last executing test programs: 1m54.07906792s ago: executing program 32 (id=505): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x4}, 0x0, 0x32, 0x43a1bd75, 0x7, 0x9, 0x6, 0x2, 0x0, 0x3ff, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe72}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x0, 0x0, &(0x7f0000000300)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r6 = socket(0x2, 0x3, 0xff) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6000030800783a00fc010000000000000000000000000000ff8000000000000000000000000000aa0200907800000000605b52ab00002b00fc000000000000000000000000000000fc000000000000000000000000000000de07040201000000fc020000000000000000000000000000fe8800000000000000000000000000018802000000000000c910fe8000000000000000000000000000bb000000000000"], 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) syz_read_part_table(0x4086, &(0x7f000000c440)="$eJzszzFK9GAQBuB3k/3/BBFBWwuxs5LY2dhYeYG9wHZ2FvauepvFA3giQfAENp9kExFx7RRRnqeZN/lmBib8uMd1P6+T/E8ePpm5n99tZ9qn265L2iTTi63VUxlc7SXpjvJvo62ymeTy45bZ8ivvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfoWnt9gOpZRSkvpdV51MkkWS+W5pkhxXSV9zUz+fj037h0nOdsavRT/xqt+4Mlt+4y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB9U5eR0jJMcpBliu7a3eWF3Dm0AhKEggN4XEBQjkBD2YDm2YcqmrrJJ7XvmxIm7bNXzyfdeVUdyn2O/z03+S4cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCgAAAA//9DVh8q") 1m48.05858523s ago: executing program 33 (id=574): bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x150, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, r1, {}, {0xffe0, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x5, 0x8, 0xfb4, 0x0, 0x5, 0x2, 0x3}}, {0xa, 0x2, [0x61ba, 0x8be, 0x7]}}, {{0x1c, 0x1, {0x6, 0xce, 0x9, 0x400, 0x1, 0x71, 0x662, 0x6}}, {0x10, 0x2, [0x1, 0x6, 0xce, 0x4, 0x0, 0xfff]}}, {{0x1c, 0x1, {0x8, 0xfb, 0x1, 0xbe, 0x1, 0x3, 0x7, 0x2}}, {0x8, 0x2, [0x8, 0xeb6]}}, {{0x1c, 0x1, {0x5, 0xcb, 0x6, 0x5, 0x2, 0xffffffff, 0x3, 0x4}}, {0xc, 0x2, [0xfff, 0xb, 0x4, 0x6ba0]}}, {{0x1c, 0x1, {0x7, 0xea, 0x950e, 0x8, 0x2, 0x4edb1e2d, 0x2, 0x4}}, {0xc, 0x2, [0xf, 0x8, 0x3, 0x1]}}, {{0x1c, 0x1, {0x8, 0xa, 0x5, 0xa, 0x0, 0xff, 0x5, 0x8}}, {0x14, 0x2, [0x1, 0x3, 0x800, 0xf87c, 0x81, 0x0, 0x1, 0x5]}}, {{0x1c, 0x1, {0x21, 0x5, 0x2, 0x5, 0x1, 0x9, 0x5}}, {0x4}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) 1m40.672387728s ago: executing program 34 (id=679): r0 = socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000940)="2f0000001e005f0214fffffffffffff8070000001d00000000000000080009000d000f0000002a5fda7874ea41c181", 0x2f) 1m35.847056918s ago: executing program 35 (id=746): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x9, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfffb, 0x7, 0x7f}, {0x6, 0x24, 0x1a, 0x6, 0x23}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xd, 0x5, 0xe1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0xf9, 0x1}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x94, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0xb, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x152, 0x0, 0x2, 0xf9}, {0x6, 0x24, 0x1a, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x73, 0x5, 0x56, 0xb2}, @dmm={0x7, 0x24, 0x14, 0x8000, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x400, 0x2, 0x6, 0xff, 0x4, 0xd8}, @mbim={0xc, 0x24, 0x1b, 0x5, 0xfffb, 0x1, 0xf, 0xb4a8, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4a}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x3, 0x8, 0xe, 0xff}, 0x51, &(0x7f0000000240)={0x5, 0xf, 0x51, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x2, 0x5, 0x1c7}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "9607d073f7c4f3c32997780647873821"}, @ss_container_id={0x14, 0x10, 0x4, 0xc1, "fe7af342f565d2fde6ef13621440ccec"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x5, 0xfd, 0x1, 0x2}, @wireless={0xb, 0x10, 0x1, 0xa, 0x0, 0x7, 0xe, 0x0, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0x5, 0x1}]}, 0x1, [{0x6b, &(0x7f00000002c0)=@string={0x6b, 0x3, "08e702a22682c0897f073d0ed9bd23ca0171da90fdbadbbb9b0954918b42e00cbb64557845027ed6dcd52e494a94be18ad4b809149c92d1383e9583b7353e2e4bf75dfccee250d5271bb24a8814335a75ba00579babd67e96fb664b5f508b697a0cdd3729f35d364ff"}}]}) capset(0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="98fe2044f8927a5a62ed27067ff7b41028c3ed84cd2e059d084e220e568db85f28dc9a8ee65c074b2ed4ec0386560548cd7dea14f39de315ccd09615dee6957b374ec77ba90fb8b14583aabc9437ae80407bb9731496a812a6cca5"], 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x12) 1m34.583040402s ago: executing program 36 (id=760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb3bcf4b5ff27d06ce23000c0000000c0000000700000000000000000000ea7c75915d4aa09a005f6100"], &(0x7f0000000680)=""/164, 0x2b, 0xa4, 0x1, 0x1}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYBLOB="382911146b2733c2", @ANYRESDEC=r1, @ANYRES32=r0, @ANYRES32, @ANYRESDEC=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000140), 0x1003, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r2, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x149240, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x43, &(0x7f00000001c0)=[{0x4, 0xa, 0x4, 0xa}, {0x7fe3, 0x13, 0x0, 0xff6b}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x84182, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00'}) open_tree(r7, &(0x7f0000000380)='./file0\x00', 0x9000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r9 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r9, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYRES8=r6], 0x64}}, 0x20000010) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a3b830000000000000000050000020900010073797a3048a3763414000000110001"], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c2000000180045030f2a00650000002f90780000000000000000248088a80000000000ff000010000800000086dd080088be00000000100700000100000000000000080022eb00000000000000000000000008006558fffffffd"], 0x0) close_range(r4, 0xffffffffffffffff, 0x0) lseek(r3, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=@getchain={0x74, 0x66, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x7}, {0xf, 0x7}, {0xffef, 0xfff1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x1db}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x50c}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xff}]}, 0x74}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8}]}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0xc, 0xff}}]}, 0x84}}, 0x80) socket$key(0xf, 0x3, 0x2) 1m15.047441695s ago: executing program 7 (id=1124): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) 1m14.986625929s ago: executing program 7 (id=1125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000040f000000400000004000000041000000640c5901b8cfaa7c7e881d6b064f6b2fa5c224ece675ab0ec5fe7c155910b3715039c9507fa4b064f92ccb80c246f07afc97d01d07b7a05b78342916d9de334e3a3def301eaeaa1aa92af33136b3f6cb9eb3b3e94932e0e382f33884a8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000140)=""/131, 0x83}, {0x0}], 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) 1m14.986354559s ago: executing program 7 (id=1126): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, 0x0) 1m14.985559629s ago: executing program 7 (id=1128): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x7, 0x0) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) 1m14.105928979s ago: executing program 7 (id=1155): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9840c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1700, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f000001000000000020000000000000000000000008"], 0x40}, 0x20008024) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") 1m14.030897094s ago: executing program 9 (id=1156): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064", 0x14}, {0x0}], 0x2}}], 0x1, 0x4004040) (fail_nth: 2) 1m13.869856123s ago: executing program 9 (id=1157): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffff7f, 0xfffffffe}]}}}}}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) 1m13.850694314s ago: executing program 9 (id=1159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x685}, &(0x7f0000000a40)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000a80)='\x00\x00\x00', 0x3}], 0x1, 0x3, 0x1, {0x5}}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40100, 0x4a, 0x4}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) timerfd_settime(r5, 0xc7024e0b011a9498, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f00000008c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r4, &(0x7f00000001c0)={0xc880, 0x4, 0x3}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r6}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @local}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/notes', 0xc000, 0x20) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x2, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0xfffffff8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x100009, 0x3, 0xffffff31}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r11, &(0x7f0000000580)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x3, @loopback, 0x7f}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)="c935f97bebec05adf54e51978170649f99354c27d61c9112d22e0765cff27e0a17ea9fa1654388a5fb4ea1ca0e2ec5d0", 0x30}, {&(0x7f0000000440)="ea9edfef775b3f715137180840ec8d090f2151fe6f7ba9180d990206e1378ddcc7de2745243f8c263d6b63369dbade419d5ef7ab2a54a18672885d97f3684b7443713b3c81c5b70cb5b1bba0dda9bc4a7a9289b2d5613f2c6f8d234ae22518862a648f5abf16135997136571d8748c4cc2dc0da52f5e86efcd016d7e4470e623dcd4bd95f31ebe3150d23a2ce891911e51d7a1262b0770acc1babdd4d1d8f66a6e577d15691cb47bed53eb3e1d0a75", 0xaf}, {&(0x7f0000000380)="bbf999b9e64486274e905d26ffe0f9316acd5fb2a484a6d2a929eb8f3f1d687967775bf4c84b7d043b595d0e9ac5850a9fc94be0beb9960de7c09b676bcbe47a2e5eed91e70186fdc215bfe70c12badc4647e3ba4143910229d0d6ccd9f162", 0x5f}, {&(0x7f0000000500)="60140e855285ab4c29c111e285e1eaa3de09f75f0d817a3848c7447877344ada9a6a5c670482c51ab30d0249a6c63e37947c5d6ab3e79b8fc6041db9a9565f518fdccb00d5ebd128163a0b4262168a6ce7b3079c3e8b38cfa5913aadae8c6074e3657ca0cd05b44e5c3e5642d1177e6b", 0x70}, {&(0x7f0000000700)="1daa1673afdd3cef7b98fba8ff7703760c5177f478c8176902f7beb01eb19e4436deacabc1aee873cf44d2b126eeb47d1c040bc831d3f9ee36393d16e0d1f28ba26aeb79597ef78072b39b06e60379596100e8acc585e886946cdd616f37c616f0754441ab6d2ac5a387d1225ba281a0ec6179e0c052e646e12ae028f37e42c792e4e16c80f63169c5eccb2e6f1fafb6fbd8d3788adbcaae1b88487148a487bf0af6d178db155eba8cce71e798982c", 0xaf}], 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000008400000005000000100000000c000000180000000000000084000000000000000d000700feffab0f1800000000000000840000000000000005000c000500080018000000000000008400000007000000ac1e010100000000180c000000000000840000000500000010000008000000009d94964de83a9ebd34f54a440d8265cfbe26a9db1fac615c4562a672bdf3ff13d2c7f1dd99b4a73726c314c605dbcb"], 0x78, 0x80}, 0x4008000) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r14, 0x84, 0x74, &(0x7f0000000200)={r13, 0xfffe, 0x10, 0xd8ba, 0x9}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000007c0)={r13, 0xe}, &(0x7f0000000800)=0x8) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x41, &(0x7f0000000180)={0x11, 0x9, r9, 0x1, 0xd8, 0x6, @remote}, 0x14) 1m13.685685224s ago: executing program 9 (id=1163): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000009500001e00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x117b, &(0x7f0000000440)={0x0, 0x29d8, 0x20000, 0x2, 0x1c4}, &(0x7f0000000140)=0x0, &(0x7f00000006c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0, 0x0, 0x0, 0x300}, {0x0, 0x0, 0xfffd}, {0x0, 0x0, 0x4}, {0x0}]}, 0x4}, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x4c, "2d720787b641423f000000a6aa0825471829a0bc32e5cde91eaf6df1497941f89ca551d1e7dea188ffc5bb39ec84b91f5751666dbc9d70ba271e33ba8ec0195cf2d59bdf8a77eba592d380ed"}}) socket(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r7, r6, 0x25, 0x0, @val=@netkit={@void, @value=r7}}, 0x1c) r8 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) process_vm_writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/248, 0xf8}], 0x1, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x0) syz_emit_ethernet(0x19, &(0x7f0000000000)={@broadcast, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x6, 0x0, 0x1}}, {@mpls_uc={0x8847, {[], @llc={@llc={0xff, 0x4e, "e8"}}}}}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_MSG_RING={0x28, 0x12, 0x0, r1, 0x0, &(0x7f0000000040)="4c9caca091cd2eec2b77343d1184535d5693e3cad9e0c2c4c7e380d9d1b021f1e1d387594c23f937c46c306053eba6fc4fdc43a2286cd32f3ae65d7f0f", 0x3d, 0x2, 0x1}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r10, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r9, 0x0}]) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000000)={'bond_slave_1\x00', {0x2, 0x4e31, @empty=0xfdfdffff}}) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r13, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002dbd7000ffdbdb2504000000140001800800050003000000060008"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 1m13.685170444s ago: executing program 7 (id=1164): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x40000) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair(0x23, 0x2, 0x4, &(0x7f0000000200)) (async) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c03080006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5], 0xb4}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000005bbc05db1dd2c231dff5766fc544433c8b32a729e9eadf8a9d71a93eeb678be33d9c3c7354fd820e22df07320dd92105416092285e310a605c9152a2e7"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) recvfrom(r0, &(0x7f0000000140)=""/68, 0x44, 0x20120, &(0x7f0000000340)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80) (async) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r2}, 0x14) (async) socket(0x21, 0xa, 0x7) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r8}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000006100000140012800b00010062726964676500000400028008000a00c496ce2292e41bd85c1d85e57a35335a6af719a9c38128e892461b060394e221b87b3a454e4762de3323354392700bb88d90fad851049cb69ba8cd734a35d83f05206977076358ced64fbecbdd1f78f2a045d3c2358cdab960f94a03e10e64aebf85ea5b1e81da3bd615726f7f86d9f9e4535ce90e748b503aa17567f1b98c443609dff4992553ea36cff2abf33c45ab3d771ceca415", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1m13.672232205s ago: executing program 37 (id=1164): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106400000000006113740000000000bfa00000000000000700000008ffffffd5030100177400c095000000000000006916360000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x40000) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair(0x23, 0x2, 0x4, &(0x7f0000000200)) (async) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c03080006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5], 0xb4}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000005bbc05db1dd2c231dff5766fc544433c8b32a729e9eadf8a9d71a93eeb678be33d9c3c7354fd820e22df07320dd92105416092285e310a605c9152a2e7"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) recvfrom(r0, &(0x7f0000000140)=""/68, 0x44, 0x20120, &(0x7f0000000340)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80) (async) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r2}, 0x14) (async) socket(0x21, 0xa, 0x7) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r8}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000006100000140012800b00010062726964676500000400028008000a00c496ce2292e41bd85c1d85e57a35335a6af719a9c38128e892461b060394e221b87b3a454e4762de3323354392700bb88d90fad851049cb69ba8cd734a35d83f05206977076358ced64fbecbdd1f78f2a045d3c2358cdab960f94a03e10e64aebf85ea5b1e81da3bd615726f7f86d9f9e4535ce90e748b503aa17567f1b98c443609dff4992553ea36cff2abf33c45ab3d771ceca415", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1m13.58543195s ago: executing program 9 (id=1167): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x60142, 0x10c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1030}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x6]}, 0x8) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) fcntl$setlease(r0, 0x400, 0x1) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x9e6, 0x0, {0x3, 0x0, 0x0, 0x1, 0xd810}, 0x2}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000240)={0x42, 0x7, 0x1, 'queue1\x00', 0x80}) (async) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1m13.274015308s ago: executing program 9 (id=1173): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0xfffffffe, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507000000", @ANYRES32=r3, @ANYBLOB="0c00018008d3"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000006a00)=0x1a, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) kcmp(0x0, r4, 0x0, r0, r0) 1m13.273416968s ago: executing program 38 (id=1173): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0xfffffffe, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507000000", @ANYRES32=r3, @ANYBLOB="0c00018008d3"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000006a00)=0x1a, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) kcmp(0x0, r4, 0x0, r0, r0) 1m11.015222979s ago: executing program 8 (id=1196): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 1m10.713142377s ago: executing program 8 (id=1199): socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="120000000400000008"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffff01, 0x351000) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m10.386109595s ago: executing program 8 (id=1200): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040)=0x400009, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000013c0)) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x2802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0xd64}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x11, 0x4, 0x0, 0x0, 0x0, 0x64, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0}, 0x118020, 0x1, 0x20000, 0x0, 0x7, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000005f000000080000010001000020120000", @ANYRES32=r0, @ANYBLOB="05cbaa2f00"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0400000002000000030000000800"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") 1m9.865850265s ago: executing program 8 (id=1203): bpf$ITER_CREATE(0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x7, 0x0) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) 1m8.979989947s ago: executing program 8 (id=1208): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) close(r0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) 1m8.689172954s ago: executing program 8 (id=1209): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@ifindex, 0xffffffffffffffff, 0x33, 0x2028}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m8.684706784s ago: executing program 39 (id=1209): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@ifindex, 0xffffffffffffffff, 0x33, 