmalloc error: size 16384, align 0x4000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 103.968717][ T5396] CPU: 1 UID: 0 PID: 5396 Comm: syz.3.482 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.968742][ T5396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.968774][ T5396] Call Trace: [ 103.968781][ T5396] [ 103.968789][ T5396] __dump_stack+0x1d/0x30 [ 103.968845][ T5396] dump_stack_lvl+0x95/0xd0 [ 103.968865][ T5396] dump_stack+0x15/0x1b [ 103.968884][ T5396] warn_alloc+0x146/0x1c0 [ 103.968906][ T5396] ? __css_rstat_updated+0xbb/0x280 [ 103.968966][ T5396] __vmalloc_node_range_noprof+0x28a/0x1000 [ 103.969050][ T5396] ? __obj_cgroup_charge+0x194/0x250 [ 103.969145][ T5396] ? __refill_obj_stock+0x1f8/0x3d0 [ 103.969253][ T5396] ? __memcg_slab_post_alloc_hook+0x367/0x8d0 [ 103.969337][ T5396] __vmalloc_node_noprof+0x89/0xc0 [ 103.969392][ T5396] ? copy_process+0x5a0/0x23a0 [ 103.969418][ T5396] ? copy_process+0x5a0/0x23a0 [ 103.969442][ T5396] dup_task_struct+0x22a/0x750 [ 103.969486][ T5396] copy_process+0x5a0/0x23a0 [ 103.969594][ T5396] kernel_clone+0x1c0/0x5f0 [ 103.969622][ T5396] ? do_futex+0x3f8/0x460 [ 103.969657][ T5396] __x64_sys_clone+0x143/0x180 [ 103.969703][ T5396] x64_sys_call+0x2479/0x2550 [ 103.969733][ T5396] do_syscall_64+0x112/0x360 [ 103.969764][ T5396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.969788][ T5396] RIP: 0033:0x7f3655c7e559 [ 103.969817][ T5396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.969837][ T5396] RSP: 002b:00007f36546d6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 103.969855][ T5396] RAX: ffffffffffffffda RBX: 00007f3655f05fa0 RCX: 00007f3655c7e559 [ 103.969868][ T5396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 103.969882][ T5396] RBP: 00007f3655d15ab8 R08: 0000000000000000 R09: 0000000000000000 [ 103.969894][ T5396] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 103.969906][ T5396] R13: 00007f3655f06038 R14: 00007f3655f05fa0 R15: 00007ffd534434e8 [ 103.969995][ T5396] [ 103.970002][ T5396] Mem-Info: [ 103.970007][ T5396] active_anon:5047 inactive_anon:35240 isolated_anon:0 [ 103.970007][ T5396] active_file:11450 inactive_file:14049 isolated_file:0 [ 103.970007][ T5396] unevictable:0 dirty:67 writeback:0 [ 103.970007][ T5396] slab_reclaimable:3322 slab_unreclaimable:16452 [ 103.970007][ T5396] mapped:29363 shmem:34147 pagetables:1303 [ 103.970007][ T5396] sec_pagetables:0 bounce:0 [ 103.970007][ T5396] kernel_misc_reclaimable:0 [ 103.970007][ T5396] free:1848366 free_pcp:3227 free_cma:0 [ 103.973601][ T5396] Node 0 active_anon:20188kB inactive_anon:140960kB active_file:45800kB inactive_file:56196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117452kB dirty:268kB writeback:0kB shmem:136588kB kernel_stack:3632kB pagetables:5212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 103.973705][ T5396] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 103.973822][ T5396] lowmem_reserve[]: 0 2878 7856 7856 [ 103.973852][ T5396] Node 0 DMA32 free:2943616kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947140kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 103.973958][ T5396] lowmem_reserve[]: 0 0 4978 4978 [ 103.974016][ T5396] Node 0 Normal free:4434488kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20188kB inactive_anon:140960kB active_file:45800kB inactive_file:56196kB unevictable:0kB writepending:268kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:9368kB local_pcp:2396kB free_cma:0kB [ 103.974094][ T5396] lowmem_reserve[]: 0 0 0 0 [ 103.974122][ T5396] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 103.974355][ T5396] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 2*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943616kB [ 103.974592][ T5396] Node 0 Normal: 3*4kB (UM) 11*8kB (UME) 152*16kB (ME) 141*32kB (UM) 116*64kB (UME) 91*128kB (UM) 76*256kB (UME) 4*512kB (M) 4*1024kB (M) 6*2048kB (UME) 1067*4096kB (UM) = 4434436kB [ 103.974792][ T5396] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 103.974855][ T5396] 59642 total pagecache pages [ 103.974863][ T5396] 0 pages in swap cache [ 103.974870][ T5396] Free swap = 124996kB [ 103.974877][ T5396] Total swap = 124996kB [ 103.974885][ T5396] 2097051 pages RAM [ 103.974892][ T5396] 0 pages HighMem/MovableOnly [ 103.974899][ T5396] 81869 pages reserved [ 104.009707][ T5328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.013239][ T29] audit: type=1400 audit(1792232369.613:3700): avc: denied { write } for pid=5382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.029374][ T5328] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.032203][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.032234][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.047182][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.047240][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.116651][ T29] audit: type=1400 audit(1792232369.713:3701): avc: denied { write } for pid=5403 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.177730][ T5406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.178149][ T5406] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 104.189121][ T5406] bond2: (slave gre1): Error -95 calling set_mac_address [ 104.222811][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 104.667076][ T5429] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 104.667100][ T5429] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.667133][ T5429] vhci_hcd vhci_hcd.0: Device attached [ 104.765748][ T29] audit: type=1400 audit(1792232370.363:3702): avc: denied { write } for pid=5411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.774173][ T5328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.840321][ T24] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 104.875559][ T29] audit: type=1400 audit(1792232370.473:3703): avc: denied { write } for pid=5438 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.900332][ T24] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 104.945241][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 105.023398][ T5429] loop2: detected capacity change from 0 to 4096 [ 105.061448][ T5429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.117039][ T29] audit: type=1400 audit(1792232370.713:3704): avc: denied { write } for pid=5427 comm="syz.2.485" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.127385][ T5328] veth0_vlan: entered promiscuous mode [ 105.173798][ T5328] veth1_vlan: entered promiscuous mode [ 105.203630][ T5430] vhci_hcd: connection reset by peer [ 105.203857][ T12] vhci_hcd vhci_hcd.2: stop threads [ 105.203871][ T12] vhci_hcd vhci_hcd.2: release socket [ 105.203889][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 105.227480][ T31] bond0 (unregistering): Released all slaves [ 105.228959][ T31] bond1 (unregistering): Released all slaves [ 105.251616][ T5436] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.275218][ T5328] veth0_macvtap: entered promiscuous mode [ 105.278644][ T5328] veth1_macvtap: entered promiscuous mode [ 105.289456][ T5328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.293244][ T5328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.310017][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.310059][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.310099][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.310201][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.491221][ T31] hsr_slave_0: left promiscuous mode [ 105.492942][ T31] hsr_slave_1: left promiscuous mode [ 105.506131][ T5474] netlink: 'syz.5.476': attribute type 10 has an invalid length. [ 105.668313][ T29] audit: type=1400 audit(1792232371.263:3705): avc: denied { write } for pid=5465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.944341][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.117236][ T31] IPVS: stop unused estimator thread 0... [ 