last executing test programs: 5m30.869506365s ago: executing program 4 (id=152): prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xe, 0x522}, 0x104141, 0x4, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0xff97}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 5m29.684454584s ago: executing program 4 (id=155): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$key(0xf, 0x3, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5m29.575707321s ago: executing program 4 (id=157): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x365, &(0x7f0000000700)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mkdirat(0xffffffffffffff9c, 0x0, 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) 5m28.967019987s ago: executing program 4 (id=159): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d4e9f3570a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c1, &(0x7f0000001880)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x1ffff, 0x9, 0x1b) 5m28.617067637s ago: executing program 4 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="04000000040000000400000001"], 0x50) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10f181) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x40045402, 0xfffffffffffffffe) r4 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@debug}, {@acl}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0xb6c, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f0000000080)) rmdir(&(0x7f00000001c0)='./bus\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r4}, 0x20) close(r0) 5m28.349829923s ago: executing program 4 (id=172): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) 5m28.302204765s ago: executing program 32 (id=171): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@data_err_ignore}, {@abort}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.events\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00'], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000050000000000000080000000850000001100000018110000", @ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x40000c, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, 0x400000000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x101, 0x20}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) 5m28.299303036s ago: executing program 33 (id=172): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) 5m26.52016562s ago: executing program 2 (id=181): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) 5m26.025437649s ago: executing program 2 (id=187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000ff0300000900000005"], 0x50) r1 = socket(0x2, 0x80805, 0x0) setsockopt(r1, 0x84, 0x80, &(0x7f0000000080)="1a00000002000000", 0x8) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x37}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 5m25.088852794s ago: executing program 2 (id=193): socket$netlink(0x10, 0x3, 0x0) unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0xfffffd0d}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x9405, 0x0, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) r2 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2092, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x2) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xa0000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) write$UHID_CREATE2(r4, 0x0, 0x118) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) memfd_create(&(0x7f0000000840)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xb3\x84[\xb5R\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/684, 0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x2, 0x6) write$cgroup_pid(r9, &(0x7f0000000000), 0xffffff98) splice(r5, 0x0, r9, 0x0, 0x80000000, 0x0) write(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r10 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_setup(0x38a9, &(0x7f0000000480)={0x0, 0xffffffff, 0x10100, 0x0, 0x175}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r10}) 5m24.557820345s ago: executing program 2 (id=198): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800082, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0x191, &(0x7f00000002c0)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x4}) write$sndseq(r0, &(0x7f00000004c0)=[{0x84, 0x77, 0x1, 0x0, @tick=0x4a, {}, {}, @raw32={[0x7]}}, {0x3, 0xc, 0x80, 0x10, @time={0x5c, 0xffff}, {0x6, 0x7}, {0x0, 0x9}, @time=@time={0x5, 0xb}}, {0x40, 0x0, 0x7, 0x8e, @time={0x10000, 0x7ff}, {0xff, 0x3}, {0x2, 0x2}, @queue={0x2, {0x108, 0x8}}}, {0x9, 0xcc, 0x88, 0x2, @tick=0x8001, {0xe, 0x5}, {0x9, 0xf6}, @time=@tick=0x4}], 0x70) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) bind$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, 0xf, 0x2}, 0x20) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) stat(0x0, 0x0) rt_sigtimedwait(&(0x7f0000000300)={[0x7fffffffffffffff]}, 0x0, 0x0, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 5m24.488959519s ago: executing program 2 (id=199): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 5m24.206182696s ago: executing program 2 (id=200): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffe}}], 0x18}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="21bbb9"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x60241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80040) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000140)={{0x3, 