0x2028}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m6.281531134s ago: executing program 1 (id=1240): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008850) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes']) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 1m6.160030931s ago: executing program 1 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ad, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000540)=0x140, 0x4) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$netlink(0x10, 0x3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x18, r4, 0x0, 0x1) socket(0x1e, 0x4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000001cc0), &(0x7f00000001c0)=[0x0], 0x0, 0x2085, &(0x7f0000000300)=[{}], 0xfffffffffffffe44, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xd3, 0x8, 0x8, &(0x7f00000003c0)}}, 0xfffffffffffffe61) syz_pidfd_open(r3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x43, 0xa0, 0x0, 0x98, 0x1b0, 0x178, 0x178, 0x1b0, 0x178, 0x49, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x11, 0x2, 0x39}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7fff, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @empty, 0xff000000, 0xff, 'pim6reg0\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x0, 0x68}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1b, 0x800, 0xd, 0x7, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) unshare(0x26000400) unshare(0xa00) mount(0x0, 0x0, 0x0, 0x0, 0x0) 1m6.056114297s ago: executing program 1 (id=1245): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x21, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) inotify_init() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6100272400303aff20010000000000000000000000000000ff"], 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x400]}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0x9, 0x1, 'dccp\x00'}, @NFTA_MATCH_INFO={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xa, 0xfff1}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x21}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) 1m5.947220893s ago: executing program 1 (id=1250): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x7, 0x0) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) 1m5.051862705s ago: executing program 1 (id=1270): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000"], 0x58) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x32ef, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) flock(r4, 0x1) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r5, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x8, @private0, 0x9}}, 0x24) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x20000006}, 0x0, 0x0, 0x800000, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$rxrpc(0x21, 0x2, 0xa) open(&(0x7f0000000280)='./file0\x00', 0x101200, 0x4) bind$rxrpc(r6, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x10b8}, 0x20008004) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000580)=""/11, 0xb}], &(0x7f00000005c0), 0x2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) get_mempolicy(0x0, &(0x7f0000000040), 0x8, &(0x7f0000fff000/0x1000)=nil, 0xd808351aeeb6aefe) close(r0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r11, &(0x7f0000000000)="5ed27d57c4", &(0x7f00000000c0)=@udp6}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@fallback, 0xffffffffffffffff, 0x31, 0x24}, 0x20) 1m4.80281834s ago: executing program 1 (id=1276): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x25) 1m4.79044634s ago: executing program 40 (id=1276): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x25) 40.67484471s ago: executing program 3 (id=1713): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 40.663110031s ago: executing program 3 (id=1714): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000004180)=[{{&(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0xb, 0xbe, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x35}]}, @end, @ssrr={0x89, 0xf, 0xf1, [@local, @local, @multicast1]}, @rr={0x7, 0x1b, 0xc, [@multicast2, @dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010101, @rand_addr=0x64010101, @rand_addr=0x64010101, @broadcast]}, @generic={0x83, 0x11, "1fe41ba68172cb4060a132a40a6c96"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0xc0}}], 0x1, 0xd4) 40.569208156s ago: executing program 3 (id=1716): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r3, 0x1}, 0x20) 40.548883158s ago: executing program 3 (id=1719): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x7, 0x0) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) 39.677815318s ago: executing program 3 (id=1737): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom(r3, &(0x7f0000000140)=""/245, 0xf5, 0x10002, &(0x7f0000000240)=@x25, 0x80) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000100)={&(0x7f0000000380)=@ax25={{0x3, @null}, [@default, @default, @null, @default, @remote, @default, @bcast, @rose]}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000400)=""/73, 0x49}, {&(0x7f0000000480)=""/217, 0xd9}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000640)=""/143, 0x8f}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000700)=""/66, 0x42}, {&(0x7f0000003680)=""/4096, 0x1000}], 0x8}, 0x10001) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sg0, r2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 39.421573372s ago: executing program 3 (id=1739): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r2, 0x15, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xb1557b80b1cfa81b}, 0x40) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1ff}, &(0x7f0000000240)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 39.421025142s ago: executing program 41 (id=1739): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r2, 0x15, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xb1557b80b1cfa81b}, 0x40) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1ff}, &(0x7f0000000240)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.515712185s ago: executing program 4 (id=2542): socket$isdn(0x22, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0x3, 0x401, 0x2000000}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f81d014ce767e35, 0x2, &(0x7f0000000200)=@raw=[@map_val={0x18, 0x3}], &(0x7f0000000480)='GPL\x00', 0xffffffff, 0x13, &(0x7f00000004c0)=""/19, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0x4, 0x8, 0xa}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x0, 0x5, 0xf, 0xb}], 0x10, 0x1}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff81", 0x17}], 0x1) socket$inet6(0xa, 0x5, 0x9) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x9d, &(0x7f0000000600)="214dff7b5c3951ce451e54545d0addf751cc6c6438f357370f64c243a60a087ee17eb2e76a945a9d285aae5107f86e1d9948a1efe5c6e04ea94b7670a67e09632229a545ef38d14199afd6590d8ea81a90bf96459a90319f983a080a2bd7dbf7028584ed751a5e6586160536e054cafbfff781466c46a599063ac56f657195589b1ac3c1a814eaa450148ace4ba01a6571a53beadaea261553d2fb6587") 1.944211788s ago: executing program 4 (id=2550): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0/file0\x00', 0x1443, &(0x7f0000000380)={[], [{@seclabel}]}, 0x1, 0x561, &(0x7f0000000540)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0x101, 0x0) close(r7) close(r5) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r5, 0x0, 0x1100000000f334, 0x0) io_setup(0x400e, 0x0) set_mempolicy(0x8003, &(0x7f0000000040)=0x1, 0x8) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x3ffe, &(0x7f0000000100)=0x2, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001d000003ff030000fbdbdf2502000000", @ANYRES32=r8, @ANYBLOB="010000031400030010000000ff040100feffffff0800000008000a408e0c000df482a763d571efea000800040009000000140003000600e749004260bcce8e28b312d33a2eca00dba072901e170002ff00000c000e80050001007f0000000a0001000090cafc30b2a955ae74a5177677af0cbbe67509329a3f80d6f3b6593c7bd1b0af281e6c6cb6a06aa9f136aef7f5126994540d5c06fd5194a4b54199723ca0021b5abd2dc4c8a3b301000000042dc652e70763112761010fad4144e606108965e863354d"], 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.908904189s ago: executing program 0 (id=2551): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x7fff, 0x10}, &(0x7f0000000240)=0xc) socket(0xa, 0x5, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}]}, &(0x7f0000000180)=0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x4000000a, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000580)=ANY=[@ANYRES32=r1], 0xe1) 1.617135357s ago: executing program 0 (id=2560): socket$isdn(0x22, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0x3, 0x401, 0x2000000}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f81d014ce767e35, 0x2, &(0x7f0000000200)=@raw=[@map_val={0x18, 0x3}], &(0x7f0000000480)='GPL\x00', 0xffffffff, 0x13, &(0x7f00000004c0)=""/19, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0x4, 0x8, 0xa}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x0, 0x5, 0xf, 0xb}], 0x10, 0x1}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff81", 0x17}], 0x1) socket$inet6(0xa, 0x5, 0x9) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x9d, &(0x7f0000000600)="214dff7b5c3951ce451e54545d0addf751cc6c6438f357370f64c243a60a087ee17eb2e76a945a9d285aae5107f86e1d9948a1efe5c6e04ea94b7670a67e09632229a545ef38d14199afd6590d8ea81a90bf96459a90319f983a080a2bd7dbf7028584ed751a5e6586160536e054cafbfff781466c46a599063ac56f657195589b1ac3c1a814eaa450148ace4ba01a6571a53beadaea261553d2fb6587") 1.072960248s ago: executing program 0 (id=2571): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000001500)=ANY=[@ANYBLOB="2502202dcb00"/20, @ANYRES32=r3, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) syz_open_pts(0xffffffffffffffff, 0x141601) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendto$inet(r0, &(0x7f0000001400)="5fd848faed5fb0ee533214ade57a577baa1f58dd950d98fa570eba0c1713284c7bb5f92b5dcbf0e1d6423130705a2b079720fb911a619f475cded88361dce1762fb470b3f187b22be85b02c554f5aecf33bc628eaa3c0c768a7aa917dbb542c10471dfdf300a4894b888c2506dc38a144674b4fd4dab5909c6b6e9b7fc011d09b846d346bc91c492efcdafa0e6a948b42057d61fff2d482190dad08b2be0a3c2f48ee60950013fb771522dcb57f274fc9a173643b80e439e51dcb1658dcc5f", 0xbf, 0x20008804, &(0x7f00000014c0)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000010340)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='timerslack_ns\x00') writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) pwritev(r5, &(0x7f0000001380)=[{&(0x7f0000000080)="e800d60886f1a2f0741c0984853c1477d53fa619bc3a3b202eb5e434e33a2995ac61c4669e1e70f713e9b9823f76ee2f9e731d5256d7d048f3c7973e632a04cf6bc51592f971fd5e9974477ab6df01772738a6e0b28e06a9fd5afa83a3be0f11952b052f64857539a30ba03e6f55c7dcf53b60155452af91451875c66d47d3f8b79f4079e94de636d8ec06dfbd72742cdd6bbf83133364a4728f9ed6d2da2354cbc83f47f79c5cbdb3205f3d52eb2c2d81dfd0b15af035d6f92b6ac37258ecebe14e9c19ae7ef297df2c6d35c566c88054c8c59b7e115b35354b9141f0ef3ac0f75a58e9e8b2be", 0xe7}, {&(0x7f0000000000)="84927ce47072105ead4a8b4ebae3c753dcc7", 0x12}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="dc762dd22183a4326f18d7b1066714efc14f3fe2ad0da141afdcf509295fb973dafa6a5ec764e2b15850e674d5ea5e472d71be70c859ec6b2f733e21a64b006a2e8a9b89f01cfd7507822541589a1fc2e572f23d24435c794449ce7222e91d64454ff5b29436bf6a75b97fdd99d8ed419f9f8bef1f7e9985fccfb53c0e43aee8bb5027b2fb61754a9b39548ab278b373e8ddc2567a94e2e67555aad640c35476724269c7cb6ca50e94a0b6700c029e18347e934ebb7d50e272d4bd1a98bb3e2b1e31f3010c717fdc7dc2ea87e9b5aa", 0xcf}, {&(0x7f0000000180)="ba7418b72e1c0b6709fa9aee8c303adccbf460781b329e974a2fc7b48c16c0c199503d9426df55aea7a85bbc5385d7872a9e4c767080f18cd908decc305fab672ad4f17d31063fded9bce32dd0558b36", 0x50}, {&(0x7f0000000200)="c9e6a960d37d04de9b8c410a4582b75a8481b17158dd08e5061027d4bdd4a24a334e3042f938b0fe6d8abc2f8550e6013af16a97af", 0x35}], 0x6, 0x9, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd071000) 985.917783ms ago: executing program 4 (id=2574): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x64a, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000540)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 902.816388ms ago: executing program 4 (id=2578): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r2, r2, 0x2f}, 0x20) 868.44265ms ago: executing program 4 (id=2580): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x77bc, 0x10, 0x3, 0x285}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) r7 = syz_io_uring_setup(0x2c6b, &(0x7f0000000140)={0x0, 0xe727, 0x1, 0x0, 0x1e2}, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x7331, &(0x7f0000000500)={0x0, 0x23c8, 0x8, 0x1, 0x2c0, 0x0, r7}, &(0x7f0000000380), &(0x7f00000005c0)) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000580)={r6, 0x1, 0x6, @local}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x800, 0xfc, 0x6, 0xe}]}, 0x10) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/226, 0xe2}], 0x1) 664.094222ms ago: executing program 6 (id=2584): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000100)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 659.517802ms ago: executing program 6 (id=2586): socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xa7ba) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x2000083) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 597.874466ms ago: executing program 5 (id=2587): socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xa7ba) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x2000083) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 597.367925ms ago: executing program 6 (id=2588): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='fd\x00') getdents64(r1, &(0x7f0000000000)=""/77, 0x4d) getdents64(r1, 0xffffffffffffffff, 0x43) (fail_nth: 2) 549.927418ms ago: executing program 5 (id=2589): socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000380)=0x800) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd78, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xc64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 326.778851ms ago: executing program 6 (id=2591): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="0e740f7672fa4bae2301bd660eed54331f2843325543c0a974ecb89f132b1f2583fea95fd9bac6f93ac151ace79e5bd488e841ac635394c65eb494cfb7b1df1c691fc525002b4c1ba011aab081c32991eba20274f86dad71c2459f7cd7e15c9b1db2e34c5b59d9c7c76ac28d06fedc6a12c867e6ceb39591a889ebbacc186bad15fe4f9e91c51a731a82858a9f79ef08", 0x90}, {&(0x7f0000000840)="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", 0x9f6}], 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) dup2(r1, r0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xa85, 0xf) 326.058651ms ago: executing program 6 (id=2592): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) recvmmsg(r2, &(0x7f0000003d40), 0x56, 0x12022, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000000000000050000200900020073a4000000000000000405000100070000002c000780060004404e21168989000700ff0000000c000280080001400a0101010c00028008000106ac14141b"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 240.893946ms ago: executing program 6 (id=2595): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1c8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x18c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x16c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xfc, 0xa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0xb5, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943954da5ad28e25a9ba91b24d4c96612e2188dd3fa1dea6994033514d8f93add809a6ee955d65ac8c2ae97714a"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x3c, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0xd, 0x6, "df76640d30b6ba2169"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x1c8}}, 0x20004880) r1 = syz_pidfd_open(0x0, 0x0) process_madvise(r1, &(0x7f0000000580)=[{&(0x7f0000000880)="0af1bcd4498f3ac9995b8870c6b3d39e09800ede2e1c54d4e40d2804a662939534de3b6ae2290e897a3d60672dac17b642f27dd6609ad912b7ff7de4c5e521e6a77db581aa0e0c749a829b3417212bd0c8255f283f01ec2291409544b1072a7d4b95fe38cc2776e4a53a8b55694e9cc5f073f390094d6b62def83b9c64796a683cd73490c4cca4e4ba1a61ffe345c2d9008e28ed85dcd73bcba1d800178013735796b83e66c529", 0xa7}, {&(0x7f0000000340)="1d51c6685a03566262dbead152d1c89e035f10caeae2343fbc4b55c756ccc9625affe0e0a2", 0x25}, {&(0x7f0000000a00)="118ba651c93097b977b2b89b25df87def35e464644ee22667978c6440843d01fcb1d41a4af529712a7eabaa3b9a3ccbad969369b9ede0b8f20d7061bc03de9d83d50886e4de6c0225cf50b94ea946e97ac0068a2064d9549a3011af6e9fbdbc4f42c8560b7f9460512f08dffdad7874a4b4d9bc7daaf535f5194b51394254c48f6e745135326d472b33ce35189f86fb9942ded339dba465d4f26aa582719d690db88d7b6fce44c890e812ca8f7158cbf5715d6109223", 0xb6}, {&(0x7f0000001fc0)="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", 0x1000}], 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00'}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) select(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x21, 0x800, 0x7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x36, 0x43a1bd76, 0x8, 0x3, 0x9, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x80000000000, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}}, 0x24044850) close(r5) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) getsockopt$netlink(r7, 0x10e, 0x9, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x8000005, 0x8, 0x1, 0x5, 0x1ff, 0x2}, 0x1c) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x482c1, 0x141) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) unshare(0x26020480) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)=0x20) 238.249687ms ago: executing program 5 (id=2596): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x101, 0x0) close(0xffffffffffffffff) close(r3) io_setup(0x400e, 0x0) set_mempolicy(0x8003, &(0x7f0000000040)=0x1, 0x8) 185.343339ms ago: executing program 5 (id=2597): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) readahead(r0, 0x0, 0xe0c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 184.726359ms ago: executing program 2 (id=2598): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009c0000009500000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x34}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0xfc5f}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000180), 0x0, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r2, 0x300, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000095}, 0x20040040) 172.569861ms ago: executing program 5 (id=2599): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000240)=ANY=[], 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000140)=""/131, 0x83}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x7, 0x8, 0x8}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYRES64=r5], 0x10) 157.505141ms ago: executing program 0 (id=2600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r2 = epoll_create1(0x80000) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xc000000b}) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) 107.766434ms ago: executing program 2 (id=2601): syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x5, "5eee37"}, @exp_fastopen={0xfe, 0x7, 0xf989, "feff98"}]}}}}}}}}, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x540ed57f51dfab84, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000010000009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xa}, 0x94) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001ac0)=""/14, 0xe}], 0x1) 106.896724ms ago: executing program 2 (id=2602): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x300, 0x20}, @jmp={0x5, 0x0, 0x6, 0xb, 0x1, 0x2, 0xfffffffffffffffc}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) 106.478434ms ago: executing program 0 (id=2603): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="0e740f7672fa4bae2301bd660eed54331f2843325543c0a974ecb89f132b1f2583fea95fd9bac6f93ac151ace79e5bd488e841ac635394c65eb494cfb7b1df1c691fc525002b4c1ba011aab081c32991eba20274f86dad71c2459f7cd7e15c9b1db2e34c5b59d9c7c76ac28d06fedc6a12c867e6ceb39591a889ebbacc186bad15fe4f9e91c51a731a82858a9f79ef08", 0x90}, {&(0x7f0000000840)="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", 0x9f6}], 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) dup2(r1, r0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xa85, 0xf) 105.898074ms ago: executing program 5 (id=2604): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x10001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 77.749796ms ago: executing program 2 (id=2605): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff16, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x30012}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) 75.989716ms ago: executing program 2 (id=2606): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x6, 0x4, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_ADDRESS={0xa, 0x1, @random="02e8eb3dff9f"}]}, 0x48}}, 0x8000) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x9a, @mcast2}, 0x1c) 26.665719ms ago: executing program 0 (id=2607): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4009004}, 0x4040004) openat$cgroup_subtree(r1, &(0x7f0000000000), 0x2, 0x0) 7.57945ms ago: executing program 2 (id=2608): syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@debug}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$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") (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1803000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b503000000000000850000000c000000b7000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async, rerun: 32) r3 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) getsockopt$inet_opts(r3, 0x0, 0x6, &(0x7f0000000100)=""/115, &(0x7f0000000000)=0x73) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000000000000000b0008000100544545000900020073797a32000000000900010073797a31000000001400058008000140000000000800"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40008d0) (rerun: 64) 0s ago: executing program 4 (id=2609): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000010000020000000000fe020c00000008000400", @ANYRES32=r1], 0x24}}, 0x0) kernel console output (not intermixed with test programs): usercopy+0x1a/0x20 [ 125.968089][T10444] _copy_from_user+0x1c/0xb0 [ 125.968118][T10444] llc_ui_setsockopt+0xcd/0x4c0 [ 125.968199][T10444] ? __pfx_llc_ui_setsockopt+0x10/0x10 [ 125.968226][T10444] __sys_setsockopt+0x184/0x200 [ 125.968249][T10444] __x64_sys_setsockopt+0x64/0x80 [ 125.968273][T10444] x64_sys_call+0x21d5/0x3000 [ 125.968364][T10444] do_syscall_64+0xc0/0x2a0 [ 125.968438][T10444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.968503][T10444] RIP: 0033:0x7f6ae4b4acb9 [ 125.968522][T10444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.968542][T10444] RSP: 002b:00007f6ae35a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 125.968622][T10444] RAX: ffffffffffffffda RBX: 00007f6ae4dc5fa0 RCX: 00007f6ae4b4acb9 [ 125.968638][T10444] RDX: 0000000000000004 RSI: 000000000000010c RDI: 0000000000000004 [ 125.968653][T10444] RBP: 00007f6ae35a7090 R08: 0000000000000004 R09: 0000000000000000 [ 125.968669][T10444] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.968755][T10444] R13: 00007f6ae4dc6038 R14: 00007f6ae4dc5fa0 R15: 00007ffe16f52628 [ 125.968777][T10444] [ 126.220348][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1576'. [ 126.647947][T10473] FAULT_INJECTION: forcing a failure. [ 126.647947][T10473] name failslab, interval 1, probability 0, space 0, times 0 [ 126.660667][T10473] CPU: 1 UID: 0 PID: 10473 Comm: syz.6.1582 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.660792][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.660804][T10473] Call Trace: [ 126.660811][T10473] [ 126.660821][T10473] __dump_stack+0x1d/0x30 [ 126.660884][T10473] dump_stack_lvl+0x95/0xd0 [ 126.660905][T10473] dump_stack+0x15/0x1b [ 126.660924][T10473] should_fail_ex+0x263/0x280 [ 126.660948][T10473] should_failslab+0x8c/0xb0 [ 126.660968][T10473] kmem_cache_alloc_noprof+0x68/0x490 [ 126.660988][T10473] ? dst_alloc+0xbd/0x100 [ 126.661092][T10473] dst_alloc+0xbd/0x100 [ 126.661112][T10473] rt_dst_clone+0x3b/0x2e0 [ 126.661132][T10473] NF_HOOK+0x65/0x230 [ 126.661169][T10473] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 126.661227][T10473] ip_mc_output+0x139/0x370 [ 126.661301][T10473] ? __pfx_dst_output+0x10/0x10 [ 126.661341][T10473] ip_send_skb+0x151/0x160 [ 126.661360][T10473] ip_push_pending_frames+0x4d/0x60 [ 126.661380][T10473] raw_sendmsg+0xfd3/0x1110 [ 126.661435][T10473] ? __pfx_raw_sendmsg+0x10/0x10 [ 126.661462][T10473] inet_sendmsg+0xc5/0xd0 [ 126.661491][T10473] __sock_sendmsg+0x102/0x170 [ 126.661554][T10473] ____sys_sendmsg+0x31e/0x4a0 [ 126.661578][T10473] ___sys_sendmsg+0x195/0x1e0 [ 126.661607][T10473] __x64_sys_sendmsg+0xd4/0x160 [ 126.661696][T10473] x64_sys_call+0x17ba/0x3000 [ 126.661719][T10473] do_syscall_64+0xc0/0x2a0 [ 126.661746][T10473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.661781][T10473] RIP: 0033:0x7fec26afacb9 [ 126.661796][T10473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.661813][T10473] RSP: 002b:00007fec25557028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.661893][T10473] RAX: ffffffffffffffda RBX: 00007fec26d75fa0 RCX: 00007fec26afacb9 [ 126.661907][T10473] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000003 [ 126.661919][T10473] RBP: 00007fec25557090 R08: 0000000000000000 R09: 0000000000000000 [ 126.661931][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.661944][T10473] R13: 00007fec26d76038 R14: 00007fec26d75fa0 R15: 00007ffe9afd9c98 [ 126.661961][T10473] [ 126.959244][T10488] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1583'. [ 127.266057][T10537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.275578][T10537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.344250][T10544] FAULT_INJECTION: forcing a failure. [ 127.344250][T10544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.357602][T10544] CPU: 1 UID: 0 PID: 10544 Comm: syz.3.1609 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.357634][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.357711][T10544] Call Trace: [ 127.357719][T10544] [ 127.357728][T10544] __dump_stack+0x1d/0x30 [ 127.357762][T10544] dump_stack_lvl+0x95/0xd0 [ 127.357843][T10544] dump_stack+0x15/0x1b [ 127.357931][T10544] should_fail_ex+0x263/0x280 [ 127.357956][T10544] should_fail+0xb/0x20 [ 127.357977][T10544] should_fail_usercopy+0x1a/0x20 [ 127.358071][T10544] copy_fpstate_to_sigframe+0x636/0x7d0 [ 127.358094][T10544] ? copy_fpstate_to_sigframe+0xe5/0x7d0 [ 127.358120][T10544] ? x86_task_fpu+0x36/0x60 [ 127.358285][T10544] get_sigframe+0x34c/0x470 [ 127.358312][T10544] ? get_signal+0xdbe/0xf60 [ 127.358353][T10544] x64_setup_rt_frame+0xa7/0x4e0 [ 127.358396][T10544] arch_do_signal_or_restart+0x24b/0x450 [ 127.358441][T10544] exit_to_user_mode_loop+0x6a/0x6f0 [ 127.358463][T10544] do_syscall_64+0x1d3/0x2a0 [ 127.358493][T10544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.358519][T10544] RIP: 0033:0x7fc24895b58e [ 127.358555][T10544] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 127.358660][T10544] RSP: 002b:00007fc2473f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.358680][T10544] RAX: 0000000000000001 RBX: 00007fc2473f76c0 RCX: 00007fc24895b58e [ 127.358695][T10544] RDX: 0000000000000001 RSI: 00007fc2473f7090 RDI: 0000000000000003 [ 127.358710][T10544] RBP: 00007fc2473f7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.358725][T10544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.358740][T10544] R13: 00007fc248c16038 R14: 00007fc248c15fa0 R15: 00007fff1a797fd8 [ 127.358902][T10544] [ 127.456490][T10549] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1610'. [ 128.277563][T10645] netlink: 'syz.2.1622': attribute type 18 has an invalid length. [ 128.285910][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1622'. [ 128.380775][T10651] tipc: Started in network mode [ 128.385796][T10651] tipc: Node identity , cluster identity 4711 [ 128.391987][T10651] tipc: Failed to obtain node identity [ 128.397449][T10651] tipc: Enabling of bearer rejected, failed to enable media [ 128.434363][T10663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.450392][T10663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.923621][T10717] loop2: detected capacity change from 0 to 128 [ 128.946189][T10717] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.021376][T10717] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 129.036197][T10724] tipc: Started in network mode [ 129.041158][T10724] tipc: Node identity , cluster identity 4711 [ 129.047218][T10724] tipc: Failed to obtain node identity [ 129.052705][T10724] tipc: Enabling of bearer rejected, failed to enable media [ 129.145782][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 129.145798][ T29] audit: type=1400 audit(1769217195.442:2699): avc: denied { ioctl } for pid=10728 comm="syz.6.1637" path="socket:[31159]" dev="sockfs" ino=31159 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 129.274225][T10732] syzkaller1: entered promiscuous mode [ 129.279757][T10732] syzkaller1: entered allmulticast mode [ 129.699139][T10757] netlink: 'syz.5.1642': attribute type 7 has an invalid length. [ 129.723486][T10757] netlink: 'syz.5.1642': attribute type 7 has an invalid length. [ 129.762204][T10757] dummy0: entered promiscuous mode [ 129.780216][T10757] vlan2: entered promiscuous mode [ 129.922542][T10780] selinux_netlink_send: 23 callbacks suppressed [ 129.922560][T10780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=10780 comm=syz.3.1646 [ 129.969827][T10788] netlink: 'syz.2.1648': attribute type 1 has an invalid length. [ 129.993943][T10788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.002264][T10788] __nla_validate_parse: 1 callbacks suppressed [ 130.002278][T10788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1648'. [ 130.110685][T10808] loop2: detected capacity change from 0 to 512 [ 130.123931][T10808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.136682][T10808] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.241022][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'. [ 130.254434][T10813] loop3: detected capacity change from 0 to 512 [ 130.301727][T10813] EXT4-fs: Ignoring removed oldalloc option [ 130.308297][ T9129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.345305][T10813] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1651: Parent and EA inode have the same ino 15 [ 130.413142][T10813] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1651: Parent and EA inode have the same ino 15 [ 130.441358][T10845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.449205][T10813] EXT4-fs (loop3): 1 orphan inode deleted [ 130.449882][T10845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.459526][T10813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.561605][ T29] audit: type=1400 audit(1769217196.862:2700): avc: denied { write } for pid=10851 comm="syz.2.1658" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.584968][ T29] audit: type=1400 audit(1769217196.862:2701): avc: denied { open } for pid=10851 comm="syz.2.1658" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.609899][T10853] random: crng reseeded on system resumption [ 130.616743][ T8712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.656744][T10856] loop3: detected capacity change from 0 to 1024 [ 130.668984][T10856] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1659: bad orphan inode 134217728 [ 130.682612][T10856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.716095][T10862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27218 sclass=netlink_route_socket pid=10862 comm=syz.2.1660 [ 130.824087][ T29] audit: type=1400 audit(1769217197.122:2702): avc: denied { setopt } for pid=10866 comm="syz.5.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.848345][T10867] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 130.856070][T10867] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 131.112996][ T8712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.152332][T10875] loop3: detected capacity change from 0 to 512 [ 131.183391][T10875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.278417][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'. [ 131.361550][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 131.370458][T10894] netlink: 'syz.0.1671': attribute type 5 has an invalid length. [ 131.378343][T10894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1671'. [ 131.381496][T10894] geneve3: entered promiscuous mode [ 131.392530][T10894] geneve3: entered allmulticast mode [ 131.399771][ T3924] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 131.409352][ T8712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.439660][ T3924] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 131.448753][ T3924] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 131.465052][T10901] FAULT_INJECTION: forcing a failure. [ 131.465052][T10901] name failslab, interval 1, probability 0, space 0, times 0 [ 131.477795][T10901] CPU: 0 UID: 0 PID: 10901 Comm: syz.5.1675 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.477934][T10901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.477947][T10901] Call Trace: [ 131.477953][T10901] [ 131.477960][T10901] __dump_stack+0x1d/0x30 [ 131.477985][T10901] dump_stack_lvl+0x95/0xd0 [ 131.478022][T10901] dump_stack+0x15/0x1b [ 131.478045][T10901] should_fail_ex+0x263/0x280 [ 131.478070][T10901] should_failslab+0x8c/0xb0 [ 131.478136][T10901] __kmalloc_noprof+0xb8/0x580 [ 131.478162][T10901] ? nsim_fib_event_nb+0x246/0xcb0 [ 131.478192][T10901] ? nsim_fib_event_nb+0x1db/0xcb0 [ 131.478282][T10901] nsim_fib_event_nb+0x246/0xcb0 [ 131.478321][T10901] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 131.478354][T10901] atomic_notifier_call_chain+0x76/0x1b0 [ 131.478458][T10901] call_fib_notifiers+0x65/0xa0 [ 131.478503][T10901] call_fib6_notifiers+0x30/0x40 [ 131.478575][T10901] fib6_add_rt2node+0xa7b/0x1830 [ 131.478639][T10901] ? fib6_add_1+0x39b/0xa80 [ 131.478668][T10901] fib6_add+0x5c3/0xe70 [ 131.478704][T10901] ip6_route_add+0xc7/0x170 [ 131.478764][T10901] ipv6_route_ioctl+0x2de/0x310 [ 131.478901][T10901] inet6_ioctl+0x152/0x190 [ 131.478932][T10901] sock_do_ioctl+0x73/0x230 [ 131.478968][T10901] sock_ioctl+0x41b/0x610 [ 131.479004][T10901] ? mutex_lock+0x57/0x90 [ 131.479115][T10901] ? __pfx_sock_ioctl+0x10/0x10 [ 131.479147][T10901] __se_sys_ioctl+0xce/0x140 [ 131.479264][T10901] __x64_sys_ioctl+0x43/0x50 [ 131.479298][T10901] x64_sys_call+0x14b0/0x3000 [ 131.479419][T10901] do_syscall_64+0xc0/0x2a0 [ 131.479452][T10901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.479478][T10901] RIP: 0033:0x7f6ae4b4acb9 [ 131.479531][T10901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.479553][T10901] RSP: 002b:00007f6ae35a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.479577][T10901] RAX: ffffffffffffffda RBX: 00007f6ae4dc5fa0 RCX: 00007f6ae4b4acb9 [ 131.479595][T10901] RDX: 0000200000000040 RSI: 000000000000890b RDI: 0000000000000003 [ 131.479667][T10901] RBP: 00007f6ae35a7090 R08: 0000000000000000 R09: 0000000000000000 [ 131.479721][T10901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.479736][T10901] R13: 00007f6ae4dc6038 R14: 00007f6ae4dc5fa0 R15: 00007ffe16f52628 [ 131.479757][T10901] [ 131.480013][ T3924] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 131.867013][T10929] gretap0: entered promiscuous mode [ 131.872414][T10929] vlan0: entered promiscuous mode [ 131.972119][T10923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1682'. [ 132.000114][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1689'. [ 132.069907][ T29] audit: type=1400 audit(1769217198.362:2703): avc: denied { firmware_load } for pid=10947 comm="syz.6.1692" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 132.123574][ T23] IPVS: starting estimator thread 0... [ 132.181263][T10953] FAULT_INJECTION: forcing a failure. [ 132.181263][T10953] name failslab, interval 1, probability 0, space 0, times 0 [ 132.193933][T10953] CPU: 0 UID: 0 PID: 10953 Comm: syz.3.1694 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.193963][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.193986][T10953] Call Trace: [ 132.193994][T10953] [ 132.194003][T10953] __dump_stack+0x1d/0x30 [ 132.194047][T10953] dump_stack_lvl+0x95/0xd0 [ 132.194070][T10953] dump_stack+0x15/0x1b [ 132.194136][T10953] should_fail_ex+0x263/0x280 [ 132.194161][T10953] should_failslab+0x8c/0xb0 [ 132.194191][T10953] __kmalloc_node_noprof+0xbd/0x590 [ 132.194215][T10953] ? qdisc_alloc+0x65/0x410 [ 132.194237][T10953] qdisc_alloc+0x65/0x410 [ 132.194321][T10953] ? nla_strcmp+0xc3/0xe0 [ 132.194356][T10953] qdisc_create+0xf5/0x9d0 [ 132.194578][T10953] tc_modify_qdisc+0xffc/0x14f0 [ 132.194618][T10953] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 132.194654][T10953] rtnetlink_rcv_msg+0x6a7/0x720 [ 132.194696][T10953] netlink_rcv_skb+0x123/0x220 [ 132.194725][T10953] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.194789][T10953] rtnetlink_rcv+0x1c/0x30 [ 132.194881][T10953] netlink_unicast+0x5c0/0x690 [ 132.194909][T10953] netlink_sendmsg+0x5c8/0x6f0 [ 132.194939][T10953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.195045][T10953] __sock_sendmsg+0x145/0x170 [ 132.195079][T10953] ____sys_sendmsg+0x31e/0x4a0 [ 132.195184][T10953] ___sys_sendmsg+0x195/0x1e0 [ 132.195220][T10953] __x64_sys_sendmsg+0xd4/0x160 [ 132.195253][T10953] x64_sys_call+0x17ba/0x3000 [ 132.195356][T10953] do_syscall_64+0xc0/0x2a0 [ 132.195387][T10953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.195531][T10953] RIP: 0033:0x7fc24899acb9 [ 132.195550][T10953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.195570][T10953] RSP: 002b:00007fc2473f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.195595][T10953] RAX: ffffffffffffffda RBX: 00007fc248c15fa0 RCX: 00007fc24899acb9 [ 132.195611][T10953] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 132.195626][T10953] RBP: 00007fc2473f7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.195642][T10953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.195656][T10953] R13: 00007fc248c16038 R14: 00007fc248c15fa0 R15: 00007fff1a797fd8 [ 132.195676][T10953] [ 132.425302][T10949] IPVS: using max 2544 ests per chain, 127200 per kthread [ 132.495404][T10967] gretap0: entered promiscuous mode [ 132.509241][T10964] netlink: 17023 bytes leftover after parsing attributes in process `syz.5.1699'. [ 132.509693][T10967] vlan2: entered promiscuous mode [ 132.664079][T10980] loop3: detected capacity change from 0 to 512 [ 132.717937][T10980] EXT4-fs (loop3): 1 orphan inode deleted [ 132.734067][ T268] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 132.743888][ T268] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 132.756071][T10980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.779123][T10989] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1705'. [ 132.803241][T10980] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.825639][ T8712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.922329][T11003] SELinux: Context ›Y7»ôj [ 132.922329][T11003] u/$2SÙŸ»2'´ƒk€s2- vj×džÃ û#ž»œ,ÙN< [ 132.922329][T11003] :æºE]Yù´\?