last executing test programs: 2m12.791622847s ago: executing program 32 (id=901): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200000, &(0x7f0000000100), 0x1, 0x50d, &(0x7f0000001bc0)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000400)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, @in6={0xa, 0x4e24, 0x4, @private1, 0x1}, @in6={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}]}, &(0x7f0000000040)=0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[], 0x64}}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, 0x0, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0xfff, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x20008000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r6, &(0x7f0000001440)=[{&(0x7f0000001480)=""/125, 0x7d}], 0x1, 0x1, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) chown(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 1m57.510273128s ago: executing program 0 (id=1035): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000011c0), 0x0, 0x4000800) fsopen(&(0x7f0000000280)='devpts\x00', 0x0) r0 = socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r7, 0xffffffffffffffff, 0x2000000000000) 1m56.946694304s ago: executing program 0 (id=1040): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000011c0), 0x0, 0x4000800) fsopen(&(0x7f0000000280)='devpts\x00', 0x0) r0 = socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r7, 0xffffffffffffffff, 0x2000000000000) 1m56.804775671s ago: executing program 3 (id=1041): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300), 0xff, 0x501, &(0x7f0000000e80)="$eJzs3c9vY0cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRe37OehN7E20SO8Sfj/T0Zt54/Z2J982sv1l7AhhbtyPiICKKEfF+RMxl13PZEe90juRxnx0+Wj06fLSai3b7vX/k0vbkWvT8mcSt7DlLEfGD70T8OHc6bnNvf3OlVqvuZPWFVn17obm3f2+jvrJeXa9uVSrLS8uLb91/s3JpY32lXsxKX/709wff+GnSrdnsSu84LlNn6IXjOInJiPjeVQQbgYlsPMVRd4Rnko+IFyPi1fT+n4uJ9NUEAG6ydnsu2nO9dQDgpos0B5bLl7NcwGzk8+VyJ4f3Uszka41m6+7Dxu7WWidXNh+F/MONWnUxyxXORyGX1JfS8uN65UT9fkS8EBE/n5pO6+XVRm1thP/uAYBxduvE+v/vqc76DwDccKVRdwAAGDrrPwCMH+s/AIwf6z8AjJ/O+j896m4AAEPk/T8AjB/rPwCMle+/+25ytI+y779e+2Bvd7Pxwb21anOzXN9dLa82drbL643GevqdPfWznq/WaGwvvRG7H85/c7vZWmju7T+oN3a3Wg/S7/V+UC2kjzoYwsgAgEFeeOWTP+WSFfnt6fSInr0cCiPtGXDV8qPuADAyE6PuADAydvuC8XWB9/jSA3BD9Nmi9wmlfh8Q6m4gAvxfuvMF+X8YVz35f/8LGMaM/D+ML/l/GF/tdu68e/7HeR8IAFxvcvzAgN//v5idf5P9cuBHaycf8fFV9goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+7+v+VsL/DZyOfL5YjnImI+CrmHG7XqYkQ8HxF/nCpMJfWlEfcZALio/F9z2f5fd+Zen32i6eVbx8ViRPzkl+/94sOVVmvnDxHF3D+nutdbH2fXK8PvPQBwtu46nZ573sh/dvhotXsMsz9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuLuLgo4j4fL/x52I2zYF0dj49GT+J/dxQ4+efiJ9P2zrn5GfxuUvoC4ybT5L5551+918+bqfn/vd/KZ2hLi6b/5KnWj1K58DH8bvz38SA+e/2eWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Vzxv/zl15+dVBb+1cRd6J//N5YC6369kJzb//eRn1lvbpe3apUlpeWF9+6/2ZlIc1RLwxeDf7+9t3nB7Ul458ZEL90xvi/es7x//q/7//wK0+J//XX+sXPx0tPiZ+siV87Z/yVmd+WBrUl8dcGjP+s1//uOeN/+pf9U9uGAwCj09zb31yp1ao7Cte5UMxeruvSn0GF0hX3MPkZXI+Rni58a1ixitG/6Wev9f1L0m4/U6xBM8ZlZN2A6+D4po+I/4y6MwAAAAAAAAAAAAAAQF/D+MTSqMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfW/AAAA//+Y9srv") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80980, 0xc0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r1, 0x402, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x800, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) r3 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800100, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e60, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}, 0x3400c8d4) 1m56.600936901s ago: executing program 0 (id=1043): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x8, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x101000, 0x0) getdents64(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) 1m56.39058102s ago: executing program 3 (id=1048): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300), 0xff, 0x501, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80980, 0xc0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r1, 0x402, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x800, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) r3 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800100, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e60, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}, 0x3400c8d4) 1m55.935080391s ago: executing program 1 (id=1051): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000011c0), 0x0, 0x4000800) fsopen(&(0x7f0000000280)='devpts\x00', 0x0) r0 = socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x2000000000000) 1m55.830192786s ago: executing program 33 (id=1052): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300), 0xff, 0x501, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80980, 0xc0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r1, 0x402, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x800, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) r3 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800100, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r6 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e60, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}, 0x3400c8d4) 1m55.632935854s ago: executing program 0 (id=1054): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300), 0xff, 0x501, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80980, 0xc0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r1, 0x402, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x800, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800100, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e60, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}, 0x3400c8d4) 1m55.584640167s ago: executing program 1 (id=1055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m55.542549549s ago: executing program 3 (id=1056): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1m55.405093725s ago: executing program 3 (id=1058): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300), 0xff, 0x501, &(0x7f0000000e80)="$eJzs3c9vY0cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRe37OehN7E20SO8Sfj/T0Zt54/Z2J982sv1l7AhhbtyPiICKKEfF+RMxl13PZEe90juRxnx0+Wj06fLSai3b7vX/k0vbkWvT8mcSt7DlLEfGD70T8OHc6bnNvf3OlVqvuZPWFVn17obm3f2+jvrJeXa9uVSrLS8uLb91/s3JpY32lXsxKX/709wff+GnSrdnsSu84LlNn6IXjOInJiPjeVQQbgYlsPMVRd4Rnko+IFyPi1fT+n4uJ9NUEAG6ydnsu2nO9dQDgpos0B5bLl7NcwGzk8+VyJ4f3Uszka41m6+7Dxu7WWidXNh+F/MONWnUxyxXORyGX1JfS8uN65UT9fkS8EBE/n5pO6+XVRm1thP/uAYBxduvE+v/vqc76DwDccKVRdwAAGDrrPwCMH+s/AIwf6z8AjJ/O+j896m4AAEPk/T8AjB/rPwCMle+/+25ytI+y779e+2Bvd7Pxwb21anOzXN9dLa82drbL643GevqdPfWznq/WaGwvvRG7H85/c7vZWmju7T+oN3a3Wg/S7/V+UC2kjzoYwsgAgEFeeOWTP+WSFfnt6fSInr0cCiPtGXDV8qPuADAyE6PuADAydvuC8XWB9/jSA3BD9Nmi9wmlfh8Q6m4gAvxfuvMF+X8YVz35f/8LGMaM/D+ML/l/GF/tdu68e/7HeR8IAFxvcvzAgN//v5idf5P9cuBHaycf8fFV9goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+7+v+VsL/DZyOfL5YjnImI+CrmHG7XqYkQ8HxF/nCpMJfWlEfcZALio/F9z2f5fd+Zen32i6eVbx8ViRPzkl+/94sOVVmvnDxHF3D+nutdbH2fXK8PvPQBwtu46nZ573sh/dvhotXsMsz9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuLuLgo4j4fL/x52I2zYF0dj49GT+J/dxQ4+efiJ9P2zrn5GfxuUvoC4ybT5L5551+918+bqfn/vd/KZ2hLi6b/5KnWj1K58DH8bvz38SA+e/2eWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Vzxv/zl15+dVBb+1cRd6J//N5YC6369kJzb//eRn1lvbpe3apUlpeWF9+6/2ZlIc1RLwxeDf7+9t3nB7Ul458ZEL90xvi/es7x//q/7//wK0+J//XX+sXPx0tPiZ+siV87Z/yVmd+WBrUl8dcGjP+s1//uOeN/+pf9U9uGAwCj09zb31yp1ao7Cte5UMxeruvSn0GF0hX3MPkZXI+Rni58a1ixitG/6Wev9f1L0m4/U6xBM8ZlZN2A6+D4po+I/4y6MwAAAAAAAAAAAAAAQF/D+MTSqMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfW/AAAA//+Y9srv") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80980, 0xc0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r1, 0x402, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x800, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) r3 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800100, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e60, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}, 0x3400c8d4) 1m55.30115241s ago: executing program 0 (id=1059): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300), 0xff, 0x501, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80980, 0xc0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r1, 0x402, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x800, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) r3 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800100, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r6 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e60, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}, 0x3400c8d4) 1m55.242288152s ago: executing program 34 (id=1060): mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0xbd03, 0x18882) write$eventfd(r0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x9, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x20004080) r1 = add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000380)=@chain={'key_or_keyring:', r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e000000140002800500"], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0x15f3, 0x4000, 0x1, 0x39d}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f00000005c0)={[{@data_writeback}, {@nojournal_checksum}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@journal_async_commit}], [{@obj_role={'obj_role', 0x3d, '#:('}}, {@uid_lt}]}, 0xff, 0x44b, &(0x7f00000021c0)="$eJzs20tvG1UbAOB3Jrdev/gr5dILECiIiEvSpAW6QEggkNggIcGiLE2SViVug5og0aqCghBbVIk9YonEL2AFGwSskNjyA1ClCnXTwspo7JnUdpw0DnYc8PNI05wzc9Lzvp459pk5cQADayL7J4nYFxG/RcR4vdrcYKL+4/bNK3N/3rwyl0S1+uYfSa3drZtX5oqmxe/tzSuTaUT6aRJH2vS7fOnyYrlSWbiY14fzn8+cO18+u3B24cLsqVMnT8w8/9zss13JM4vp1uEPl44eeu3ta6/Pnb72zk/fJEX+LXl0ycSLGxx8vFrtcnf9tb+hnAz3MRA6MpSPvZHa+B+Pobhz8sbj1U/6GhzQU9Vqtbp3/cNXq8B/WBKbajbW80CAbVZ80Gf3v8W2TVOPHeHGS/UboCzv2/lWPzIcad5mpOX+tpsmIuL01b++zLbozXMIAIAm32Xzn6fbzf/SuK+h3f/ytaFSRPw/Ig5ExD0RcTAi7o2otb0/Ih7osP+Jlvra+U96fUuJbVI2/3shX9tqnv8Vs78oDeW1/bX8R5Iz5yoLx/PXZDJGxrL6zAZ9fP/Kr5+vd6xx/pdtWf/FXDCP4/rwWPPvzJdXyv8k50Y3Po44PNwu/2R1JSCJiEMRcXiLfZx78uuj6x1bk3+Wa1P+G+jCOlP1q4gn6uf/arTkX8hK0yvn35tevnS5zfrk9K6oLByfLq6KtX7+5bM31uv/7ue/t7Lzv6ft9b+afylpXK9d7uz/H7vL8a1e/6PJW7XyaL7vg/LKysWZiNHF5ouitn92bb1on+U/eaz9+D8Qd16JIxGRXcQPRsRDEfFwHvsjEfFoRBzbIMcfX37s3a3n31tZ/vMdnf87hdFo3dO+MLT4w7exq6HTUif5Z+f/ZK00me/ZzPvfZuLq/GoGAACAf6c0IvZFkk6tltN0aqr+9/IHY09aWVpeeerM0vsX5uvfESjFSFo86RpveB46k9/WF/XZlvqJ/LnxF0O7a/WpuaXKfL+ThwG3d53xn/l9qN/RAT3n+1owuIx/GFzGPwwu4x8GV5vxv7sfcQDbr93n/0d9iAPYfi3j37IfDBD3/zC4jH8YXKvjv9TfOIBttbw77v4leQWFNYVId0QYPSwkwzsijD4U0sVypd/vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xdwAAAP//D2fdhw==") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000018c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40041) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m55.207582885s ago: executing program 1 (id=1062): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000011c0), 0x0, 0x4000800) fsopen(&(0x7f0000000280)='devpts\x00', 0x0) r0 = socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x2000000000000) 1m55.204504225s ago: executing program 3 (id=1063): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300), 0xff, 0x501, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80980, 0xc0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r1, 0x402, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x800, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800100, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e60, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}, 0x3400c8d4) 1m55.08281932s ago: executing program 0 (id=1064): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x8, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x101000, 0x0) getdents64(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) 1m55.0718534s ago: executing program 35 (id=1064): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x8, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x101000, 0x0) getdents64(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) 1m55.029364822s ago: executing program 1 (id=1066): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300), 0xff, 0x501, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80980, 0xc0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r1, 0x402, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x800, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) r3 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800100, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r4, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e60, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}, 0x3400c8d4) 1m55.015492073s ago: executing program 3 (id=1067): r0 = socket(0x23, 0x80805, 0x0) listen(r0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x9, 0x3}, 0x20b0, 0x1, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x138) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c000) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r3, 0xffff, 0xfff9, 0x84, 0xffff, 0x7}, &(0x7f0000000040)=0x14) 1m54.996646444s ago: executing program 36 (id=1067): r0 = socket(0x23, 0x80805, 0x0) listen(r0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x9, 0x3}, 0x20b0, 0x1, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x138) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c000) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r3, 0xffff, 0xfff9, 0x84, 0xffff, 0x7}, &(0x7f0000000040)=0x14) 1m54.565803414s ago: executing program 1 (id=1069): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000011c0), 0x0, 0x4000800) fsopen(&(0x7f0000000280)='devpts\x00', 0x0) r0 = socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r7, 0xffffffffffffffff, 0x2000000000000) 1m54.469814818s ago: executing program 1 (id=1070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m54.257987388s ago: executing program 37 (id=1070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m50.763579748s ago: executing program 6 (id=1053): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300), 0xff, 0x501, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80980, 0xc0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r1, 0x402, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x800, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) r3 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800100, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r6 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e60, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}, 0x3400c8d4) 1m50.270803211s ago: executing program 6 (id=1073): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300), 0xff, 0x501, &(0x7f0000000e80)="$eJzs3c9vY0cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRe37OehN7E20SO8Sfj/T0Zt54/Z2J982sv1l7AhhbtyPiICKKEfF+RMxl13PZEe90juRxnx0+Wj06fLSai3b7vX/k0vbkWvT8mcSt7DlLEfGD70T8OHc6bnNvf3OlVqvuZPWFVn17obm3f2+jvrJeXa9uVSrLS8uLb91/s3JpY32lXsxKX/709wff+GnSrdnsSu84LlNn6IXjOInJiPjeVQQbgYlsPMVRd4Rnko+IFyPi1fT+n4uJ9NUEAG6ydnsu2nO9dQDgpos0B5bLl7NcwGzk8+VyJ4f3Uszka41m6+7Dxu7WWidXNh+F/MONWnUxyxXORyGX1JfS8uN65UT9fkS8EBE/n5pO6+XVRm1thP/uAYBxduvE+v/vqc76DwDccKVRdwAAGDrrPwCMH+s/AIwf6z8AjJ/O+j896m4AAEPk/T8AjB/rPwCMle+/+25ytI+y779e+2Bvd7Pxwb21anOzXN9dLa82drbL643GevqdPfWznq/WaGwvvRG7H85/c7vZWmju7T+oN3a3Wg/S7/V+UC2kjzoYwsgAgEFeeOWTP+WSFfnt6fSInr0cCiPtGXDV8qPuADAyE6PuADAydvuC8XWB9/jSA3BD9Nmi9wmlfh8Q6m4gAvxfuvMF+X8YVz35f/8LGMaM/D+ML/l/GF/tdu68e/7HeR8IAFxvcvzAgN//v5idf5P9cuBHaycf8fFV9goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+7+v+VsL/DZyOfL5YjnImI+CrmHG7XqYkQ8HxF/nCpMJfWlEfcZALio/F9z2f5fd+Zen32i6eVbx8ViRPzkl+/94sOVVmvnDxHF3D+nutdbH2fXK8PvPQBwtu46nZ573sh/dvhotXsMsz9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuLuLgo4j4fL/x52I2zYF0dj49GT+J/dxQ4+efiJ9P2zrn5GfxuUvoC4ybT5L5551+918+bqfn/vd/KZ2hLi6b/5KnWj1K58DH8bvz38SA+e/2eWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Vzxv/zl15+dVBb+1cRd6J//N5YC6369kJzb//eRn1lvbpe3apUlpeWF9+6/2ZlIc1RLwxeDf7+9t3nB7Ul458ZEL90xvi/es7x//q/7//wK0+J//XX+sXPx0tPiZ+siV87Z/yVmd+WBrUl8dcGjP+s1//uOeN/+pf9U9uGAwCj09zb31yp1ao7Cte5UMxeruvSn0GF0hX3MPkZXI+Rni58a1ixitG/6Wev9f1L0m4/U6xBM8ZlZN2A6+D4po+I/4y6MwAAAAAAAAAAAAAAQF/D+MTSqMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfW/AAAA//+Y9srv") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80980, 0xc0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r1, 0x402, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x800, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) r3 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800100, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r6 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e60, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}, 0x3400c8d4) 1m49.178795411s ago: executing program 6 (id=1078): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') linkat(r0, &(0x7f00000000c0)='./mnt\x00', r0, &(0x7f0000000040)='./mnt\x00', 0x1400) 1m48.737611631s ago: executing program 38 (id=1078): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') linkat(r0, &(0x7f00000000c0)='./mnt\x00', r0, &(0x7f0000000040)='./mnt\x00', 0x1400) 39.061393448s ago: executing program 2 (id=3328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000001000000000100001c11"], 0x4a) 38.904365416s ago: executing program 2 (id=3333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x132, 0x3e60, 0x7, 0x6, 0xfffffffa}, 0x53}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003004024c1020000ff8807c2fb7fe0400018534b4f6b3d327db412f4000000000000", 0x2c}], 0x1}, 0x20040000) 38.769074412s ago: executing program 2 (id=3338): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000000080)={0x0, 0x3, 0x647, 0x110000, 0x40ffc, 0xc}) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x2008010, &(0x7f0000000340)) 38.650060117s ago: executing program 2 (id=3343): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) faccessat(0xffffffffffffffff, 0x0, 0xb) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 38.574258981s ago: executing program 2 (id=3346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x1, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e12", 0x6}], 0x1}, 0x20000885) 37.72301522s ago: executing program 2 (id=3370): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x1, 0x10000, 0x1}}, 0x20) syz_emit_ethernet(0x6dc, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x6a6, 0x0, 0x0, @private2, @mcast2, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd"}}}}}, 0x0) 37.665966612s ago: executing program 39 (id=3370): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x1, 0x10000, 0x1}}, 0x20) syz_emit_ethernet(0x6dc, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x6a6, 0x0, 0x0, @private2, @mcast2, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd"}}}}}, 0x0) 1.41413537s ago: executing program 5 (id=4376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000780)=ANY=[], 0x8) sendmmsg$inet6(r0, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000017c0)="5225b2d4d44ddc2f3c71f8c3b1b440", 0xf}], 0x1}}], 0x1, 0x4000800) 1.356437223s ago: executing program 9 (id=4379): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000040005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.307686865s ago: executing program 9 (id=4380): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[], 0x8) 1.307493445s ago: executing program 9 (id=4381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x140c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="ed", 0x1}], 0x1}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.160650981s ago: executing program 9 (id=4384): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 1.125788853s ago: executing program 9 (id=4385): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x476c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.067759845s ago: executing program 8 (id=4386): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x54, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 998.833247ms ago: executing program 8 (id=4388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x0) 967.834139ms ago: executing program 4 (id=4391): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[], 0x8) 945.00774ms ago: executing program 4 (id=4392): shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9da, 0xfffff9ff, 0x378}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x80000000, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004"], 0x2e8}}], 0x2, 0x0) 888.638792ms ago: executing program 8 (id=4393): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0, 0xee}, 0x1c) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0xa3, 0x0) 888.418272ms ago: executing program 4 (id=4394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x140c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="ed", 0x1}], 0x1}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 888.149072ms ago: executing program 9 (id=4395): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x10080, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000300)={0x1, 0x8001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f0000d23000)) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r5, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 857.015524ms ago: executing program 8 (id=4396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 856.629953ms ago: executing program 8 (id=4397): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 717.75839ms ago: executing program 4 (id=4399): r0 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x4119, 0x869e, 0xc, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xd2f1, 0x2000, 0x8, 0xadea}) r3 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x93d0, 0x2, 0x42, 0xfc}) io_uring_enter(r3, 0x100000, 0x2, 0xf, &(0x7f0000000000)={[0x100000]}, 0x18) 542.963127ms ago: executing program 5 (id=4400): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) 542.752317ms ago: executing program 4 (id=4401): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 511.829969ms ago: executing program 5 (id=4403): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x40001, 0x113) write(r0, &(0x7f0000000000)='7', 0x1) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 511.689919ms ago: executing program 7 (id=4404): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setns(0xc9, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 458.025251ms ago: executing program 5 (id=4405): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='maps\x00') ioctl$KDSKBLED(r0, 0xc0686611, 0x20000081) 446.189701ms ago: executing program 4 (id=4406): socket(0x10, 0x5, 0x0) r0 = io_uring_setup(0x12b9, &(0x7f00000002c0)={0x0, 0x48c8, 0x810, 0x1, 0x1000168}) futex(&(0x7f0000002000), 0x9, 0x0, &(0x7f0000002040)={0x77359400}, 0x0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) 361.364525ms ago: executing program 7 (id=4407): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 361.104294ms ago: executing program 5 (id=4408): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={r0, r0}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "2eca37409e3e26049848c35f8a6b2c1b1463755eaa206d68", "79e1cfd4311cfdb33b917a40aff5662907ee7f4f3f81ba3c245dfccfc9f1e3ee"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000060000000c000780080006400000eaa70500010006000000050005000200000005000400000000000900020073787a310000000011000300686173683a69702c6d61726b00000000"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14, r8, 0x4, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4040000) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 350.960275ms ago: executing program 7 (id=4409): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private0, 0xee}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r1, 0x0, 0x0, 0xa3, 0x0) 299.562437ms ago: executing program 7 (id=4410): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x3, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffe8f, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x2000) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 258.387909ms ago: executing program 7 (id=4411): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r0, r2, 0x0, 0x280000000000) 126.970645ms ago: executing program 7 (id=4412): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000500)={r1, 0x6, 0x6, 0x5, 0x8, 0xd, 0x3, 0x6, {0x0, @in={{0x2, 0x4e24, @remote}}, 0x1, 0x7, 0x7fff, 0x6, 0x867}}, 0x0) 36.077278ms ago: executing program 5 (id=4413): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @mcast2, 0xe91}}}, 0x84) 0s ago: executing program 8 (id=4414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf", 0x22}], 0x1}, 0x0) kernel console output (not intermixed with test programs): filter on device bond0 [ 206.839591][T13453] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.848144][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.848177][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.855044][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.855078][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.963957][ T29] audit: type=1400 audit(1789132321.963:787): avc: denied { getopt } for pid=13599 comm="syz.7.3426" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.040682][T13453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.155026][T13453] veth0_vlan: entered promiscuous mode [ 207.157391][T13453] veth1_vlan: entered promiscuous mode [ 207.182324][T13453] veth0_macvtap: entered promiscuous mode [ 207.184268][T13453] veth1_macvtap: entered promiscuous mode [ 207.189563][T13453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.212553][T13453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.261720][ T3429] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.262000][ T3429] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.262219][ T3429] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.262359][ T3429] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.703715][ T29] audit: type=1326 audit(1789132322.703:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13675 comm="syz.5.3440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55f031e159 code=0x0 [ 208.644636][T13694] FAULT_INJECTION: forcing a failure. [ 208.644636][T13694] name failslab, interval 1, probability 0, space 0, times 0 [ 208.644728][T13694] CPU: 1 UID: 0 PID: 13694 Comm: syz.5.3448 Not tainted syzkaller #0 PREEMPT(lazy) [ 208.644759][T13694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.644769][T13694] Call Trace: [ 208.644774][T13694] [ 208.644779][T13694] __dump_stack+0x1d/0x30 [ 208.644830][T13694] dump_stack_lvl+0x95/0xd0 [ 208.644844][T13694] dump_stack+0x15/0x1b [ 208.644856][T13694] should_fail_ex+0x262/0x280 [ 208.644872][T13694] ? prepare_creds+0x38/0x550 [ 208.645030][T13694] should_failslab+0x8c/0xb0 [ 208.645110][T13694] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 208.645129][T13694] ? prepare_creds+0x38/0x550 [ 208.645245][T13694] prepare_creds+0x38/0x550 [ 208.645283][T13694] __se_sys_keyctl+0x389/0xb70 [ 208.645336][T13694] ? __se_sys_futex+0x2f6/0x370 [ 208.645405][T13694] __x64_sys_keyctl+0x67/0x80 [ 208.645452][T13694] x64_sys_call+0x1fe0/0x2550 [ 208.645498][T13694] do_syscall_64+0x112/0x360 [ 208.645518][T13694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.645532][T13694] RIP: 0033:0x7f55f031e159 [ 208.645543][T13694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.645632][T13694] RSP: 002b:00007f55eed77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 208.645645][T13694] RAX: ffffffffffffffda RBX: 00007f55f05a5fa0 RCX: 00007f55f031e159 [ 208.645697][T13694] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 208.645705][T13694] RBP: 00007f55f03b503b R08: 0000000000000000 R09: 0000000000000000 [ 208.645713][T13694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.645721][T13694] R13: 00007f55f05a6038 R14: 00007f55f05a5fa0 R15: 00007fff2208d238 [ 208.645801][T13694] [ 208.838572][T13706] loop5: detected capacity change from 0 to 1764 [ 208.846911][ T29] audit: type=1400 audit(1789132323.853:789): avc: denied { mount } for pid=13705 comm="syz.5.3451" name="/" dev="loop5" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 208.864006][ T29] audit: type=1400 audit(1789132323.863:790): avc: denied { unmount } for pid=13453 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 209.404042][T13736] syzkaller0: entered promiscuous mode [ 209.404058][T13736] syzkaller0: entered allmulticast mode [ 209.992000][T13608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.046589][T13739] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3466'. [ 210.046614][T13739] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3466'. [ 210.070117][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3468'. [ 210.142215][T13752] loop4: detected capacity change from 0 to 1764 [ 210.152560][T13742] tipc: Enabling of bearer rejected, failed to enable media [ 210.219573][T13761] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(8) [ 210.274069][T13770] syzkaller0: entered promiscuous mode [ 210.274091][T13770] syzkaller0: entered allmulticast mode [ 210.275881][T13773] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 210.369128][T13776] syzkaller0: entered promiscuous mode [ 210.369150][T13776] syzkaller0: entered allmulticast mode [ 210.397312][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3484'. [ 210.400151][T13783] team0: No ports can be present during mode change [ 210.400587][T13783] tipc: Enabling of bearer rejected, already enabled [ 210.571843][T13798] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 210.665192][T13805] syzkaller0: entered promiscuous mode [ 210.665215][T13805] syzkaller0: entered allmulticast mode [ 210.707938][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3497'. [ 210.771009][T13813] tipc: Enabling of bearer rejected, failed to enable media [ 210.911071][T13826] syzkaller0: entered promiscuous mode [ 210.911092][T13826] syzkaller0: entered allmulticast mode [ 211.359260][ T29] audit: type=1400 audit(1789132326.353:791): avc: denied { read } for pid=13856 comm="syz.7.3513" path="socket:[43295]" dev="sockfs" ino=43295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.443370][T13871] syzkaller0: entered promiscuous mode [ 211.443402][T13871] syzkaller0: entered allmulticast mode [ 211.546483][T13877] syzkaller0: left promiscuous mode [ 211.546523][T13877] syzkaller0: left allmulticast mode [ 211.688775][T13902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.688885][T13902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.711994][T13898] syzkaller0: entered promiscuous mode [ 211.712033][T13898] syzkaller0: entered allmulticast mode [ 211.901916][T13925] tipc: Enabling of bearer rejected, failed to enable media [ 211.970340][T13941] loop8: detected capacity change from 0 to 1764 [ 212.232334][T13965] FAULT_INJECTION: forcing a failure. [ 212.232334][T13965] name fail_futex, interval 1, probability 0, space 0, times 0 [ 212.232423][T13965] CPU: 0 UID: 0 PID: 13965 Comm: syz.9.3559 Not tainted syzkaller #0 PREEMPT(lazy) [ 212.232457][T13965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.232472][T13965] Call Trace: [ 212.232479][T13965] [ 212.232487][T13965] __dump_stack+0x1d/0x30 [ 212.232511][T13965] dump_stack_lvl+0x95/0xd0 [ 212.232534][T13965] dump_stack+0x15/0x1b [ 212.232625][T13965] should_fail_ex+0x262/0x280 [ 212.232722][T13965] should_fail+0xb/0x20 [ 212.232828][T13965] get_futex_key+0x12d/0xb10 [ 212.232859][T13965] futex_wake+0x89/0x400 [ 212.232901][T13965] do_futex+0x3f8/0x460 [ 212.232933][T13965] ? newque+0x1ff/0x240 [ 212.233023][T13965] __se_sys_futex+0x2f6/0x370 [ 212.233055][T13965] ? xfd_validate_state+0x45/0xf0 [ 212.233091][T13965] __x64_sys_futex+0x78/0x90 [ 212.233121][T13965] x64_sys_call+0x22e2/0x2550 [ 212.233197][T13965] do_syscall_64+0x112/0x360 [ 212.233238][T13965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.233261][T13965] RIP: 0033:0x7fa83237e159 [ 212.233296][T13965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.233327][T13965] RSP: 002b:00007fa830dd70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.233374][T13965] RAX: ffffffffffffffda RBX: 00007fa832605fa8 RCX: 00007fa83237e159 [ 212.233393][T13965] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa832605fac [ 212.233410][T13965] RBP: 00007fa832605fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 212.233428][T13965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.233445][T13965] R13: 00007fa832606038 R14: 00007ffe1dcb9e00 R15: 00007ffe1dcb9ee8 [ 212.233469][T13965] [ 212.356200][T13973] loop4: detected capacity change from 0 to 1764 [ 212.460294][ T29] audit: type=1400 audit(1789132327.453:792): avc: denied { execute } for pid=13977 comm="syz.4.3565" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=42951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 212.694693][T14001] syzkaller0: entered promiscuous mode [ 212.694717][T14001] syzkaller0: entered allmulticast mode [ 213.192368][T14051] syzkaller0: entered promiscuous mode [ 213.192388][T14051] syzkaller0: entered allmulticast mode [ 213.240314][T14057] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3596'. [ 213.241069][T14057] team0: No ports can be present during mode change [ 213.261022][ T3429] tipc: Resetting bearer [ 213.266762][T14057] tipc: Enabling of bearer rejected, already enabled [ 213.442039][T14067] syzkaller0: entered promiscuous mode [ 213.442063][T14067] syzkaller0: entered allmulticast mode [ 213.460620][T14074] loop8: detected capacity change from 0 to 1764 [ 213.592767][T14082] netlink: 'syz.8.3607': attribute type 1 has an invalid length. [ 213.656859][T14082] veth3: entered allmulticast mode [ 213.658101][T14082] bond1: (slave veth3): Enslaving as an active interface with a down link [ 213.680425][T14086] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3609'. [ 213.691415][T14082] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 213.696197][T14086] team0: No ports can be present during mode change [ 213.696724][T14086] tipc: Enabling of bearer rejected, already enabled [ 213.795194][T14092] device-mapper: ioctl: Unable to rename non-existent device, to [ 213.890851][T14101] syzkaller0: entered promiscuous mode [ 213.890926][T14101] syzkaller0: entered allmulticast mode [ 213.908238][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3619'. [ 213.908313][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3619'. [ 214.032940][T14124] loop4: detected capacity change from 0 to 256 [ 214.161101][T14128] device-mapper: ioctl: Unable to rename non-existent device, to [ 214.187200][T14132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.190591][T14132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.298150][T14139] syzkaller0: entered promiscuous mode [ 214.298169][T14139] syzkaller0: entered allmulticast mode [ 214.319492][T14142] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3631'. [ 214.355578][T14142] tipc: Enabling of bearer rejected, failed to enable media [ 214.475508][ T29] audit: type=1326 audit(1789132329.473:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14155 comm="syz.5.3635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55f031e159 code=0x0 [ 214.625460][T14182] team0: No ports can be present during mode change [ 214.625831][T14182] tipc: Enabling of bearer rejected, already enabled [ 214.694956][T14190] xt_hashlimit: max too large, truncated to 1048576 [ 214.746802][ T29] audit: type=1400 audit(1789132329.743:794): avc: denied { bind } for pid=14189 comm="syz.9.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.747046][ T29] audit: type=1400 audit(1789132329.743:795): avc: denied { listen } for pid=14189 comm="syz.9.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.747464][ T29] audit: type=1400 audit(1789132329.743:796): avc: denied { read } for pid=14189 comm="syz.9.