0x7a}, 'port0\x00', 0x99, 0x100000, 0x3, 0x3, 0x7, 0x80000000, 0x2, 0x0, 0x2, 0xff}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@multicast1, @in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0xfffffffd, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0x44}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @local}, 0xc) 5m24.202357386s ago: executing program 34 (id=200): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffe}}], 0x18}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="21bbb9"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x60241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80040) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000140)={{0x3, 0x7a}, 'port0\x00', 0x99, 0x100000, 0x3, 0x3, 0x7, 0x80000000, 0x2, 0x0, 0x2, 0xff}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@multicast1, @in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0xfffffffd, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0x44}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @local}, 0xc) 5m1.699692225s ago: executing program 3 (id=495): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0xeffd) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "3c8d6ed996959079", "6a8c559b1df27b094c6b646d7fa5fdfe", "afb069a3", "0000000000000006"}, 0x28) r3 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5m0.825167006s ago: executing program 3 (id=499): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00ebffffff7c0000000000000040000000000000008400000000000000ffffffff060038"], 0x178) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1281, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r2, 0x701, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000840) writev(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)="8ca0a332595524bb3efc53c09210", 0xe}], 0x2) close(r0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r5 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, &(0x7f0000000180)) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x400, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') readv(r10, &(0x7f0000001180)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) socket$igmp6(0xa, 0x3, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 4m59.874168742s ago: executing program 3 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x800004c) 4m59.807628676s ago: executing program 3 (id=510): r0 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r1 = syz_clone(0x80100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b40)) migrate_pages(r1, 0xb, 0x0, &(0x7f0000005080)=0x1) setfsgid(0xee01) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000cc0)=""/4083, 0xff3}], 0x1}, 0x81}], 0x1, 0x2002, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00', 0x2}], 0x1}, 0x80054) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x45, 0x0, 0x2}, {}, {}, {0x20, 0x0, 0x0, 0x20}, {0x6}]}) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac14142100000000000000000000000020010000000000000000000000000000000000000000000001a80a0000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) ptrace(0x4206, r0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) wait4(r0, 0x0, 0x2, 0x0) 4m59.806975456s ago: executing program 5 (id=511): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth1_to_team\x00', 0x6f) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x4f, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x8a}], 0x1, 0x40000160, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000f933f13abf2d5e000c00000000000005000000000000006f08c7c704", @ANYRES32, @ANYBLOB="00000000000000000500"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28, @ANYRES64, @ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0104"], 0x1c}}, 0x4008054) r4 = getpid() perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x9, 0x3, 0x2, 0x20, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r4, 0xfffffffffffffffc, 0xffffffffffffffff, 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4a604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0xc162, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r6, 0x83c0550b, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KDGKBENT(r5, 0x4b46, &(0x7f0000000000)={0x7, 0x2, 0x1}) openat$zero(0xffffffffffffff9c, 0x0, 0x200802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="08000000040000e316008000010000000000000097d8d4ec40ad7076129f85769b3eaf9c6cb74f49fb454a24a955aff75df1b8f9005622c293730100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001180)={0x1, &(0x7f00000011c0)=[{0x806, 0x40, 0x0, 0x4}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x587, &(0x7f0000000bc0)="$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") 4m58.965343295s ago: executing program 3 (id=519): ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0x8000) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2, 0xc, 0x7, 0x2, 0x0, 0x9e82, 0x20, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x1, 0x3}, 0x10204, 0x4, 0xc55, 0x2, 0x3, 0x0, 0x3, 0x0, 