106.199459][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 106.251629][ T5492] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 106.251650][ T5492] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 106.251679][ T5492] vhci_hcd vhci_hcd.0: Device attached [ 106.280110][ T5493] vhci_hcd: connection closed [ 106.281812][ T12] vhci_hcd vhci_hcd.2: stop threads [ 106.281830][ T12] vhci_hcd vhci_hcd.2: release socket [ 106.281859][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 106.372062][ T5436] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.372089][ T5436] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.372144][ T5436] bridge_slave_0: entered allmulticast mode [ 106.372676][ T5436] bridge_slave_0: entered promiscuous mode [ 106.401100][ T5436] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.401130][ T5436] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.401180][ T5436] bridge_slave_1: entered allmulticast mode [ 106.401541][ T5436] bridge_slave_1: entered promiscuous mode [ 106.458332][ T5436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.472283][ T5436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.554969][ T5436] team0: Port device team_slave_0 added [ 106.555380][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 106.584963][ T5436] team0: Port device team_slave_1 added [ 106.614651][ T5436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.614665][ T5436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.614731][ T5436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.669464][ T5436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.669479][ T5436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.669509][ T5436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.739330][ T5513] bridge_slave_0: left allmulticast mode [ 106.739351][ T5513] bridge_slave_0: left promiscuous mode [ 106.739530][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.752716][ T5513] bridge_slave_1: left allmulticast mode [ 106.752733][ T5513] bridge_slave_1: left promiscuous mode [ 106.752910][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.787320][ T5513] bond0: (slave bond_slave_0): Releasing backup interface [ 106.800626][ T5513] bond0: (slave bond_slave_1): Releasing backup interface [ 106.821672][ T5513] team0: Port device team_slave_0 removed [ 106.841696][ T5513] team0: Port device team_slave_1 removed [ 106.855708][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.855724][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.872876][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.872893][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.883822][ T5513] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.918511][ T5530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.488'. [ 106.948411][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 106.960284][ T5436] hsr_slave_0: entered promiscuous mode [ 106.960622][ T5436] hsr_slave_1: entered promiscuous mode [ 106.965960][ T5436] debugfs: 'hsr0' already exists in 'hsr' [ 106.965976][ T5436] Cannot create hsr debugfs directory [ 107.168392][ T5436] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 107.176163][ T5436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.179771][ T5436] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 107.187799][ T5436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.190021][ T5436] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 107.205438][ T5436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.209268][ T5436] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 107.213431][ T5436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.324153][ T5547] netlink: 'syz.2.489': attribute type 1 has an invalid length. [ 107.324316][ T5547] netlink: 220 bytes leftover after parsing attributes in process `syz.2.489'. [ 107.420481][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.424524][ T5436] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.452151][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.452184][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.454946][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.455027][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.459379][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 107.613615][ T5555] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.726227][ T5436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.771131][ T5593] netlink: 'syz.5.494': attribute type 1 has an invalid length. [ 107.774536][ T5593] FAULT_INJECTION: forcing a failure. [ 107.774536][ T5593] name failslab, interval 1, probability 0, space 0, times 0 [ 107.774563][ T5593] CPU: 0 UID: 0 PID: 5593 Comm: syz.5.494 Not tainted syzkaller #0 PREEMPT(lazy) [ 107.774659][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.774672][ T5593] Call Trace: [ 107.774678][ T5593] [ 107.774695][ T5593] __dump_stack+0x1d/0x30 [ 107.774722][ T5593] dump_stack_lvl+0x95/0xd0 [ 107.774781][ T5593] dump_stack+0x15/0x1b [ 107.774803][ T5593] should_fail_ex+0x262/0x280 [ 107.774898][ T5593] ? task_exec_state_copy+0x5b/0x180 [ 107.774930][ T5593] should_failslab+0x8c/0xb0 [ 107.775050][ T5593] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 107.775113][ T5593] ? get_random_u64+0x13f/0x1f0 [ 107.775170][ T5593] ? task_exec_state_copy+0x5b/0x180 [ 107.775201][ T5593] ? mod_lruvec_state+0x10c/0x120 [ 107.775225][ T5593] task_exec_state_copy+0x5b/0x180 [ 107.775298][ T5593] copy_exec_state+0x36/0xd0 [ 107.775395][ T5593] copy_process+0x5b4/0x23a0 [ 107.775479][ T5593] kernel_clone+0x1c0/0x5f0 [ 107.775500][ T5593] ? do_futex+0x3f8/0x460 [ 107.775530][ T5593] __x64_sys_clone+0x143/0x180 [ 107.775563][ T5593] x64_sys_call+0x2479/0x2550 [ 107.775626][ T5593] do_syscall_64+0x112/0x360 [ 107.775666][ T5593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.775697][ T5593] RIP: 0033:0x7fdea044e559 [ 107.775778][ T5593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.775797][ T5593] RSP: 002b:00007fde9eea6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 107.775815][ T5593] RAX: ffffffffffffffda RBX: 00007fdea06d5fa0 RCX: 00007fdea044e559 [ 107.775842][ T5593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 107.775854][ T5593] RBP: 00007fdea04e5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 107.775866][ T5593] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 107.775880][ T5593] R13: 00007fdea06d6038 R14: 00007fdea06d5fa0 R15: 00007ffc84f944b8 [ 107.775899][ T5593] [ 107.959895][ T5555] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.962586][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.962654][ T5555] bridge_slave_0: entered allmulticast mode [ 107.963147][ T5555] bridge_slave_0: entered promiscuous mode [ 107.965613][ T5555] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.965642][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.968202][ T5555] bridge_slave_1: entered allmulticast mode [ 107.968701][ T5555] bridge_slave_1: entered promiscuous mode [ 108.016592][ T5555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.017758][ T5555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.043349][ T5555] team0: Port device team_slave_0 added [ 108.047439][ T5555] team0: Port device team_slave_1 added [ 108.075628][ T5555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.075640][ T5555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.075743][ T5555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.076280][ T5555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.076291][ T5555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.076347][ T5555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.187257][ T5555] hsr_slave_0: entered promiscuous mode [ 108.187692][ T5555] hsr_slave_1: entered promiscuous mode [ 108.187951][ T5555] debugfs: 'hsr0' already exists in 'hsr' [ 108.187963][ T5555] Cannot create hsr debugfs directory [ 108.314543][ T5436] veth0_vlan: entered promiscuous mode [ 108.321616][ T5436] veth1_vlan: entered promiscuous mode [ 108.373670][ T5555] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 108.377350][ T5555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.378477][ T5436] veth0_macvtap: entered promiscuous mode [ 108.382866][ T5436] veth1_macvtap: entered promiscuous mode [ 108.383382][ T5555] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 108.390490][ T5555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.390966][ T5555] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 108.397343][ T5555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.431799][ T5555] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 108.434867][ T5555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.457288][ T5436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.473439][ T5436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.515965][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.516002][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.516066][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.516107][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.719651][ T5555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.727272][ T5620] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.741143][ T5555] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.754460][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.754494][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.760717][ T182] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.760747][ T182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.976141][ T5555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.186657][ T5555] veth0_vlan: entered promiscuous mode [ 109.191441][ T5555] veth1_vlan: entered promiscuous mode [ 109.213199][ T5555] veth0_macvtap: entered promiscuous mode [ 109.216459][ T5555] veth1_macvtap: entered promiscuous mode [ 109.228852][ T5555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.233438][ T5555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.270683][ T3487] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.270996][ T3487] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.271236][ T3487] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.271386][ T3487] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.528844][ T5667] batman_adv: batadv0: Adding interface: syzkaller0 [ 109.528857][ T5667] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.528922][ T5667] batman_adv: batadv0: Interface activated: syzkaller0 [ 109.707709][ T5666] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 109.708630][ T5666] batman_adv: batadv0: Removing interface: syzkaller0 [ 109.790842][ T5669] netlink: 'syz.2.501': attribute type 1 has an invalid length. [ 109.790906][ T5669] netlink: 220 bytes leftover after parsing attributes in process `syz.2.501'. [ 109.966814][ T5672] netlink: 40 bytes leftover after parsing attributes in process `syz.2.502'. [ 109.980311][ T24] usb 5-1: enqueue for inactive port 0 [ 109.980335][ T24] usb 5-1: enqueue for inactive port 0 [ 110.050342][ T24] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 110.195035][ T5674] netlink: 40 bytes leftover after parsing attributes in process `syz.2.503'. [ 110.642699][ T5683] Cannot find set identified by id 0 to match [ 110.823435][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 110.823448][ T29] audit: type=1400 audit(1792232376.423:3713): avc: denied { write } for pid=5687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.890477][ T29] audit: type=1400 audit(1792232376.483:3714): avc: denied { write } for pid=5700 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.937160][ T5695] Restarting kernel threads ... [ 110.941884][ T5695] Done restarting kernel threads. [ 111.042502][ T29] audit: type=1400 audit(1792232376.643:3715): avc: denied { write } for pid=5703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.080049][ T29] audit: type=1400 audit(1792232376.673:3716): avc: denied { write } for pid=5715 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.225918][ T29] audit: type=1400 audit(1792232376.823:3717): avc: denied { write } for pid=5717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.302749][ T29] audit: type=1400 audit(1792232376.903:3718): avc: denied { write } for pid=5732 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.427058][ T29] audit: type=1326 audit(1792232377.023:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5738 comm="syz.2.510" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bae28e559 code=0x7ffc0000 [ 111.427327][ T29] audit: type=1326 audit(1792232377.023:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5738 comm="syz.2.510" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bae28e559 code=0x7ffc0000 [ 111.427356][ T29] audit: type=1326 audit(1792232377.023:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5738 comm="syz.2.510" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bae28e559 code=0x7ffc0000 [ 111.429475][ T29] audit: type=1326 audit(1792232377.023:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5738 comm="syz.2.510" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4bae28e559 code=0x7ffc0000 [ 111.612539][ T5741] netlink: 40 bytes leftover after parsing attributes in process `syz.7.511'. [ 111.694080][ T5741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.694209][ T5741] IPv6: NLM_F_CREATE should be set when creating new route [ 112.481465][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.481580][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.541987][ T5741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.547686][ T5741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.599440][ T5749] netlink: 104 bytes leftover after parsing attributes in process `syz.6.513'. [ 112.599458][ T5749] netlink: 'syz.6.513': attribute type 4 has an invalid length. [ 112.610375][ T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.610412][ T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.610445][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.610493][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.191108][ T5762] Cannot find set identified by id 0 to match [ 113.312571][ T5770] Cannot find set identified by id 0 to match [ 113.592725][ T5797] Cannot find set identified by id 0 to match [ 113.656895][ T5785] bridge_slave_0: left allmulticast mode [ 113.656919][ T5785] bridge_slave_0: left promiscuous mode [ 113.657060][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.682103][ T5785] bridge_slave_1: left allmulticast mode [ 113.682241][ T5785] bridge_slave_1: left promiscuous mode [ 113.682335][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.703199][ T5785] bond0: (slave bond_slave_0): Releasing backup interface [ 113.709050][ T5785] bond0: (slave bond_slave_1): Releasing backup interface [ 113.760859][ T5785] team0: Port device team_slave_0 removed [ 113.778172][ T5785] team0: Port device team_slave_1 removed [ 113.779137][ T5785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.779154][ T5785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.783370][ T5785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.783385][ T5785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.796157][ T5785] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.042104][ T5810] Cannot find set identified by id 0 to match [ 114.416492][ T5857] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.416506][ T5857] block device autoloading is deprecated and will be removed. [ 114.519724][ T5854] bridge_slave_0: left allmulticast mode [ 114.519770][ T5854] bridge_slave_0: left promiscuous mode [ 114.519951][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.538995][ T5854] bridge_slave_1: left allmulticast mode [ 114.539012][ T5854] bridge_slave_1: left promiscuous mode [ 