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 215.002189][ T29] audit: type=1400 audit(1789132330.003:797): avc: denied { ioctl } for pid=14196 comm="syz.4.3649" path="socket:[43774]" dev="sockfs" ino=43774 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.005442][T14197] vlan2: entered allmulticast mode [ 215.005542][T14197] bridge_slave_0: entered allmulticast mode [ 215.005663][T14197] bridge0: port 1(vlan2) entered blocking state [ 215.005694][T14197] bridge0: port 1(vlan2) entered disabled state [ 215.006268][T14197] vlan2: entered promiscuous mode [ 215.006287][T14197] bridge_slave_0: entered promiscuous mode [ 215.121462][T14205] __nla_validate_parse: 1 callbacks suppressed [ 215.121477][T14205] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3653'. [ 215.217364][T14220] IPv6: sit3: Disabled Multicast RS [ 215.219747][T14220] sit3: entered allmulticast mode [ 215.227683][T14205] tipc: Enabling of bearer rejected, failed to enable media [ 215.325928][ T29] audit: type=1400 audit(1789132330.323:798): avc: denied { shutdown } for pid=14225 comm="syz.5.3660" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.366246][T14233] syzkaller0: left promiscuous mode [ 215.366340][T14233] syzkaller0: left allmulticast mode [ 215.430568][T14242] syzkaller0: entered promiscuous mode [ 215.430588][T14242] syzkaller0: entered allmulticast mode [ 215.434542][T14239] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 215.475020][T14245] FAULT_INJECTION: forcing a failure. [ 215.475020][T14245] name failslab, interval 1, probability 0, space 0, times 0 [ 215.475052][T14245] CPU: 1 UID: 0 PID: 14245 Comm: syz.4.3669 Not tainted syzkaller #0 PREEMPT(lazy) [ 215.475147][T14245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.475194][T14245] Call Trace: [ 215.475201][T14245] [ 215.475210][T14245] __dump_stack+0x1d/0x30 [ 215.475239][T14245] dump_stack_lvl+0x95/0xd0 [ 215.475265][T14245] dump_stack+0x15/0x1b [ 215.475321][T14245] should_fail_ex+0x262/0x280 [ 215.475348][T14245] ? sctp_add_bind_addr+0x71/0x1e0 [ 215.475377][T14245] should_failslab+0x8c/0xb0 [ 215.475467][T14245] __kmalloc_cache_noprof+0x7a/0x400 [ 215.475498][T14245] ? sctp_add_bind_addr+0x71/0x1e0 [ 215.475602][T14245] sctp_add_bind_addr+0x71/0x1e0 [ 215.475636][T14245] sctp_copy_local_addr_list+0x1b4/0x250 [ 215.475670][T14245] sctp_copy_one_addr+0x7f/0x280 [ 215.475705][T14245] sctp_bind_addr_copy+0x11b/0x290 [ 215.475808][T14245] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 215.475833][T14245] sctp_connect_new_asoc+0x1c3/0x3a0 [ 215.475870][T14245] sctp_sendmsg+0x105f/0x1d00 [ 215.475976][T14245] ? __pfx_sctp_sendmsg+0x10/0x10 [ 215.476004][T14245] ? __pfx_inet_sendmsg+0x10/0x10 [ 215.476028][T14245] inet_sendmsg+0xc5/0xd0 [ 215.476073][T14245] __sys_sendto+0x3be/0x470 [ 215.476212][T14245] __x64_sys_sendto+0x76/0x90 [ 215.476254][T14245] x64_sys_call+0x200c/0x2550 [ 215.476329][T14245] do_syscall_64+0x112/0x360 [ 215.476366][T14245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.476390][T14245] RIP: 0033:0x7f2c7c0de159 [ 215.476492][T14245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.476516][T14245] RSP: 002b:00007f2c7ab37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 215.476540][T14245] RAX: ffffffffffffffda RBX: 00007f2c7c365fa0 RCX: 00007f2c7c0de159 [ 215.476557][T14245] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000004 [ 215.476572][T14245] RBP: 00007f2c7c17503b R08: 0000200000000000 R09: 000000000000001c [ 215.476586][T14245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.476673][T14245] R13: 00007f2c7c366038 R14: 00007f2c7c365fa0 R15: 00007fff77b09718 [ 215.476695][T14245] [ 215.476724][ T29] audit: type=1400 audit(1789132330.473:799): avc: denied { name_connect } for pid=14244 comm="syz.4.3669" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 215.510386][T14248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3670'. [ 215.525416][T14248] team0: No ports can be present during mode change [ 215.528265][T14248] vlan0: entered promiscuous mode [ 215.538447][T14248] team0: Port device vlan0 added [ 215.546299][T14248] tipc: Started in network mode [ 215.546345][T14248] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 215.546375][T14248] tipc: Enabled bearer , priority 0 [ 215.639749][ T29] audit: type=1400 audit(1789132330.633:800): avc: denied { mount } for pid=14260 comm="syz.4.3675" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 215.644059][ T29] audit: type=1400 audit(1789132330.643:801): avc: denied { watch watch_reads } for pid=14260 comm="syz.4.3675" path="/572/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 215.713650][T14265] IPv6: sit1: Disabled Multicast RS [ 215.714324][T14265] sit1: entered allmulticast mode [ 215.946290][T14285] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3684'. [ 215.966250][T14285] team0: No ports can be present during mode change [ 215.978206][T14285] tipc: Enabling of bearer rejected, already enabled [ 216.165912][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3695'. [ 216.190379][T14313] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 216.310884][T14323] loop4: detected capacity change from 0 to 256 [ 216.365247][T14329] FAULT_INJECTION: forcing a failure. [ 216.365247][T14329] name failslab, interval 1, probability 0, space 0, times 0 [ 216.365281][T14329] CPU: 1 UID: 0 PID: 14329 Comm: syz.9.3704 Not tainted syzkaller #0 PREEMPT(lazy) [ 216.365353][T14329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.365366][T14329] Call Trace: [ 216.365373][T14329] [ 216.365380][T14329] __dump_stack+0x1d/0x30 [ 216.365407][T14329] dump_stack_lvl+0x95/0xd0 [ 216.365431][T14329] dump_stack+0x15/0x1b [ 216.365471][T14329] should_fail_ex+0x262/0x280 [ 216.365519][T14329] ? do_getname+0x2e/0x1c0 [ 216.365542][T14329] should_failslab+0x8c/0xb0 [ 216.365588][T14329] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 216.365665][T14329] ? do_getname+0x2e/0x1c0 [ 216.365692][T14329] do_getname+0x2e/0x1c0 [ 216.365737][T14329] getname_flags+0x1d/0x30 [ 216.365787][T14329] do_sys_openat2+0x6c/0x130 [ 216.365811][T14329] __x64_sys_openat+0xf2/0x120 [ 216.365835][T14329] x64_sys_call+0x1f72/0x2550 [ 216.365917][T14329] do_syscall_64+0x112/0x360 [ 216.365957][T14329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.365994][T14329] RIP: 0033:0x7fa83237e159 [ 216.366013][T14329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.366033][T14329] RSP: 002b:00007fa830dd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 216.366058][T14329] RAX: ffffffffffffffda RBX: 00007fa832605fa0 RCX: 00007fa83237e159 [ 216.366108][T14329] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 216.366124][T14329] RBP: 00007fa83241503b R08: 0000000000000000 R09: 0000000000000000 [ 216.366138][T14329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.366151][T14329] R13: 00007fa832606038 R14: 00007fa832605fa0 R15: 00007ffe1dcb9ee8 [ 216.366194][T14329] [ 216.459382][T14333] vlan2: entered allmulticast mode [ 216.616948][T14345] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 216.640025][T14348] FAULT_INJECTION: forcing a failure. [ 216.640025][T14348] name failslab, interval 1, probability 0, space 0, times 0 [ 216.640120][T14348] CPU: 1 UID: 0 PID: 14348 Comm: syz.4.3714 Not tainted syzkaller #0 PREEMPT(lazy) [ 216.640149][T14348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.640164][T14348] Call Trace: [ 216.640208][T14348] [ 216.640277][T14348] __dump_stack+0x1d/0x30 [ 216.640306][T14348] dump_stack_lvl+0x95/0xd0 [ 216.640348][T14348] dump_stack+0x15/0x1b [ 216.640371][T14348] should_fail_ex+0x262/0x280 [ 216.640402][T14348] ? __send_signal_locked+0x14d/0x750 [ 216.640430][T14348] should_failslab+0x8c/0xb0 [ 216.640459][T14348] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 216.640502][T14348] ? __send_signal_locked+0x14d/0x750 [ 216.640534][T14348] __send_signal_locked+0x14d/0x750 [ 216.640566][T14348] ? __rcu_read_unlock+0x33/0x70 [ 216.640596][T14348] do_notify_parent+0x55f/0x600 [ 216.640706][T14348] release_task+0x9bf/0xb90 [ 216.640738][T14348] do_exit+0xd79/0x1510 [ 216.640784][T14348] do_group_exit+0xfe/0x140 [ 216.640811][T14348] ? get_signal+0xe00/0xf10 [ 216.640911][T14348] get_signal+0xe07/0xf10 [ 216.640952][T14348] arch_do_signal_or_restart+0x96/0x480 [ 216.640989][T14348] exit_to_user_mode_loop+0x15d/0x8c0 [ 216.641077][T14348] do_syscall_64+0x212/0x360 [ 216.641145][T14348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.641304][T14348] RIP: 0033:0x7f2c7c0de159 [ 216.641322][T14348] Code: Unable to access opcode bytes at 0x7f2c7c0de12f. [ 216.641333][T14348] RSP: 002b:00007f2c7ab370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.641352][T14348] RAX: 0000000000000001 RBX: 00007f2c7c365fa8 RCX: 00007f2c7c0de159 [ 216.641366][T14348] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2c7c365fac [ 216.641379][T14348] RBP: 00007f2c7c365fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 216.641444][T14348] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 216.641500][T14348] R13: 00007f2c7c366038 R14: 00007fff77b09630 R15: 00007fff77b09718 [ 216.641520][T14348] [ 216.662109][ T24] tipc: Node number set to 11578026 [ 216.754150][T14355] xt_hashlimit: max too large, truncated to 1048576 [ 216.810292][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3720'. [ 216.814383][T14361] team0: No ports can be present during mode change [ 216.814962][T14361] tipc: Enabling of bearer rejected, already enabled [ 216.947375][T14371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.947483][T14371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.176743][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3732'. [ 217.178865][T14388] team0: No ports can be present during mode change [ 217.179543][T14388] tipc: Enabling of bearer rejected, already enabled [ 217.356536][T14405] vlan2: entered allmulticast mode [ 217.559855][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3745'. [ 217.561544][T14422] team0: No ports can be present during mode change [ 217.561969][T14422] tipc: Enabling of bearer rejected, already enabled [ 217.992732][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3755'. [ 218.036440][T14469] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 218.036619][T14469] FAULT_INJECTION: forcing a failure. [ 218.036619][T14469] name failslab, interval 1, probability 0, space 0, times 0 [ 218.036649][T14469] CPU: 0 UID: 0 PID: 14469 Comm: syz.9.3757 Not tainted syzkaller #0 PREEMPT(lazy) [ 218.036675][T14469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.036689][T14469] Call Trace: [ 218.036743][T14469] [ 218.036813][T14469] __dump_stack+0x1d/0x30 [ 218.036839][T14469] dump_stack_lvl+0x95/0xd0 [ 218.036944][T14469] dump_stack+0x15/0x1b [ 218.036969][T14469] should_fail_ex+0x262/0x280 [ 218.037004][T14469] should_failslab+0x8c/0xb0 [ 218.037064][T14469] __kvmalloc_node_noprof+0x168/0x5c0 [ 218.037103][T14469] ? __nf_hook_entries_try_shrink+0x272/0x430 [ 218.037160][T14469] ? __nf_hook_entries_try_shrink+0x272/0x430 [ 218.037287][T14469] __nf_hook_entries_try_shrink+0x272/0x430 [ 218.037329][T14469] __nf_unregister_net_hook+0x2da/0x370 [ 218.037368][T14469] nf_unregister_net_hooks+0xab/0xe0 [ 218.037420][T14469] ? __pfx_connmark_mt_destroy+0x10/0x10 [ 218.037450][T14469] nf_ct_netns_do_put+0x1e9/0x260 [ 218.037475][T14469] ? __pfx_connmark_mt_destroy+0x10/0x10 [ 218.037550][T14469] nf_ct_netns_put+0xea/0x1f0 [ 218.037572][T14469] ? __pfx_connmark_mt_destroy+0x10/0x10 [ 218.037601][T14469] connmark_mt_destroy+0x2f/0x40 [ 218.037654][T14469] cleanup_entry+0xdf/0x220 [ 218.037691][T14469] translate_table+0x11b6/0x1220 [ 218.037727][T14469] do_ip6t_set_ctl+0x73e/0x990 [ 218.037799][T14469] ? hrtimer_start_range_ns_common+0x585/0x860 [ 218.037897][T14469] ? __rcu_read_unlock+0x4e/0x70 [ 218.037938][T14469] nf_setsockopt+0x199/0x1b0 [ 218.037966][T14469] ipv6_setsockopt+0x11a/0x130 [ 218.038012][T14469] rawv6_setsockopt+0x1cc/0x3f0 [ 218.038045][T14469] sock_common_setsockopt+0x69/0x80 [ 218.038094][T14469] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 218.038124][T14469] __sys_setsockopt+0x184/0x200 [ 218.038160][T14469] __x64_sys_setsockopt+0x64/0x80 [ 218.038271][T14469] x64_sys_call+0x248f/0x2550 [ 218.038296][T14469] do_syscall_64+0x112/0x360 [ 218.038328][T14469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.038394][T14469] RIP: 0033:0x7fa83237e159 [ 218.038409][T14469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.038428][T14469] RSP: 002b:00007fa830dd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 218.038449][T14469] RAX: ffffffffffffffda RBX: 00007fa832605fa0 RCX: 00007fa83237e159 [ 218.038507][T14469] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 218.038519][T14469] RBP: 00007fa83241503b R08: 00000000000006d0 R09: 0000000000000000 [ 218.038533][T14469] R10: 0000200000001480 R11: 0000000000000246 R12: 0000000000000000 [ 218.038546][T14469] R13: 00007fa832606038 R14: 00007fa832605fa0 R15: 00007ffe1dcb9ee8 [ 218.038564][T14469] [ 218.159671][T14470] tipc: Enabling of bearer rejected, failed to enable media [ 218.247313][T14411] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.247346][T14411] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.247480][T14411] bridge_slave_0: entered allmulticast mode [ 218.248135][T14411] bridge_slave_0: entered promiscuous mode [ 218.265351][T14411] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.265384][T14411] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.265531][T14411] bridge_slave_1: entered allmulticast mode [ 218.265934][T14411] bridge_slave_1: entered promiscuous mode [ 218.338541][T14411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.349957][T14411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.496422][T14411] team0: Port device team_slave_0 added [ 218.505097][T14411] team0: Port device team_slave_1 added [ 218.518486][T14494] FAULT_INJECTION: forcing a failure. [ 218.518486][T14494] name failslab, interval 1, probability 0, space 0, times 0 [ 218.518519][T14494] CPU: 0 UID: 0 PID: 14494 Comm: syz.9.3765 Not tainted syzkaller #0 PREEMPT(lazy) [ 218.518566][T14494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.518580][T14494] Call Trace: [ 218.518586][T14494] [ 218.518593][T14494] __dump_stack+0x1d/0x30 [ 218.518656][T14494] dump_stack_lvl+0x95/0xd0 [ 218.518678][T14494] dump_stack+0x15/0x1b [ 218.518713][T14494] should_fail_ex+0x262/0x280 [ 218.518737][T14494] ? do_getname+0x2e/0x1c0 [ 218.518758][T14494] should_failslab+0x8c/0xb0 [ 218.518789][T14494] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 218.518867][T14494] ? do_getname+0x2e/0x1c0 [ 218.518887][T14494] do_getname+0x2e/0x1c0 [ 218.518907][T14494] getname_flags+0x1d/0x30 [ 218.518929][T14494] do_sys_openat2+0x6c/0x130 [ 218.518966][T14494] __x64_sys_openat+0xf2/0x120 [ 218.518989][T14494] x64_sys_call+0x1f72/0x2550 [ 218.519014][T14494] do_syscall_64+0x112/0x360 [ 218.519093][T14494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.519118][T14494] RIP: 0033:0x7fa83237e159 [ 218.519137][T14494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.519161][T14494] RSP: 002b:00007fa830dd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 218.519186][T14494] RAX: ffffffffffffffda RBX: 00007fa832605fa0 RCX: 00007fa83237e159 [ 218.519271][T14494] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 218.519289][T14494] RBP: 00007fa83241503b R08: 0000000000000000 R09: 0000000000000000 [ 218.519304][T14494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.519393][T14494] R13: 00007fa832606038 R14: 00007fa832605fa0 R15: 00007ffe1dcb9ee8 [ 218.519423][T14494] [ 218.579006][T14411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.579020][T14411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.579099][T14411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.586763][T14411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.586777][T14411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.586809][T14411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.714344][T14411] hsr_slave_0: entered promiscuous mode [ 218.714831][T14411] hsr_slave_1: entered promiscuous mode [ 218.731379][T14411] debugfs: 'hsr0' already exists in 'hsr' [ 218.731394][T14411] Cannot create hsr debugfs directory [ 218.835844][T14512] vlan2: entered allmulticast mode [ 218.835866][T14512] bridge_slave_0: entered allmulticast mode [ 218.892730][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3772'. [ 218.930318][T14516] team0: No ports can be present during mode change [ 218.950665][T14516] tipc: Enabling of bearer rejected, already enabled [ 219.057019][T14411] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.087042][T14530] FAULT_INJECTION: forcing a failure. [ 219.087042][T14530] name failslab, interval 1, probability 0, space 0, times 0 [ 219.087077][T14530] CPU: 0 UID: 0 PID: 14530 Comm: syz.5.3777 Not tainted syzkaller #0 PREEMPT(lazy) [ 219.087107][T14530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.087123][T14530] Call Trace: [ 219.087174][T14530] [ 219.087181][T14530] __dump_stack+0x1d/0x30 [ 219.087273][T14530] dump_stack_lvl+0x95/0xd0 [ 219.087300][T14530] dump_stack+0x15/0x1b [ 219.087368][T14530] should_fail_ex+0x262/0x280 [ 219.087457][T14530] ? do_getname+0x2e/0x1c0 [ 219.087479][T14530] should_failslab+0x8c/0xb0 [ 219.087544][T14530] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 219.087652][T14530] ? do_getname+0x2e/0x1c0 [ 219.087676][T14530] do_getname+0x2e/0x1c0 [ 219.087699][T14530] getname_flags+0x1d/0x30 [ 219.087720][T14530] do_sys_openat2+0x6c/0x130 [ 219.087779][T14530] __x64_sys_openat+0xf2/0x120 [ 219.087808][T14530] x64_sys_call+0x1f72/0x2550 [ 219.087893][T14530] do_syscall_64+0x112/0x360 [ 219.087932][T14530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.087959][T14530] RIP: 0033:0x7f55f031e159 [ 219.087987][T14530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.088040][T14530] RSP: 002b:00007f55eed77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 219.088065][T14530] RAX: ffffffffffffffda RBX: 00007f55f05a5fa0 RCX: 00007f55f031e159 [ 219.088084][T14530] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 219.088108][T14530] RBP: 