0x100000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000180)=0x14f, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0e54040, &(0x7f0000000680)={[{@noblock_validity}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49d, &(0x7f0000000740)="$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") readv(r1, &(0x7f0000000300)=[{&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000580)=""/238, 0xee}], 0x2) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x4b75) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x2f, @loopback, 0x4e20, 0x0, 'dh\x00', 0x20, 0x0, 0x49}, 0x2c) 4m58.686497392s ago: executing program 5 (id=520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08003300ac1414bb1543472d2a32ccac2744750427e9e7a710f9b661288133683b970d20db1f31effadc59a335d615e4280880af9f61cdffb00e54f87456d0923d0ec53a2876a6991cba4b8da5808e9446de73c3d90b81bd3e320fe0157763c66c0304a868f2abf038ed33fe88d58fd5b9c70668c62aeeb89252164ac58c20bdf7815ee97500537bf72737af447c5d3d1316b8fa"], 0x20c}, 0x1, 0x0, 0x0, 0x80}, 0x24048041) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendto$inet6(r4, &(0x7f00000002c0)="a6", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250) 4m58.598221517s ago: executing program 3 (id=522): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYBLOB="36c9b22081bc1a093107fa128673d87b92d5c054c6368d2bd6038460844eb92b91257b6105b35a49d69d9b8df4d16010cfe51f310a87774d0e4f41f6aa7998fd2528a934806162eb56dbbe3810d45f4bd78228573601aaa33edd0724129842f95a2c7cb363024e1dee7963955a5163a0abff11e1ebadf510b0f0e8b2f6d3e441f2ac1b9be225aa0f5c1e7b66e091e3309ec3f4a919c3f3c7f5dcd74f3a2208d8", @ANYRES16, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xeffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) umount2(0x0, 0xb) 4m58.597647796s ago: executing program 5 (id=523): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@type_tag={0x6, 0x0, 0x0, 0x12, 0x5}, @float={0x44, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x2e, 0x61]}}, 0x0, 0x34, 0x0, 0x1, 0x20001000, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0x0, 0xffffff}, 0x50) r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8905, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a00000800000500"], 0x50}}, 0x4000850) 4m58.560833759s ago: executing program 35 (id=522): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYBLOB="36c9b22081bc1a093107fa128673d87b92d5c054c6368d2bd6038460844eb92b91257b6105b35a49d69d9b8df4d16010cfe51f310a87774d0e4f41f6aa7998fd2528a934806162eb56dbbe3810d45f4bd78228573601aaa33edd0724129842f95a2c7cb363024e1dee7963955a5163a0abff11e1ebadf510b0f0e8b2f6d3e441f2ac1b9be225aa0f5c1e7b66e091e3309ec3f4a919c3f3c7f5dcd74f3a2208d8", @ANYRES16, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xeffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) umount2(0x0, 0xb) 4m58.520075581s ago: executing program 5 (id=526): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x1ffff, 0x9, 0x1b) 4m58.382164819s ago: executing program 5 (id=529): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0xf6, 0x7, 0x24, @empty, @mcast1, 0x7, 0x20, 0x4, 0x4}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000583c2f823f5101092c39e83a833ebb6bf9d67141696195c11a297a8aead859ea50516b270b7a0a8628fbc8119a304c874e0c96d691c2f29bfa5fb65f9442e43a4925ac1eb6382e0be6783c83c0dc4b67a85d67c8a95f83af1aff", @ANYRES32=r1, @ANYBLOB="0200"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="030000000200"/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x207, &(0x7f0000000000), 0x1, 0x471, &(0x7f0000000580)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="0500"], 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0xa4, 0x10, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20215, 0x17001}, [@IFLA_VFINFO_LIST={0x68, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xc, 0xa}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x13c55d97}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffff8, 0x858, 0x252e3b58}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x5f64}}, @IFLA_VF_MAC={0x28, 0x1, {0x4}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_bridge\x00'}, @IFLA_EVENT={0x8, 0x2c, 0x800}]}, 0xa4}}, 0x800004c) ioctl$PTP_CLOCK_GETCAPS(r9, 0x80503d01, &(0x7f0000000040)) 4m58.140957273s ago: executing program 5 (id=533): ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0x8000) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2, 0xc, 0x7, 0x2, 0x0, 0x9e82, 0x20, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x1, 0x3}, 0x10204, 0x4, 0xc55, 0x2, 0x3, 0x0, 0x3, 0x0, 0x100000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0e54040, &(0x7f0000000680)={[{@noblock_validity}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49d, &(0x7f0000000740)="$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") readv(r1, &(0x7f0000000300)=[{&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000580)=""/238, 0xee}], 0x2) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x4b75) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x2f, @loopback, 0x4e20, 0x0, 'dh\x00', 0x20, 0x0, 0x49}, 0x2c) 4m58.083675487s ago: executing program 36 (id=533): ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0x8000) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2, 0xc, 0x7, 0x2, 0x0, 0x9e82, 0x20, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x1, 0x3}, 0x10204, 0x4, 0xc55, 0x2, 0x3, 0x0, 0x3, 0x0, 