˜ͼ•=ê¯Ù‹1ÛKI‹À­ßÇäî‚kÎé°{kL^‰—ù0¦óýÒë}å4nšrº }–¢ÏpįÚ¥›ÙN»wŸ‚Þyxiu?+ëþÑý½ÜH~›ö»F¦–ý1ùW¤¹÷jm &8›UÛ‚VŠƒß‹œNÃ’œ2ù)GxÆVÔ%‘5œõxeRM4r4c¥îÿJsÏHU&Ÿ“ä§'p…Œ2EMMàk&‰Îc«bUƒÎÈ,ä,ÏÖÝÁâÂfÓ@Õï8¿ÅøœÎœ¶bÁˆD™¨%$¬œÓfÚ=½š¾÷8®@ì§k¤I|íþ€w íOç£x&KCH;ÁÝx-ÍK³²oå is not valid (left unmapped). [ 132.963434][T11003] SELinux: Context *mþkXI·Æ$h·x4Û«½K• is not valid (left unmapped). [ 132.971752][T11003] SELinux: Context 5¶}“¨M3ëpÿX:¦Ü]žQ?×ðÖ§á¡p©ý is not valid (left unmapped). [ 132.983215][ T23] IPVS: starting estimator thread 0... [ 133.068538][T11013] loop3: detected capacity change from 0 to 1024 [ 133.085367][T11004] IPVS: using max 2352 ests per chain, 117600 per kthread [ 133.112276][T11013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.130796][T11013] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.152650][T11006] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.1711: inode has both inline data and extents flags [ 133.168160][T11006] EXT4-fs (loop3): Remounting filesystem read-only [ 133.178981][ T29] audit: type=1400 audit(1769217199.472:2704): avc: denied { bind } for pid=11005 comm="syz.3.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.179127][T11006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1711'. [ 133.236995][ T8712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.545821][T11036] loop3: detected capacity change from 0 to 2048 [ 133.578625][T11036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.653840][T11036] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 133.817266][T11056] loop2: detected capacity change from 0 to 512 [ 133.832986][T11056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.845905][T11056] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.941841][ T9129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.972719][T11065] loop2: detected capacity change from 0 to 1024 [ 133.996171][T11065] EXT4-fs: Ignoring removed orlov option [ 134.012527][T11065] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.1728: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 134.055492][T11065] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.1728: Bad quota inode: 4, type: 1 [ 134.066661][T11065] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 134.081439][T11065] EXT4-fs (loop2): mount failed [ 134.087201][T11072] netlink: 'syz.5.1730': attribute type 1 has an invalid length. [ 134.095004][T11072] netlink: 'syz.5.1730': attribute type 2 has an invalid length. [ 134.150422][T11078] tipc: Started in network mode [ 134.155445][T11078] tipc: Node identity 7f000001, cluster identity 4711 [ 134.162988][T11078] tipc: Enabled bearer , priority 10 [ 134.464463][T11042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.474703][ T268] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.532700][ T268] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.603185][ T268] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.655505][ T268] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.746255][T11098] chnl_net:caif_netlink_parms(): no params data found [ 134.767903][ T268] bridge_slave_0: left allmulticast mode [ 134.773632][ T268] bridge_slave_0: left promiscuous mode [ 134.779279][ T268] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.800381][T11110] netlink: 'syz.6.1741': attribute type 7 has an invalid length. [ 134.895836][ T268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.906528][ T268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.916540][ T268] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 134.926510][ T268] bond0 (unregistering): Released all slaves [ 134.942878][T11110] netlink: 'syz.6.1741': attribute type 7 has an invalid length. [ 134.975285][ T268] hsr_slave_0: left promiscuous mode [ 134.999060][ T268] hsr_slave_1: left promiscuous mode [ 135.013109][ T268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.020499][ T268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.059539][ T29] audit: type=1400 audit(1769217201.352:2705): avc: denied { listen } for pid=11120 comm="syz.5.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 135.079098][ T29] audit: type=1400 audit(1769217201.352:2706): avc: denied { connect } for pid=11120 comm="syz.5.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 135.110354][ T268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.117859][ T268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.164726][ T268] veth1_macvtap: left promiscuous mode [ 135.170237][ T268] veth0_macvtap: left promiscuous mode [ 135.203738][ T268] veth1_vlan: left promiscuous mode [ 135.215988][ T268] veth0_vlan: left promiscuous mode [ 135.362444][ T268] team0 (unregistering): Port device team_slave_1 removed [ 135.375777][ T268] team0 (unregistering): Port device team_slave_0 removed [ 135.414867][ T2972] tipc: Node number set to 2130706433 [ 135.443424][T11138] tipc: Started in network mode [ 135.448319][T11138] tipc: Node identity , cluster identity 4711 [ 135.454464][T11138] tipc: Failed to obtain node identity [ 135.459913][T11138] tipc: Enabling of bearer rejected, failed to enable media [ 135.476317][T11158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27218 sclass=netlink_route_socket pid=11158 comm=syz.5.1752 [ 135.481113][T11155] dummy0: entered promiscuous mode [ 135.501310][T11155] vlan2: entered promiscuous mode [ 135.528875][T11098] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.536125][T11098] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.582914][T11098] bridge_slave_0: entered allmulticast mode [ 135.599312][T11098] bridge_slave_0: entered promiscuous mode [ 135.626529][T11098] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.633678][T11098] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.675270][T11098] bridge_slave_1: entered allmulticast mode [ 135.687466][T11098] bridge_slave_1: entered promiscuous mode [ 135.730540][T11098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.757974][T11180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.774199][ T268] IPVS: stop unused estimator thread 0... [ 135.813864][T11098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.847211][T11180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.863049][T11098] team0: Port device team_slave_0 added [ 135.869572][T11184] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 135.869741][T11098] team0: Port device team_slave_1 added [ 135.923159][T11098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.930218][T11098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.956196][T11098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.983558][T11098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.990569][T11098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.016780][T11098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.074730][T11098] hsr_slave_0: entered promiscuous mode [ 136.081121][T11098] hsr_slave_1: entered promiscuous mode [ 136.087099][T11098] debugfs: 'hsr0' already exists in 'hsr' [ 136.092956][T11098] Cannot create hsr debugfs directory [ 136.135418][T11206] __nla_validate_parse: 4 callbacks suppressed [ 136.135435][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1759'. [ 136.177961][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'. [ 136.262665][T11219] dummy0: entered promiscuous mode [ 136.280057][T11219] vlan0: entered promiscuous mode [ 136.459221][T11098] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 136.487599][T11098] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 136.507027][T11098] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 136.524234][T11098] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.611985][T11098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.641745][T11098] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.661698][ T268] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.668778][ T268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.709291][T11098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.719766][T11098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.775418][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.782539][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.861223][ T29] audit: type=1400 audit(1769217203.152:2707): avc: denied { append } for pid=11287 comm="syz.2.1770" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.894946][T11296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27218 sclass=netlink_route_socket pid=11296 comm=syz.6.1769 [ 136.942925][T11098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.980851][ T29] audit: type=1400 audit(1769217203.272:2708): avc: denied { setopt } for pid=11297 comm="syz.5.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.249029][T11098] veth0_vlan: entered promiscuous mode [ 137.271980][T11098] veth1_vlan: entered promiscuous mode [ 137.294739][T11098] veth0_macvtap: entered promiscuous mode [ 137.313560][T11098] veth1_macvtap: entered promiscuous mode [ 137.334216][T11098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.348163][T11098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.374648][ T268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.395262][ T268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.413762][ T29] audit: type=1400 audit(1769217203.712:2709): avc: denied { mount } for pid=11098 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 137.429533][ T268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.496846][ T268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.578200][ T29] audit: type=1400 audit(1769217203.872:2710): avc: denied { getopt } for pid=11352 comm="syz.6.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.612159][T11349] loop4: detected capacity change from 0 to 512 [ 137.635205][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1778'. [ 137.669065][ T29] audit: type=1400 audit(1769217203.872:2711): avc: denied { accept } for pid=11352 comm="syz.6.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 137.689580][ T29] audit: type=1326 audit(1769217203.922:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.6.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec26afacb9 code=0x7ffc0000 [ 137.703225][T11357] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 137.713169][ T29] audit: type=1326 audit(1769217203.922:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.6.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec26afacb9 code=0x7ffc0000 [ 137.743762][ T29] audit: type=1326 audit(1769217203.932:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.6.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec26afacb9 code=0x7ffc0000 [ 137.781038][T11370] loop2: detected capacity change from 0 to 512 [ 137.869309][T11380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.879473][T11370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.901989][T11349] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1776: inode has both inline data and extents flags [ 137.908940][T11380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.954689][T11349] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1776: couldn't read orphan inode 15 (err -117) [ 137.968139][ T9129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.981892][T11349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.020762][T11385] batadv_slave_1: entered promiscuous mode [ 138.027661][T11383] batadv_slave_1: left promiscuous mode [ 138.055073][T11387] loop2: detected capacity change from 0 to 1024 [ 138.217257][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1789'. [ 138.412567][T11444] netlink: 'syz.6.1796': attribute type 2 has an invalid length. [ 138.482220][T11453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.496331][T11453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.643549][T11475] FAULT_INJECTION: forcing a failure. [ 138.643549][T11475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.656684][T11475] CPU: 0 UID: 0 PID: 11475 Comm: syz.0.1802 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.656723][T11475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.656739][T11475] Call Trace: [ 138.656747][T11475] [ 138.656756][T11475] __dump_stack+0x1d/0x30 [ 138.656785][T11475] dump_stack_lvl+0x95/0xd0 [ 138.656881][T11475] dump_stack+0x15/0x1b [ 138.656905][T11475] should_fail_ex+0x263/0x280 [ 138.656928][T11475] should_fail+0xb/0x20 [ 138.656949][T11475] should_fail_usercopy+0x1a/0x20 [ 138.656992][T11475] _copy_from_user+0x1c/0xb0 [ 138.657023][T11475] copy_clone_args_from_user+0x151/0x500 [ 138.657118][T11475] ? kstrtouint+0x76/0xc0 [ 138.657156][T11475] __se_sys_clone3+0x79/0x230 [ 138.657185][T11475] __x64_sys_clone3+0x31/0x40 [ 138.657207][T11475] x64_sys_call+0x2c0f/0x3000 [ 138.657281][T11475] do_syscall_64+0xc0/0x2a0 [ 138.657370][T11475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.657395][T11475] RIP: 0033:0x7f94f96cacb9 [ 138.657413][T11475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.657435][T11475] RSP: 002b:00007f94f8126ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 138.657529][T11475] RAX: ffffffffffffffda RBX: 00000000000000a0 RCX: 00007f94f96cacb9 [ 138.657546][T11475] RDX: 00007f94f8126f10 RSI: 00000000000000a0 RDI: 00007f94f8126f10 [ 138.657563][T11475] RBP: 00007f94f8127090 R08: 0000000000000000 R09: 00000000000000a0 [ 138.657579][T11475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.657663][T11475] R13: 00007f94f9946038 R14: 00007f94f9945fa0 R15: 00007ffc8c02ac58 [ 138.657682][T11475] [ 138.867843][T11482] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1804'. [ 138.876880][T11482] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1804'. [ 139.181637][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1814'. [ 139.190646][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1814'. [ 139.240297][T11530] random: crng reseeded on system resumption [ 139.256076][T11541] dummy0: entered promiscuous mode [ 139.261860][T11541] vlan2: entered promiscuous mode [ 139.282207][T11530] Restarting kernel threads ... [ 139.295339][T11530] Done restarting kernel threads. [ 139.318462][T11530] FAULT_INJECTION: forcing a failure. [ 139.318462][T11530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.331649][T11530] CPU: 0 UID: 0 PID: 11530 Comm: syz.5.1814 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.331745][T11530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.331758][T11530] Call Trace: [ 139.331764][T11530] [ 139.331771][T11530] __dump_stack+0x1d/0x30 [ 139.331815][T11530] dump_stack_lvl+0x95/0xd0 [ 139.331838][T11530] dump_stack+0x15/0x1b [ 139.331876][T11530] should_fail_ex+0x263/0x280 [ 139.331901][T11530] should_fail+0xb/0x20 [ 139.331936][T11530] should_fail_usercopy+0x1a/0x20 [ 139.331961][T11530] _copy_from_iter+0xcf/0xea0 [ 139.332068][T11530] ? __alloc_skb+0x397/0x4b0 [ 139.332090][T11530] ? __alloc_skb+0x219/0x4b0 [ 139.332113][T11530] netlink_sendmsg+0x4ae/0x6f0 [ 139.332145][T11530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.332251][T11530] __sock_sendmsg+0x145/0x170 [ 139.332283][T11530] ____sys_sendmsg+0x31e/0x4a0 [ 139.332310][T11530] ___sys_sendmsg+0x195/0x1e0 [ 139.332430][T11530] __x64_sys_sendmsg+0xd4/0x160 [ 139.332462][T11530] x64_sys_call+0x17ba/0x3000 [ 139.332530][T11530] do_syscall_64+0xc0/0x2a0 [ 139.332582][T11530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.332609][T11530] RIP: 0033:0x7f6ae4b4acb9 [ 139.332645][T11530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.332747][T11530] RSP: 002b:00007f6ae35a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.332767][T11530] RAX: ffffffffffffffda RBX: 00007f6ae4dc5fa0 RCX: 00007f6ae4b4acb9 [ 139.332781][T11530] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 000000000000000b [ 139.332794][T11530] RBP: 00007f6ae35a7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.332807][T11530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.332882][T11530] R13: 00007f6ae4dc6038 R14: 00007f6ae4dc5fa0 R15: 00007ffe16f52628 [ 139.332903][T11530] [ 139.693044][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 139.718331][T11574] sctp: [Deprecated]: syz.2.1822 (pid 11574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.718331][T11574] Use struct sctp_sack_info instead [ 139.846165][T11588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.855698][T11588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.875964][T11590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.901800][T11590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.976794][T11590] loop2: detected capacity change from 0 to 512 [ 140.042316][T11590] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1827: inode has both inline data and extents flags [ 140.061064][T11590] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1827: couldn't read orphan inode 15 (err -117) [ 140.093705][T11590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.145001][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 140.145017][ T29] audit: type=1326 audit(1769217206.442:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.5.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 140.174979][ T29] audit: type=1326 audit(1769217206.442:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.5.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 140.198508][ T29] audit: type=1326 audit(1769217206.442:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.5.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 140.222019][ T29] audit: type=1326 audit(1769217206.442:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.5.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 140.245762][ T29] audit: type=1326 audit(1769217206.442:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.5.