00007f55f03b503b R08: 0000000000000000 R09: 0000000000000000 [ 219.088125][T14530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.088138][T14530] R13: 00007f55f05a6038 R14: 00007f55f05a5fa0 R15: 00007fff2208d238 [ 219.088218][T14530] [ 219.132121][T14411] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.252075][T14411] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.320699][T14411] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.340954][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3785'. [ 219.346782][T14544] team0: No ports can be present during mode change [ 219.361011][T14544] tipc: Enabling of bearer rejected, already enabled [ 219.488293][T14411] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 219.495731][T14411] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.503022][T14411] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 219.504305][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.504382][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.516728][T14411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.521850][T14411] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 219.530862][T14411] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.533840][T14411] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 219.548096][T14411] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.567149][T14566] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 219.671532][T14411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.688287][T14411] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.694766][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.694799][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.704505][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.704538][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.924522][T14411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.068235][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 220.068251][ T29] audit: type=1400 audit(1789132335.063:806): avc: denied { ioctl } for pid=14609 comm="syz.5.3804" path="socket:[45731]" dev="sockfs" ino=45731 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 220.158309][T14618] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3806'. [ 220.163523][T14615] syzkaller0: entered promiscuous mode [ 220.163605][T14615] syzkaller0: entered allmulticast mode [ 220.186295][T14618] team0: No ports can be present during mode change [ 220.189022][T14618] tipc: Enabling of bearer rejected, already enabled [ 220.193565][T14411] veth0_vlan: entered promiscuous mode [ 220.229942][T14411] veth1_vlan: entered promiscuous mode [ 220.247451][T14411] veth0_macvtap: entered promiscuous mode [ 220.249608][T14411] veth1_macvtap: entered promiscuous mode [ 220.269751][T14411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.276240][T14411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.306547][T14625] loop9: detected capacity change from 0 to 256 [ 220.314302][ T3429] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.314483][ T3429] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.314568][ T3429] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.314603][ T3429] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.340878][T14625] FAT-fs (loop9): Directory bread(block 1285) failed [ 220.340906][T14625] FAT-fs (loop9): Directory bread(block 1286) failed [ 220.340926][T14625] FAT-fs (loop9): Directory bread(block 1287) failed [ 220.340964][T14625] FAT-fs (loop9): Directory bread(block 1288) failed [ 220.389674][ T29] audit: type=1400 audit(1789132335.383:807): avc: denied { mounton } for pid=14411 comm="syz-executor" path="/root/syzkaller.AsvOn5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=45759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 220.391823][T14625] FAT-fs (loop9): Directory bread(block 1285) failed [ 220.391846][T14625] FAT-fs (loop9): Directory bread(block 1286) failed [ 220.391886][T14625] FAT-fs (loop9): Directory bread(block 1287) failed [ 220.391953][T14625] FAT-fs (loop9): Directory bread(block 1288) failed [ 220.393392][T14625] FAT-fs (loop9): Directory bread(block 1285) failed [ 220.393413][T14625] FAT-fs (loop9): Directory bread(block 1286) failed [ 220.462788][T14634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.462988][T14634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.553298][T14639] xt_hashlimit: max too large, truncated to 1048576 [ 220.566571][ T29] audit: type=1400 audit(1789132335.563:808): avc: denied { map } for pid=14649 comm="syz.9.3819" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.566604][ T29] audit: type=1400 audit(1789132335.563:809): avc: denied { execute } for pid=14649 comm="syz.9.3819" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.639860][T14652] syzkaller0: entered promiscuous mode [ 220.639884][T14652] syzkaller0: entered allmulticast mode [ 220.899371][T14660] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 221.016170][T14670] loop5: detected capacity change from 0 to 256 [ 221.018633][T14673] loop7: detected capacity change from 0 to 128 [ 221.280327][T14693] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 221.374316][ T29] audit: type=1326 audit(1789132336.373:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14694 comm="syz.9.3835" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa83237e159 code=0x0 [ 221.430136][T14708] loop8: detected capacity change from 0 to 256 [ 221.528013][T14666] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.528045][T14666] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.528188][T14666] bridge_slave_0: entered allmulticast mode [ 221.528719][T14666] bridge_slave_0: entered promiscuous mode [ 221.529599][T14666] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.529630][T14666] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.529762][T14666] bridge_slave_1: entered allmulticast mode [ 221.530171][T14666] bridge_slave_1: entered promiscuous mode [ 221.542155][T14666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.546394][T14666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.557699][T14666] team0: Port device team_slave_0 added [ 221.558496][T14666] team0: Port device team_slave_1 added [ 221.569250][T14666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.569263][T14666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.569352][T14666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.569819][T14666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.569831][T14666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.569934][T14666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.588989][T14666] hsr_slave_0: entered promiscuous mode [ 221.589383][T14666] hsr_slave_1: entered promiscuous mode [ 221.589578][T14666] debugfs: 'hsr0' already exists in 'hsr' [ 221.589592][T14666] Cannot create hsr debugfs directory [ 221.747421][T14666] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.749252][T14728] FAULT_INJECTION: forcing a failure. [ 221.749252][T14728] name failslab, interval 1, probability 0, space 0, times 0 [ 221.749286][T14728] CPU: 0 UID: 0 PID: 14728 Comm: syz.8.3845 Not tainted syzkaller #0 PREEMPT(lazy) [ 221.749318][T14728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.749354][T14728] Call Trace: [ 221.749361][T14728] [ 221.749370][T14728] __dump_stack+0x1d/0x30 [ 221.749401][T14728] dump_stack_lvl+0x95/0xd0 [ 221.749432][T14728] dump_stack+0x15/0x1b [ 221.749499][T14728] should_fail_ex+0x262/0x280 [ 221.749528][T14728] ? radix_tree_node_alloc+0xa0/0x200 [ 221.749579][T14728] should_failslab+0x8c/0xb0 [ 221.749653][T14728] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 221.749790][T14728] ? radix_tree_node_alloc+0xa0/0x200 [ 221.749831][T14728] ? finish_task_switch+0x121/0x340 [ 221.749910][T14728] radix_tree_node_alloc+0xa0/0x200 [ 221.749947][T14728] idr_get_free+0x1fc/0x560 [ 221.749985][T14728] idr_alloc_u32+0xe9/0x1a0 [ 221.750028][T14728] idr_alloc_cyclic+0x7b/0x140 [ 221.750111][T14728] bpf_link_prime+0x69/0x1d0 [ 221.750152][T14728] tcx_link_attach+0xf4/0x550 [ 221.750183][T14728] ? __fget_files+0x184/0x1c0 [ 221.750221][T14728] link_create+0x51e/0x6b0 [ 221.750257][T14728] __sys_bpf+0x5a2/0xc30 [ 221.750307][T14728] ? do_futex+0x3f0/0x460 [ 221.750420][T14728] __x64_sys_bpf+0x69/0x80 [ 221.750446][T14728] x64_sys_call+0xf26/0x2550 [ 221.750478][T14728] do_syscall_64+0x112/0x360 [ 221.750514][T14728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.750594][T14728] RIP: 0033:0x7f5d013ae159 [ 221.750612][T14728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.750674][T14728] RSP: 002b:00007f5cffe07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.750696][T14728] RAX: ffffffffffffffda RBX: 00007f5d01635fa0 RCX: 00007f5d013ae159 [ 221.750711][T14728] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000001c [ 221.751258][T14728] RBP: 00007f5d0144503b R08: 0000000000000000 R09: 0000000000000000 [ 221.751274][T14728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.751288][T14728] R13: 00007f5d01636038 R14: 00007f5d01635fa0 R15: 00007ffd2f309bd8 [ 221.751316][T14728] [ 221.755183][T14730] device-mapper: ioctl: Unable to rename non-existent device, to [ 221.852720][T14666] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.918312][T14666] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.004894][T14666] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.065937][ T29] audit: type=1400 audit(1789132337.063:811): avc: denied { mount } for pid=14759 comm="syz.5.3858" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 222.088043][T14666] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.103733][T14666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.104688][T14666] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.118743][T14666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.119631][T14666] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.126122][T14666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.126619][T14666] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.137431][T14666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.142114][ T29] audit: type=1400 audit(1789132337.133:812): avc: denied { unmount } for pid=13453 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 222.247293][T14666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.248101][T14780] veth0: entered promiscuous mode [ 222.249836][T14778] veth0: left promiscuous mode [ 222.272722][T14666] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.277889][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.277921][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.309256][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.309293][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.462006][T14792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.462140][T14792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.507183][T14806] xt_hashlimit: max too large, truncated to 1048576 [ 222.564754][T14815] FAULT_INJECTION: forcing a failure. [ 222.564754][T14815] name failslab, interval 1, probability 0, space 0, times 0 [ 222.564790][T14815] CPU: 0 UID: 0 PID: 14815 Comm: syz.7.3875 Not tainted syzkaller #0 PREEMPT(lazy) [ 222.564846][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.564862][T14815] Call Trace: [ 222.564870][T14815] [ 222.564879][T14815] __dump_stack+0x1d/0x30 [ 222.564905][T14815] dump_stack_lvl+0x95/0xd0 [ 222.564927][T14815] dump_stack+0x15/0x1b [ 222.564979][T14815] should_fail_ex+0x262/0x280 [ 222.565008][T14815] ? tcx_link_attach+0xab/0x550 [ 222.565039][T14815] should_failslab+0x8c/0xb0 [ 222.565068][T14815] __kmalloc_cache_noprof+0x7a/0x400 [ 222.565180][T14815] ? tcx_link_attach+0xab/0x550 [ 222.565214][T14815] tcx_link_attach+0xab/0x550 [ 222.565303][T14815] ? __fget_files+0x184/0x1c0 [ 222.565332][T14815] link_create+0x51e/0x6b0 [ 222.565365][T14815] __sys_bpf+0x5a2/0xc30 [ 222.565396][T14815] ? do_futex+0x2f0/0x460 [ 222.565485][T14815] __x64_sys_bpf+0x69/0x80 [ 222.565513][T14815] x64_sys_call+0xf26/0x2550 [ 222.565544][T14815] do_syscall_64+0x112/0x360 [ 222.565584][T14815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.565606][T14815] RIP: 0033:0x7fddc09ce159 [ 222.565624][T14815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.565646][T14815] RSP: 002b:00007fddbf427028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.565670][T14815] RAX: ffffffffffffffda RBX: 00007fddc0c55fa0 RCX: 00007fddc09ce159 [ 222.565748][T14815] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000001c [ 222.565765][T14815] RBP: 00007fddc0a6503b R08: 0000000000000000 R09: 0000000000000000 [ 222.565782][T14815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.565798][T14815] R13: 00007fddc0c56038 R14: 00007fddc0c55fa0 R15: 00007ffc6175c6e8 [ 222.565823][T14815] [ 222.789752][T14666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.925561][T14666] veth0_vlan: entered promiscuous mode [ 222.938848][T14666] veth1_vlan: entered promiscuous mode [ 222.959014][T14666] veth0_macvtap: entered promiscuous mode [ 222.968238][T14666] veth1_macvtap: entered promiscuous mode [ 222.994374][T14666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.008612][T14666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.023338][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.023836][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.023872][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.023978][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.223340][T14860] vlan2: entered allmulticast mode [ 223.356284][T14865] xt_hashlimit: max too large, truncated to 1048576 [ 223.415520][T14885] syzkaller0: entered promiscuous mode [ 223.415596][T14885] syzkaller0: entered allmulticast mode [ 223.528426][T14880] loop8: detected capacity change from 0 to 32768 [ 223.684962][T14880] loop8: p1 p3 < > [ 223.753525][T14897] loop5: detected capacity change from 0 to 128 [ 223.833141][T14903] vlan2: entered allmulticast mode [ 223.837957][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 223.837970][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 223.909722][T14906] FAULT_INJECTION: forcing a failure. [ 223.909722][T14906] name fail_futex, interval 1, probability 0, space 0, times 0 [ 223.909813][T14906] CPU: 1 UID: 0 PID: 14906 Comm: syz.7.3904 Not tainted syzkaller #0 PREEMPT(lazy) [ 223.909842][T14906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.909858][T14906] Call Trace: [ 223.909866][T14906] [ 223.909874][T14906] __dump_stack+0x1d/0x30 [ 223.909900][T14906] dump_stack_lvl+0x95/0xd0 [ 223.909921][T14906] dump_stack+0x15/0x1b [ 223.910005][T14906] should_fail_ex+0x262/0x280 [ 223.910038][T14906] should_fail+0xb/0x20 [ 223.910063][T14906] get_futex_key+0x12d/0xb10 [ 223.910136][T14906] futex_wait_setup+0x49/0x3e0 [ 223.910155][T14906] ? __cgroup_account_cputime+0x83/0xa0 [ 223.910207][T14906] ? update_se+0xc5/0x460 [ 223.910232][T14906] ? kfree+0x143/0x3b0 [ 223.910258][T14906] __futex_wait+0xa9/0x260 [ 223.910330][T14906] ? __pfx_futex_wake_mark+0x10/0x10 [ 223.910371][T14906] futex_wait+0x98/0x1c0 [ 223.910394][T14906] do_futex+0x391/0x460 [ 223.910462][T14906] __se_sys_futex+0x2f6/0x370 [ 223.910498][T14906] __x64_sys_futex+0x78/0x90 [ 223.910526][T14906] x64_sys_call+0x22e2/0x2550 [ 223.910552][T14906] do_syscall_64+0x112/0x360 [ 223.910689][T14906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.910712][T14906] RIP: 0033:0x7fddc09ce159 [ 223.910757][T14906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.910780][T14906] RSP: 002b:00007fddbf4270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 223.910805][T14906] RAX: ffffffffffffffda RBX: 00007fddc0c55fa8 RCX: 00007fddc09ce159 [ 223.910901][T14906] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fddc0c55fa8 [ 223.910914][T14906] RBP: 00007fddc0c55fa0 R08: 0000000000000000 R09: 0000000000000000 [ 223.910966][T14906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.911059][T14906] R13: 00007fddc0c56038 R14: 00007ffc6175c600 R15: 00007ffc6175c6e8 [ 223.911083][T14906] [ 224.059585][T14915] loop7: detected capacity change from 0 to 256 [ 224.061881][T14915] FAT-fs (loop7): Directory bread(block 1285) failed [ 224.061901][T14915] FAT-fs (loop7): Directory bread(block 1286) failed [ 224.061919][T14915] FAT-fs (loop7): Directory bread(block 1287) failed [ 224.061998][T14915] FAT-fs (loop7): Directory bread(block 1288) failed [ 224.084973][T14915] FAT-fs (loop7): Directory bread(block 1285) failed [ 224.084997][T14915] FAT-fs (loop7): Directory bread(block 1286) failed [ 224.085017][T14915] FAT-fs (loop7): Directory bread(block 1287) failed [ 224.085086][T14915] FAT-fs (loop7): Directory bread(block 1288) failed [ 224.085178][T14915] FAT-fs (loop7): Directory bread(block 1285) failed [ 224.085208][T14915] FAT-fs (loop7): Directory bread(block 1286) failed [ 224.260857][T14916] xt_hashlimit: max too large, truncated to 1048576 [ 224.293749][T14937] loop9: detected capacity change from 0 to 128 [ 224.573652][T14948] FAULT_INJECTION: forcing a failure. [ 224.573652][T14948] name failslab, interval 1, probability 0, space 0, times 0 [ 224.573705][T14948] CPU: 0 UID: 0 PID: 14948 Comm: syz.9.3919 Not tainted syzkaller #0 PREEMPT(lazy) [ 224.573737][T14948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.573751][T14948] Call Trace: [ 224.573785][T14948] [ 224.573795][T14948] __dump_stack+0x1d/0x30 [ 224.573825][T14948] dump_stack_lvl+0x95/0xd0 [ 224.573848][T14948] dump_stack+0x15/0x1b [ 224.573872][T14948] should_fail_ex+0x262/0x280 [ 224.573922][T14948] ? __kernfs_new_node+0x70/0x440 [ 224.573961][T14948] should_failslab+0x8c/0xb0 [ 224.574035][T14948] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 224.574066][T14948] ? __kernfs_new_node+0x70/0x440 [ 224.574101][T14948] __kernfs_new_node+0x70/0x440 [ 224.574178][T14948] ? __rcu_read_unlock+0x4e/0x70 [ 224.574260][T14948] ? up_write+0x19/0x60 [ 224.574298][T14948] ? kernfs_activate+0x210/0x220 [ 224.574415][T14948] ? kernfs_add_one+0x2cf/0x350 [ 224.574435][T14948] kernfs_new_node+0xcf/0xf0 [ 224.574483][T14948] __kernfs_create_file+0x4b/0x180 [ 224.574519][T14948] ? __pfx_dev_attr_show+0x10/0x10 [ 224.574556][T14948] ? __pfx_dev_attr_store+0x10/0x10 [ 224.574665][T14948] sysfs_add_file_mode_ns+0x132/0x1b0 [ 224.574697][T14948] sysfs_create_file_ns+0xd9/0x120 [ 224.574784][T14948] device_create_file+0xa5/0x110 [ 224.574865][T14948] device_add+0x32e/0x790 [ 224.574888][T14948] wakeup_source_sysfs_add+0x15a/0x1d0 [ 224.574921][T14948] wakeup_source_register+0xfd/0x240 [ 224.574997][T14948] ep_insert+0x86c/0xd70 [ 224.575030][T14948] do_epoll_ctl_file+0x645/0x700 [ 224.575064][T14948] __se_sys_epoll_ctl+0xf1/0x190 [ 224.575131][T14948] __x64_sys_epoll_ctl+0x55/0x70 [ 224.575213][T14948] x64_sys_call+0x6a5/0x2550 [ 224.575239][T14948] do_syscall_64+0x112/0x360 [ 224.575276][T14948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.575300][T14948] RIP: 0033:0x7fa83237e159 [ 224.575366][T14948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.575387][T14948] RSP: 002b:00007fa830dd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 224.575408][T14948] RAX: ffffffffffffffda RBX: 00007fa832605fa0 RCX: 00007fa83237e159 [ 224.575423][T14948] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 224.575437][T14948] RBP: 00007fa83241503b R08: 0000000000000000 R09: 0000000000000000 [ 224.575454][T14948] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 224.575505][T14948] R13: 00007fa832606038 R14: 00007fa832605fa0 R15: 00007ffe1dcb9ee8 [ 224.575526][T14948] [ 224.611000][ T29] audit: type=1400 audit(1789132339.613:813): avc: denied { map } for pid=14945 comm="syz.8.3917" path="socket:[48211]" dev="sockfs" ino=48211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 224.611048][ T29] audit: type=1400 audit(1789132339.613:814): avc: denied { accept } for pid=14945 comm="syz.8.3917" path="socket:[48211]" dev="sockfs" ino=48211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 224.818621][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3929'. [ 224.818643][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3929'. [ 224.884147][T14969] FAULT_INJECTION: forcing a failure. [ 224.884147][T14969] name fail_futex, interval 1, probability 0, space 0, times 0 [ 224.884178][T14969] CPU: 0 UID: 0 PID: 14969 Comm: syz.8.3931 Not tainted syzkaller #0 PREEMPT(lazy) [ 224.884283][T14969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.884298][T14969] Call Trace: [ 224.884305][T14969] [ 224.884313][T14969] __dump_stack+0x1d/0x30 [ 224.884341][T14969] dump_stack_lvl+0x95/0xd0 [ 224.884367][T14969] dump_stack+0x15/0x1b [ 224.884536][T14969] should_fail_ex+0x262/0x280 [ 224.884564][T14969] should_fail+0xb/0x20 [ 224.884587][T14969] get_futex_key+0x12d/0xb10 [ 224.884620][T14969] futex_wait_setup+0x49/0x3e0 [ 224.884643][T14969] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 224.884702][T14969] ? hrtimer_active+0xe4/0x110 [ 224.884727][T14969] __futex_wait+0xa9/0x260 [ 224.884810][T14969] ? __pfx_futex_wake_mark+0x10/0x10 [ 224.884851][T14969] futex_wait+0x98/0x1c0 [ 224.884875][T14969] do_futex+0x391/0x460 [ 224.884948][T14969] __se_sys_futex+0x2f6/0x370 [ 224.884981][T14969] __x64_sys_futex+0x78/0x90 [ 224.885013][T14969] x64_sys_call+0x22e2/0x2550 [ 224.885042][T14969] do_syscall_64+0x112/0x360 [ 224.885159][T14969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.885192][T14969] RIP: 0033:0x7f5d013ae159 [ 224.885210][T14969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.885263][T14969] RSP: 002b:00007f5cffe070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 224.885286][T14969] RAX: ffffffffffffffda RBX: 00007f5d01635fa8 RCX: 00007f5d013ae159 [ 224.885303][T14969] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5d01635fa8 [ 224.885319][T14969] RBP: 00007f5d01635fa0 R08: 0000000000000000 R09: 0000000000000000 [ 224.885334][T14969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.885354][T14969] R13: 00007f5d01636038 R14: 00007ffd2f309af0 R15: 00007ffd2f309bd8 [ 224.885419][T14969] [ 225.172242][T14972] xt_hashlimit: max too large, truncated to 1048576 [ 225.342540][T14986] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3938'. [ 225.343191][T14986] team0: No ports can be present during mode change [ 225.343604][T14986] vlan0: entered promiscuous mode [ 225.373468][T14986] team0: Port device vlan0 added [ 225.375335][T14986] tipc: Started in network mode [ 225.375359][T14986] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 225.375442][T14986] tipc: Enabled bearer , priority 0 [ 225.496236][T14994] loop4: detected capacity change from 0 to 256 [ 225.558753][T14998] FAULT_INJECTION: forcing a failure. [ 225.558753][T14998] name failslab, interval 1, probability 0, space 0, times 0 [ 225.558781][T14998] CPU: 0 UID: 0 PID: 14998 Comm: syz.7.3943 Not tainted syzkaller #0 PREEMPT(lazy) [ 225.558886][T14998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.558906][T14998] Call Trace: [ 225.558913][T14998] [ 225.558921][T14998] __dump_stack+0x1d/0x30 [ 225.558988][T14998] dump_stack_lvl+0x95/0xd0 [ 225.559092][T14998] dump_stack+0x15/0x1b [ 225.559158][T14998] should_fail_ex+0x262/0x280 [ 225.559188][T14998] ? alloc_empty_file+0x70/0x1e0 [ 225.559288][T14998] should_failslab+0x8c/0xb0 [ 225.559388][T14998] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 225.559445][T14998] ? alloc_empty_file+0x70/0x1e0 [ 225.559467][T14998] alloc_empty_file+0x70/0x1e0 [ 225.559488][T14998] alloc_file_pseudo+0x92/0x120 [ 225.559510][T14998] anon_inode_getfile+0xa0/0x120 [ 225.559581][T14998] bpf_link_prime+0xfd/0x1d0 [ 225.559650][T14998] tcx_link_attach+0xf4/0x550 [ 225.559677][T14998] ? __fget_files+0x184/0x1c0 [ 225.559706][T14998] link_create+0x51e/0x6b0 [ 225.559741][T14998] __sys_bpf+0x5a2/0xc30 [ 225.559800][T14998] ? do_futex+0x3f0/0x460 [ 225.559837][T14998] __x64_sys_bpf+0x69/0x80 [ 225.559924][T14998] x64_sys_call+0xf26/0x2550 [ 225.559949][T14998] do_syscall_64+0x112/0x360 [ 225.559982][T14998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.560006][T14998] RIP: 0033:0x7fddc09ce159 [ 225.560094][T14998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.560113][T14998] RSP: 002b:00007fddbf427028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.560165][T14998] RAX: ffffffffffffffda RBX: 00007fddc0c55fa0 RCX: 00007fddc09ce159 [ 225.560180][T14998] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000001c [ 225.560195][T14998] RBP: 00007fddc0a6503b R08: 0000000000000000 R09: 0000000000000000 [ 225.560212][T14998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.560225][T14998] R13: 00007fddc0c56038 R14: 00007fddc0c55fa0 R15: 00007ffc6175c6e8 [ 225.560302][T14998] [ 225.752433][T15003] FAULT_INJECTION: forcing a failure. [ 225.752433][T15003] name fail_futex, interval 1, probability 0, space 0, times 0 [ 225.752463][T15003] CPU: 1 UID: 0 PID: 15003 Comm: syz.4.3942 Not tainted syzkaller #0 PREEMPT(lazy) [ 225.752493][T15003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.752507][T15003] Call Trace: [ 225.752514][T15003] [ 225.752522][T15003] __dump_stack+0x1d/0x30 [ 225.752546][T15003] dump_stack_lvl+0x95/0xd0 [ 225.752567][T15003] dump_stack+0x15/0x1b [ 225.752639][T15003] should_fail_ex+0x262/0x280 [ 225.752667][T15003] should_fail+0xb/0x20 [ 225.752690][T15003] get_futex_key+0x12d/0xb10 [ 225.752722][T15003] futex_wait_setup+0x49/0x3e0 [ 225.752744][T15003] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 225.752838][T15003] ? hrtimer_active+0xe4/0x110 [ 225.752861][T15003] __futex_wait+0xa9/0x260 [ 225.752884][T15003] ? __pfx_futex_wake_mark+0x10/0x10 [ 225.753009][T15003] futex_wait+0x98/0x1c0 [ 225.753033][T15003] do_futex+0x391/0x460 [ 225.753065][T15003] __se_sys_futex+0x2f6/0x370 [ 225.753168][T15003] __x64_sys_futex+0x78/0x90 [ 225.753210][T15003] x64_sys_call+0x22e2/0x2550 [ 225.753239][T15003] do_syscall_64+0x112/0x360 [ 225.753275][T15003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.753347][T15003] RIP: 0033:0x7f2616afe159 [ 225.753364][T15003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.753422][T15003] RSP: 002b:00007f26155570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 225.753445][T15003] RAX: ffffffffffffffda RBX: 00007f2616d85fa8 RCX: 00007f2616afe159 [ 225.753462][T15003] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2616d85fa8 [ 225.753552][T15003] RBP: 00007f2616d85fa0 R08: 0000000000000000 R09: 0000000000000000 [ 225.753567][T15003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.753616][T15003] R13: 00007f2616d86038 R14: 00007ffc99bde140 R15: 00007ffc99bde228 [ 225.753677][T15003] [ 225.807434][T15009] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 226.008733][T15022] loop9: detected capacity change from 0 to 256 [ 226.078612][T15026] syzkaller0: entered promiscuous mode [ 226.078650][T15026] syzkaller0: entered allmulticast mode [ 226.160820][T15033] FAULT_INJECTION: forcing a failure. [ 226.160820][T15033] name fail_futex, interval 1, probability 0, space 0, times 0 [ 226.160887][T15033] CPU: 0 UID: 0 PID: 15033 Comm: syz.5.3958 Not tainted syzkaller #0 PREEMPT(lazy) [ 226.160916][T15033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.160931][T15033] Call Trace: [ 226.160939][T15033] [ 226.160952][T15033] __dump_stack+0x1d/0x30 [ 226.160978][T15033] dump_stack_lvl+0x95/0xd0 [ 226.161066][T15033] dump_stack+0x15/0x1b [ 226.161108][T15033] should_fail_ex+0x262/0x280 [ 226.161137][T15033] should_fail+0xb/0x20 [ 226.161160][T15033] get_futex_key+0x12d/0xb10 [ 226.161190][T15033] futex_wait_setup+0x49/0x3e0 [ 226.161212][T15033] ? __cgroup_account_cputime+0x83/0xa0 [ 226.161275][T15033] ? update_se+0xc5/0x460 [ 226.161298][T15033] ? kfree+0x143/0x3b0 [ 226.161324][T15033] __futex_wait+0xa9/0x260 [ 226.161414][T15033] ? __pfx_futex_wake_mark+0x10/0x10 [ 226.161456][T15033] futex_wait+0x98/0x1c0 [ 226.161481][T15033] do_futex+0x391/0x460 [ 226.161549][T15033] __se_sys_futex+0x2f6/0x370 [ 226.161640][T15033] __x64_sys_futex+0x78/0x90 [ 226.161753][T15033] x64_sys_call+0x22e2/0x2550 [ 226.161802][T15033] do_syscall_64+0x112/0x360 [ 226.161837][T15033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.161862][T15033] RIP: 0033:0x7f55f031e159 [ 226.161882][T15033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.161904][T15033] RSP: 002b:00007f55eed770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 226.161940][T15033] RAX: ffffffffffffffda RBX: 00007f55f05a5fa8 RCX: 00007f55f031e159 [ 226.161959][T15033] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f55f05a5fa8 [ 226.162024][T15033] RBP: 00007f55f05a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 226.162103][T15033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.162117][T15033] R13: 00007f55f05a6038 R14: 00007fff2208d150 R15: 00007fff2208d238 [ 226.162136][T15033] [ 226.259190][ T29] audit: type=1400 audit(1789132341.253:815): avc: denied { bind } for pid=15038 comm="syz.4.3961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 226.259280][ T29] audit: type=1400 audit(1789132341.253:816): avc: denied { name_bind } for pid=15038 comm="syz.4.3961" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 226.260058][T15041] vlan1: entered promiscuous mode [ 226.260294][T15041] vlan1: entered allmulticast mode [ 226.260347][T15041] veth0_vlan: entered allmulticast mode [ 226.265707][ T29] audit: type=1400 audit(1789132341.263:817): avc: denied { node_bind } for pid=15038 comm="syz.4.3961" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 226.418726][T15052] loop4: detected capacity change from 0 to 256 [ 226.461724][ T29] audit: type=1326 audit(1789132341.463:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.7.3969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddc09ce159 code=0x0 [ 226.491174][ T3360] tipc: Node number set to 11578026 [ 226.514135][T15059] syzkaller0: entered promiscuous mode [ 226.514153][T15059] syzkaller0: entered allmulticast mode [ 226.601622][T15073] FAULT_INJECTION: forcing a failure. [ 226.601622][T15073] name fail_futex, interval 1, probability 0, space 0, times 0 [ 226.601655][T15073] CPU: 1 UID: 0 PID: 15073 Comm: syz.4.3977 Not tainted syzkaller #0 PREEMPT(lazy) [ 226.601685][T15073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.601701][T15073] Call Trace: [ 226.601708][T15073] [ 226.601717][T15073] __dump_stack+0x1d/0x30 [ 226.601778][T15073] dump_stack_lvl+0x95/0xd0 [ 226.601802][T15073] dump_stack+0x15/0x1b [ 226.601826][T15073] should_fail_ex+0x262/0x280 [ 226.601854][T15073] should_fail+0xb/0x20 [ 226.601878][T15073] get_futex_key+0x12d/0xb10 [ 226.601960][T15073] futex_wait_setup+0x49/0x3e0 [ 226.601982][T15073] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 226.602018][T15073] ? hrtimer_active+0xe4/0x110 [ 226.602102][T15073] __futex_wait+0xa9/0x260 [ 226.602135][T15073] ? __pfx_futex_wake_mark+0x10/0x10 [ 226.602179][T15073] futex_wait+0x98/0x1c0 [ 226.602202][T15073] do_futex+0x391/0x460 [ 226.602292][T15073] __se_sys_futex+0x2f6/0x370 [ 226.602328][T15073] __x64_sys_futex+0x78/0x90 [ 226.602359][T15073] x64_sys_call+0x22e2/0x2550 [ 226.602455][T15073] do_syscall_64+0x112/0x360 [ 226.602528][T15073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.602550][T15073] RIP: 0033:0x7f2616afe159 [ 226.602566][T15073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.602588][T15073] RSP: 002b:00007f26155570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 226.602614][T15073] RAX: ffffffffffffffda RBX: 00007f2616d85fa8 RCX: 00007f2616afe159 [ 226.602632][T15073] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2616d85fa8 [ 226.602648][T15073] RBP: 00007f2616d85fa0 R08: 0000000000000000 R09: 0000000000000000 [ 226.602712][T15073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.602725][T15073] R13: 00007f2616d86038 R14: 00007ffc99bde140 R15: 00007ffc99bde228 [ 226.602745][T15073] [ 226.792385][T15085] loop4: detected capacity change from 0 to 256 [ 226.875835][T15095] syzkaller0: entered promiscuous mode [ 226.875857][T15095] syzkaller0: entered allmulticast mode [ 226.934117][T15105] FAULT_INJECTION: forcing a failure. [ 226.934117][T15105] name fail_futex, interval 1, probability 0, space 0, times 0 [ 226.934175][T15105] CPU: 1 UID: 0 PID: 15105 Comm: syz.5.3991 Not tainted syzkaller #0 PREEMPT(lazy) [ 226.934249][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.934264][T15105] Call Trace: [ 226.934271][T15105] [ 226.934279][T15105] __dump_stack+0x1d/0x30 [ 226.934308][T15105] dump_stack_lvl+0x95/0xd0 [ 226.934334][T15105] dump_stack+0x15/0x1b [ 226.934370][T15105] should_fail_ex+0x262/0x280 [ 226.934490][T15105] should_fail+0xb/0x20 [ 226.934511][T15105] get_futex_key+0x12d/0xb10 [ 226.934546][T15105] futex_wait_setup+0x49/0x3e0 [ 226.934651][T15105] ? xt_free_table_info+0xe7/0x100 [ 226.934757][T15105] ? xt_free_table_info+0xe7/0x100 [ 226.934790][T15105] ? kfree+0x143/0x3b0 [ 226.934822][T15105] __futex_wait+0xa9/0x260 [ 226.934854][T15105] ? __pfx_futex_wake_mark+0x10/0x10 [ 226.934893][T15105] futex_wait+0x98/0x1c0 [ 226.934950][T15105] do_futex+0x391/0x460 [ 226.934979][T15105] __se_sys_futex+0x2f6/0x370 [ 226.935050][T15105] __x64_sys_futex+0x78/0x90 [ 226.935085][T15105] x64_sys_call+0x22e2/0x2550 [ 226.935110][T15105] do_syscall_64+0x112/0x360 [ 226.935148][T15105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.935230][T15105] RIP: 0033:0x7f55f031e159 [ 226.935245][T15105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.935267][T15105] RSP: 002b:00007f55eed770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 226.935293][T15105] RAX: ffffffffffffffda RBX: 00007f55f05a5fa8 RCX: 00007f55f031e159 [ 226.935364][T15105] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f55f05a5fa8 [ 226.935381][T15105] RBP: 00007f55f05a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 226.935398][T15105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.935415][T15105] R13: 00007f55f05a6038 R14: 00007fff2208d150 R15: 00007fff2208d238 [ 226.935438][T15105] [ 226.971433][T15106] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 227.010700][T15111] bond0: entered promiscuous mode [ 227.011492][T15110] bond0: left promiscuous mode [ 227.065661][T15117] loop9: detected capacity change from 0 to 256 [ 227.077075][T15117] FAT-fs (loop9): Directory bread(block 1285) failed [ 227.077116][T15117] FAT-fs (loop9): Directory bread(block 1286) failed [ 227.077136][T15117] FAT-fs (loop9): Directory bread(block 1287) failed [ 227.077200][T15117] FAT-fs (loop9): Directory bread(block 1288) failed [ 227.080958][T15117] FAT-fs (loop9): Directory bread(block 1285) failed [ 227.081038][T15117] FAT-fs (loop9): Directory bread(block 1286) failed [ 227.081057][T15117] FAT-fs (loop9): Directory bread(block 1287) failed [ 227.081108][T15117] FAT-fs (loop9): Directory bread(block 1288) failed [ 227.083262][T15117] FAT-fs (loop9): Directory bread(block 1285) failed [ 227.083282][T15117] FAT-fs (loop9): Directory bread(block 1286) failed [ 227.207999][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4002'. [ 227.208020][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4002'. [ 227.263577][T15125] loop9: detected capacity change from 0 to 256 [ 227.341560][T15127] xt_hashlimit: max too large, truncated to 1048576 [ 227.751474][T15150] loop7: detected capacity change from 0 to 128 [ 227.804843][T15159] syzkaller0: entered promiscuous mode [ 227.804865][T15159] syzkaller0: entered allmulticast mode [ 227.871448][ T29] audit: type=1326 audit(1789132342.873:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15151 comm="syz.9.4014" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa83237e159 code=0x0 [ 228.001774][T15180] loop5: detected capacity change from 0 to 256 [ 228.010731][T15180] FAT-fs (loop5): Directory bread(block 1285) failed [ 228.010804][T15180] FAT-fs (loop5): Directory bread(block 1286) failed [ 228.010862][T15180] FAT-fs (loop5): Directory bread(block 1287) failed [ 228.010895][T15180] FAT-fs (loop5): Directory bread(block 1288) failed [ 