114.539123][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.552925][ T5861] tmpfs: Bad value for 'nr_blocks' [ 114.557828][ T5861] loop6: detected capacity change from 0 to 512 [ 114.559883][ T5854] bond0: (slave bond_slave_0): Releasing backup interface [ 114.579244][ T5854] bond0: (slave bond_slave_1): Releasing backup interface [ 114.585876][ T5861] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.586362][ T5861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.603738][ T5854] team0: Port device team_slave_0 removed [ 114.604459][ T5861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.604523][ T5861] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.605745][ T5854] team0: Port device team_slave_1 removed [ 114.605968][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.607761][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.608941][ T5854] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.611625][ T5861] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.523: corrupted xattr block 33: invalid header [ 114.617159][ T5861] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 114.617201][ T5861] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.523: corrupted xattr block 33: invalid header [ 114.621796][ T5861] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 114.623807][ T5861] EXT4-fs error (device loop6): ext4_xattr_block_find:1885: inode #15: comm syz.6.523: corrupted xattr block 33: invalid header [ 114.711761][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.737855][ T5866] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 114.737956][ T5866] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.738038][ T5866] vhci_hcd vhci_hcd.0: Device attached [ 114.766763][ T5870] netlink: 'syz.6.525': attribute type 1 has an invalid length. [ 114.766840][ T5870] netlink: 220 bytes leftover after parsing attributes in process `syz.6.525'. [ 114.910558][ T3592] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 114.929032][ T5866] loop2: detected capacity change from 0 to 4096 [ 114.935649][ T5872] netlink: 40 bytes leftover after parsing attributes in process `syz.6.526'. [ 114.961098][ T5866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.970342][ T3592] usb 5-1: new full-speed USB device number 3 using vhci_hcd [ 115.017441][ T5867] vhci_hcd: connection reset by peer [ 115.017692][ T182] vhci_hcd vhci_hcd.2: stop threads [ 115.017710][ T182] vhci_hcd vhci_hcd.2: release socket [ 115.017727][ T182] vhci_hcd vhci_hcd.2: disconnect device [ 115.045821][ T5872] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.045841][ T5872] IPv6: NLM_F_CREATE should be set when creating new route [ 115.380601][ T5880] Cannot find set identified by id 0 to match [ 115.548795][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.769808][ T5887] Cannot find set identified by id 0 to match [ 116.000439][ T182] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.000525][ T182] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.000589][ T182] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.000688][ T182] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.139516][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 116.139531][ T29] audit: type=1400 audit(1792232381.733:3758): avc: denied { allowed } for pid=5897 comm="syz.6.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 116.250150][ T29] audit: type=1400 audit(1792232381.843:3759): avc: denied { write } for pid=5900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.303222][ T29] audit: type=1400 audit(1792232381.903:3760): avc: denied { write } for pid=5919 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.398343][ T5914] Cannot find set identified by id 0 to match [ 116.560296][ T5931] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.615367][ T29] audit: type=1400 audit(1792232382.213:3761): avc: denied { write } for pid=5933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.673323][ T29] audit: type=1400 audit(1792232382.273:3762): avc: denied { write } for pid=5948 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.748652][ T5947] Cannot find set identified by id 0 to match [ 116.851905][ T29] audit: type=1400 audit(1792232382.453:3763): avc: denied { write } for pid=5950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.911050][ T29] audit: type=1400 audit(1792232382.513:3764): avc: denied { write } for pid=5965 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.056888][ T29] audit: type=1400 audit(1792232382.653:3765): avc: denied { write } for pid=5969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.105550][ T29] audit: type=1400 audit(1792232382.703:3766): avc: denied { write } for pid=5980 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.134567][ T5983] netlink: 'syz.7.537': attribute type 1 has an invalid length. [ 117.134597][ T5983] netlink: 220 bytes leftover after parsing attributes in process `syz.7.537'. [ 117.310905][ T29] audit: type=1400 audit(1792232382.903:3767): avc: denied { write } for pid=5986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.315581][ T5998] netlink: 'syz.7.538': attribute type 1 has an invalid length. [ 117.322687][ T5998] FAULT_INJECTION: forcing a failure. [ 117.322687][ T5998] name failslab, interval 1, probability 0, space 0, times 0 [ 117.322723][ T5998] CPU: 1 UID: 0 PID: 5998 Comm: syz.7.538 Not tainted syzkaller #0 PREEMPT(lazy) [ 117.322750][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.322762][ T5998] Call Trace: [ 117.322769][ T5998] [ 117.322777][ T5998] __dump_stack+0x1d/0x30 [ 117.322859][ T5998] dump_stack_lvl+0x95/0xd0 [ 117.322883][ T5998] dump_stack+0x15/0x1b [ 117.322905][ T5998] should_fail_ex+0x262/0x280 [ 117.322935][ T5998] should_failslab+0x8c/0xb0 [ 117.323036][ T5998] ? alloc_slab_obj_exts+0x9c/0x110 [ 117.323118][ T5998] __kmalloc_flags_noprof+0x105/0x500 [ 117.323154][ T5998] ? alloc_slab_obj_exts+0x9c/0x110 [ 117.323242][ T5998] alloc_slab_obj_exts+0x9c/0x110 [ 117.323287][ T5998] __memcg_slab_post_alloc_hook+0x462/0x8d0 [ 117.323321][ T5998] ? dup_task_struct+0x5a/0x750 [ 117.323421][ T5998] kmem_cache_alloc_node_noprof+0x258/0x400 [ 117.323456][ T5998] ? dup_task_struct+0x5a/0x750 [ 117.323491][ T5998] dup_task_struct+0x5a/0x750 [ 117.323516][ T5998] copy_process+0x5a0/0x23a0 [ 117.323547][ T5998] kernel_clone+0x1c0/0x5f0 [ 117.323579][ T5998] ? do_futex+0x3f8/0x460 [ 117.323616][ T5998] __x64_sys_clone+0x143/0x180 [ 117.323649][ T5998] x64_sys_call+0x2479/0x2550 [ 117.323676][ T5998] do_syscall_64+0x112/0x360 [ 117.323820][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.323844][ T5998] RIP: 0033:0x7fd84a9de559 [ 117.323861][ T5998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.323881][ T5998] RSP: 002b:00007fd849436fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 117.323903][ T5998] RAX: ffffffffffffffda RBX: 00007fd84ac65fa0 RCX: 00007fd84a9de559 [ 117.323919][ T5998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 117.323996][ T5998] RBP: 00007fd84aa75ab8 R08: 0000000000000000 R09: 0000000000000000 [ 117.324010][ T5998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 117.324025][ T5998] R13: 00007fd84ac66038 R14: 00007fd84ac65fa0 R15: 00007ffe79e27638 [ 117.324045][ T5998] [ 117.772254][ T6018] netlink: 40 bytes leftover after parsing attributes in process `syz.7.540'. [ 117.862571][ T6020] Cannot find set identified by id 0 to match [ 118.076114][ T6031] Cannot find set identified by id 0 to match [ 118.161433][ T6053] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 118.161508][ T6053] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.161543][ T6053] vhci_hcd vhci_hcd.0: Device attached [ 118.343311][ T6053] loop7: detected capacity change from 0 to 4096 [ 118.360386][ T3387] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 118.388735][ T6053] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.430347][ T3387] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 118.467686][ T6054] vhci_hcd: connection reset by peer [ 118.467801][ T12] vhci_hcd vhci_hcd.7: stop threads [ 118.467851][ T12] vhci_hcd vhci_hcd.7: release socket [ 118.467873][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 118.532437][ T6088] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 118.532460][ T6088] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.532491][ T6088] vhci_hcd vhci_hcd.0: Device attached [ 118.710306][ T24] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 118.723570][ T6088] loop6: detected capacity change from 0 to 4096 [ 118.747325][ T6088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.770342][ T24] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 118.788859][ T6089] vhci_hcd: connection reset by peer [ 118.789276][ T3487] vhci_hcd vhci_hcd.6: stop threads [ 118.789410][ T3487] vhci_hcd vhci_hcd.6: release socket [ 118.789429][ T3487] vhci_hcd vhci_hcd.6: disconnect device [ 118.988447][ T5555] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.191005][ T6116] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.309414][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.431252][ T6122] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 119.449969][ T6122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.467086][ T6122] FAULT_INJECTION: forcing a failure. [ 119.467086][ T6122] name failslab, interval 1, probability 0, space 0, times 0 [ 119.467120][ T6122] CPU: 0 UID: 0 PID: 6122 Comm: syz.2.551 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.467143][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.467229][ T6122] Call Trace: [ 119.467240][ T6122] [ 119.467249][ T6122] __dump_stack+0x1d/0x30 [ 119.467278][ T6122] dump_stack_lvl+0x95/0xd0 [ 119.467302][ T6122] dump_stack+0x15/0x1b [ 119.467337][ T6122] should_fail_ex+0x262/0x280 [ 119.467364][ T6122] ? dup_task_struct+0x5a/0x750 [ 119.467390][ T6122] should_failslab+0x8c/0xb0 [ 119.467471][ T6122] kmem_cache_alloc_node_noprof+0x82/0x400 [ 119.467504][ T6122] ? __rcu_read_unlock+0x4e/0x70 [ 119.467548][ T6122] ? dup_task_struct+0x5a/0x750 [ 119.467647][ T6122] dup_task_struct+0x5a/0x750 [ 119.467713][ T6122] copy_process+0x5a0/0x23a0 [ 119.467750][ T6122] kernel_clone+0x1c0/0x5f0 [ 119.467774][ T6122] ? do_futex+0x391/0x460 [ 119.467810][ T6122] __x64_sys_clone+0x143/0x180 [ 119.467914][ T6122] x64_sys_call+0x2479/0x2550 [ 119.467942][ T6122] do_syscall_64+0x112/0x360 [ 119.468038][ T6122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.468062][ T6122] RIP: 0033:0x7f4bae28e559 [ 119.468128][ T6122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.468151][ T6122] RSP: 002b:00007f4bacce6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 119.468175][ T6122] RAX: ffffffffffffffda RBX: 00007f4bae515fa0 RCX: 00007f4bae28e559 [ 119.468206][ T6122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 119.468222][ T6122] RBP: 00007f4bae325ab8 R08: 0000000000000000 R09: 0000000000000000 [ 119.468235][ T6122] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 119.468292][ T6122] R13: 00007f4bae516038 R14: 00007f4bae515fa0 R15: 00007fffdf789568 [ 119.468319][ T6122] [ 119.631707][ T6124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.632167][ T6124] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 119.651509][ T6124] bond1: (slave gre1): Error -95 calling set_mac_address [ 119.828155][ T6144] netlink: 'syz.2.554': attribute type 1 has an invalid length. [ 119.828228][ T6144] netlink: 220 bytes leftover after parsing attributes in process `syz.2.554'. [ 119.980445][ T3592] usb 5-1: enqueue for inactive port 0 [ 119.980470][ T3592] usb 5-1: enqueue for inactive port 0 [ 119.986212][ T6148] rxe_eth0 speed is unknown, defaulting to 1000 [ 120.050812][ T3592] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 120.175129][ T6179] Cannot find set identified by id 0 to match [ 120.373908][ T6202] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 120.373931][ T6202] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 120.373963][ T6202] vhci_hcd vhci_hcd.0: Device attached [ 120.407606][ T6198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.559'. [ 120.427333][ T3487] bond0 (unregistering): Released all slaves [ 120.430118][ T3487] bond1 (unregistering): Released all slaves [ 120.447258][ T6200] netlink: 40 bytes leftover after parsing attributes in process `syz.7.560'. [ 120.462839][ T3487] bond2 (unregistering): Released all slaves [ 120.587029][ T3487] hsr_slave_0: left promiscuous mode [ 120.587290][ T3487] hsr_slave_1: left promiscuous mode [ 120.689700][ T6202] loop6: detected capacity change from 0 to 4096 [ 120.723238][ T6202] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.756393][ T6203] vhci_hcd: connection closed [ 120.756877][ T12] vhci_hcd vhci_hcd.6: stop threads [ 120.756893][ T12] vhci_hcd vhci_hcd.6: release socket [ 120.756912][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 120.808409][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 120.842846][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.842878][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.842974][ T6148] bridge_slave_0: entered allmulticast mode [ 120.843537][ T6148] bridge_slave_0: entered promiscuous mode [ 120.870809][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.870842][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.870969][ T6148] bridge_slave_1: entered allmulticast mode [ 120.871384][ T6148] bridge_slave_1: entered promiscuous mode [ 120.907421][ T6148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.908741][ T6148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.946337][ T6148] team0: Port device team_slave_0 added [ 120.947347][ T6148] team0: Port device team_slave_1 added [ 120.952929][ T6232] netlink: 'syz.7.564': attribute type 1 has an invalid length. [ 120.988411][ T6232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.998453][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.998467][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.998494][ T6148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.999084][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.999095][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.999124][ T6148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.001450][ T6232] FAULT_INJECTION: forcing a failure. [ 121.001450][ T6232] name failslab, interval 1, probability 0, space 0, times 0 [ 121.001561][ T6232] CPU: 1 UID: 0 PID: 6232 Comm: syz.7.564 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.001588][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.001603][ T6232] Call Trace: [ 121.001611][ T6232] [ 121.001656][ T6232] __dump_stack+0x1d/0x30 [ 121.001683][ T6232] dump_stack_lvl+0x95/0xd0 [ 121.001707][ T6232] dump_stack+0x15/0x1b [ 121.001749][ T6232] should_fail_ex+0x262/0x280 [ 121.001779][ T6232] ? dup_task_struct+0x5a/0x750 [ 121.001870][ T6232] should_failslab+0x8c/0xb0 [ 121.001905][ T6232] kmem_cache_alloc_node_noprof+0x82/0x400 [ 121.002034][ T6232] ? __rcu_read_unlock+0x4e/0x70 [ 121.002067][ T6232] ? dup_task_struct+0x5a/0x750 [ 121.002093][ T6232] dup_task_struct+0x5a/0x750 [ 121.002131][ T6232] copy_process+0x5a0/0x23a0 [ 121.002189][ T6232] kernel_clone+0x1c0/0x5f0 [ 121.002215][ T6232] ? do_futex+0x391/0x460 [ 121.002319][ T6232] __x64_sys_clone+0x143/0x180 [ 121.002351][ T6232] x64_sys_call+0x2479/0x2550 [ 121.002379][ T6232] do_syscall_64+0x112/0x360 [ 121.002462][ T6232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.002486][ T6232] RIP: 0033:0x7fd84a9de559 [ 121.002503][ T6232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.002524][ T6232] RSP: 002b:00007fd849436fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 121.002547][ T6232] RAX: ffffffffffffffda RBX: 00007fd84ac65fa0 RCX: 00007fd84a9de559 [ 121.002598][ T6232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 