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 140.269490][ T29] audit: type=1326 audit(1769217206.442:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.5.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 140.293392][ T29] audit: type=1326 audit(1769217206.442:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.5.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 140.316933][ T29] audit: type=1326 audit(1769217206.442:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.5.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 140.340410][ T29] audit: type=1326 audit(1769217206.442:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.5.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 140.364334][ T29] audit: type=1326 audit(1769217206.482:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11601 comm="syz.5.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 140.487356][T11610] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1832'. [ 140.801631][T11568] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.890102][T11621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=11621 comm=syz.0.1838 [ 140.921032][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 140.958134][T11628] FAULT_INJECTION: forcing a failure. [ 140.958134][T11628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.971705][T11628] CPU: 1 UID: 60929 PID: 11628 Comm: syz.0.1840 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.971750][T11628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.971814][T11628] Call Trace: [ 140.971821][T11628] [ 140.971830][T11628] __dump_stack+0x1d/0x30 [ 140.971857][T11628] dump_stack_lvl+0x95/0xd0 [ 140.971937][T11628] dump_stack+0x15/0x1b [ 140.971960][T11628] should_fail_ex+0x263/0x280 [ 140.971985][T11628] should_fail+0xb/0x20 [ 140.972005][T11628] should_fail_usercopy+0x1a/0x20 [ 140.972035][T11628] _copy_to_user+0x20/0xa0 [ 140.972061][T11628] simple_read_from_buffer+0xb5/0x130 [ 140.972143][T11628] proc_fail_nth_read+0x10e/0x150 [ 140.972176][T11628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.972206][T11628] vfs_read+0x1ab/0x7f0 [ 140.972294][T11628] ? ksys_read+0x56/0x1a0 [ 140.972328][T11628] ksys_read+0xdc/0x1a0 [ 140.972364][T11628] __x64_sys_read+0x40/0x50 [ 140.972457][T11628] x64_sys_call+0x2889/0x3000 [ 140.972485][T11628] do_syscall_64+0xc0/0x2a0 [ 140.972530][T11628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.972587][T11628] RIP: 0033:0x7f94f968b58e [ 140.972606][T11628] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.972625][T11628] RSP: 002b:00007f94f8126fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.972645][T11628] RAX: ffffffffffffffda RBX: 00007f94f81276c0 RCX: 00007f94f968b58e [ 140.972728][T11628] RDX: 000000000000000f RSI: 00007f94f81270a0 RDI: 000000000000000b [ 140.972741][T11628] RBP: 00007f94f8127090 R08: 0000000000000000 R09: 0000000000000000 [ 140.972767][T11628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.972780][T11628] R13: 00007f94f9946038 R14: 00007f94f9945fa0 R15: 00007ffc8c02ac58 [ 140.972799][T11628] [ 141.342228][T11649] FAULT_INJECTION: forcing a failure. [ 141.342228][T11649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.355386][T11649] CPU: 0 UID: 0 PID: 11649 Comm: syz.0.1847 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.355415][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.355462][T11649] Call Trace: [ 141.355469][T11649] [ 141.355476][T11649] __dump_stack+0x1d/0x30 [ 141.355503][T11649] dump_stack_lvl+0x95/0xd0 [ 141.355525][T11649] dump_stack+0x15/0x1b [ 141.355545][T11649] should_fail_ex+0x263/0x280 [ 141.355569][T11649] should_fail+0xb/0x20 [ 141.355595][T11649] should_fail_usercopy+0x1a/0x20 [ 141.355633][T11649] _copy_to_user+0x20/0xa0 [ 141.355658][T11649] simple_read_from_buffer+0xb5/0x130 [ 141.355691][T11649] proc_fail_nth_read+0x10e/0x150 [ 141.355786][T11649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.355816][T11649] vfs_read+0x1ab/0x7f0 [ 141.355859][T11649] ? __rcu_read_unlock+0x4e/0x70 [ 141.355935][T11649] ? __fget_files+0x184/0x1c0 [ 141.355960][T11649] ? mutex_lock+0x57/0x90 [ 141.355994][T11649] ksys_read+0xdc/0x1a0 [ 141.356029][T11649] __x64_sys_read+0x40/0x50 [ 141.356109][T11649] x64_sys_call+0x2889/0x3000 [ 141.356134][T11649] do_syscall_64+0xc0/0x2a0 [ 141.356164][T11649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.356187][T11649] RIP: 0033:0x7f94f968b58e [ 141.356203][T11649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 141.356254][T11649] RSP: 002b:00007f94f8126fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.356277][T11649] RAX: ffffffffffffffda RBX: 00007f94f81276c0 RCX: 00007f94f968b58e [ 141.356293][T11649] RDX: 000000000000000f RSI: 00007f94f81270a0 RDI: 0000000000000003 [ 141.356309][T11649] RBP: 00007f94f8127090 R08: 0000000000000000 R09: 0000000000000000 [ 141.356361][T11649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.356376][T11649] R13: 00007f94f9946038 R14: 00007f94f9945fa0 R15: 00007ffc8c02ac58 [ 141.356399][T11649] [ 141.586894][T11652] netlink: 'syz.0.1848': attribute type 4 has an invalid length. [ 141.594706][T11652] __nla_validate_parse: 2 callbacks suppressed [ 141.594722][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1848'. [ 141.891472][T11662] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1853'. [ 141.910733][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1853'. [ 141.949956][T11662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=11662 comm=syz.6.1853 [ 141.999485][T11647] 9p: Unknown access argument 18446744073709551615: -34 [ 142.071890][T11679] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 142.131079][T11682] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1860'. [ 142.159312][T11689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1862'. [ 142.169356][T11690] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 142.210864][T11694] xt_CT: No such helper "snmp_trap" [ 142.452155][T11707] tipc: Started in network mode [ 142.457182][T11707] tipc: Node identity , cluster identity 4711 [ 142.463374][T11707] tipc: Failed to obtain node identity [ 142.468817][T11707] tipc: Enabling of bearer rejected, failed to enable media [ 142.558913][T11714] bond4: entered promiscuous mode [ 142.567541][T11714] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.585947][T11714] bridge3: entered promiscuous mode [ 142.729702][T11722] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 142.790321][T11677] syz.4.1859 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 142.804508][T11677] CPU: 0 UID: 0 PID: 11677 Comm: syz.4.1859 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.804537][T11677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.804553][T11677] Call Trace: [ 142.804562][T11677] [ 142.804571][T11677] __dump_stack+0x1d/0x30 [ 142.804596][T11677] dump_stack_lvl+0x95/0xd0 [ 142.804783][T11677] dump_stack+0x15/0x1b [ 142.804805][T11677] dump_header+0x80/0x240 [ 142.804829][T11677] oom_kill_process+0x295/0x350 [ 142.804850][T11677] out_of_memory+0x97d/0xb80 [ 142.804928][T11677] try_charge_memcg+0x62e/0xa10 [ 142.805028][T11677] obj_cgroup_charge_pages+0xa6/0x150 [ 142.805081][T11677] __memcg_kmem_charge_page+0x9e/0x170 [ 142.805114][T11677] __alloc_frozen_pages_noprof+0x18a/0x350 [ 142.805148][T11677] alloc_pages_mpol+0xb3/0x260 [ 142.805177][T11677] alloc_pages_noprof+0x8f/0x130 [ 142.805283][T11677] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 142.805322][T11677] __kvmalloc_node_noprof+0x471/0x680 [ 142.805418][T11677] ? ip_set_alloc+0x24/0x30 [ 142.805445][T11677] ? ip_set_alloc+0x24/0x30 [ 142.805473][T11677] ? __slab_alloc+0x25/0x50 [ 142.805533][T11677] ip_set_alloc+0x24/0x30 [ 142.805590][T11677] hash_netiface_create+0x282/0x740 [ 142.805619][T11677] ? __pfx_hash_netiface_create+0x10/0x10 [ 142.805651][T11677] ip_set_create+0x3cf/0x970 [ 142.805826][T11677] ? __nla_parse+0x40/0x60 [ 142.805850][T11677] nfnetlink_rcv_msg+0x509/0x5d0 [ 142.805892][T11677] netlink_rcv_skb+0x123/0x220 [ 142.805922][T11677] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 142.805989][T11677] nfnetlink_rcv+0x167/0x1720 [ 142.806015][T11677] ? __kfree_skb+0x109/0x150 [ 142.806039][T11677] ? nlmon_xmit+0x4f/0x60 [ 142.806118][T11677] ? consume_skb+0x49/0x140 [ 142.806141][T11677] ? nlmon_xmit+0x4f/0x60 [ 142.806159][T11677] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 142.806184][T11677] ? __dev_queue_xmit+0x139a/0x1f20 [ 142.806223][T11677] ? __dev_queue_xmit+0x148/0x1f20 [ 142.806253][T11677] ? ref_tracker_free+0x37d/0x3e0 [ 142.806278][T11677] ? __netlink_deliver_tap+0x4dc/0x500 [ 142.806331][T11677] netlink_unicast+0x5c0/0x690 [ 142.806359][T11677] netlink_sendmsg+0x5c8/0x6f0 [ 142.806466][T11677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.806495][T11677] __sock_sendmsg+0x145/0x170 [ 142.806580][T11677] ____sys_sendmsg+0x31e/0x4a0 [ 142.806632][T11677] ___sys_sendmsg+0x195/0x1e0 [ 142.806665][T11677] __x64_sys_sendmsg+0xd4/0x160 [ 142.806697][T11677] x64_sys_call+0x17ba/0x3000 [ 142.806727][T11677] do_syscall_64+0xc0/0x2a0 [ 142.806789][T11677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.806863][T11677] RIP: 0033:0x7fb8ddc9acb9 [ 142.806879][T11677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.806897][T11677] RSP: 002b:00007fb8dc6f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.806917][T11677] RAX: ffffffffffffffda RBX: 00007fb8ddf15fa0 RCX: 00007fb8ddc9acb9 [ 142.806988][T11677] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 142.807001][T11677] RBP: 00007fb8ddd08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 142.807014][T11677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.807027][T11677] R13: 00007fb8ddf16038 R14: 00007fb8ddf15fa0 R15: 00007ffdb36295d8 [ 142.807046][T11677] [ 142.807053][T11677] memory: usage 307200kB, limit 307200kB, failcnt 4820 [ 143.136252][T11677] memory+swap: usage 307620kB, limit 9007199254740988kB, failcnt 0 [ 143.144242][T11677] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 143.151581][T11677] Memory cgroup stats for /syz4: [ 143.151959][T11677] cache 4096 [ 143.160094][T11677] rss 4096 [ 143.163455][T11677] shmem 0 [ 143.166387][T11677] mapped_file 0 [ 143.169831][T11677] dirty 0 [ 143.173075][T11677] writeback 0 [ 143.176360][T11677] workingset_refault_anon 89 [ 143.181053][T11677] workingset_refault_file 3124 [ 143.185810][T11677] swap 430080 [ 143.189102][T11677] swapcached 8192 [ 143.192802][T11677] pgpgin 138871 [ 143.196286][T11677] pgpgout 138867 [ 143.199807][T11677] pgfault 85794 [ 143.203293][T11677] pgmajfault 44 [ 143.206737][T11677] inactive_anon 4096 [ 143.210961][T11677] active_anon 4096 [ 143.214684][T11677] inactive_file 8192 [ 143.218550][T11677] active_file 0 [ 143.222073][T11677] unevictable 0 [ 143.225532][T11677] hierarchical_memory_limit 314572800 [ 143.230929][T11677] hierarchical_memsw_limit 9223372036854771712 [ 143.237141][T11677] total_cache 4096 [ 143.241285][T11677] total_rss 4096 [ 143.244894][T11677] total_shmem 0 [ 143.248342][T11677] total_mapped_file 0 [ 143.252454][T11677] total_dirty 0 [ 143.255913][T11677] total_writeback 0 [ 143.259746][T11677] total_workingset_refault_anon 89 [ 143.264997][T11677] total_workingset_refault_file 3124 [ 143.270272][T11677] total_swap 430080 [ 143.274178][T11677] total_swapcached 8192 [ 143.278328][T11677] total_pgpgin 138871 [ 143.282324][T11677] total_pgpgout 138867 [ 143.286397][T11677] total_pgfault 85794 [ 143.290358][T11677] total_pgmajfault 44 [ 143.294381][T11677] total_inactive_anon 4096 [ 143.298783][T11677] total_active_anon 4096 [ 143.303076][T11677] total_inactive_file 8192 [ 143.307481][T11677] total_active_file 0 [ 143.311532][T11677] total_unevictable 0 [ 143.315528][T11677] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1859,pid=11676,uid=0 [ 143.330241][T11677] Memory cgroup out of memory: Killed process 11676 (syz.4.1859) total-vm:93928kB, anon-rss:1200kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 143.418767][T11739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27218 sclass=netlink_route_socket pid=11739 comm=syz.2.1881 [ 143.554986][T11750] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 143.643979][ T2260] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.683657][ T2260] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.755066][ T2260] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.806215][ T2260] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.883492][ T2260] bridge_slave_1: left allmulticast mode [ 143.889187][ T2260] bridge_slave_1: left promiscuous mode [ 143.894927][ T2260] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.920087][ T2260] bridge_slave_0: left allmulticast mode [ 143.925789][ T2260] bridge_slave_0: left promiscuous mode [ 143.931604][ T2260] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.014887][ T2260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.024529][ T2260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.034292][ T2260] bond0 (unregistering): Released all slaves [ 144.041985][ T2260] bond1 (unregistering): Released all slaves [ 144.075381][ T2260] hsr_slave_0: left promiscuous mode [ 144.083864][ T2260] hsr_slave_1: left promiscuous mode [ 144.089890][ T2260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.097420][ T2260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.105277][ T2260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.112837][ T2260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.125593][ T2260] veth1_macvtap: left promiscuous mode [ 144.135787][ T2260] veth0_macvtap: left promiscuous mode [ 144.146149][ T2260] veth1_vlan: left promiscuous mode [ 144.152932][ T2260] veth0_vlan: left promiscuous mode [ 144.207987][ T2260] pim6reg (unregistering): left allmulticast mode [ 144.249718][ T2260] team0 (unregistering): Port device team_slave_1 removed [ 144.260485][ T2260] team0 (unregistering): Port device team_slave_0 removed [ 144.280910][ C1] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 144.432132][T11811] netlink: 'syz.4.1899': attribute type 4 has an invalid length. [ 145.040764][T11912] netlink: 32737 bytes leftover after parsing attributes in process `syz.2.1918'. [ 145.523597][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'. [ 145.548889][T11950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.593594][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 145.593610][ T29] audit: type=1400 audit(1769217211.892:2968): avc: denied { create } for pid=11959 comm="syz.5.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 145.622224][T11960] 8021q: VLANs not supported on vcan0 [ 145.628806][ T29] audit: type=1400 audit(1769217211.892:2969): avc: denied { name_bind } for pid=11961 comm="syz.0.1924" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 145.650747][ T29] audit: type=1400 audit(1769217211.892:2970): avc: denied { node_bind } for pid=11961 comm="syz.0.1924" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 145.673765][ T29] audit: type=1400 audit(1769217211.952:2971): avc: denied { create } for pid=11963 comm="syz.0.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.720526][ T29] audit: type=1400 audit(1769217212.012:2972): avc: denied { setopt } for pid=11965 comm="syz.0.1926" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.767508][T11971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27218 sclass=netlink_route_socket pid=11971 comm=syz.5.1929 [ 145.770902][ T29] audit: type=1400 audit(1769217212.042:2973): avc: denied { map_create } for pid=11967 comm="syz.5.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 145.799870][ T29] audit: type=1400 audit(1769217212.052:2974): avc: denied { map_read map_write } for pid=11967 comm="syz.5.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 145.841007][ T29] audit: type=1400 audit(1769217212.122:2975): avc: denied { create } for pid=11969 comm="syz.0.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 145.860655][ T29] audit: type=1400 audit(1769217212.122:2976): avc: denied { getopt } for pid=11969 comm="syz.0.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 145.880236][ T29] audit: type=1400 audit(1769217212.122:2977): avc: denied { ioctl } for pid=11969 comm="syz.0.1928" path="socket:[34934]" dev="sockfs" ino=34934 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.996772][T12070] FAULT_INJECTION: forcing a failure. [ 146.996772][T12070] name failslab, interval 1, probability 0, space 0, times 0 [ 147.009477][T12070] CPU: 0 UID: 0 PID: 12070 Comm: syz.2.1948 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.009554][T12070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.009563][T12070] Call Trace: [ 147.009568][T12070] [ 147.009573][T12070] __dump_stack+0x1d/0x30 [ 147.009589][T12070] dump_stack_lvl+0x95/0xd0 [ 147.009602][T12070] dump_stack+0x15/0x1b [ 147.009730][T12070] should_fail_ex+0x263/0x280 [ 147.009774][T12070] should_failslab+0x8c/0xb0 [ 147.009788][T12070] kmem_cache_alloc_noprof+0x68/0x490 [ 147.009801][T12070] ? skb_clone+0x151/0x1f0 [ 147.009824][T12070] skb_clone+0x151/0x1f0 [ 147.009838][T12070] packet_rcv+0x3c4/0xab0 [ 147.009857][T12070] ? __pfx_packet_rcv+0x10/0x10 [ 147.009944][T12070] deliver_skb+0xee/0x160 [ 147.009965][T12070] __netif_receive_skb_core+0x139b/0x1950 [ 147.009983][T12070] ? __rcu_read_unlock+0x4e/0x70 [ 147.010000][T12070] ? tun_rx_batched+0xd1/0x440 [ 147.010052][T12070] __netif_receive_skb+0x59/0x270 [ 147.010069][T12070] ? tun_rx_batched+0xd1/0x440 [ 147.010082][T12070] netif_receive_skb+0x4b/0x2d0 [ 147.010161][T12070] ? should_failslab+0x8c/0xb0 [ 147.010174][T12070] ? tun_rx_batched+0xd1/0x440 [ 147.010264][T12070] tun_rx_batched+0x106/0x440 [ 147.010277][T12070] ? eth_type_trans+0x324/0x3d0 [ 147.010295][T12070] tun_get_user+0x2011/0x27c0 [ 147.010371][T12070] ? ref_tracker_alloc+0x1f2/0x2f0 [ 147.010386][T12070] tun_chr_write_iter+0x15e/0x210 [ 147.010434][T12070] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 147.010456][T12070] vfs_write+0x5a6/0x9f0 [ 147.010545][T12070] ksys_write+0xdc/0x1a0 [ 147.010557][T12070] __x64_sys_write+0x40/0x50 [ 147.010568][T12070] x64_sys_call+0x2847/0x3000 [ 147.010583][T12070] do_syscall_64+0xc0/0x2a0 [ 147.010653][T12070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.010667][T12070] RIP: 0033:0x7f3b415bb58e [ 147.010678][T12070] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 147.010736][T12070] RSP: 002b:00007f3b40056fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 147.010802][T12070] RAX: ffffffffffffffda RBX: 00007f3b400576c0 RCX: 00007f3b415bb58e [ 147.010819][T12070] RDX: 0000000000000066 RSI: 0000200000000080 RDI: 00000000000000c8 [ 147.010896][T12070] RBP: 00007f3b40057090 R08: 0000000000000000 R09: 0000000000000000 [ 147.010911][T12070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.010924][T12070] R13: 00007f3b41876038 R14: 00007f3b41875fa0 R15: 00007ffe9ce480b8 [ 147.010945][T12070] [ 