228.030596][T15180] FAT-fs (loop5): Directory bread(block 1285) failed [ 228.030628][T15180] FAT-fs (loop5): Directory bread(block 1286) failed [ 228.030648][T15180] FAT-fs (loop5): Directory bread(block 1287) failed [ 228.030700][T15180] FAT-fs (loop5): Directory bread(block 1288) failed [ 228.030906][T15180] FAT-fs (loop5): Directory bread(block 1285) failed [ 228.030928][T15180] FAT-fs (loop5): Directory bread(block 1286) failed [ 228.168435][T15201] syzkaller0: entered promiscuous mode [ 228.168449][T15201] syzkaller0: entered allmulticast mode [ 228.229626][T15205] syzkaller0: entered promiscuous mode [ 228.229677][T15205] syzkaller0: entered allmulticast mode [ 228.267359][T15209] FAULT_INJECTION: forcing a failure. [ 228.267359][T15209] name fail_futex, interval 1, probability 0, space 0, times 0 [ 228.267391][T15209] CPU: 0 UID: 0 PID: 15209 Comm: syz.7.4037 Not tainted syzkaller #0 PREEMPT(lazy) [ 228.267420][T15209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.267494][T15209] Call Trace: [ 228.267501][T15209] [ 228.267561][T15209] __dump_stack+0x1d/0x30 [ 228.267592][T15209] dump_stack_lvl+0x95/0xd0 [ 228.267618][T15209] dump_stack+0x15/0x1b [ 228.267703][T15209] should_fail_ex+0x262/0x280 [ 228.267730][T15209] should_fail+0xb/0x20 [ 228.267768][T15209] get_futex_key+0x12d/0xb10 [ 228.267801][T15209] futex_wait_setup+0x49/0x3e0 [ 228.267828][T15209] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 228.267868][T15209] ? hrtimer_active+0xe4/0x110 [ 228.267908][T15209] __futex_wait+0xa9/0x260 [ 228.267930][T15209] ? __pfx_futex_wake_mark+0x10/0x10 [ 228.267969][T15209] futex_wait+0x98/0x1c0 [ 228.268052][T15209] do_futex+0x391/0x460 [ 228.268081][T15209] __se_sys_futex+0x2f6/0x370 [ 228.268113][T15209] __x64_sys_futex+0x78/0x90 [ 228.268143][T15209] x64_sys_call+0x22e2/0x2550 [ 228.268252][T15209] do_syscall_64+0x112/0x360 [ 228.268288][T15209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.268315][T15209] RIP: 0033:0x7fddc09ce159 [ 228.268333][T15209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.268407][T15209] RSP: 002b:00007fddbf4270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 228.268421][T15209] RAX: ffffffffffffffda RBX: 00007fddc0c55fa8 RCX: 00007fddc09ce159 [ 228.268430][T15209] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fddc0c55fa8 [ 228.268438][T15209] RBP: 00007fddc0c55fa0 R08: 0000000000000000 R09: 0000000000000000 [ 228.268447][T15209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.268476][T15209] R13: 00007fddc0c56038 R14: 00007ffc6175c600 R15: 00007ffc6175c6e8 [ 228.268558][T15209] [ 228.317801][T15211] loop7: detected capacity change from 0 to 256 [ 228.319605][T15211] FAT-fs (loop7): Directory bread(block 1285) failed [ 228.319639][T15211] FAT-fs (loop7): Directory bread(block 1286) failed [ 228.319659][T15211] FAT-fs (loop7): Directory bread(block 1287) failed [ 228.319705][T15211] FAT-fs (loop7): Directory bread(block 1288) failed [ 228.327850][T15211] FAT-fs (loop7): Directory bread(block 1285) failed [ 228.327875][T15211] FAT-fs (loop7): Directory bread(block 1286) failed [ 228.327894][T15211] FAT-fs (loop7): Directory bread(block 1287) failed [ 228.327915][T15211] FAT-fs (loop7): Directory bread(block 1288) failed [ 228.327950][T15211] FAT-fs (loop7): Directory bread(block 1285) failed [ 228.328042][T15211] FAT-fs (loop7): Directory bread(block 1286) failed [ 228.548162][T15230] bond0: entered promiscuous mode [ 228.548183][T15230] bond_slave_0: entered promiscuous mode [ 228.548323][T15230] bond_slave_1: entered promiscuous mode [ 228.548794][T15225] bond0: left promiscuous mode [ 228.548809][T15225] bond_slave_0: left promiscuous mode [ 228.548861][T15225] bond_slave_1: left promiscuous mode [ 228.599946][T15234] FAULT_INJECTION: forcing a failure. [ 228.599946][T15234] name fail_futex, interval 1, probability 0, space 0, times 0 [ 228.600031][T15234] CPU: 1 UID: 0 PID: 15234 Comm: syz.5.4048 Not tainted syzkaller #0 PREEMPT(lazy) [ 228.600062][T15234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.600076][T15234] Call Trace: [ 228.600082][T15234] [ 228.600089][T15234] __dump_stack+0x1d/0x30 [ 228.600113][T15234] dump_stack_lvl+0x95/0xd0 [ 228.600143][T15234] dump_stack+0x15/0x1b [ 228.600167][T15234] should_fail_ex+0x262/0x280 [ 228.600194][T15234] should_fail+0xb/0x20 [ 228.600230][T15234] get_futex_key+0x12d/0xb10 [ 228.600259][T15234] futex_wait_setup+0x49/0x3e0 [ 228.600302][T15234] ? xt_free_table_info+0xe7/0x100 [ 228.600340][T15234] ? xt_free_table_info+0xe7/0x100 [ 228.600373][T15234] ? kfree+0x143/0x3b0 [ 228.600400][T15234] __futex_wait+0xa9/0x260 [ 228.600421][T15234] ? __pfx_futex_wake_mark+0x10/0x10 [ 228.600525][T15234] futex_wait+0x98/0x1c0 [ 228.600612][T15234] do_futex+0x391/0x460 [ 228.600644][T15234] __se_sys_futex+0x2f6/0x370 [ 228.600706][T15234] __x64_sys_futex+0x78/0x90 [ 228.600741][T15234] x64_sys_call+0x22e2/0x2550 [ 228.600767][T15234] do_syscall_64+0x112/0x360 [ 228.600858][T15234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.600880][T15234] RIP: 0033:0x7f55f031e159 [ 228.600896][T15234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.600918][T15234] RSP: 002b:00007f55eed770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 228.600943][T15234] RAX: ffffffffffffffda RBX: 00007f55f05a5fa8 RCX: 00007f55f031e159 [ 228.601031][T15234] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f55f05a5fa8 [ 228.601048][T15234] RBP: 00007f55f05a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 228.601103][T15234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.601116][T15234] R13: 00007f55f05a6038 R14: 00007fff2208d150 R15: 00007fff2208d238 [ 228.601135][T15234] [ 228.624916][T15236] loop5: detected capacity change from 0 to 256 [ 228.625524][T15236] FAT-fs (loop5): Directory bread(block 1285) failed [ 228.625599][T15236] FAT-fs (loop5): Directory bread(block 1286) failed [ 228.625618][T15236] FAT-fs (loop5): Directory bread(block 1287) failed [ 228.625659][T15236] FAT-fs (loop5): Directory bread(block 1288) failed [ 228.627073][T15236] FAT-fs (loop5): Directory bread(block 1285) failed [ 228.627096][T15236] FAT-fs (loop5): Directory bread(block 1286) failed [ 228.627146][T15236] FAT-fs (loop5): Directory bread(block 1287) failed [ 228.627166][T15236] FAT-fs (loop5): Directory bread(block 1288) failed [ 228.627238][T15236] FAT-fs (loop5): Directory bread(block 1285) failed [ 228.627258][T15236] FAT-fs (loop5): Directory bread(block 1286) failed [ 228.704932][ T29] audit: type=1400 audit(1789132343.703:820): avc: denied { write } for pid=15241 comm="syz.8.4052" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 228.705005][ T29] audit: type=1400 audit(1789132343.703:821): avc: denied { open } for pid=15241 comm="syz.8.4052" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 228.714626][ T29] audit: type=1400 audit(1789132343.713:822): avc: denied { read } for pid=15241 comm="syz.8.4052" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 228.714856][ T29] audit: type=1400 audit(1789132343.713:823): avc: denied { ioctl } for pid=15241 comm="syz.8.4052" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 228.775093][ T29] audit: type=1400 audit(1789132343.773:824): avc: denied { setopt } for pid=15245 comm="syz.5.4053" lport=41275 faddr=fc00::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 228.879426][T15238] syzkaller0: entered promiscuous mode [ 228.879448][T15238] syzkaller0: entered allmulticast mode [ 228.984950][T15254] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 229.006302][T15256] bond0: entered promiscuous mode [ 229.006321][T15256] bond_slave_0: entered promiscuous mode [ 229.006396][T15256] bond_slave_1: entered promiscuous mode [ 229.018465][ T313] bridge_slave_1: left allmulticast mode [ 229.018539][ T313] bridge_slave_1: left promiscuous mode [ 229.018632][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.032836][ T313] bridge_slave_0: left allmulticast mode [ 229.032855][ T313] bridge_slave_0: left promiscuous mode [ 229.033031][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.102460][T15267] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4063'. [ 229.102480][T15267] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4063'. [ 229.317848][ T313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.337423][ T313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.350926][ T313] bond0 (unregistering): Released all slaves [ 229.357366][T15258] bond0: invalid ARP target specified [ 229.369433][T15255] bond0: left promiscuous mode [ 229.369452][T15255] bond_slave_0: left promiscuous mode [ 229.369570][T15255] bond_slave_1: left promiscuous mode [ 229.370902][T15277] syzkaller0: entered promiscuous mode [ 229.370918][T15277] syzkaller0: entered allmulticast mode [ 229.398194][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4064'. [ 229.411940][T15282] vlan2: entered allmulticast mode [ 229.412041][T15282] bridge0: port 1(vlan2) entered blocking state [ 229.412073][T15282] bridge0: port 1(vlan2) entered disabled state [ 229.412481][T15282] vlan2: entered promiscuous mode [ 229.412562][T15282] bridge_slave_0: entered promiscuous mode [ 229.445049][ T313] hsr_slave_0: left promiscuous mode [ 229.445641][ T313] hsr_slave_1: left promiscuous mode [ 229.446037][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.446050][ T313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.446496][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.446508][ T313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.449576][ T313] veth1_macvtap: left promiscuous mode [ 229.449596][ T313] veth0_macvtap: left promiscuous mode [ 229.449650][ T313] veth1_vlan: left promiscuous mode [ 229.449765][ T313] veth0_vlan: left promiscuous mode [ 229.593997][T15299] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 229.636701][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4074'. [ 229.636727][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4074'. [ 229.813455][ T313] team0 (unregistering): Port device team_slave_1 removed [ 229.815934][ T313] team0 (unregistering): Port device team_slave_0 removed [ 229.867505][T15301] ip6tnl1: entered allmulticast mode [ 229.913781][T15321] syzkaller0: entered promiscuous mode [ 229.913855][T15321] syzkaller0: entered allmulticast mode [ 229.915353][ T3429] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 229.915445][ T3429] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 229.941504][ T3385] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 229.992483][T15342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4082'. [ 230.005877][T15342] vlan2: entered allmulticast mode [ 230.008292][T15342] bridge0: port 3(vlan2) entered blocking state [ 230.008323][T15342] bridge0: port 3(vlan2) entered disabled state [ 230.008960][T15342] vlan2: entered promiscuous mode [ 230.038897][T15344] FAULT_INJECTION: forcing a failure. [ 230.038897][T15344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.038927][T15344] CPU: 1 UID: 0 PID: 15344 Comm: syz.8.4083 Not tainted syzkaller #0 PREEMPT(lazy) [ 230.038960][T15344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.039023][T15344] Call Trace: [ 230.039030][T15344] [ 230.039098][T15344] __dump_stack+0x1d/0x30 [ 230.039128][T15344] dump_stack_lvl+0x95/0xd0 [ 230.039156][T15344] dump_stack+0x15/0x1b [ 230.039191][T15344] should_fail_ex+0x262/0x280 [ 230.039216][T15344] should_fail+0xb/0x20 [ 230.039241][T15344] should_fail_usercopy+0x1a/0x20 [ 230.039272][T15344] _copy_from_user+0x1c/0xb0 [ 230.039416][T15344] __se_sys_semctl+0x23a/0x2d0 [ 230.039497][T15344] __x64_sys_semctl+0x55/0x70 [ 230.039520][T15344] x64_sys_call+0x2534/0x2550 [ 230.039552][T15344] do_syscall_64+0x112/0x360 [ 230.039654][T15344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.039678][T15344] RIP: 0033:0x7f5d013ae159 [ 230.039698][T15344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.039785][T15344] RSP: 002b:00007f5cffe07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 230.039811][T15344] RAX: ffffffffffffffda RBX: 00007f5d01635fa0 RCX: 00007f5d013ae159 [ 230.039829][T15344] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.039875][T15344] RBP: 00007f5d0144503b R08: 0000000000000000 R09: 0000000000000000 [ 230.039904][T15344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.039921][T15344] R13: 00007f5d01636038 R14: 00007f5d01635fa0 R15: 00007ffd2f309bd8 [ 230.039945][T15344] [ 230.061235][ T3385] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 230.158335][T15348] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 230.243965][T15360] bond0: entered promiscuous mode [ 230.243987][T15360] bond_slave_0: entered promiscuous mode [ 230.244108][T15360] bond_slave_1: entered promiscuous mode [ 230.244639][T15357] bond0: left promiscuous mode [ 230.244656][T15357] bond_slave_0: left promiscuous mode [ 230.244717][T15357] bond_slave_1: left promiscuous mode [ 230.249369][T15358] syzkaller0: entered promiscuous mode [ 230.249389][T15358] syzkaller0: entered allmulticast mode [ 230.313807][T15369] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 230.313832][T15369] FAT-fs (loop4): data area starts beyond volume (36 > 11) [ 230.313848][T15369] FAT-fs (loop4): Can't find a valid FAT filesystem [ 230.401267][ T3385] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 230.429456][T15387] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 230.474599][T15391] syzkaller0: entered promiscuous mode [ 230.474619][T15391] syzkaller0: entered allmulticast mode [ 230.529430][T15401] set_capacity_and_notify: 2 callbacks suppressed [ 230.529446][T15401] loop4: detected capacity change from 0 to 128 [ 230.608932][T15412] netlink: 'syz.4.4111': attribute type 2 has an invalid length. [ 231.086842][T15427] syzkaller0: entered promiscuous mode [ 231.086858][T15427] syzkaller0: entered allmulticast mode [ 231.291093][T15441] ip6tnl1: entered allmulticast mode [ 231.320996][T15445] loop9: detected capacity change from 0 to 512 [ 231.350131][T15447] loop9: detected capacity change from 0 to 512 [ 231.380873][T15449] syzkaller0: entered promiscuous mode [ 231.380888][T15449] syzkaller0: entered allmulticast mode [ 231.497035][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 231.497065][ T29] audit: type=1400 audit(1789132346.493:826): avc: denied { execute } for pid=15450 comm="syz.9.4128" name="file2" dev="tmpfs" ino=2703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 231.497227][ T29] audit: type=1400 audit(1789132346.493:827): avc: denied { execute_no_trans } for pid=15450 comm="syz.9.4128" path="/521/file2" dev="tmpfs" ino=2703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 231.611424][ T3429] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 231.611521][ T3429] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 231.641994][ T3385] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 231.653828][T15460] loop9: detected capacity change from 0 to 1764 [ 231.659519][ T29] audit: type=1400 audit(1789132346.653:828): avc: denied { mount } for pid=15459 comm="syz.9.4132" name="/" dev="loop9" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 231.683046][ T29] audit: type=1400 audit(1789132346.683:829): avc: denied { unmount } for pid=6732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 231.760668][T15471] loop4: detected capacity change from 0 to 512 [ 231.806753][T15475] syzkaller0: entered promiscuous mode [ 231.806775][T15475] syzkaller0: entered allmulticast mode [ 231.915250][T15491] FAULT_INJECTION: forcing a failure. [ 231.915250][T15491] name failslab, interval 1, probability 0, space 0, times 0 [ 231.915345][T15491] CPU: 0 UID: 0 PID: 15491 Comm: syz.4.4147 Not tainted syzkaller #0 PREEMPT(lazy) [ 231.915361][T15491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.915426][T15491] Call Trace: [ 231.915431][T15491] [ 231.915435][T15491] __dump_stack+0x1d/0x30 [ 231.915468][T15491] dump_stack_lvl+0x95/0xd0 [ 231.915484][T15491] dump_stack+0x15/0x1b [ 231.915504][T15491] should_fail_ex+0x262/0x280 [ 231.915537][T15491] ? sk_prot_alloc+0xa8/0x180 [ 231.915574][T15491] should_failslab+0x8c/0xb0 [ 231.915651][T15491] __kmalloc_noprof+0xd0/0x4d0 [ 231.915670][T15491] ? sk_prot_alloc+0xa8/0x180 [ 231.915690][T15491] sk_prot_alloc+0xa8/0x180 [ 231.915743][T15491] sk_alloc+0x34/0x3e0 [ 231.915817][T15491] packet_create+0xbc/0x560 [ 231.915832][T15491] __sock_create+0x2e5/0x580 [ 231.915849][T15491] __sys_socket+0xaf/0x180 [ 231.915927][T15491] __x64_sys_socket+0x3f/0x50 [ 231.916011][T15491] x64_sys_call+0x246e/0x2550 [ 231.916028][T15491] do_syscall_64+0x112/0x360 [ 231.916137][T15491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.916151][T15491] RIP: 0033:0x7f2616afe159 [ 231.916214][T15491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.916226][T15491] RSP: 002b:00007f2615557028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 231.916239][T15491] RAX: ffffffffffffffda RBX: 00007f2616d85fa0 RCX: 00007f2616afe159 [ 231.916248][T15491] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000011 [ 231.916256][T15491] RBP: 00007f2616b9503b R08: 0000000000000000 R09: 0000000000000000 [ 231.916264][T15491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.916344][T15491] R13: 00007f2616d86038 R14: 00007f2616d85fa0 R15: 00007ffc99bde228 [ 231.916357][T15491] [ 231.956358][T15495] loop4: detected capacity change from 0 to 256 [ 231.956917][T15495] FAT-fs (loop4): Directory bread(block 1285) failed [ 231.956939][T15495] FAT-fs (loop4): Directory bread(block 1286) failed [ 231.956959][T15495] FAT-fs (loop4): Directory bread(block 1287) failed [ 231.957010][T15495] FAT-fs (loop4): Directory bread(block 1288) failed [ 232.056105][T15502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.056244][T15502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.613980][T15508] ip6tnl1: entered allmulticast mode [ 232.615257][ T313] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 232.615367][ T313] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 232.732329][T15518] loop9: detected capacity change from 0 to 256 [ 232.734320][T15518] FAT-fs (loop9): Directory bread(block 1285) failed [ 232.734342][T15518] FAT-fs (loop9): Directory bread(block 1286) failed [ 232.734399][T15518] FAT-fs (loop9): Directory bread(block 1287) failed [ 232.734428][T15518] FAT-fs (loop9): Directory bread(block 1288) failed [ 232.805681][T15526] loop4: detected capacity change from 0 to 128 [ 232.903692][T15533] syzkaller0: entered promiscuous mode [ 232.903714][T15533] syzkaller0: entered allmulticast mode [ 233.337516][T15371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.397896][T15551] loop7: detected capacity change from 0 to 128 [ 233.466206][T15553] bond1: (slave veth0_to_bond): Releasing active interface [ 233.466232][T15557] loop7: detected capacity change from 0 to 256 [ 233.478117][T15557] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.494717][T15553] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.509477][T15561] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15561 comm=syz.5.4177 [ 233.516980][T15553] tipc: Enabling of bearer rejected, failed to enable media [ 233.551909][T15563] syzkaller0: entered promiscuous mode [ 233.551929][T15563] syzkaller0: entered allmulticast mode [ 233.598888][T15569] netlink: 'syz.5.4182': attribute type 1 has an invalid length. [ 233.611348][ T29] audit: type=1400 audit(1789132348.613:830): avc: denied { create } for pid=15568 comm="syz.5.4182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 233.611890][ T29] audit: type=1400 audit(1789132348.613:831): avc: denied { write } for pid=15568 comm="syz.5.4182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 233.620570][T15569] bond1: (slave bridge1): making interface the new active one [ 233.708237][T15580] syzkaller0: entered promiscuous mode [ 233.708284][T15580] syzkaller0: entered allmulticast mode [ 233.768518][T15585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.768647][T15585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.828219][T15589] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.840873][T15589] bridge_slave_1: left allmulticast mode [ 233.840950][T15589] bridge_slave_1: left promiscuous mode [ 233.841112][T15589] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.876878][T15589] bond0: (slave bond_slave_0): Releasing backup interface [ 233.890052][T15589] bond0: (slave bond_slave_1): Releasing backup interface [ 233.901065][T15589] team0: Port device team_slave_0 removed [ 233.907768][T15589] team0: Port device team_slave_1 removed [ 233.909127][T15589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.909145][T15589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.914274][T15589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.914293][T15589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.930365][T15589] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.937080][ T313] tipc: Resetting bearer [ 233.946146][T15600] syzkaller0: entered promiscuous mode [ 233.946165][T15600] syzkaller0: entered allmulticast mode [ 233.953652][T15589] tipc: Enabling of bearer rejected, already enabled [ 234.056407][T15610] syzkaller0: entered promiscuous mode [ 234.056494][T15610] syzkaller0: entered allmulticast mode [ 234.095759][T15620] FAT-fs (loop5): Directory bread(block 1285) failed [ 234.095786][T15620] FAT-fs (loop5): Directory bread(block 1286) failed [ 234.095808][T15620] FAT-fs (loop5): Directory bread(block 1287) failed [ 234.095839][T15620] FAT-fs (loop5): Directory bread(block 1288) failed [ 234.215187][T15634] xt_hashlimit: max too large, truncated to 1048576 [ 234.232524][T15638] syzkaller0: entered promiscuous mode [ 234.232544][T15638] syzkaller0: entered allmulticast mode [ 234.296453][T15641] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 234.537807][T15649] FAT-fs (loop8): Directory bread(block 1285) failed [ 234.537835][T15649] FAT-fs (loop8): Directory bread(block 1286) failed [ 234.537857][T15649] FAT-fs (loop8): Directory bread(block 1287) failed [ 234.537952][T15649] FAT-fs (loop8): Directory bread(block 1288) failed [ 234.691601][ T29] audit: type=1400 audit(1789132349.693:832): avc: denied { lock } for pid=15664 comm="syz.8.4220" path="socket:[49137]" dev="sockfs" ino=49137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.842606][T15676] FAT-fs (loop7): Directory bread(block 1285) failed [ 234.842631][T15676] FAT-fs (loop7): Directory bread(block 1286) failed [ 234.842652][T15676] FAT-fs (loop7): Directory bread(block 1287) failed [ 234.842689][T15676] FAT-fs (loop7): Directory bread(block 1288) failed [ 234.926365][T15680] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 235.029287][T15684] syzkaller0: entered promiscuous mode [ 235.029370][T15684] syzkaller0: entered allmulticast mode [ 235.159764][ T29] audit: type=1400 audit(1789132350.153:833): avc: denied { read write } for pid=15695 comm="syz.8.4232" name="rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 235.159839][ T29] audit: type=1400 audit(1789132350.153:834): avc: denied { open } for pid=15695 comm="syz.8.4232" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 235.300761][T15708] FAT-fs (loop7): Directory bread(block 1285) failed [ 235.300790][T15708] FAT-fs (loop7): Directory bread(block 1286) failed [ 235.300811][T15708] FAT-fs (loop7): Directory bread(block 1287) failed [ 235.300845][T15708] FAT-fs (loop7): Directory bread(block 1288) failed [ 235.358187][T15711] FAULT_INJECTION: forcing a failure. [ 235.358187][T15711] name fail_futex, interval 1, probability 0, space 0, times 0 [ 235.358240][T15711] CPU: 1 UID: 0 PID: 15711 Comm: syz.4.4239 Not tainted syzkaller #0 PREEMPT(lazy) [ 235.358268][T15711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.358280][T15711] Call Trace: [ 235.358288][T15711] [ 235.358296][T15711] __dump_stack+0x1d/0x30 [ 235.358342][T15711] dump_stack_lvl+0x95/0xd0 [ 235.358364][T15711] dump_stack+0x15/0x1b [ 235.358389][T15711] should_fail_ex+0x262/0x280 [ 235.358419][T15711] should_fail+0xb/0x20 [ 235.358493][T15711] get_futex_key+0x12d/0xb10 [ 235.358528][T15711] futex_wait_setup+0x49/0x3e0 [ 235.358553][T15711] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 235.358671][T15711] ? hrtimer_active+0xe4/0x110 [ 235.358709][T15711] __futex_wait+0xa9/0x260 [ 235.358729][T15711] ? __pfx_futex_wake_mark+0x10/0x10 [ 235.358765][T15711] futex_wait+0x98/0x1c0 [ 235.358863][T15711] do_futex+0x391/0x460 [ 235.359027][T15711] __se_sys_futex+0x2f6/0x370 [ 235.359062][T15711] __x64_sys_futex+0x78/0x90 [ 235.359116][T15711] x64_sys_call+0x22e2/0x2550 [ 235.359200][T15711] do_syscall_64+0x112/0x360 [ 235.359334][T15711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.359357][T15711] RIP: 0033:0x7f2616afe159 [ 235.359377][T15711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.359497][T15711] RSP: 002b:00007f26155570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 235.359519][T15711] RAX: ffffffffffffffda RBX: 00007f2616d85fa8 RCX: 00007f2616afe159 [ 235.359538][T15711] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2616d85fa8 [ 235.359554][T15711] RBP: 00007f2616d85fa0 R08: 0000000000000000 R09: 0000000000000000 [ 235.359574][T15711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.359587][T15711] R13: 00007f2616d86038 R14: 00007ffc99bde140 R15: 00007ffc99bde228 [ 235.359676][T15711] [ 235.448840][T15719] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 235.466302][T15721] FAULT_INJECTION: forcing a failure. [ 235.466302][T15721] name failslab, interval 1, probability 0, space 0, times 0 [ 235.466379][T15721] CPU: 1 UID: 0 PID: 15721 Comm: syz.8.4243 Not tainted syzkaller #0 PREEMPT(lazy) [ 235.466409][T15721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.466423][T15721] Call Trace: [ 235.466477][T15721] [ 235.466485][T15721] __dump_stack+0x1d/0x30 [ 235.466550][T15721] dump_stack_lvl+0x95/0xd0 [ 235.466575][T15721] dump_stack+0x15/0x1b [ 235.466599][T15721] should_fail_ex+0x262/0x280 [ 235.466625][T15721] ? alloc_empty_file+0x70/0x1e0 [ 235.466660][T15721] should_failslab+0x8c/0xb0 [ 235.466693][T15721] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 235.466727][T15721] ? alloc_empty_file+0x70/0x1e0 [ 235.466858][T15721] alloc_empty_file+0x70/0x1e0 [ 235.466927][T15721] alloc_file_pseudo+0x92/0x120 [ 235.466953][T15721] sock_alloc_file+0x9c/0x1e0 [ 235.467090][T15721] __sys_socket+0x118/0x180 [ 235.467173][T15721] __x64_sys_socket+0x3f/0x50 [ 235.467214][T15721] x64_sys_call+0x246e/0x2550 [ 235.467247][T15721] do_syscall_64+0x112/0x360 [ 235.467279][T15721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.467300][T15721] RIP: 0033:0x7f5d013ae159 [ 235.467367][T15721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.467389][T15721] RSP: 002b:00007f5cffe07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 235.467514][T15721] RAX: ffffffffffffffda RBX: 00007f5d01635fa0 RCX: 00007f5d013ae159 [ 235.467530][T15721] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 235.467546][T15721] RBP: 00007f5d0144503b R08: 0000000000000000 R09: 0000000000000000 [ 235.467561][T15721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.467575][T15721] R13: 00007f5d01636038 R14: 00007f5d01635fa0 R15: 00007ffd2f309bd8 [ 235.467598][T15721] [ 235.621237][ C1] ip6_tnl_xmit_ctl: 7 callbacks suppressed [ 235.621253][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 235.706303][T15742] FAULT_INJECTION: forcing a failure. [ 235.706303][T15742] name failslab, interval 1, probability 0, space 0, times 0 [ 235.706392][T15742] CPU: 1 UID: 0 PID: 15742 Comm: syz.8.4248 Not tainted syzkaller #0 PREEMPT(lazy) [ 235.706420][T15742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.706436][T15742] Call Trace: [ 235.706443][T15742] [ 235.706452][T15742] __dump_stack+0x1d/0x30 [ 235.706480][T15742] dump_stack_lvl+0x95/0xd0 [ 235.706537][T15742] dump_stack+0x15/0x1b [ 235.706560][T15742] should_fail_ex+0x262/0x280 [ 235.706585][T15742] ? __list_lru_init+0x72/0x2f0 [ 235.706620][T15742] should_failslab+0x8c/0xb0 [ 235.706715][T15742] __kmalloc_noprof+0xd0/0x4d0 [ 235.706749][T15742] ? shrinker_alloc+0x61e/0x6d0 [ 235.706778][T15742] ? __list_lru_init+0x72/0x2f0 [ 235.706860][T15742] __list_lru_init+0x72/0x2f0 [ 235.706913][T15742] sget_fc+0x905/0xf70 [ 235.706940][T15742] ? __pfx_set_anon_super_fc+0x10/0x10 [ 235.707045][T15742] ? __pfx_shmem_fill_super+0x10/0x10 [ 235.707111][T15742] get_tree_nodev+0x2a/0x100 [ 235.707141][T15742] shmem_get_tree+0x1c/0x30 [ 235.707174][T15742] vfs_get_tree+0x57/0x1d0 [ 235.707225][T15742] do_new_mount+0x288/0x8d0 [ 235.707260][T15742] ? security_capable+0x7b/0x90 [ 235.707286][T15742] path_mount+0x4ad/0xb90 [ 235.707443][T15742] __se_sys_mount+0x28c/0x2e0 [ 235.707467][T15742] __x64_sys_mount+0x67/0x80 [ 235.707542][T15742] x64_sys_call+0xc3b/0x2550 [ 235.707570][T15742] do_syscall_64+0x112/0x360 [ 235.707606][T15742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.707632][T15742] RIP: 0033:0x7f5d013ae159 [ 235.707650][T15742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.707699][T15742] RSP: 002b:00007f5cffe07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 235.707728][T15742] RAX: ffffffffffffffda RBX: 00007f5d01635fa0 RCX: 00007f5d013ae159 [ 235.707745][T15742] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 235.707761][T15742] RBP: 00007f5d0144503b R08: 0000000000000000 R09: 0000000000000000 [ 235.707775][T15742] R10: 0000000000800080 R11: 0000000000000246 R12: 0000000000000000 [ 235.707791][T15742] R13: 00007f5d01636038 R14: 00007f5d01635fa0 R15: 00007ffd2f309bd8 [ 235.707902][T15742] [ 235.748372][T15744] set_capacity_and_notify: 8 callbacks suppressed [ 235.748391][T15744] loop4: detected capacity change from 0 to 128 [ 235.895494][T15750] loop4: detected capacity change from 0 to 128 [ 236.176313][ T29] audit: type=1400 audit(1789132351.173:835): avc: denied { mount } for pid=15760 comm="syz.4.4261" name="/" dev="ramfs" ino=50393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 236.301481][T15770] loop5: detected capacity change from 0 to 128 [ 236.406507][T15780] FAULT_INJECTION: forcing a failure. [ 236.406507][T15780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.406620][T15780] CPU: 0 UID: 0 PID: 15780 Comm: syz.5.4266 Not tainted syzkaller #0 PREEMPT(lazy) [ 236.406647][T15780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.406660][T15780] Call Trace: [ 236.406666][T15780] [ 236.406674][T15780] __dump_stack+0x1d/0x30 [ 236.406700][T15780] dump_stack_lvl+0x95/0xd0 [ 236.406723][T15780] dump_stack+0x15/0x1b [ 236.406797][T15780] should_fail_ex+0x262/0x280 [ 236.406830][T15780] should_fail+0xb/0x20 [ 236.406856][T15780] should_fail_usercopy+0x1a/0x20 [ 236.406932][T15780] strncpy_from_user+0x27/0x250 [ 236.407018][T15780] do_getname+0x59/0x1c0 [ 236.407042][T15780] getname_flags+0x1d/0x30 [ 236.407063][T15780] do_sys_openat2+0x6c/0x130 [ 236.407090][T15780] __x64_sys_openat+0xf2/0x120 [ 236.407128][T15780] x64_sys_call+0x1f72/0x2550 [ 236.407234][T15780] do_syscall_64+0x112/0x360 [ 236.407270][T15780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.407296][T15780] RIP: 0033:0x7f55f02de98e [ 236.407312][T15780] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 236.407406][T15780] RSP: 002b:00007f55eed76b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 236.407428][T15780] RAX: ffffffffffffffda RBX: 00007f55eed776c0 RCX: 00007f55f02de98e [ 236.407443][T15780] RDX: 0000000000000002 RSI: 00007f55eed76c00 RDI: ffffffffffffff9c [ 236.407513][T15780] RBP: 00007f55f03b503b R08: 0000000000000000 R09: 0000000000000000 [ 236.407528][T15780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.407542][T15780] R13: 00007f55f05a6038 R14: 00007f55f05a5fa0 R15: 00007fff2208d238 [ 236.407563][T15780] [ 236.501440][T15782] vlan2: entered allmulticast mode [ 236.585204][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 236.670687][T15762] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.670717][T15762] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.670822][T15762] bridge_slave_0: entered allmulticast mode [ 236.671960][T15762] bridge_slave_0: entered promiscuous mode [ 236.674182][T15762] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.674496][T15762] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.674554][T15762] bridge_slave_1: entered allmulticast mode [ 236.675012][T15762] bridge_slave_1: entered promiscuous mode [ 236.676587][T15791] syzkaller0: entered promiscuous mode [ 236.676602][T15791] syzkaller0: entered allmulticast mode [ 236.741543][T15762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.743198][T15762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.802855][T15762] team0: Port device team_slave_0 added [ 236.803727][T15762] team0: Port device team_slave_1 added [ 236.857358][T15762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.857373][T15762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.857450][T15762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.858101][T15762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.858114][T15762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.858148][T15762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.906051][T15762] hsr_slave_0: entered promiscuous mode [ 236.906418][T15762] hsr_slave_1: entered promiscuous mode [ 237.018343][T15821] vlan0: left promiscuous mode [ 237.127843][T15762] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.175337][T15835] loop9: detected capacity change from 0 to 128 [ 237.197619][T15762] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.246015][T15762] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.312566][T15762] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.362976][T15762] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 237.364775][T15762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.365301][T15762] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 237.367515][T15762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 237.368277][T15762] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 237.369936][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 237.370002][ T29] audit: type=1400 audit(1789132352.363:838): avc: denied { mounton } for pid=15849 comm="syz.7.4295" path="/98/file0/file0" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 237.380106][T15762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 237.380715][T15762] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 237.387350][T15762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 237.390737][T15858] loop9: detected capacity change from 0 to 128 [ 237.493464][T15762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.500697][T15762] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.519229][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.519263][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.534650][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.534687][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.559252][ T29] audit: type=1400 audit(1789132352.553:839): avc: denied { nlmsg_write } for pid=15871 comm="syz.4.