0x100000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0e54040, &(0x7f0000000680)={[{@noblock_validity}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49d, &(0x7f0000000740)="$eJzs3M1vFOUfAPDvbLel5eUHP0QUAloFI/GlpeVFDiZGowkHjUY9YDzVbSFIAQM1EUIEPWCMB0Pi3Xg08S/wpBejnkz0iHdDQgwX0NOa2Zlpu9vdtgsLW7qfTzLs88wzy/N895mZfeaZ6QbQs4bTf5KI9RFxNSI2RkS5cYPh7OXWjQuVf25cqCRRrb71d5K+LW7euFDJ/4vaklqXrahW8/yaJvVefjdiYnp66kyeH505+cHo2XPnnz1+cuLY1LGpU+OHDu3ft3Pg4PiBjsSZxnVz+8end2w7/M6V1ypHrrz3y3dpe9fn5UUcnTScfbpNPdHpyrpsw7x0Uu5iQ2hL2m/9+XI1qn19MTRbtjFe+bSrjQPutnKz7+fcpSqwiqUDdaAXFV/06fVvsSw1Xujg2KPrrr+YRZTGfStfspJylPJt+huubztpMCKOXPr363SJuzQPAQAw3w/p+OeZZuO/UmyNi7Pb/S+/h7IpIv4fEZsj4oGI2BIRD0bE1oh4KCIebrP+xjskC8c/pWt12WpfmzUsLh3/PZ/f26of/xWjv9jUl+c21OLvT44en57am38me6J/TZofq3tLvR9f/v3LxnVf5NPsw/PGf+mS1l8fYela4wTd5MTMxJ1Hnrn+ScT2crP4k9mBfhIR2yJi+23Wcfypb3e0KmsWfzEWXlIHrkSq30Q8mfX/pWiIv5AsuD9Zzu9Pjj13cPzA6GBMT+0dLfaKhX797fIbrepvM/6OX4ak/b+26f6fxZ9eIyaDEWfPnT9Ru1979jYq+fOzStKiaEsef3/L+Bfu/5XdEQPJ27X0QLFV/jqQvJq+DBXrP5qYmTkzPvfeIl97Hcvi37NrLv6JmDv+N2eXZ5H88ebs+3dGxCMR8Wjed49FxOMRsWuR8H9+aff7rcpa9/8is/IdlMY/uUj/p6e8NDXX/+0n+k789H2r+qtL7v9p/++vpfbka5Zz/ltuA+/kswMAAID7Ran2DHxSGplNl0ojI9kz/FtibakcEU8fPf3hqcnsWflN0V8qZro2zpsPHcvnhov8eEN+Xz5v/FXfUC0/Ujk9Pdnt4KHHrWtx/Kf+6uytFmAlWlVP9AFtcfxD76o//ls9qgGsRr7/oXe90O0GAN0x0Hz1xXvdDqAr2h//D96VdgD3nut/6F2Of+hdjn/oSS3/Nr50R3/yf78myiugGcVPWTQWDXW7YfWJKC25TWmFNHV5idc/zz73ldKeIlFe9o9Z3GZiTdOipqeLw+vv3akJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgI/4LAAD///3F2Dg=") readv(r1, &(0x7f0000000300)=[{&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000580)=""/238, 0xee}], 0x2) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x4b75) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x2f, @loopback, 0x4e20, 0x0, 'dh\x00', 0x20, 0x0, 0x49}, 0x2c) 4m57.665276381s ago: executing program 7 (id=535): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x800004c) 4m57.612127385s ago: executing program 7 (id=536): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) listen(r0, 0x800) writev(r0, 0x0, 0x0) 4m57.538385979s ago: executing program 7 (id=537): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4m57.442211894s ago: executing program 7 (id=538): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @loopback, 0xffffcd0b}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000003c0)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x40300, 0x0, 0x2, 0x1, 0x6, 0xb}, 0x20) sendmsg$unix(r0, &(0x7f0000010040)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x404c0c8}, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rmdir(&(0x7f0000000000)='./file0/file0\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xe408d604c2d1c231}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004850}, 0x8040) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757812"], 0x21) 4m56.944766044s ago: executing program 7 (id=541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000540)=""/15, 0x2}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000300)={0x2, 0x2, 0x4, 0x3, 0x6, 0xffff29fe}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="6836e0521b0b4bc7db669b2f00bf52585f9bb5970135847b98a8aff0e9f4fd362395b25401d541d3baa4640b9165a856df1bd2c34328285109199d0591dd884fe64a9fa16f912a828c46eae031b146041b85e3e147b9a94af04551b51c4358c42a", @ANYBLOB="570561f826f38f36d93da098af9eda22790f3c8394884035455376602e5cb233e4c112709ed7a0efaf321dc3428c6f9f6a8ab842f1072c0ac93538756fa6f92560c63c47fe3bf8e52d7f8a91ac17ed29a1dfc154fd8cea4a7bb3c5724705e8d554313b0de768bb359cd993c45ce41ddb7fc8742f55de994c097444e33ed5f91c93792afbf76e7a164105a2b5c616cb26d55db726486c3631dc74e3ec86c7bf14d6ab5509cd4ca23ec426064326f3b0469068595e3d3947fc4b6983aa9ce8e6f5ea285f830455b7", @ANYRES16=r2], &(0x7f0000000980)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m56.720989957s ago: executing program 7 (id=544): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x800004c) 4m56.714789987s ago: executing program 37 (id=544): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x800004c) 2.312828773s ago: executing program 1 (id=4670): socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYRESOCT=r2], 0x270}}, 0x0) 2.300781254s ago: executing program 6 (id=4671): syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYBLOB="40ab350819f59ad18869eafd68245d129025873e4b45e00c913baaf64ebdd60662fbdb740f4adfffe15341ce1534487b16974f35e426906c5aefc3ce884df92a1f7a2b2a9555f22f5b64e1b860"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000001c0)={0x0, @aes256, 0x0, @desc2}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x2c, &(0x7f0000000340)=[@in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e20, 0x18bd, @remote, 0x1e5a}]}, &(0x7f0000000440)=0x10) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="4e56f7ba1eb9fe7d0e4d8a100b2863a927aff92eea282ddad128eeb6c80a738edf9f2234c29fee1c62e496f5741e35ec55e25fa82e8db58a8f7212317262642eb3076a6ddf14a4e18397d5a3c3a3753a817a37891e83e066c4ef66aca88cb1a701efbd126d6e5e7eb45e8773689d9a7cd0b41507a3c78ac56b32", 0x7a}], 0x1}, 0x8000) 2.262795287s ago: executing program 1 (id=4672): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x7, 0x9b, 0x5, 0x6, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x4, 0x7, 0x0, 0x8, 0x4e}]}, 0x30}}, 0x4008000) 1.991245662s ago: executing program 6 (id=4674): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251f, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x800000000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2c, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)={0x2, 0x9, 0x4, 0x3, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r3) socket$rds(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x40000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x4c8, 0xffffffff, 0x0, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x40, [0x0, 0xb], 0x0, 0x30, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @local}, @loopback, @mcast1, @local, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @empty, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, @local, @mcast2, @empty, @mcast1], 0x7}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xa}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x930, 0x1, 0x84, 0x1}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x7f, 0x9, 0x0, 0x0, "95377b64521102a2e56440d00bd14520160550194c59fccf5e272945cb464c17dd6210060705f2c00e05415aa555074186189930a18022cc594d77cb689b80a2"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.69015797s ago: executing program 0 (id=4679): syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYBLOB="40ab350819f59ad18869eafd68245d129025873e4b45e00c913baaf64ebdd60662fbdb740f4adfffe15341ce1534487b16974f35e426906c5aefc3ce884df92a1f7a2b2a9555f22f5b64e1b860"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000001c0)={0x0, @aes256, 0x0, @desc2}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x2c, &(0x7f0000000340)=[@in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e20, 0x18bd, @remote, 0x1e5a}]}, &(0x7f0000000440)=0x10) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="4e56f7ba1eb9fe7d0e4d8a100b2863a927aff92eea282ddad128eeb6c80a738edf9f2234c29fee1c62e496f5741e35ec55e25fa82e8db58a8f7212317262642eb3076a6ddf14a4e18397d5a3c3a3753a817a37891e83e066c4ef66aca88cb1a701efbd126d6e5e7eb45e8773689d9a7cd0b41507a3c78ac56b32", 0x7a}], 0x1}, 0x8000) 1.542869539s ago: executing program 0 (id=4680): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x370, 0xffffffff, 0xffffffff, 0x370, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x2dbf62da84dcba83}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x3, 0x4, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x500) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000280)={{0x0, 0x2}, 0x0, 0xffff7fff, 0x600, {0x80}, 0x0, 0xdee}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)=ANY=[@ANYBLOB="000082430252b41b6161616161616161616161616161616161616161616161616161616161313131313131313131313131313131313131"], 0x48, r5) keyctl$setperm(0x5, r5, 0x30925) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x120, 0x1170, 0x1398, 0x120, 0x1170, 0x240, 0x1398, 0x1398, 0x240, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x60}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@private0, @private0, [], [], '\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) keyctl$read(0xb, r5, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@private1, @in=@empty}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) getgid() ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) 1.469847853s ago: executing program 9 (id=4682): socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYRESOCT=r2], 0x270}}, 0x0) 1.452303524s ago: executing program 9 (id=4683): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="58000000100001042cbd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000900c431ee8f02000000f4e212181063191559c7e9d18183ad2de82c7562ba1f6dbe099b5aff73fb8df868b226c7fe9d7056bc978fb8bd30ecbfc7ba2a21394c5802290d6e2685165bd207b46055c9bcd2"], 0x58}, 0x1, 0x0, 0x0, 0xc861}, 0x40008c0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x294, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xd, 0x2, 0x68, 0x6d84}, {0xe2, 0xa5, 0x0, 0x4}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x294}}, 0x0) 1.402854257s ago: executing program 9 (id=4684): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket(0x840000000002, 0x3, 0x100) r4 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x3e) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x10}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000c40)=ANY=[@ANYBLOB]) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x3f}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000009c0)="b9ff5742c5a47ce5521c94590300600d698c", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001002cbd70000000000000000000", @ANYRES32=r12], 0x20}}, 0x2000e844) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r0, 0x4, r0}, 0x10) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r13, 0x0, 0x3, &(0x7f0000000100), 0x4) 1.402312827s ago: executing program 1 (id=4685): r0 = syz_usbip_server_init(0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000005200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000050000000100000003000000f271770ce64129813fc1bb3787486cd558f3fdf9f8750cf04820d30b435a37e923d89c3be9617f271313007cd0145418dbbd1141145c63a270f8c67fbf3cfd9a285ba0f328495da62de01d3e5376db6d58e26a9f404f71f32f39bf7037665d49f5803157be75595d8bccf761b4f4ac0cc86fff175225bd6498d7cb9dc16c9330c19e0853e33f2e407cbe432d71e32e8c5e3536259f7866e19c1a12ec6a354cd05dcfbb8c83eb5c5b73f4896118cab0ebec4f9797e38540fca92d98dbe2b8f3560fe9716f2cad88cc2c80cea56a535389a24101d39835b7a382a5a9b3808797220380e87df842f7d4931aa9ec4ed0920000000000"], 