147.279300][T12074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27218 sclass=netlink_route_socket pid=12074 comm=syz.0.1949 [ 147.312139][T12079] 8021q: VLANs not supported on vcan0 [ 147.368463][T12087] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1954'. [ 147.390148][T12087] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12087 comm=syz.5.1954 [ 147.413672][T12088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12088 comm=syz.4.1952 [ 147.473954][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1952'. [ 147.636261][T12112] team_slave_0: entered promiscuous mode [ 147.641953][T12112] team_slave_1: entered promiscuous mode [ 147.652853][T12112] vlan2: entered promiscuous mode [ 147.657963][T12112] team0: entered promiscuous mode [ 147.789338][T12129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27218 sclass=netlink_route_socket pid=12129 comm=syz.0.1971 [ 147.803932][T12131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1973'. [ 147.927148][T12142] tipc: Started in network mode [ 147.932050][T12142] tipc: Node identity , cluster identity 4711 [ 147.938146][T12142] tipc: Failed to obtain node identity [ 147.943830][T12142] tipc: Enabling of bearer rejected, failed to enable media [ 148.128229][T12158] vlan2: entered promiscuous mode [ 148.160326][T12164] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.208437][T12168] xt_hashlimit: invalid interval [ 148.350716][T12174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1987'. [ 148.419075][T12176] tipc: Started in network mode [ 148.423995][T12176] tipc: Node identity , cluster identity 4711 [ 148.430074][T12176] tipc: Failed to obtain node identity [ 148.435571][T12176] tipc: Enabling of bearer rejected, failed to enable media [ 148.731358][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1998'. [ 148.769829][T12203] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1998'. [ 148.836321][T12211] netlink: 'syz.2.2000': attribute type 30 has an invalid length. [ 148.879771][T12211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2000'. [ 148.896594][T12205] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1999'. [ 148.949395][T12212] netlink: 'syz.5.1997': attribute type 21 has an invalid length. [ 148.973872][T12212] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1997'. [ 148.983158][T12212] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1997'. [ 149.343198][T12236] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12236 comm=syz.2.2009 [ 149.388209][T12239] vlan2: entered promiscuous mode [ 149.482037][T12245] veth1_to_bond: entered allmulticast mode [ 149.497170][T12244] veth1_to_bond: left allmulticast mode [ 149.554592][T12252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.563575][T12252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.632398][T12255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.643775][T12255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.762785][T12266] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=12266 comm=syz.4.2021 [ 149.862743][T12274] tipc: Started in network mode [ 149.867630][T12274] tipc: Node identity , cluster identity 4711 [ 149.873766][T12274] tipc: Failed to obtain node identity [ 149.879251][T12274] tipc: Enabling of bearer rejected, failed to enable media [ 149.964128][T12284] FAULT_INJECTION: forcing a failure. [ 149.964128][T12284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.977401][T12284] CPU: 0 UID: 0 PID: 12284 Comm: syz.4.2024 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.977450][T12284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.977463][T12284] Call Trace: [ 149.977469][T12284] [ 149.977476][T12284] __dump_stack+0x1d/0x30 [ 149.977504][T12284] dump_stack_lvl+0x95/0xd0 [ 149.977601][T12284] dump_stack+0x15/0x1b [ 149.977624][T12284] should_fail_ex+0x263/0x280 [ 149.977649][T12284] should_fail+0xb/0x20 [ 149.977747][T12284] should_fail_usercopy+0x1a/0x20 [ 149.977773][T12284] _copy_from_user+0x1c/0xb0 [ 149.977823][T12284] memdup_user+0x5e/0xd0 [ 149.977902][T12284] strndup_user+0x68/0xb0 [ 149.977955][T12284] __se_sys_mount+0x4d/0x2e0 [ 149.977977][T12284] __x64_sys_mount+0x67/0x80 [ 149.977997][T12284] x64_sys_call+0x2cca/0x3000 [ 149.978021][T12284] do_syscall_64+0xc0/0x2a0 [ 149.978073][T12284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.978196][T12284] RIP: 0033:0x7fb8ddc9bf4a [ 149.978219][T12284] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.978239][T12284] RSP: 002b:00007fb8dc6f6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 149.978261][T12284] RAX: ffffffffffffffda RBX: 00007fb8dc6f6ee0 RCX: 00007fb8ddc9bf4a [ 149.978334][T12284] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 149.978348][T12284] RBP: 0000200000000000 R08: 00007fb8dc6f6ee0 R09: 0000000000010820 [ 149.978363][T12284] R10: 0000000000010820 R11: 0000000000000246 R12: 00002000000000c0 [ 149.978378][T12284] R13: 00007fb8dc6f6ea0 R14: 0000000000000000 R15: 00002000000009c0 [ 149.978396][T12284] [ 150.463035][T12308] syz_tun: entered allmulticast mode [ 150.539806][T12307] syz_tun: left allmulticast mode [ 150.633143][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 150.633159][ T29] audit: type=1400 audit(2000000003.279:3321): avc: denied { setopt } for pid=12334 comm="syz.5.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.695804][ T29] audit: type=1400 audit(2000000003.299:3322): avc: denied { bind } for pid=12334 comm="syz.5.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.715443][ T29] audit: type=1400 audit(2000000003.299:3323): avc: denied { name_bind } for pid=12334 comm="syz.5.2036" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 150.737605][ T29] audit: type=1400 audit(2000000003.299:3324): avc: denied { node_bind } for pid=12334 comm="syz.5.2036" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 150.759407][ T29] audit: type=1400 audit(2000000003.299:3325): avc: denied { write } for pid=12334 comm="syz.5.2036" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.781114][ T29] audit: type=1400 audit(2000000003.299:3326): avc: denied { connect } for pid=12334 comm="syz.5.2036" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.802995][ T29] audit: type=1400 audit(2000000003.299:3327): avc: denied { name_connect } for pid=12334 comm="syz.5.2036" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 150.825654][ T29] audit: type=1400 audit(2000000003.319:3328): avc: denied { create } for pid=12334 comm="syz.5.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.845141][ T29] audit: type=1400 audit(2000000003.319:3329): avc: denied { setopt } for pid=12334 comm="syz.5.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.865091][ T29] audit: type=1400 audit(2000000003.319:3330): avc: denied { getopt } for pid=12334 comm="syz.5.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.075347][T12367] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 151.161473][T12379] team_slave_0: entered promiscuous mode [ 151.167175][T12379] team_slave_1: entered promiscuous mode [ 151.172895][T12379] bridge0: entered promiscuous mode [ 151.180976][T12379] vlan0: entered promiscuous mode [ 151.186022][T12379] team0: entered promiscuous mode [ 151.198751][T12382] tipc: Started in network mode [ 151.203769][T12382] tipc: Node identity , cluster identity 4711 [ 151.209851][T12382] tipc: Failed to obtain node identity [ 151.215342][T12382] tipc: Enabling of bearer rejected, failed to enable media [ 151.349582][T12413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.362190][T12416] netlink: 'syz.6.2055': attribute type 30 has an invalid length. [ 151.370414][T12413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.479411][T12430] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 151.728970][T12454] IPv6: addrconf: prefix option has invalid lifetime [ 151.921828][T12469] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12469 comm=syz.2.2076 [ 151.938433][T12471] sg_write: data in/out 875837202/32 bytes for SCSI command 0x0-- guessing data in; [ 151.938433][T12471] program syz.4.2077 not setting count and/or reply_len properly [ 151.994338][T12476] tipc: Started in network mode [ 151.999241][T12476] tipc: Node identity , cluster identity 4711 [ 152.005459][T12476] tipc: Failed to obtain node identity [ 152.010970][T12476] tipc: Enabling of bearer rejected, failed to enable media [ 152.136048][T12490] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 152.144636][T12491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12491 comm=syz.2.2082 [ 152.579840][T12535] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 152.661983][T12540] __nla_validate_parse: 5 callbacks suppressed [ 152.662002][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2102'. [ 152.677638][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2102'. [ 152.712935][T12542] FAULT_INJECTION: forcing a failure. [ 152.712935][T12542] name failslab, interval 1, probability 0, space 0, times 0 [ 152.726414][T12542] CPU: 1 UID: 0 PID: 12542 Comm: syz.6.2103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.726452][T12542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.726464][T12542] Call Trace: [ 152.726470][T12542] [ 152.726477][T12542] __dump_stack+0x1d/0x30 [ 152.726511][T12542] dump_stack_lvl+0x95/0xd0 [ 152.726537][T12542] dump_stack+0x15/0x1b [ 152.726561][T12542] should_fail_ex+0x263/0x280 [ 152.726586][T12542] should_failslab+0x8c/0xb0 [ 152.726666][T12542] kmem_cache_alloc_noprof+0x68/0x490 [ 152.726691][T12542] ? alloc_empty_file+0x76/0x200 [ 152.726777][T12542] alloc_empty_file+0x76/0x200 [ 152.726806][T12542] alloc_file_pseudo+0xf6/0x190 [ 152.726874][T12542] __shmem_file_setup+0x1dd/0x210 [ 152.726920][T12542] shmem_file_setup+0x3b/0x50 [ 152.727022][T12542] __se_sys_memfd_create+0x2f6/0x6c0 [ 152.727058][T12542] __x64_sys_memfd_create+0x31/0x40 [ 152.727093][T12542] x64_sys_call+0x28cb/0x3000 [ 152.727162][T12542] do_syscall_64+0xc0/0x2a0 [ 152.727193][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.727219][T12542] RIP: 0033:0x7fec26afacb9 [ 152.727237][T12542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.727300][T12542] RSP: 002b:00007fec25556e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 152.727324][T12542] RAX: ffffffffffffffda RBX: 00000000000004f8 RCX: 00007fec26afacb9 [ 152.727341][T12542] RDX: 00007fec25556ee0 RSI: 0000000000000000 RDI: 00007fec26b6730b [ 152.727358][T12542] RBP: 0000200000000700 R08: 00000000ffffffff R09: 0000000000000000 [ 152.727380][T12542] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080 [ 152.727393][T12542] R13: 00007fec25556ee0 R14: 00007fec25556ea0 R15: 0000200000000380 [ 152.727413][T12542] [ 152.951822][T12546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2105'. [ 152.975187][T12546] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12546 comm=syz.2.2105 [ 153.089413][T12556] vlan0: entered promiscuous mode [ 153.157213][T12547] vlan0: left promiscuous mode [ 153.219864][T12561] netlink: 'syz.5.2109': attribute type 1 has an invalid length. [ 153.257227][T12561] tipc: Enabling of bearer rejected, failed to enable media [ 153.283627][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2109'. [ 153.292744][T12561] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2109'. [ 153.502075][T12577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.510644][T12577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.580221][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2118'. [ 153.647044][T12585] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2116'. [ 153.704026][T12594] netlink: 'syz.0.2122': attribute type 21 has an invalid length. [ 153.714250][T12594] netlink: 'syz.0.2122': attribute type 1 has an invalid length. [ 153.722061][T12594] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2122'. [ 153.811272][T12600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12600 comm=syz.2.2123 [ 154.027492][T12611] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.400791][T12646] FAULT_INJECTION: forcing a failure. [ 154.400791][T12646] name failslab, interval 1, probability 0, space 0, times 0 [ 154.413641][T12646] CPU: 0 UID: 0 PID: 12646 Comm: syz.4.2142 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.413737][T12646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.413751][T12646] Call Trace: [ 154.413757][T12646] [ 154.413764][T12646] __dump_stack+0x1d/0x30 [ 154.413836][T12646] dump_stack_lvl+0x95/0xd0 [ 154.413862][T12646] dump_stack+0x15/0x1b [ 154.413896][T12646] should_fail_ex+0x263/0x280 [ 154.413917][T12646] should_failslab+0x8c/0xb0 [ 154.413940][T12646] kmem_cache_alloc_noprof+0x68/0x490 [ 154.413972][T12646] ? skb_clone+0x151/0x1f0 [ 154.414010][T12646] skb_clone+0x151/0x1f0 [ 154.414032][T12646] __netlink_deliver_tap+0x2c9/0x500 [ 154.414061][T12646] netlink_unicast+0x66b/0x690 [ 154.414118][T12646] netlink_sendmsg+0x5c8/0x6f0 [ 154.414145][T12646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.414243][T12646] __sock_sendmsg+0x145/0x170 [ 154.414272][T12646] ____sys_sendmsg+0x31e/0x4a0 [ 154.414302][T12646] ___sys_sendmsg+0x195/0x1e0 [ 154.414335][T12646] __x64_sys_sendmsg+0xd4/0x160 [ 154.414415][T12646] x64_sys_call+0x17ba/0x3000 [ 154.414444][T12646] do_syscall_64+0xc0/0x2a0 [ 154.414471][T12646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.414492][T12646] RIP: 0033:0x7fb8ddc9acb9 [ 154.414572][T12646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.414589][T12646] RSP: 002b:00007fb8dc6f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.414610][T12646] RAX: ffffffffffffffda RBX: 00007fb8ddf15fa0 RCX: 00007fb8ddc9acb9 [ 154.414633][T12646] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 154.414648][T12646] RBP: 00007fb8dc6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 154.414664][T12646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.414691][T12646] R13: 00007fb8ddf16038 R14: 00007fb8ddf15fa0 R15: 00007ffdb36295d8 [ 154.414714][T12646] [ 154.414981][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2142'. [ 154.662887][T12656] FAULT_INJECTION: forcing a failure. [ 154.662887][T12656] name failslab, interval 1, probability 0, space 0, times 0 [ 154.675644][T12656] CPU: 1 UID: 0 PID: 12656 Comm: syz.0.2145 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.675721][T12656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.675736][T12656] Call Trace: [ 154.675742][T12656] [ 154.675750][T12656] __dump_stack+0x1d/0x30 [ 154.675775][T12656] dump_stack_lvl+0x95/0xd0 [ 154.675849][T12656] dump_stack+0x15/0x1b [ 154.675873][T12656] should_fail_ex+0x263/0x280 [ 154.675898][T12656] should_failslab+0x8c/0xb0 [ 154.675921][T12656] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 154.675957][T12656] ? __d_alloc+0x37/0x340 [ 154.676019][T12656] __d_alloc+0x37/0x340 [ 154.676042][T12656] ? inode_set_ctime_current+0x5db/0x810 [ 154.676076][T12656] d_alloc_pseudo+0x1e/0x80 [ 154.676117][T12656] alloc_file_pseudo+0x91/0x190 [ 154.676144][T12656] ? hugetlbfs_get_inode+0x267/0x370 [ 154.676172][T12656] hugetlb_file_setup+0x2a6/0x3d0 [ 154.676278][T12656] ksys_mmap_pgoff+0x156/0x310 [ 154.676318][T12656] x64_sys_call+0x16bb/0x3000 [ 154.676344][T12656] do_syscall_64+0xc0/0x2a0 [ 154.676372][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.676397][T12656] RIP: 0033:0x7f94f96cacb9 [ 154.676429][T12656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.676448][T12656] RSP: 002b:00007f94f8127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 154.676468][T12656] RAX: ffffffffffffffda RBX: 00007f94f9945fa0 RCX: 00007f94f96cacb9 [ 154.676485][T12656] RDX: 0000000000000002 RSI: 0000000000800000 RDI: 0000200000800000 [ 154.676537][T12656] RBP: 00007f94f8127090 R08: ffffffffffffffff R09: 0000000000000000 [ 154.676552][T12656] R10: 0000000000042032 R11: 0000000000000246 R12: 0000000000000001 [ 154.676566][T12656] R13: 00007f94f9946038 R14: 00007f94f9945fa0 R15: 00007ffc8c02ac58 [ 154.676585][T12656] [ 154.885877][T12662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.894819][T12662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.051934][T12670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2149'. [ 155.579828][T12698] team_slave_0: entered promiscuous mode [ 155.585619][T12698] team_slave_1: entered promiscuous mode [ 155.652824][T12698] vlan2: entered promiscuous mode [ 155.657934][T12698] team0: entered promiscuous mode [ 155.709701][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 155.709719][ T29] audit: type=1400 audit(2000000008.349:3382): avc: denied { create } for pid=12687 comm="syz.6.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.773925][ T29] audit: type=1400 audit(2000000008.419:3383): avc: denied { bind } for pid=12687 comm="syz.6.