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 237.711555][T15893] loop9: detected capacity change from 0 to 128 [ 237.767912][T15762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.921744][T15762] veth0_vlan: entered promiscuous mode [ 237.924058][T15762] veth1_vlan: entered promiscuous mode [ 237.945985][T15762] veth0_macvtap: entered promiscuous mode [ 237.947538][T15762] veth1_macvtap: entered promiscuous mode [ 237.970342][T15762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.982056][T15762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.001809][ T3429] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.021581][ T3429] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.021719][ T3429] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.021754][ T3429] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.064487][ T29] audit: type=1400 audit(1789132353.063:840): avc: denied { mount } for pid=15927 comm="syz.8.4260" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 238.099847][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4317'. [ 238.108818][T15932] loop8: detected capacity change from 0 to 128 [ 238.371217][ T29] audit: type=1400 audit(1789132353.363:841): avc: denied { wake_alarm } for pid=15960 comm="syz.8.4333" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 238.382891][T15963] bridge_slave_0: left promiscuous mode [ 238.382974][T15963] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.419705][T15963] bridge_slave_1: left allmulticast mode [ 238.419770][T15963] bridge_slave_1: left promiscuous mode [ 238.419851][T15963] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.439576][T15963] bond0: (slave bond_slave_0): Releasing backup interface [ 238.447330][T15963] bond0: (slave bond_slave_1): Releasing backup interface [ 238.453493][T15963] team0: Port device team_slave_0 removed [ 238.466854][T15963] team0: Port device team_slave_1 removed [ 238.468403][T15963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.468419][T15963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.469925][T15963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.469968][T15963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.473586][T15963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.487745][T15968] tipc: Enabling of bearer rejected, already enabled [ 238.488815][ T12] tipc: Resetting bearer [ 238.652646][T15982] loop8: detected capacity change from 0 to 512 [ 238.726526][T15990] ip6tnl1: entered allmulticast mode [ 238.778339][T15993] tipc: Resetting bearer [ 238.809325][T15993] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.809528][T15996] bond0: entered promiscuous mode [ 238.812462][T15995] bond0: left promiscuous mode [ 238.833194][T15993] tipc: Enabling of bearer rejected, already enabled [ 238.861612][ T3429] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 238.861707][ T3429] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 238.891315][ T3377] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 238.891391][T16012] loop7: detected capacity change from 0 to 512 [ 239.056049][T16024] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4361'. [ 239.163598][T16041] FAULT_INJECTION: forcing a failure. [ 239.163598][T16041] name fail_futex, interval 1, probability 0, space 0, times 0 [ 239.163633][T16041] CPU: 1 UID: 0 PID: 16041 Comm: syz.9.4369 Not tainted syzkaller #0 PREEMPT(lazy) [ 239.163678][T16041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.163694][T16041] Call Trace: [ 239.163702][T16041] [ 239.163711][T16041] __dump_stack+0x1d/0x30 [ 239.163797][T16041] dump_stack_lvl+0x95/0xd0 [ 239.163824][T16041] dump_stack+0x15/0x1b [ 239.163852][T16041] should_fail_ex+0x262/0x280 [ 239.163909][T16041] should_fail+0xb/0x20 [ 239.163932][T16041] get_futex_key+0x12d/0xb10 [ 239.164025][T16041] futex_wake+0x89/0x400 [ 239.164068][T16041] do_futex+0x3f8/0x460 [ 239.164104][T16041] __se_sys_futex+0x2f6/0x370 [ 239.164150][T16041] __x64_sys_futex+0x78/0x90 [ 239.164179][T16041] x64_sys_call+0x22e2/0x2550 [ 239.164204][T16041] do_syscall_64+0x112/0x360 [ 239.164310][T16041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.164334][T16041] RIP: 0033:0x7fa83237e159 [ 239.164350][T16041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.164369][T16041] RSP: 002b:00007fa830dd70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 239.164389][T16041] RAX: ffffffffffffffda RBX: 00007fa832605fa8 RCX: 00007fa83237e159 [ 239.164404][T16041] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa832605fac [ 239.164454][T16041] RBP: 00007fa832605fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 239.164468][T16041] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 239.164489][T16041] R13: 00007fa832606038 R14: 00007ffe1dcb9e00 R15: 00007ffe1dcb9ee8 [ 239.164508][T16041] [ 239.261962][T16047] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4372'. [ 239.281289][ T3377] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 239.314175][T16049] loop8: detected capacity change from 0 to 128 [ 239.351305][ T3377] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 239.500517][T16071] FAULT_INJECTION: forcing a failure. [ 239.500517][T16071] name failslab, interval 1, probability 0, space 0, times 0 [ 239.500550][T16071] CPU: 0 UID: 0 PID: 16071 Comm: syz.8.4382 Not tainted syzkaller #0 PREEMPT(lazy) [ 239.500581][T16071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.500653][T16071] Call Trace: [ 239.500660][T16071] [ 239.500669][T16071] __dump_stack+0x1d/0x30 [ 239.500698][T16071] dump_stack_lvl+0x95/0xd0 [ 239.500794][T16071] dump_stack+0x15/0x1b [ 239.500818][T16071] should_fail_ex+0x262/0x280 [ 239.500848][T16071] should_failslab+0x8c/0xb0 [ 239.500919][T16071] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 239.500963][T16071] ? __d_alloc+0x34/0x320 [ 239.501023][T16071] ? __d_alloc+0x34/0x320 [ 239.501046][T16071] ? __rcu_read_unlock+0x4e/0x70 [ 239.501162][T16071] __d_alloc+0x34/0x320 [ 239.501188][T16071] ? d_alloc_pseudo+0x13/0x80 [ 239.501216][T16071] d_alloc_pseudo+0x1e/0x80 [ 239.501245][T16071] alloc_path_pseudo+0xa4/0x140 [ 239.501317][T16071] alloc_file_pseudo+0x55/0x120 [ 239.501342][T16071] anon_inode_getfd+0xbf/0x190 [ 239.501364][T16071] bpf_enable_stats+0xc5/0x110 [ 239.501391][T16071] __sys_bpf+0x9e3/0xc30 [ 239.501458][T16071] ? do_futex+0x2f0/0x460 [ 239.501491][T16071] __x64_sys_bpf+0x69/0x80 [ 239.501518][T16071] x64_sys_call+0xf26/0x2550 [ 239.501548][T16071] do_syscall_64+0x112/0x360 [ 239.501659][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.501687][T16071] RIP: 0033:0x7f06345de159 [ 239.501706][T16071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.501787][T16071] RSP: 002b:00007f0633037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.501811][T16071] RAX: ffffffffffffffda RBX: 00007f0634865fa0 RCX: 00007f06345de159 [ 239.501826][T16071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 239.501839][T16071] RBP: 00007f063467503b R08: 0000000000000000 R09: 0000000000000000 [ 239.501852][T16071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.501868][T16071] R13: 00007f0634866038 R14: 00007f0634865fa0 R15: 00007ffd112e9f88 [ 239.501891][T16071] [ 239.547338][T16070] syzkaller0: entered promiscuous mode [ 239.547360][T16070] syzkaller0: entered allmulticast mode [ 239.703123][T16008] 9pnet_fd: p9_fd_create_tcp (16008): problem connecting socket to 127.0.0.1 [ 239.792004][T16084] syzkaller0: entered promiscuous mode [ 239.792026][T16084] syzkaller0: entered allmulticast mode [ 239.958361][T16096] syzkaller0: entered promiscuous mode [ 239.958377][T16096] syzkaller0: entered allmulticast mode [ 239.969923][T16099] tipc: Resetting bearer [ 239.989261][T16099] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.990255][T16104] vlan0: entered promiscuous mode [ 240.013214][T16099] tipc: Enabling of bearer rejected, already enabled [ 240.091852][ T29] audit: type=1400 audit(1789132355.093:842): avc: denied { map } for pid=16109 comm="syz.4.4399" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 240.091919][ T29] audit: type=1400 audit(1789132355.093:843): avc: denied { read write } for pid=16109 comm="syz.4.4399" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=52353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 240.152517][ T29] audit: type=1400 audit(1789132355.143:844): avc: denied { sqpoll } for pid=16109 comm="syz.4.4399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 240.411192][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4408'. [ 240.411214][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4408'. [ 240.549937][T16107] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.549969][T16107] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.550033][T16107] bridge_slave_0: entered allmulticast mode [ 240.550411][T16107] bridge_slave_0: entered promiscuous mode [ 240.580104][T16107] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.580136][T16107] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.580205][T16107] bridge_slave_1: entered allmulticast mode [ 240.580761][T16107] bridge_slave_1: entered promiscuous mode [ 240.621603][T16107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.629405][T16107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.648905][T16107] team0: Port device team_slave_0 added [ 240.649830][T16107] team0: Port device team_slave_1 added [ 240.663819][T16107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.663833][T16107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.663862][T16107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.664396][T16107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.664447][T16107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.664504][T16107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.730028][T16107] hsr_slave_0: entered promiscuous mode [ 240.730431][T16107] hsr_slave_1: entered promiscuous mode [ 240.730673][T16107] debugfs: 'hsr0' already exists in 'hsr' [ 240.730687][T16107] Cannot create hsr debugfs directory [ 240.806470][T16159] syzkaller0: entered promiscuous mode [ 240.806488][T16159] syzkaller0: entered allmulticast mode [ 240.833941][T16107] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.874060][T16107] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.914150][T16107] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.954129][T16107] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.006212][T16107] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 241.007942][T16107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 241.008787][T16107] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 241.010498][T16107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 241.011134][ T70] ================================================================== [ 241.011163][ T70] BUG: KCSAN: data-race in kick_pool_pick / wq_worker_running [ 241.011193][ T70] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 241.011199][ T70] read-write to 0xffff888237c2b0a4 of 4 bytes by task 9 on cpu 0: [ 241.011217][ T70] wq_worker_running+0x9c/0x120 [ 241.011235][ T70] schedule_preempt_disabled+0x11/0x20 [ 241.011256][ T70] __mutex_lock+0x528/0xf40 [ 241.011279][ T70] __mutex_lock_slowpath+0xa/0x10 [ 241.011302][ T70] mutex_lock+0x88/0x90 [ 241.011321][ T70] rtnl_lock+0x15/0x20 [ 241.011348][ T70] netdev_work_proc+0x29/0x520 [ 241.011376][ T70] process_scheduled_works+0x56a/0xa50 [ 241.011404][ T70] worker_thread+0x569/0x750 [ 241.011431][ T70] kthread+0x223/0x270 [ 241.011449][ T70] ret_from_fork+0x146/0x330 [ 241.011476][ T70] ret_from_fork_asm+0x1a/0x30 [ 241.011500][ T70] [ 241.011505][ T70] read to 0xffff888237c2b0a4 of 4 bytes by task 70 on cpu 1: [ 241.011521][ T70] kick_pool_pick+0x5f/0x310 [ 241.011546][ T70] __queue_work+0x90a/0xbc0 [ 241.011563][ T70] queue_work_on+0xa9/0x140 [ 241.011579][ T70] netdev_work_enqueue+0x1eb/0x230 [ 241.011606][ T70] __netdev_work_core_sched+0x1f/0x30 [ 241.011635][ T70] __dev_set_rx_mode+0x12f/0x220 [ 241.011664][ T70] dev_mc_add+0x8e/0xb0 [ 241.011691][ T70] igmp6_group_added+0xfc/0x320 [ 241.011708][ T70] __ipv6_dev_mc_inc+0x5bf/0x6b0 [ 241.011737][ T70] ipv6_dev_mc_inc+0x1f/0x30 [ 241.011764][ T70] addrconf_dad_work+0x26a/0xbc0 [ 241.011785][ T70] process_scheduled_works+0x56a/0xa50 [ 241.011812][ T70] worker_thread+0x569/0x750 [ 241.011839][ T70] kthread+0x223/0x270 [ 241.011862][ T70] ret_from_fork+0x146/0x330 [ 241.011889][ T70] ret_from_fork_asm+0x1a/0x30 [ 241.011913][ T70] [ 241.011917][ T70] value changed: 0x00000000 -> 0x00000001 [ 241.011927][ T70] [ 241.011931][ T70] Reported by Kernel Concurrency Sanitizer on: [ 241.011942][ T70] CPU: 1 UID: 0 PID: 70 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(lazy) [ 241.011967][ T70] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.011981][ T70] Workqueue: ipv6_addrconf addrconf_dad_work [ 241.012004][ T70] ================================================================== [ 241.070873][T16107] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 241.078215][T16107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 241.080016][T16107] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 241.097835][T16107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.651728][ T12] bridge_slave_1: left allmulticast mode [ 241.651820][ T12] bridge_slave_1: left promiscuous mode [ 241.651994][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.652420][ T12] bridge_slave_0: left allmulticast mode [ 241.652431][ T12] bridge_slave_0: left promiscuous mode [ 241.652550][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.691356][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.701238][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 241.715044][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.715582][ T12] bond0 (unregistering): Released all slaves [ 241.788951][ T29] audit: type=1400 audit(1789132356.783:845): avc: denied { write } for pid=16168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.826867][ T12] hsr_slave_0: left promiscuous mode [ 241.828675][ T12] hsr_slave_1: left promiscuous mode [ 241.829274][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.830279][ T29] audit: type=1400 audit(1789132356.823:846): avc: denied { write } for pid=16179 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.831021][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.900615][ T12] team0 (unregistering): Port device team_slave_1 removed [ 241.909612][ T12] team0 (unregistering): Port device team_slave_0 removed [ 241.931545][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 241.992814][ T29] audit: type=1400 audit(1789132356.993:847): avc: denied { write } for pid=16182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.039957][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 242.122009][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 242.155935][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.194375][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.228342][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 242.244376][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.293743][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.345409][ T12] bridge_slave_1: left allmulticast mode [ 242.345499][ T12] bridge_slave_1: left promiscuous mode [ 242.345654][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.346236][ T12] bridge_slave_0: left allmulticast mode [ 242.346262][ T12] bridge_slave_0: left promiscuous mode [ 242.346333][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.402835][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.403965][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.404661][ T12] bond0 (unregistering): Released all slaves [ 242.437062][ T12] hsr_slave_0: left promiscuous mode [ 242.437418][ T12] hsr_slave_1: left promiscuous mode [ 242.437907][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.437924][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.438300][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.438315][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.441072][ T12] veth1_macvtap: left promiscuous mode [ 242.441097][ T12] veth0_macvtap: left promiscuous mode [ 242.441199][ T12] veth1_vlan: left promiscuous mode [ 242.441238][ T12] veth0_vlan: left promiscuous mode [ 242.506015][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 242.506031][ T29] audit: type=1400 audit(1789132357.493:853): avc: denied { write } for pid=16229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.529534][ T29] audit: type=1400 audit(1789132357.513:854): avc: denied { write } for pid=16240 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.585354][ T12] team0 (unregistering): Port device team_slave_1 removed [ 242.587473][ T12] team0 (unregistering): Port device team_slave_0 removed [ 242.612705][ T3021] 8021q: adding VLAN 0 to HW filter on device eth21 [ 242.698532][ T29] audit: type=1400 audit(1789132357.693:855): avc: denied { write } for pid=16243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.738081][ T29] audit: type=1400 audit(1789132357.733:856): avc: denied { write } for pid=16254 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.769930][ T3021] 8021q: adding VLAN 0 to HW filter on device eth22 [ 242.848729][ T29] audit: type=1400 audit(1789132357.843:857): avc: denied { write } for pid=16258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.894772][ T29] audit: type=1400 audit(1789132357.893:858): avc: denied { write } for pid=16269 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.927314][ T3021] 8021q: adding VLAN 0 to HW filter on device eth24 [ 242.987411][ T29] audit: type=1400 audit(1789132357.983:859): avc: denied { write } for pid=16272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.019396][ T29] audit: type=1400 audit(1789132358.013:860): avc: denied { write } for pid=16283 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.052374][ T3021] 8021q: adding VLAN 0 to HW filter on device eth23 [ 243.621258][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 244.265002][ T70] vlan2: left promiscuous mode [ 244.265017][ T70] bridge_slave_0: left promiscuous mode [ 244.265215][ T70] bridge0: port 1(vlan2) entered disabled state [ 244.265971][ T70] lo: left allmulticast mode [ 244.335461][ T70] bond0 (unregistering): Released all slaves [ 244.384592][ T70] tipc: Disabling bearer [ 244.384744][ T70] tipc: Left network mode [ 244.387718][ T70] hsr_slave_0: left promiscuous mode [ 244.387952][ T70] hsr_slave_1: left promiscuous mode [ 244.389987][ T70] veth1_macvtap: left promiscuous mode [ 244.390001][ T70] veth0_macvtap: left promiscuous mode [ 244.390031][ T70] veth1_vlan: left promiscuous mode [ 244.438418][ T70] team0 (unregistering): Port device vlan0 removed [ 244.901241][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!