121.002613][ T6232] RBP: 00007fd84aa75ab8 R08: 0000000000000000 R09: 0000000000000000 [ 121.002627][ T6232] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 121.002641][ T6232] R13: 00007fd84ac66038 R14: 00007fd84ac65fa0 R15: 00007ffe79e27638 [ 121.002662][ T6232] [ 121.085635][ T6232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.092772][ T6239] netlink: 'syz.2.565': attribute type 1 has an invalid length. [ 121.092787][ T6239] netlink: 220 bytes leftover after parsing attributes in process `syz.2.565'. [ 121.113652][ T6232] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 121.151664][ T6232] bond1: (slave gre1): Error -95 calling set_mac_address [ 121.350790][ T5436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.352453][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 121.352474][ T29] audit: type=1400 audit(1792232386.953:3793): avc: denied { write } for pid=6237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.358277][ T6148] hsr_slave_0: entered promiscuous mode [ 121.358657][ T6148] hsr_slave_1: entered promiscuous mode [ 121.358992][ T6148] debugfs: 'hsr0' already exists in 'hsr' [ 121.359006][ T6148] Cannot create hsr debugfs directory [ 121.420057][ T29] audit: type=1400 audit(1792232387.013:3794): avc: denied { write } for pid=6251 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.493996][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 121.641735][ T6148] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 121.659559][ T6148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.660177][ T6148] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 121.663107][ T6148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.665642][ T6148] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 121.670918][ T6148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.671456][ T6148] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 121.677942][ T6148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.764587][ T6148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.785550][ T29] audit: type=1400 audit(1792232387.383:3795): avc: denied { write } for pid=6263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.786733][ T6148] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.789618][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.789666][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.793493][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.793523][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.880115][ T29] audit: type=1400 audit(1792232387.473:3796): avc: denied { write } for pid=6286 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.914874][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 122.047214][ T6148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.051563][ T6304] netlink: 'syz.7.571': attribute type 1 has an invalid length. [ 122.077514][ T6304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.101462][ T6304] FAULT_INJECTION: forcing a failure. [ 122.101462][ T6304] name failslab, interval 1, probability 0, space 0, times 0 [ 122.101572][ T6304] CPU: 1 UID: 0 PID: 6304 Comm: syz.7.571 Not tainted syzkaller #0 PREEMPT(lazy) [ 122.101601][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.101616][ T6304] Call Trace: [ 122.101622][ T6304] [ 122.101628][ T6304] __dump_stack+0x1d/0x30 [ 122.101652][ T6304] dump_stack_lvl+0x95/0xd0 [ 122.101672][ T6304] dump_stack+0x15/0x1b [ 122.101748][ T6304] should_fail_ex+0x262/0x280 [ 122.101849][ T6304] ? dup_task_struct+0x5a/0x750 [ 122.101875][ T6304] should_failslab+0x8c/0xb0 [ 122.101908][ T6304] kmem_cache_alloc_node_noprof+0x82/0x400 [ 122.101964][ T6304] ? __rcu_read_unlock+0x4e/0x70 [ 122.102046][ T6304] ? dup_task_struct+0x5a/0x750 [ 122.102075][ T6304] dup_task_struct+0x5a/0x750 [ 122.102098][ T6304] copy_process+0x5a0/0x23a0 [ 122.102127][ T6304] kernel_clone+0x1c0/0x5f0 [ 122.102154][ T6304] ? do_futex+0x391/0x460 [ 122.102197][ T6304] __x64_sys_clone+0x143/0x180 [ 122.102279][ T6304] x64_sys_call+0x2479/0x2550 [ 122.102308][ T6304] do_syscall_64+0x112/0x360 [ 122.102340][ T6304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.102444][ T6304] RIP: 0033:0x7fd84a9de559 [ 122.102462][ T6304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.102484][ T6304] RSP: 002b:00007fd849436fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 122.102503][ T6304] RAX: ffffffffffffffda RBX: 00007fd84ac65fa0 RCX: 00007fd84a9de559 [ 122.102563][ T6304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 122.102579][ T6304] RBP: 00007fd84aa75ab8 R08: 0000000000000000 R09: 0000000000000000 [ 122.102595][ T6304] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 122.102608][ T6304] R13: 00007fd84ac66038 R14: 00007fd84ac65fa0 R15: 00007ffe79e27638 [ 122.102636][ T6304] [ 122.218968][ T29] audit: type=1400 audit(1792232387.813:3797): avc: denied { write } for pid=6296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.293564][ T29] audit: type=1400 audit(1792232387.893:3798): avc: denied { write } for pid=6318 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.342225][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 122.382452][ T6321] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.382921][ T6321] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 122.385114][ T6321] bond2: (slave gre1): Error -95 calling set_mac_address [ 122.619326][ T6148] veth0_vlan: entered promiscuous mode [ 122.630817][ T6148] veth1_vlan: entered promiscuous mode [ 122.662830][ T6148] veth0_macvtap: entered promiscuous mode [ 122.666020][ T6148] veth1_macvtap: entered promiscuous mode [ 122.680916][ T6148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.688253][ T6148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.731381][ T3435] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.736099][ T3435] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.736154][ T3435] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.736184][ T3435] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.845334][ T6343] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 122.845360][ T6343] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 122.845393][ T6343] vhci_hcd vhci_hcd.0: Device attached [ 123.021388][ T3521] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 123.080601][ T3521] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 123.125566][ T6337] loop2: detected capacity change from 0 to 512 [ 123.176636][ T6343] loop8: detected capacity change from 0 to 4096 [ 123.223370][ T6343] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.243947][ T29] audit: type=1400 audit(1792232388.843:3799): avc: denied { write } for pid=6342 comm="syz.8.552" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.290501][ T6350] netlink: 'syz.2.576': attribute type 1 has an invalid length. [ 123.290540][ T6350] netlink: 220 bytes leftover after parsing attributes in process `syz.2.576'. [ 123.294746][ T6344] vhci_hcd: connection reset by peer [ 123.296568][ T31] vhci_hcd vhci_hcd.8: stop threads [ 123.296584][ T31] vhci_hcd vhci_hcd.8: release socket [ 123.296605][ T31] vhci_hcd vhci_hcd.8: disconnect device [ 123.445651][ T182] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.481986][ T6253] loop6: detected capacity change from 0 to 8192 [ 123.485699][ T6362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.577'. [ 123.505569][ T3387] usb 15-1: enqueue for inactive port 0 [ 123.505591][ T3387] usb 15-1: enqueue for inactive port 0 [ 123.570351][ T3387] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 123.594831][ T182] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.616370][ T6352] rxe_eth0 speed is unknown, defaulting to 1000 [ 123.630008][ T182] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.697756][ T6369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.577'. [ 124.071835][ T24] usb 13-1: enqueue for inactive