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.843094][ T29] audit: type=1400 audit(2000000008.489:3384): avc: denied { write } for pid=12687 comm="syz.6.2154" path="socket:[37212]" dev="sockfs" ino=37212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.901107][ T29] audit: type=1326 audit(2000000008.539:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12687 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec26afacb9 code=0x7ffc0000 [ 155.924722][ T29] audit: type=1326 audit(2000000008.539:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12687 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fec26afacb9 code=0x7ffc0000 [ 155.948176][ T29] audit: type=1326 audit(2000000008.539:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12687 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec26afacb9 code=0x7ffc0000 [ 155.971842][ T29] audit: type=1326 audit(2000000008.539:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12687 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec26afacb9 code=0x7ffc0000 [ 155.995245][ T29] audit: type=1326 audit(2000000008.539:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12687 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec26afacb9 code=0x7ffc0000 [ 156.018730][ T29] audit: type=1326 audit(2000000008.539:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12687 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fec26afacb9 code=0x7ffc0000 [ 156.042177][ T29] audit: type=1326 audit(2000000008.539:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12687 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec26afacb9 code=0x7ffc0000 [ 156.537675][T12750] FAULT_INJECTION: forcing a failure. [ 156.537675][T12750] name failslab, interval 1, probability 0, space 0, times 0 [ 156.550410][T12750] CPU: 1 UID: 0 PID: 12750 Comm: syz.0.2171 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.550446][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.550459][T12750] Call Trace: [ 156.550468][T12750] [ 156.550477][T12750] __dump_stack+0x1d/0x30 [ 156.550506][T12750] dump_stack_lvl+0x95/0xd0 [ 156.550540][T12750] dump_stack+0x15/0x1b [ 156.550564][T12750] should_fail_ex+0x263/0x280 [ 156.550645][T12750] should_failslab+0x8c/0xb0 [ 156.550674][T12750] __kmalloc_noprof+0xb8/0x580 [ 156.550729][T12750] ? do_handle_open+0x3a9/0x790 [ 156.550759][T12750] do_handle_open+0x3a9/0x790 [ 156.550828][T12750] __x64_sys_open_by_handle_at+0x44/0x50 [ 156.550854][T12750] x64_sys_call+0x2b6a/0x3000 [ 156.550954][T12750] do_syscall_64+0xc0/0x2a0 [ 156.550994][T12750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.551021][T12750] RIP: 0033:0x7f94f96cacb9 [ 156.551119][T12750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.551140][T12750] RSP: 002b:00007f94f8127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 156.551169][T12750] RAX: ffffffffffffffda RBX: 00007f94f9945fa0 RCX: 00007f94f96cacb9 [ 156.551186][T12750] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 156.551277][T12750] RBP: 00007f94f8127090 R08: 0000000000000000 R09: 0000000000000000 [ 156.551292][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.551307][T12750] R13: 00007f94f9946038 R14: 00007f94f9945fa0 R15: 00007ffc8c02ac58 [ 156.551326][T12750] [ 156.935224][T12783] bridge_slave_0: left allmulticast mode [ 156.940960][T12783] bridge_slave_0: left promiscuous mode [ 156.946628][T12783] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.955807][T12783] bridge_slave_1: left allmulticast mode [ 156.961512][T12783] bridge_slave_1: left promiscuous mode [ 156.967214][T12783] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.977079][T12783] bond0: (slave bond_slave_0): Releasing backup interface [ 156.987371][T12783] bond0: (slave bond_slave_1): Releasing backup interface [ 156.996638][T12783] team_slave_0: left promiscuous mode [ 157.002153][T12783] team_slave_0: left allmulticast mode [ 157.009777][T12783] team0: Port device team_slave_0 removed [ 157.016826][T12783] team_slave_1: left promiscuous mode [ 157.022282][T12783] team_slave_1: left allmulticast mode [ 157.029983][T12783] team0: Port device team_slave_1 removed [ 157.036698][T12783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.044199][T12783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.053094][T12783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.060473][T12783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.070241][T12783] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.335116][T12825] mmap: syz.6.2193 (12825) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.409976][T12835] netlink: 'syz.6.2198': attribute type 21 has an invalid length. [ 157.418371][T12835] netlink: 'syz.6.2198': attribute type 1 has an invalid length. [ 157.612195][T12865] netlink: 'syz.4.2212': attribute type 21 has an invalid length. [ 157.621925][T12865] netlink: 'syz.4.2212': attribute type 1 has an invalid length. [ 157.643309][T12869] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 157.705911][T12874] tipc: Started in network mode [ 157.710962][T12874] tipc: Node identity , cluster identity 4711 [ 157.717048][T12874] tipc: Failed to obtain node identity [ 157.722586][T12874] tipc: Enabling of bearer rejected, failed to enable media [ 157.868591][T12907] __nla_validate_parse: 5 callbacks suppressed [ 157.868609][T12907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2225'. [ 157.900707][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2226'. [ 157.913668][T12910] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2226'. [ 158.052395][T12928] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2234'. [ 158.300718][T12934] vlan2: entered promiscuous mode [ 158.516432][T12947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.527902][T12947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.723579][T12969] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2249'. [ 158.851965][T12979] kernel profiling enabled (shift: 9) [ 159.147682][T13008] vlan2: entered promiscuous mode [ 159.152853][T13008] bond0: entered promiscuous mode [ 159.429978][T13027] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2270'. [ 160.059105][T13065] vlan0: entered promiscuous mode [ 160.434012][T13096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2295'. [ 160.450083][T13096] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13096 comm=syz.4.2295 [ 160.832329][T13118] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 161.123570][T13133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2307'. [ 161.138577][T13133] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13133 comm=syz.2.2307 [ 161.165025][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 161.165099][ T29] audit: type=1326 audit(2000000013.809:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13134 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b415facb9 code=0x7ffc0000 [ 161.197790][ T29] audit: type=1326 audit(2000000013.809:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13134 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b415facb9 code=0x7ffc0000 [ 161.221445][ T29] audit: type=1326 audit(2000000013.809:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13134 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b415facb9 code=0x7ffc0000 [ 161.245008][ T29] audit: type=1326 audit(2000000013.809:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13134 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b415facb9 code=0x7ffc0000 [ 161.268733][ T29] audit: type=1326 audit(2000000013.809:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13134 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b415facb9 code=0x7ffc0000 [ 161.292366][ T29] audit: type=1326 audit(2000000013.809:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13134 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3b415facb9 code=0x7ffc0000 [ 161.315853][ T29] audit: type=1326 audit(2000000013.809:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13134 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b415facb9 code=0x7ffc0000 [ 161.339504][ T29] audit: type=1326 audit(2000000013.809:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13134 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f3b415facb9 code=0x7ffc0000 [ 161.363166][ T29] audit: type=1326 audit(2000000013.809:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13134 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b415facb9 code=0x7ffc0000 [ 161.440690][ T29] audit: type=1400 audit(2000000014.079:3560): avc: denied { watch watch_reads } for pid=13145 comm="syz.4.2313" path="/116" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 161.483199][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'. [ 161.749101][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2318'. [ 161.767679][T13158] netlink: 'syz.0.2317': attribute type 3 has an invalid length. [ 161.775727][T13158] netlink: 'syz.0.2317': attribute type 3 has an invalid length. [ 161.973329][T13170] 9p: Bad value for 'rfdno' [ 162.308500][T13168] syz.6.2323 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 162.319692][T13168] CPU: 1 UID: 0 PID: 13168 Comm: syz.6.2323 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.319721][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.319777][T13168] Call Trace: [ 162.319784][T13168] [ 162.319790][T13168] __dump_stack+0x1d/0x30 [ 162.319839][T13168] dump_stack_lvl+0x95/0xd0 [ 162.319852][T13168] dump_stack+0x15/0x1b [ 162.319865][T13168] dump_header+0x80/0x240 [ 162.319877][T13168] oom_kill_process+0x295/0x350 [ 162.319890][T13168] out_of_memory+0x97d/0xb80 [ 162.319942][T13168] try_charge_memcg+0x62e/0xa10 [ 162.319966][T13168] charge_memcg+0x51/0xc0 [ 162.320060][T13168] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 162.320081][T13168] __read_swap_cache_async+0x17b/0x2d0 [ 162.320102][T13168] swap_cluster_readahead+0x362/0x3c0 [ 162.320122][T13168] swapin_readahead+0xde/0x840 [ 162.320181][T13168] ? __rcu_read_unlock+0x33/0x70 [ 162.320193][T13168] ? __rcu_read_unlock+0x4e/0x70 [ 162.320204][T13168] ? swap_cache_get_folio+0x26f/0x280 [ 162.320268][T13168] do_swap_page+0x2f4/0x2140 [ 162.320287][T13168] ? css_rstat_updated+0xbb/0x280 [ 162.320405][T13168] ? __pfx_default_wake_function+0x10/0x10 [ 162.320496][T13168] handle_mm_fault+0xb40/0x3030 [ 162.320528][T13168] ? vma_start_read+0x1c7/0x2c0 [ 162.320547][T13168] do_user_addr_fault+0x62f/0x1050 [ 162.320572][T13168] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 162.320586][T13168] ? irqentry_exit+0x3c/0x510 [ 162.320614][T13168] exc_page_fault+0x62/0xa0 [ 162.320682][T13168] asm_exc_page_fault+0x26/0x30 [ 162.320695][T13168] RIP: 0033:0x7fec269c874c [ 162.320715][T13168] Code: ca 30 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 162.320727][T13168] RSP: 002b:00007ffe9afd9e00 EFLAGS: 00010202 [ 162.320739][T13168] RAX: 0000000000000000 RBX: 00007fec26d77080 RCX: 0000555567019808 [ 162.320747][T13168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.320755][T13168] RBP: 00007fec26d77da0 R08: 0000000000000000 R09: 0000000000000000 [ 162.320763][T13168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000027ba5 [ 162.320875][T13168] R13: 00007fec26d7609c R14: 00000000000278dd R15: 00007ffe9afd9f00 [ 162.320895][T13168] [ 162.542712][T13168] memory: usage 307200kB, limit 307200kB, failcnt 209 [ 162.549512][T13168] memory+swap: usage 308904kB, limit 9007199254740988kB, failcnt 0 [ 162.549531][T13168] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 162.549545][T13168] Memory cgroup stats for /syz6: [ 162.574469][T13168] cache 4096 [ 162.582787][T13168] rss 0 [ 162.585618][T13168] shmem 0 [ 162.588566][T13168] mapped_file 0 [ 162.592132][T13168] dirty 0 [ 162.595076][T13168] writeback 0 [ 162.598339][T13168] workingset_refault_anon 1599 [ 162.603173][T13168] workingset_refault_file 0 [ 162.607661][T13168] swap 1744896 [ 162.611047][T13168] swapcached 0 [ 162.614476][T13168] pgpgin 162526 [ 162.617948][T13168] pgpgout 162525 [ 162.621555][T13168] pgfault 115097 [ 162.625132][T13168] pgmajfault 229 [ 162.628836][T13168] inactive_anon 0 [ 162.632611][T13168] active_anon 0 [ 162.636057][T13168] inactive_file 4096 [ 162.639971][T13168] active_file 0 [ 162.643439][T13168] unevictable 0 [ 162.646882][T13168] hierarchical_memory_limit 314572800 [ 162.652304][T13168] hierarchical_memsw_limit 9223372036854771712 [ 162.658878][T13168] total_cache 4096 [ 162.662661][T13168] total_rss 0 [ 162.665931][T13168] total_shmem 0 [ 162.669375][T13168] total_mapped_file 0 [ 162.673442][T13168] total_dirty 0 [ 162.677003][T13168] total_writeback 0 [ 162.680979][T13168] total_workingset_refault_anon 1599 [ 162.686270][T13168] total_workingset_refault_file 0 [ 162.691296][T13168] total_swap 1744896 [ 162.695184][T13168] total_swapcached 0 [ 162.699095][T13168] total_pgpgin 162526 [ 162.703082][T13168] total_pgpgout 162525 [ 162.707178][T13168] total_pgfault 115097 [ 162.711323][T13168] total_pgmajfault 229 [ 162.715383][T13168] total_inactive_anon 0 [ 162.719520][T13168] total_active_anon 0 [ 162.723513][T13168] total_inactive_file 4096 [ 162.727919][T13168] total_active_file 0 [ 162.732025][T13168] total_unevictable 0 [ 162.736033][T13168] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2323,pid=13168,uid=0 [ 162.750748][T13168] Memory cgroup out of memory: Killed process 13168 (syz.6.2323) total-vm:94132kB, anon-rss:1336kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 162.807997][T13188] bond_slave_0: entered promiscuous mode [ 162.813718][T13188] bond_slave_1: entered promiscuous mode [ 162.825139][T13188] vlan2: entered promiscuous mode [ 162.830212][T13188] bond0: entered promiscuous mode [ 162.886282][T13196] __nla_validate_parse: 2 callbacks suppressed [ 162.886315][T13196] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2334'. [ 162.905368][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2333'. [ 163.006538][T13212] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2340'. [ 163.022910][T13212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13212 comm=syz.0.2340 [ 163.055898][T13218] netlink: 'syz.6.2343': attribute type 21 has an invalid length. [ 163.311584][T13248] vlan2: entered promiscuous mode [ 163.316676][T13248] bond0: entered promiscuous mode [ 163.342938][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2356'. [ 163.351892][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2356'. [ 163.594807][T13261] netlink: 'syz.6.2359': attribute type 4 has an invalid length. [ 163.608188][T13261] netlink: 'syz.6.2359': attribute type 4 has an invalid length. [ 163.921643][T13282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.936828][T13282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.230390][T13284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2367'. [ 164.461518][T13294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2373'. [ 164.514078][T13251] x_tables: duplicate underflow at hook 2 [ 164.532765][T13300] tipc: Started in network mode [ 164.537651][T13300] tipc: Node identity fe80000000000000000000000000000c, cluster identity 4711 [ 164.547335][T13300] tipc: Enabled bearer , priority 10 [ 164.876940][T13328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2385'. [ 164.977261][T13339] netlink: 'syz.4.2389': attribute type 3 has an invalid length. [ 164.985148][T13339] netlink: 'syz.4.2389': attribute type 4 has an invalid length. [ 164.993026][T13339] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.2389'. [ 165.101504][T13348] FAULT_INJECTION: forcing a failure. [ 165.101504][T13348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.114720][T13348] CPU: 1 UID: 0 PID: 13348 Comm: syz.6.2392 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.114818][T13348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.114833][T13348] Call Trace: [ 165.114842][T13348] [ 165.114852][T13348] __dump_stack+0x1d/0x30 [ 165.114881][T13348] dump_stack_lvl+0x95/0xd0 [ 165.114916][T13348] dump_stack+0x15/0x1b [ 165.114939][T13348] should_fail_ex+0x263/0x280 [ 165.114965][T13348] should_fail+0xb/0x20 [ 165.114986][T13348] should_fail_usercopy+0x1a/0x20 [ 165.115051][T13348] _copy_from_user+0x1c/0xb0 [ 165.115080][T13348] ___sys_sendmsg+0xc1/0x1e0 [ 165.115157][T13348] __sys_sendmmsg+0x185/0x320 [ 165.115356][T13348] __x64_sys_sendmmsg+0x57/0x70 [ 165.115385][T13348] x64_sys_call+0x1e28/0x3000 [ 165.115415][T13348] do_syscall_64+0xc0/0x2a0 [ 165.115494][T13348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.115520][T13348] RIP: 0033:0x7fec26afacb9 [ 165.115539][T13348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.115571][T13348] RSP: 002b:00007fec25557028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 165.115594][T13348] RAX: ffffffffffffffda RBX: 00007fec26d75fa0 RCX: 00007fec26afacb9 [ 165.115652][T13348] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 165.115723][T13348] RBP: 00007fec25557090 R08: 0000000000000000 R09: 0000000000000000 [ 165.115739][T13348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.115755][T13348] R13: 00007fec26d76038 R14: 00007fec26d75fa0 R15: 00007ffe9afd9c98 [ 165.115798][T13348] [ 165.291781][T13354] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2394'. [ 165.311046][T13354] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13354 comm=syz.5.2394 [ 165.541169][T13369] bridge1: entered promiscuous mode [ 165.551264][T13371] FAULT_INJECTION: forcing a failure. [ 165.551264][T13371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.564831][T13371] CPU: 0 UID: 0 PID: 13371 Comm: syz.6.2400 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.564863][T13371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.564941][T13371] Call Trace: [ 165.564950][T13371] [ 165.564958][T13371] __dump_stack+0x1d/0x30 [ 165.564984][T13371] dump_stack_lvl+0x95/0xd0 [ 165.565086][T13371] dump_stack+0x15/0x1b [ 165.565110][T13371] should_fail_ex+0x263/0x280 [ 165.565131][T13371] should_fail+0xb/0x20 [ 165.565151][T13371] should_fail_usercopy+0x1a/0x20 [ 165.565175][T13371] _copy_from_user+0x1c/0xb0 [ 165.565230][T13371] do_sys_poll+0x137/0xc10 [ 165.565259][T13371] ? selinux_file_open+0x2e6/0x330 [ 165.565313][T13371] ? timespec64_add_safe+0x106/0x150 [ 165.565363][T13371] __se_sys_poll+0x104/0x230 [ 165.565384][T13371] __x64_sys_poll+0x43/0x50 [ 165.565485][T13371] x64_sys_call+0x289f/0x3000 [ 165.565583][T13371] do_syscall_64+0xc0/0x2a0 [ 165.565682][T13371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.565736][T13371] RIP: 0033:0x7fec26afacb9 [ 165.565755][T13371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.565839][T13371] RSP: 002b:00007fec25557028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 165.565861][T13371] RAX: ffffffffffffffda RBX: 00007fec26d75fa0 RCX: 00007fec26afacb9 [ 165.565875][T13371] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 165.565888][T13371] RBP: 00007fec25557090 R08: 0000000000000000 R09: 0000000000000000 [ 165.565963][T13371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.565977][T13371] R13: 00007fec26d76038 R14: 00007fec26d75fa0 R15: 00007ffe9afd9c98 [ 165.565999][T13371] [ 165.571247][ T2972] tipc: Node number set to 4269801484 [ 165.787922][T13376] tipc: Enabled bearer , priority 10 [ 166.193105][T13426] program syz.2.2413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.259995][T13428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13428 comm=syz.0.2418 [ 166.283230][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 166.283245][ T29] audit: type=1326 audit(2000000018.929:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.5.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 166.314535][ T29] audit: type=1326 audit(2000000018.929:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.5.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 166.338559][ T29] audit: type=1326 audit(2000000018.929:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.5.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 166.363593][ T29] audit: type=1326 audit(2000000019.009:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.5.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 166.387405][ T29] audit: type=1326 audit(2000000019.029:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.5.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 166.410878][ T29] audit: type=1326 audit(2000000019.029:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.5.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 166.434493][ T29] audit: type=1326 audit(2000000019.029:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.5.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 166.459182][ T29] audit: type=1326 audit(2000000019.059:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.5.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 166.482891][ T29] audit: type=1326 audit(2000000019.059:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.5.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 166.506526][ T29] audit: type=1326 audit(2000000019.059:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.5.