0x20c) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) set_mempolicy(0x3, 0x0, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001000)=@o_path={&(0x7f0000000fc0)='./file1\x00', 0x0, 0x8, r2}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001100)=@bpf_lsm={0x1d, 0x21, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, {}, {}, [@generic={0x7, 0x5, 0x4, 0x5, 0x9}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x9, 0xb5, &(0x7f0000000440)=""/181, 0x41000, 0x31, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x10, 0xc, 0xd3b3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001040)=[0xffffffffffffffff, r6, r0], &(0x7f0000001080)=[{0x4, 0x3, 0x9, 0x5}, {0x3, 0x5, 0x7, 0x7}, {0x0, 0x4, 0xb, 0x3}, {0x3, 0x2, 0x0, 0x2}, {0x1, 0x1, 0x5, 0x6}, {0x0, 0x4, 0x6, 0x2}], 0x10, 0xfffffffb}, 0x94) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x1fff8}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x8000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000011c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd23, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}, @TCA_RATE={0x6, 0x5, {0x40, 0x1}}]}, 0x50}}, 0x0) 1.340320691s ago: executing program 6 (id=4686): r0 = io_uring_setup(0x3e7a, &(0x7f0000000000)={0x0, 0xf27d, 0x1000, 0x3, 0x24e}) r1 = syz_io_uring_setup(0x5c4, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x1000000, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x0) 1.269255454s ago: executing program 0 (id=4688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0163e53105ff"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000006100000018110000646c6c2500000000002020207b1af8ff80000000ffffb702000008000000b703000000000000850007000000de4e9f8cf4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000200)={0x7, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0xff, 0x6, 0x2, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x88, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xeb, 0x1, @perf_config_ext={0x47e2, 0x9}, 0x140, 0x0, 0x5, 0x4, 0x3, 0x7ff, 0x800, 0x0, 0x7, 0x0, 0xa}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='\xaa\xaa\xaa\xaa\xaa') ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000) mkdirat$cgroup(r6, &(0x7f0000000180)='syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) close(r3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0xffffff07}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x104202, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) 1.216686898s ago: executing program 0 (id=4689): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) sendmsg(0xffffffffffffffff, 0x0, 0x4c054) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x10, 0x6, 0x0, 0x4, 0x8205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f0000000800), 0x2}, 0x0, 0x0, 0x0, 0x2, 0xf8, 0xa001, 0x5, 0x0, 0x40, 0x0, 0xfffffffffffffffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x588, 0x148, 0x230, 0x148, 0x300, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xc3b, 0xc3, 0x8, 0x1}}, @common=@hbh={{0x48}, {0x0, 0x5, 0x0, [0x0, 0x9, 0x1, 0xf, 0x647, 0x6, 0x7, 0x0, 0x45, 0x0, 0x8, 0xf, 0x6, 0x5, 0x5, 0x3], 0x8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @empty, [0xff000000], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7fff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0xfffffffc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x103c84a, &(0x7f0000000880)=ANY=[], 0x6, 0x2c0, &(0x7f0000000900)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000e00)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa8}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r5, 0x5) sendmsg$SEG6_CMD_SET_TUNSRC(r2, 0x0, 0x20000050) fsmount(0xffffffffffffffff, 0x0, 0x71) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r6], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0xc, &(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000010000000850000001600000095", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x0, 0x4, &(0x7f0000000800)=ANY=[], 0x0, 0x654c, 0x0, 0x0, 0x41000}, 0x94) 1.096036015s ago: executing program 9 (id=4690): perf_event_open(&(0x7f0000000100)={0x2, 0xd0, 0x65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_setup(0x1370, 0x0, &(0x7f0000000180)=0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xce90, 0x0, 0x3, 0x40004333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x421, @mcast1, 0x401, 0x4}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x1, 0x0, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x4, 0x3, 0x3, 0x1}, 0x8) 1.012727909s ago: executing program 8 (id=4691): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioperm(0x7, 0x2, 0x6) 881.238988ms ago: executing program 8 (id=4692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000d80)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x276) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffffc1, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x880}, 0x0) close(r0) 880.643768ms ago: executing program 9 (id=4693): socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYRESOCT=r2], 0x270}}, 0x0) 838.59404ms ago: executing program 8 (id=4694): r0 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 838.102821ms ago: executing program 9 (id=4695): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x7, 0x9b, 0x5, 0x6, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x4, 0x7, 0x0, 0x8, 0x4e}]}, 0x30}}, 0x4008000) 794.702943ms ago: executing program 0 (id=4696): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x1, @mcast2, 0x3bd358c7}}, 0x7, 0x4, 0xf06, 0xffffffff, 0x2, 0x81, 0x5}, 0x9c) r2 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/140, 0x8c}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) r4 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) 767.694905ms ago: executing program 8 (id=4697): syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYBLOB="40ab350819f59ad18869eafd68245d129025873e4b45e00c913baaf64ebdd60662fbdb740f4adfffe15341ce1534487b16974f35e426906c5aefc3ce884df92a1f7a2b2a9555f22f5b64e1b860"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000001c0)={0x0, @aes256, 0x0, @desc2}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x2c, &(0x7f0000000340)=[@in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e20, 0x18bd, @remote, 0x1e5a}]}, &(0x7f0000000440)=0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="4e56f7ba1eb9fe7d0e4d8a100b2863a927aff92eea282ddad128eeb6c80a738edf9f2234c29fee1c62e496f5741e35ec55e25fa82e8db58a8f7212317262642eb3076a6ddf14a4e18397d5a3c3a3753a817a37891e83e066c4ef66aca88cb1a701efbd126d6e5e7eb45e8773689d9a7cd0b41507a3c78ac56b32", 0x7a}], 0x1}, 0x8000) 659.812661ms ago: executing program 1 (id=4698): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x370, 0xffffffff, 0xffffffff, 0x370, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x2dbf62da84dcba83}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x3, 0x4, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x500) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000280)={{0x0, 0x2}, 0x0, 0xffff7fff, 0x600, {0x80}, 0x0, 0xdee}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)=ANY=[@ANYBLOB="000082430252b41b6161616161616161616161616161616161616161616161616161616161313131313131313131313131313131313131"], 0x48, r5) keyctl$setperm(0x5, r5, 0x30925) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x120, 0x1170, 0x1398, 0x120, 0x1170, 0x240, 0x1398, 0x1398, 0x240, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x60}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@private0, @private0, [], [], '\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) keyctl$read(0xb, r5, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@private1, @in=@empty}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) getgid() ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) 597.142934ms ago: executing program 8 (id=4699): syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYBLOB="40ab350819f59ad18869eafd68245d129025873e4b45e00c913baaf64ebdd60662fbdb740f4adfffe15341ce1534487b16974f35e426906c5aefc3ce884df92a1f7a2b2a9555f22f5b64e1b860"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000001c0)={0x0, @aes256, 0x0, @desc2}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x2c, &(0x7f0000000340)=[@in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e20, 0x18bd, @remote, 0x1e5a}]}, &(0x7f0000000440)=0x10) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="4e56f7ba1eb9fe7d0e4d8a100b2863a927aff92eea282ddad128eeb6c80a738edf9f2234c29fee1c62e496f5741e35ec55e25fa82e8db58a8f7212317262642eb3076a6ddf14a4e18397d5a3c3a3753a817a37891e83e066c4ef66aca88cb1a701efbd126d6e5e7eb45e8773689d9a7cd0b41507a3c78ac56b32", 0x7a}], 0x1}, 0x8000) 422.017635ms ago: executing program 1 (id=4700): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x370, 0xffffffff, 0xffffffff, 0x370, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x2dbf62da84dcba83}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x3, 0x4, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x500) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000280)={{0x0, 0x2}, 0x0, 0xffff7fff, 0x600, {0x80}, 0x0, 0xdee}) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)=ANY=[@ANYBLOB="000082430252b41b6161616161616161616161616161616161616161616161616161616161313131313131313131313131313131313131"], 0x48, r6) keyctl$setperm(0x5, r6, 0x30925) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x120, 0x1170, 0x1398, 0x120, 0x1170, 0x240, 0x1398, 0x1398, 0x240, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x60}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@private0, @private0, [], [], '\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) keyctl$read(0xb, r6, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@private1, @in=@empty}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) getgid() ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) 421.469816ms ago: executing program 0 (id=4701): socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000009c0)={0x0, {{0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}}, {{0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}}}, 0x108) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a"], 0x5c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000056}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080045) 396.714937ms ago: executing program 