port 0 [ 124.071873][ T24] usb 13-1: enqueue for inactive port 0 [ 124.082394][ T6148] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.140882][ T24] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 124.152481][ T182] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.346984][ T182] bond0 (unregistering): Released all slaves [ 124.433433][ T6376] syz.8.578 (6376) used greatest stack depth: 10056 bytes left [ 124.493190][ T182] hsr_slave_0: left promiscuous mode [ 124.493634][ T182] hsr_slave_1: left promiscuous mode [ 124.499303][ T182] veth1_macvtap: left promiscuous mode [ 124.499324][ T182] veth0_macvtap: left promiscuous mode [ 124.499384][ T182] veth1_vlan: left promiscuous mode [ 124.499417][ T182] veth0_vlan: left promiscuous mode [ 124.525994][ T29] audit: type=1400 audit(1792232390.123:3800): avc: denied { write } for pid=6386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.543014][ T29] audit: type=1400 audit(1792232390.143:3801): avc: denied { write } for pid=6406 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.608456][ T6412] Cannot find set identified by id 0 to match [ 124.710737][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 124.842449][ T6352] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.842478][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.842559][ T6352] bridge_slave_0: entered allmulticast mode [ 124.843116][ T6352] bridge_slave_0: entered promiscuous mode [ 124.876114][ T6352] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.876147][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.876224][ T6352] bridge_slave_1: entered allmulticast mode [ 124.876702][ T6352] bridge_slave_1: entered promiscuous mode [ 124.933126][ T6419] Cannot find set identified by id 0 to match [ 124.935213][ T6352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.937665][ T6352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.956455][ T6427] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 124.988486][ T6427] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.008844][ T29] audit: type=1400 audit(1792232390.603:3802): avc: denied { write } for pid=6422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.038356][ T6352] team0: Port device team_slave_0 added [ 125.038745][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 125.039917][ T6352] team0: Port device team_slave_1 added [ 125.072778][ T6427] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.076269][ T6427] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 125.083534][ T6427] bond2: (slave gre1): Error -95 calling set_mac_address [ 125.139175][ T6352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.139190][ T6352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.139215][ T6352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.139725][ T6352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.139736][ T6352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.139763][ T6352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.217875][ T6352] hsr_slave_0: entered promiscuous mode [ 125.218347][ T6352] hsr_slave_1: entered promiscuous mode [ 125.220014][ T6352] debugfs: 'hsr0' already exists in 'hsr' [ 125.220028][ T6352] Cannot create hsr debugfs directory [ 125.318243][ T6452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.587'. [ 125.364463][ T6457] netlink: 104 bytes leftover after parsing attributes in process `syz.8.588'. [ 125.364483][ T6457] netlink: 'syz.8.588': attribute type 4 has an invalid length. [ 125.516542][ T6352] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 125.526676][ T6352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.527368][ T6352] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 125.537730][ T6352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.538525][ T6352] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 125.542475][ T6352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.543977][ T6352] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 125.551703][ T6352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.585582][ T6352] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.585611][ T6352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.585681][ T6352] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.585733][ T6352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.754122][ T6352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.774007][ T6352] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.829726][ T6478] netlink: 20 bytes leftover after parsing attributes in process `syz.6.591'. [ 126.544719][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 126.544736][ T29] audit: type=1326 audit(1792232392.143:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.8.592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3875b2e559 code=0x7ffc0000 [ 126.544771][ T29] audit: type=1326 audit(1792232392.143:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.8.592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3875b2e559 code=0x7ffc0000 [ 126.546578][ T29] audit: type=1326 audit(1792232392.143:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.8.592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3875b2e559 code=0x7ffc0000 [ 126.546605][ T29] audit: type=1326 audit(1792232392.143:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.8.592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3875b2e559 code=0x7ffc0000 [ 126.546746][ T29] audit: type=1326 audit(1792232392.143:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.8.592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3875b2e559 code=0x7ffc0000 [ 126.547075][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.549066][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.549085][ T29] audit: type=1326 audit(1792232392.143:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.8.592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3875b2e559 code=0x7ffc0000 [ 126.549129][ T29] audit: type=1326 audit(1792232392.143:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.8.592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3875b2e559 code=0x7ffc0000 [ 126.556467][ T29] audit: type=1326 audit(1792232392.153:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.8.592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3875b2e559 code=0x7ffc0000 [ 126.556499][ T29] audit: type=1326 audit(1792232392.153:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.8.592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3875b2e559 code=0x7ffc0000 [ 126.556523][ T29] audit: type=1326 audit(1792232392.153:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6480 comm="syz.8.592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3875b2e559 code=0x7ffc0000 [ 126.832940][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 126.835012][ T6466] netlink: 20 bytes leftover after parsing attributes in process `syz.6.591'. [ 126.870802][ T6352] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.870822][ T6352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.897894][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.897928][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.907012][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.907043][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.049713][ T6487] Cannot find set identified by id 0 to match [ 127.102375][ T6498] netlink: 'syz.2.595': attribute type 1 has an invalid length. [ 127.102506][ T6498] netlink: 220 bytes leftover after parsing attributes in process `syz.2.595'. [ 127.173164][ T6352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.268602][ T6521] netlink: 'syz.2.597': attribute type 1 has an invalid length. [ 127.278207][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 127.279538][ T2] ================================================================== [ 127.279560][ T2] BUG: KCSAN: data-race in alloc_pid / copy_process [ 127.279579][ T2] [ 127.279583][ T2] read-write to 0xffffffff86e5c368 of 4 bytes by task 3487 on cpu 1: [ 127.279597][ T2] alloc_pid+0x6da/0x960 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 127.279612][ T2] copy_process+0x11f3/0x23a0 [ 127.279628][ T2] kernel_clone+0x1c0/0x5f0 [ 127.279647][ T2] user_mode_thread+0xab/0xe0 [ 127.279666][ T2] call_usermodehelper_exec_work+0x7a/0x160 [ 127.279691][ T2] process_scheduled_works+0x56a/0xa50 [ 127.279713][ T2] worker_thread+0x569/0x750 [ 127.279736][ T2] kthread+0x223/0x270 [ 127.279756][ T2] ret_from_fork+0x146/0x330 [ 127.279778][ T2] ret_from_fork_asm+0x1a/0x30 [ 127.279797][ T2] [ 127.279806][ T2] read to 0xffffffff86e5c368 of 4 bytes by task 2 on cpu 0: [ 127.279819][ T2] copy_process+0x1b32/0x23a0 [ 127.279835][ T2] kernel_clone+0x1c0/0x5f0 [ 127.279853][ T2] kernel_thread+0xe5/0x120 [ 127.279871][ T2] kthreadd+0x25b/0x320 [ 127.279884][ T2] ret_from_fork+0x146/0x330 [ 127.279905][ T2] ret_from_fork_asm+0x1a/0x30 [ 127.279924][ T2] [ 127.279927][ T2] value changed: 0x8000010d -> 0x8000010e [ 127.279937][ T2] [ 127.279940][ T2] Reported by Kernel Concurrency Sanitizer on: [ 127.279949][ T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Not tainted syzkaller #0 PREEMPT(lazy) [ 127.279969][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.279980][ T2] ================================================================== [ 127.292355][ T6521] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.526468][ T6521] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.528963][ T6521] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 127.534390][ T6521] bond3: (slave gre1): Error -95 calling set_mac_address [ 127.981967][ T3487] bond0 (unregistering): Released all slaves [ 127.983234][ T3487] bond1 (unregistering): Released all slaves [ 127.984932][ T3487] bond2 (unregistering): Released all slaves [ 128.057125][ T3487] hsr_slave_0: left promiscuous mode [ 128.057370][ T3487] hsr_slave_1: left promiscuous mode [ 128.118568][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 128.140326][ T3521] usb 17-1: enqueue for inactive port 0 [ 128.140348][ T3521] usb 17-1: enqueue for inactive port 0 [ 128.205953][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 128.210301][ T3521] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 128.292249][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 128.375263][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 128.871325][ T3022] 8021q: adding VLAN 0 to HW filter on device eth21 [ 128.965656][ T3487] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.967519][ T3022] 8021q: adding VLAN 0 to HW filter on device eth22 [ 129.003969][ T3487] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.044433][ T3487] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.062512][ T3022] 8021q: adding VLAN 0 to HW filter on device eth23 [ 129.080102][ T3487] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.158825][ T3022] 8021q: adding VLAN 0 to HW filter on device eth24 [ 129.253223][ T3022] 8021q: adding VLAN 0 to HW filter on device eth25 [ 129.324981][ T3487] bridge_slave_1: left allmulticast mode [ 129.325003][ T3487] bridge_slave_1: left promiscuous mode [ 129.325108][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.325875][ T3487] bridge_slave_0: left allmulticast mode [ 129.325959][ T3487] bridge_slave_0: left promiscuous mode [ 129.326069][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.363922][ T3487] bridge_slave_1: left allmulticast mode [ 129.363943][ T3487] bridge_slave_1: left promiscuous mode [ 129.364042][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.375332][ T3487] bridge_slave_0: left allmulticast mode [ 129.375352][ T3487] bridge_slave_0: left promiscuous mode [ 129.375433][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.443197][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.444196][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.444675][ T3487] bond0 (unregistering): Released all slaves [ 129.462042][ T3487] bond0 (unregistering): Released all slaves [ 129.463512][ T3487] bond1 (unregistering): Released all slaves [ 129.466113][ T3487] bond2 (unregistering): Released all slaves [ 129.468627][ T3487] bond3 (unregistering): Released all slaves [ 129.500196][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.510176][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.519855][ T3487] bond0 (unregistering): Released all slaves [ 129.534107][ T3487] bond0 (unregistering): Released all slaves [ 129.535711][ T3022] 8021q: adding VLAN 0 to HW filter on device eth26 [ 129.655263][ T3022] 8021q: adding VLAN 0 to HW filter on device eth27 [ 129.657397][ T3487] hsr_slave_0: left promiscuous mode [ 129.657817][ T3487] hsr_slave_1: left promiscuous mode [ 129.658178][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.658488][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.660169][ T3487] hsr_slave_0: left promiscuous mode [ 129.667182][ T3487] hsr_slave_1: left promiscuous mode [ 129.686062][ T3487] hsr_slave_0: left promiscuous mode [ 129.690314][ T3487] hsr_slave_1: left promiscuous mode [ 129.690795][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.690810][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.693593][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.693608][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.709620][ T3487] hsr_slave_0: left promiscuous mode [ 129.714921][ T3487] hsr_slave_1: left promiscuous mode [ 129.729583][ T3487] veth1_macvtap: left promiscuous mode [ 129.729608][ T3487] veth0_macvtap: left promiscuous mode [ 129.729677][ T3487] veth1_vlan: left promiscuous mode [ 129.729710][ T3487] veth0_vlan: left promiscuous mode [ 129.817189][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 129.819437][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 129.905031][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 129.907091][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 130.065867][ T3022] 8021q: adding VLAN 0 to HW filter on device eth28 [ 130.145167][ T3022] 8021q: adding VLAN 0 to HW filter on device eth29 [ 130.227261][ T3022] 8021q: adding VLAN 0 to HW filter on device eth30 [ 130.308446][ T3022] 8021q: adding VLAN 0 to HW filter on device eth31 [ 130.389566][ T3022] 8021q: adding VLAN 0 to HW filter on device eth32 [ 130.479177][ T3022] 8021q: adding VLAN 0 to HW filter on device eth33 [ 130.571138][ T3022] 8021q: adding VLAN 0 to HW filter on device eth34 [ 130.662465][ T3022] 8021q: adding VLAN 0 to HW filter on device eth36 [ 130.747663][ T3022] 8021q: adding VLAN 0 to HW filter on device eth35 [ 133.066723][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 133.066738][ T29] audit: type=1400 audit(1792232398.663:4196): avc: denied { write } for pid=6861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.100854][ T29] audit: type=1400 audit(1792232398.673:4197): avc: denied { write } for pid=6872 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.002439][ T29] audit: type=1400 audit(1792232399.603:4198): avc: denied { write } for pid=6880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.016283][ T29] audit: type=1400 audit(1792232399.613:4199): avc: denied { write } for pid=6891 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.270209][ T29] audit: type=1400 audit(1792232399.863:4200): avc: denied { write } for pid=6894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.283268][ T29] audit: type=1400 audit(1792232399.883:4201): avc: denied { write } for pid=6905 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.373332][ T29] audit: type=1400 audit(1792232399.973:4202): avc: denied { write } for pid=6909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.408199][ T29] audit: type=1400 audit(1792232400.003:4203): avc: denied { write } for pid=6920 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1