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f6ae4b4acb9 code=0x7ffc0000 [ 166.581324][T13438] vlan2: entered promiscuous mode [ 166.768642][T13444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.775904][T13444] IPv6: NLM_F_CREATE should be set when creating new route [ 166.783170][T13444] IPv6: NLM_F_CREATE should be set when creating new route [ 166.790374][T13444] IPv6: NLM_F_CREATE should be set when creating new route [ 166.970213][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.981191][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.006776][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.040214][T13471] SELinux: failed to load policy [ 167.052085][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.142399][T13478] team0: Port device gtp1 added [ 167.412727][T13500] IPVS: Unknown mcast interface: [ 167.448517][T13502] vlan0: entered promiscuous mode [ 167.597898][T13509] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13509 comm=syz.6.2446 [ 167.699730][T13513] team0: Port device gtp2 added [ 168.050315][T13492] syz.2.2440 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 168.064512][T13492] CPU: 0 UID: 0 PID: 13492 Comm: syz.2.2440 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.064596][T13492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.064610][T13492] Call Trace: [ 168.064616][T13492] [ 168.064622][T13492] __dump_stack+0x1d/0x30 [ 168.064646][T13492] dump_stack_lvl+0x95/0xd0 [ 168.064692][T13492] dump_stack+0x15/0x1b [ 168.064751][T13492] dump_header+0x80/0x240 [ 168.064807][T13492] oom_kill_process+0x295/0x350 [ 168.064834][T13492] out_of_memory+0x97d/0xb80 [ 168.064860][T13492] try_charge_memcg+0x62e/0xa10 [ 168.064986][T13492] obj_cgroup_charge_pages+0xa6/0x150 [ 168.065019][T13492] __memcg_kmem_charge_page+0x9e/0x170 [ 168.065053][T13492] __alloc_frozen_pages_noprof+0x18a/0x350 [ 168.065165][T13492] alloc_pages_mpol+0xb3/0x260 [ 168.065207][T13492] alloc_pages_noprof+0x8f/0x130 [ 168.065249][T13492] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 168.065286][T13492] __kvmalloc_node_noprof+0x471/0x680 [ 168.065315][T13492] ? ip_set_alloc+0x24/0x30 [ 168.065381][T13492] ? ip_set_alloc+0x24/0x30 [ 168.065409][T13492] ip_set_alloc+0x24/0x30 [ 168.065431][T13492] hash_netiface_create+0x282/0x740 [ 168.065501][T13492] ? __pfx_hash_netiface_create+0x10/0x10 [ 168.065530][T13492] ip_set_create+0x3cf/0x970 [ 168.065564][T13492] ? __nla_parse+0x40/0x60 [ 168.065598][T13492] nfnetlink_rcv_msg+0x509/0x5d0 [ 168.065709][T13492] netlink_rcv_skb+0x123/0x220 [ 168.065736][T13492] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 168.065763][T13492] nfnetlink_rcv+0x167/0x1720 [ 168.065790][T13492] ? __kfree_skb+0x109/0x150 [ 168.065863][T13492] ? nlmon_xmit+0x4f/0x60 [ 168.065882][T13492] ? consume_skb+0x49/0x140 [ 168.065902][T13492] ? nlmon_xmit+0x4f/0x60 [ 168.065984][T13492] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 168.066011][T13492] ? __dev_queue_xmit+0x139a/0x1f20 [ 168.066084][T13492] ? __dev_queue_xmit+0x148/0x1f20 [ 168.066140][T13492] ? ref_tracker_free+0x37d/0x3e0 [ 168.066168][T13492] ? __netlink_deliver_tap+0x4dc/0x500 [ 168.066205][T13492] netlink_unicast+0x5c0/0x690 [ 168.066234][T13492] netlink_sendmsg+0x5c8/0x6f0 [ 168.066365][T13492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.066446][T13492] __sock_sendmsg+0x145/0x170 [ 168.066514][T13492] ____sys_sendmsg+0x31e/0x4a0 [ 168.066542][T13492] ___sys_sendmsg+0x195/0x1e0 [ 168.066523][T13531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13531 comm=syz.0.2453 [ 168.066576][T13492] __x64_sys_sendmsg+0xd4/0x160 [ 168.066673][T13492] x64_sys_call+0x17ba/0x3000 [ 168.066702][T13492] do_syscall_64+0xc0/0x2a0 [ 168.066733][T13492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.066837][T13492] RIP: 0033:0x7f3b415facb9 [ 168.066855][T13492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.066954][T13492] RSP: 002b:00007f3b40057028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.066976][T13492] RAX: ffffffffffffffda RBX: 00007f3b41875fa0 RCX: 00007f3b415facb9 [ 168.067036][T13492] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000008 [ 168.067051][T13492] RBP: 00007f3b41668bf7 R08: 0000000000000000 R09: 0000000000000000 [ 168.067065][T13492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.067079][T13492] R13: 00007f3b41876038 R14: 00007f3b41875fa0 R15: 00007ffe9ce480b8 [ 168.067100][T13492] [ 168.067108][T13492] memory: usage 307200kB, limit 307200kB, failcnt 879 [ 168.147108][T13529] __nla_validate_parse: 10 callbacks suppressed [ 168.147125][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'. [ 168.151090][T13492] memory+swap: usage 307572kB, limit 9007199254740988kB, failcnt 0 [ 168.151176][T13492] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 168.435099][T13492] Memory cgroup stats for /syz2: [ 168.435631][T13492] cache 4096 [ 168.443777][T13492] rss 4096 [ 168.446816][T13492] shmem 0 [ 168.449742][T13492] mapped_file 3149824 [ 168.453739][T13492] dirty 0 [ 168.456668][T13492] writeback 0 [ 168.459942][T13492] workingset_refault_anon 160 [ 168.464635][T13492] workingset_refault_file 899 [ 168.469367][T13492] swap 380928 [ 168.472766][T13492] swapcached 8192 [ 168.476477][T13492] pgpgin 163214 [ 168.479930][T13492] pgpgout 163209 [ 168.483504][T13492] pgfault 149295 [ 168.487047][T13492] pgmajfault 84 [ 168.490575][T13492] inactive_anon 8192 [ 168.494502][T13492] active_anon 0 [ 168.497955][T13492] inactive_file 8192 [ 168.501867][T13492] active_file 4096 [ 168.505583][T13492] unevictable 0 [ 168.509033][T13492] hierarchical_memory_limit 314572800 [ 168.514433][T13492] hierarchical_memsw_limit 9223372036854771712 [ 168.520599][T13492] total_cache 4096 [ 168.524419][T13492] total_rss 4096 [ 168.527998][T13492] total_shmem 0 [ 168.531492][T13492] total_mapped_file 3149824 [ 168.536133][T13492] total_dirty 0 [ 168.539591][T13492] total_writeback 0 [ 168.543478][T13492] total_workingset_refault_anon 160 [ 168.548740][T13492] total_workingset_refault_file 899 [ 168.553959][T13492] total_swap 380928 [ 168.557757][T13492] total_swapcached 8192 [ 168.562067][T13492] total_pgpgin 163214 [ 168.566037][T13492] total_pgpgout 163209 [ 168.570109][T13492] total_pgfault 149295 [ 168.574208][T13492] total_pgmajfault 84 [ 168.578177][T13492] total_inactive_anon 8192 [ 168.582620][T13492] total_active_anon 0 [ 168.586592][T13492] total_inactive_file 8192 [ 168.591034][T13492] total_active_file 4096 [ 168.595265][T13492] total_unevictable 0 [ 168.599235][T13492] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2440,pid=13491,uid=0 [ 168.614405][T13492] Memory cgroup out of memory: Killed process 13491 (syz.2.2440) total-vm:93368kB, anon-rss:1204kB, file-rss:24584kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 168.945404][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2467'. [ 168.985902][T13566] 8021q: VLANs not supported on vcan0 [ 169.090509][T13585] vlan2: entered promiscuous mode [ 169.138752][T13592] netlink: 'syz.0.2481': attribute type 6 has an invalid length. [ 169.200067][T13601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2484'. [ 169.216002][T13603] 8021q: VLANs not supported on vcan0 [ 169.219007][T13601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2484'. [ 169.270229][T13607] geneve4: entered promiscuous mode [ 169.275505][T13607] geneve4: entered allmulticast mode [ 169.318158][T13612] netlink: 'syz.0.2487': attribute type 4 has an invalid length. [ 169.330100][T13607] netlink: 'syz.0.2487': attribute type 4 has an invalid length. [ 169.335170][T13614] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 169.348769][T13614] bond2 (unregistering): Released all slaves [ 169.423110][T13617] sctp: [Deprecated]: syz.5.2491 (pid 13617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.423110][T13617] Use struct sctp_sack_info instead [ 169.468280][T13621] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2493'. [ 169.519700][T13624] FAULT_INJECTION: forcing a failure. [ 169.519700][T13624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.533090][T13624] CPU: 0 UID: 0 PID: 13624 Comm: syz.0.2494 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.533126][T13624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.533139][T13624] Call Trace: [ 169.533145][T13624] [ 169.533153][T13624] __dump_stack+0x1d/0x30 [ 169.533176][T13624] dump_stack_lvl+0x95/0xd0 [ 169.533200][T13624] dump_stack+0x15/0x1b [ 169.533221][T13624] should_fail_ex+0x263/0x280 [ 169.533391][T13624] should_fail+0xb/0x20 [ 169.533402][T13624] should_fail_usercopy+0x1a/0x20 [ 169.533416][T13624] _copy_from_user+0x1c/0xb0 [ 169.533447][T13624] sctp_setsockopt+0x154/0xe30 [ 169.533463][T13624] sock_common_setsockopt+0x69/0x80 [ 169.533482][T13624] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 169.533539][T13624] __sys_setsockopt+0x184/0x200 [ 169.533628][T13624] __x64_sys_setsockopt+0x64/0x80 [ 169.533642][T13624] x64_sys_call+0x21d5/0x3000 [ 169.533657][T13624] do_syscall_64+0xc0/0x2a0 [ 169.533675][T13624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.533690][T13624] RIP: 0033:0x7f94f96cacb9 [ 169.533700][T13624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.533767][T13624] RSP: 002b:00007f94f8127028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 169.533780][T13624] RAX: ffffffffffffffda RBX: 00007f94f9945fa0 RCX: 00007f94f96cacb9 [ 169.533789][T13624] RDX: 0000000000000010 RSI: 0000000000000084 RDI: 0000000000000005 [ 169.533797][T13624] RBP: 00007f94f8127090 R08: 0000000000000008 R09: 0000000000000000 [ 169.533834][T13624] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 169.533842][T13624] R13: 00007f94f9946038 R14: 00007f94f9945fa0 R15: 00007ffc8c02ac58 [ 169.533854][T13624] [ 169.827335][T13640] 8021q: VLANs not supported on vcan0 [ 169.962454][T13660] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2507'. [ 170.062604][T13672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=13672 comm=syz.4.2512 [ 170.101538][T13677] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.179170][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2520'. [ 170.194236][T13681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2515'. [ 170.810612][T13732] FAULT_INJECTION: forcing a failure. [ 170.810612][T13732] name failslab, interval 1, probability 0, space 0, times 0 [ 170.823414][T13732] CPU: 0 UID: 0 PID: 13732 Comm: syz.0.2530 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.823432][T13732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.823441][T13732] Call Trace: [ 170.823446][T13732] [ 170.823451][T13732] __dump_stack+0x1d/0x30 [ 170.823576][T13732] dump_stack_lvl+0x95/0xd0 [ 170.823592][T13732] dump_stack+0x15/0x1b [ 170.823613][T13732] should_fail_ex+0x263/0x280 [ 170.823635][T13732] should_failslab+0x8c/0xb0 [ 170.823692][T13732] kmem_cache_alloc_noprof+0x68/0x490 [ 170.823706][T13732] ? skb_clone+0x151/0x1f0 [ 170.823726][T13732] skb_clone+0x151/0x1f0 [ 170.823760][T13732] nfnetlink_rcv+0x316/0x1720 [ 170.823774][T13732] ? __kfree_skb+0x109/0x150 [ 170.823786][T13732] ? consume_skb+0x49/0x140 [ 170.823832][T13732] ? nlmon_xmit+0x4f/0x60 [ 170.823843][T13732] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 170.823858][T13732] ? __dev_queue_xmit+0x139a/0x1f20 [ 170.823888][T13732] ? __dev_queue_xmit+0x148/0x1f20 [ 170.823981][T13732] ? ref_tracker_free+0x37d/0x3e0 [ 170.824010][T13732] netlink_unicast+0x5c0/0x690 [ 170.824099][T13732] netlink_sendmsg+0x5c8/0x6f0 [ 170.824116][T13732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.824133][T13732] __sock_sendmsg+0x145/0x170 [ 170.824151][T13732] ____sys_sendmsg+0x31e/0x4a0 [ 170.824213][T13732] ___sys_sendmsg+0x195/0x1e0 [ 170.824233][T13732] __x64_sys_sendmsg+0xd4/0x160 [ 170.824301][T13732] x64_sys_call+0x17ba/0x3000 [ 170.824316][T13732] do_syscall_64+0xc0/0x2a0 [ 170.824334][T13732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.824348][T13732] RIP: 0033:0x7f94f96cacb9 [ 170.824410][T13732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.824421][T13732] RSP: 002b:00007f94f8127028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.824483][T13732] RAX: ffffffffffffffda RBX: 00007f94f9945fa0 RCX: 00007f94f96cacb9 [ 170.824491][T13732] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 170.824500][T13732] RBP: 00007f94f8127090 R08: 0000000000000000 R09: 0000000000000000 [ 170.824508][T13732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.824515][T13732] R13: 00007f94f9946038 R14: 00007f94f9945fa0 R15: 00007ffc8c02ac58 [ 170.824527][T13732] [ 171.129363][T13743] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.2534'. [ 171.151237][T13745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2535'. [ 171.203812][T13748] tipc: Enabled bearer , priority 10 [ 171.212887][T13753] veth0_to_team: entered promiscuous mode [ 171.232045][T13753] usb usb5: usbfs: process 13753 (syz.4.2537) did not claim interface 0 before use [ 171.297089][T13758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13758 comm=syz.0.2538 [ 171.423356][T13760] 8021q: VLANs not supported on vcan0 [ 171.430320][T13762] 8021q: VLANs not supported on team0 [ 171.452463][T13768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13768 comm=syz.2.2543 [ 171.486478][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 171.486495][ T29] audit: type=1400 audit(2000000024.129:3718): avc: denied { read write } for pid=13771 comm="syz.6.2544" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.488315][T13772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.496867][ T29] audit: type=1400 audit(2000000024.129:3719): avc: denied { open } for pid=13771 comm="syz.6.2544" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.516614][T13772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.524722][ T29] audit: type=1400 audit(2000000024.129:3720): avc: denied { ioctl } for pid=13771 comm="syz.6.2544" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.580882][ T29] audit: type=1400 audit(2000000024.139:3721): avc: denied { prog_load } for pid=13770 comm="syz.2.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 171.600135][ T29] audit: type=1400 audit(2000000024.139:3722): avc: denied { bpf } for pid=13770 comm="syz.2.2545" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.632562][ T29] audit: type=1400 audit(2000000024.199:3723): avc: denied { mac_admin } for pid=13771 comm="syz.6.2544" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.653713][ T29] audit: type=1400 audit(2000000024.269:3724): avc: denied { read write } for pid=9129 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.677965][ T29] audit: type=1400 audit(2000000024.269:3725): avc: denied { open } for pid=9129 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.710421][ T29] audit: type=1400 audit(2000000024.349:3726): avc: denied { open } for pid=13774 comm="syz.2.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 171.729795][ T29] audit: type=1400 audit(2000000024.349:3727): avc: denied { perfmon } for pid=13774 comm="syz.2.2546" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 172.369478][T13815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13815 comm=syz.6.2561 [ 172.399777][T13818] sock: sock_timestamping_bind_phc: sock not bind to device [ 172.407797][T13818] x_tables: duplicate underflow at hook 2 [ 172.984946][T13853] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 173.374318][T13890] FAULT_INJECTION: forcing a failure. [ 173.374318][T13890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.387533][T13890] CPU: 0 UID: 0 PID: 13890 Comm: syz.6.2588 Not tainted syzkaller #0 PREEMPT(voluntary) [ 173.387566][T13890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.387638][T13890] Call Trace: [ 173.387646][T13890] [ 173.387656][T13890] __dump_stack+0x1d/0x30 [ 173.387688][T13890] dump_stack_lvl+0x95/0xd0 [ 173.387713][T13890] dump_stack+0x15/0x1b [ 173.387737][T13890] should_fail_ex+0x263/0x280 [ 173.387816][T13890] should_fail+0xb/0x20 [ 173.387833][T13890] should_fail_usercopy+0x1a/0x20 [ 173.387853][T13890] _copy_to_user+0x20/0xa0 [ 173.387942][T13890] copy_siginfo_to_user+0x22/0xb0 [ 173.387994][T13890] x64_setup_rt_frame+0x2b4/0x4e0 [ 173.388021][T13890] arch_do_signal_or_restart+0x24b/0x450 [ 173.388049][T13890] exit_to_user_mode_loop+0x6a/0x6f0 [ 173.388072][T13890] do_syscall_64+0x1d3/0x2a0 [ 173.388115][T13890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.388136][T13890] RIP: 0033:0x7fec26abb58e [ 173.388186][T13890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 173.388205][T13890] RSP: 002b:00007fec25556fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.388226][T13890] RAX: 0000000000000001 RBX: 00007fec255576c0 RCX: 00007fec26abb58e [ 173.388239][T13890] RDX: 0000000000000001 RSI: 00007fec25557090 RDI: 0000000000000004 [ 173.388251][T13890] RBP: 00007fec25557090 R08: 0000000000000000 R09: 0000000000000000 [ 173.388270][T13890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.388282][T13890] R13: 00007fec26d76038 R14: 00007fec26d75fa0 R15: 00007ffe9afd9c98 [ 173.388309][T13890] [ 173.586947][T13892] bridge0: entered promiscuous mode [ 173.601095][T13892] vlan2: entered promiscuous mode [ 173.665627][T13900] __nla_validate_parse: 7 callbacks suppressed [ 173.665660][T13900] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2593'. [ 173.972874][T13936] ================================================================== [ 173.981046][T13936] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 173.988361][T13936] [ 173.990683][T13936] write to 0xffff888104d4b800 of 8 bytes by task 13934 on cpu 1: [ 173.998390][T13936] mas_wmb_replace+0xcf4/0xfa0 [ 174.003170][T13936] mas_wr_store_entry+0x1610/0x2990 [ 174.008382][T13936] mas_store_prealloc+0x72e/0xa60 [ 174.013423][T13936] vma_iter_store_new+0x1c5/0x200 [ 174.018473][T13936] mmap_region+0x16f8/0x1aa0 [ 174.023083][T13936] do_mmap+0x9b2/0xbd0 [ 174.027151][T13936] vm_mmap_pgoff+0x183/0x2d0 [ 174.031747][T13936] ksys_mmap_pgoff+0xc1/0x310 [ 174.036433][T13936] x64_sys_call+0x16bb/0x3000 [ 174.041122][T13936] do_syscall_64+0xc0/0x2a0 [ 174.045638][T13936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.051555][T13936] [ 174.053883][T13936] read to 0xffff888104d4b800 of 8 bytes by task 13936 on cpu 0: [ 174.061515][T13936] mas_state_walk+0x485/0x650 [ 174.066207][T13936] mas_walk+0x60/0x150 [ 174.070288][T13936] lock_vma_under_rcu+0xc9/0x210 [ 174.075322][T13936] do_user_addr_fault+0x232/0x1050 [ 174.080449][T13936] exc_page_fault+0x62/0xa0 [ 174.084958][T13936] asm_exc_page_fault+0x26/0x30 [ 174.089826][T13936] [ 174.092163][T13936] value changed: 0xffff88810477a006 -> 0xffff888104d4b800 [ 174.099266][T13936] [ 174.101591][T13936] Reported by Kernel Concurrency Sanitizer on: [ 174.107832][T13936] CPU: 0 UID: 0 PID: 13936 Comm: syz.2.2608 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.117736][T13936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.127797][T13936] ==================================================================