6 (id=4702): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xe, 0x522}, 0x104141, 0x4, 0x0, 0x7, 0x4000000000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0xa2700, 0x80}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x9}}}]}}]}, 0x58}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="810000000900000000288e10fc0000008510000002000000186800000e3838000000000000002400000077863000000000001812", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x249, 0xa6, &(0x7f0000000240)=""/166, 0x41100, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x10, 0xd, 0x8d66}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x3, 0x4, 0x8, 0x8}, {0x1, 0x4, 0x1, 0xa}, {0x5, 0x5, 0x5, 0x4}, {0x2, 0x4, 0x7, 0x8}], 0x10, 0x8e}, 0x94) ppoll(&(0x7f00000004c0)=[{r0, 0x808}, {r1, 0x4482}, {r4, 0x4010}, {r0, 0x101}], 0x4, &(0x7f0000000500), &(0x7f0000000540)={[0x4]}, 0x8) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat(0xffffffffffffff9c, 0x0, 0x200000, 0x4) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) mkdir(0x0, 0xfc) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) pwritev(r9, &(0x7f0000000780)=[{&(0x7f0000000100)="80fd", 0x2}], 0x1, 0x0, 0x9) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 358.690559ms ago: executing program 8 (id=4703): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x202000, 0x0) semget$private(0x0, 0x3, 0x20) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000039000900f036d67600dfffeb03000000040000000c0001800600060080"], 0x24}}, 0x10) ppoll(&(0x7f0000000300)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x106200, 0x6, 0x20da, 0x5, 0xa, 0x1, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$inet(0x2, 0x2, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r6, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004) syz_clone3(0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) msgsnd(0x0, &(0x7f0000000e00)={0x1, "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"}, 0xfd1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x3, 0x7, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r2, &(0x7f0000000000)=""/4096, 0x1000, 0x4) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) 245.974156ms ago: executing program 1 (id=4704): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x20000, &(0x7f0000003240)=ANY=[], 0x6, 0x365, &(0x7f0000000240)="$eJzs3c9rM0UYwPEnaZI3SWmTgygK0sFe9LK00bMYpAUhYGkbsRWEbbvRkDUp2VCNiG1PXsW7J8FD6c2Ch4L2H+jFm15E8NaL4MEe1JX9lWySTWtD0mj7/cBLJjPzbGZ3Ji/Pptns1duff1CrWFpFb0k8rSQmInItkpe4BGL+Y9wtpyTsSF6a/f3H5ze2ymmvQq0WN18uKKXmF7778JOM3+38iVzm3736rfDr5dOXz179vfl+1VJVS9UbLaWrncbPLX3HNNRe1appSq2Zhm4Zqlq3jKbX/o2/HbOxv99Wen1vLrvfNCxL6fW2qhlt1WqoVrOt9Pf0al1pmqbmsoLblE/W1/XiiMG7Yx4MJqTZLOozIpIZaCmfTGVAAABgqvrz/7iT0o+S/2/LfKm0sq6czt38//SFi9bsW2fzfv5/norK/1/5ydtWT/7vnE508/+Gd35QuT3//1LukP8PZkSPy8j5f34Cg8FoFlIDVbGeZ07+n/Xfv67jd06X3AL5PwAAAAAAAAAAAAAAAAAAAAAA/wfXtp2zbTsXPAb/upcQ+M/xIA2b/yciknZm32b+H7KNrW1JuxfuOXNsfnZQPih7j36HCxExxfjL7uesjeDKI+XIy/fmoR9/eFCecVuKFak68bIsOcm76ykUb9urb5RWlpXHj+9cppQNxxckJ0+F4791V6cTX+iN918/JS8uhuI1yckPu9IQU/bcyO7rf7qs1OtvlvriM24/Efnl3icFAAAAAIAx01RH5Pm7pg1r935lpFhxPyYyZEly8mf0+f1S5Pl5IvdcYtp7DwAAAADA42C1P67pEjeabsE0owoZGdo0hkKipyYpIpGdU301yZu2PBPaw387npT3fZfY3aJM00j3dv4qOKp3OQjBFymcgXea/DuqyGiHN9h/tyaWGH2aYkfiLoCjcFNchkQlQzWJ/sEvOBUq8rUWhw7j2N+RTk3wsVFqyHGWtcHtxG+Y0+RAjR0bbT0/88XXf4zvDfLqmb8CPrq987Fp2IcybFJuXL1RUclJ/78DAAAA4P51k/6g5rVwc/hGIuGb5fCXewAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxmgiP+nXV5j2PgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Ff8EAAD//7vA8MY=") r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000010c0)) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 15.657919ms ago: executing program 6 (id=4705): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x1, @mcast2, 0x3bd358c7}}, 0x7, 0x4, 0xf06, 0xffffffff, 0x2, 0x81, 0x5}, 0x9c) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) (fail_nth: 3) 0s ago: executing program 6 (id=4706): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000b80), 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x1}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) kernel console output (not intermixed with test programs): cd vhci_hcd.0: vhci_device speed not set [ 340.713525][T15906] CPU: 1 UID: 0 PID: 15906 Comm: syz.0.3681 Not tainted syzkaller #0 PREEMPT(full) [ 340.713696][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.713709][T15906] Call Trace: [ 340.713716][T15906] [ 340.713725][T15906] __dump_stack+0x1d/0x30 [ 340.713753][T15906] dump_stack_lvl+0x95/0xd0 [ 340.713776][T15906] dump_stack+0x15/0x1b [ 340.713827][T15906] should_fail_ex+0x263/0x280 [ 340.713854][T15906] should_failslab+0x8c/0xb0 [ 340.713895][T15906] __kmalloc_noprof+0xb8/0x4e0 [ 340.713916][T15906] ? io_cache_alloc_new+0x2a/0xb0 [ 340.713954][T15906] io_cache_alloc_new+0x2a/0xb0 [ 340.713980][T15906] io_msg_alloc_async+0xfb/0x190 [ 340.714086][T15906] io_connect_prep+0x118/0x170 [ 340.714111][T15906] io_submit_sqes+0x747/0x1260 [ 340.714156][T15906] __se_sys_io_uring_enter+0x1c9/0xf50 [ 340.714188][T15906] ? __fget_files+0x184/0x1c0 [ 340.714211][T15906] ? mutex_unlock+0x4e/0x90 [ 340.714238][T15906] ? fput+0x8f/0xc0 [ 340.714297][T15906] __x64_sys_io_uring_enter+0x78/0x90 [ 340.714328][T15906] x64_sys_call+0x1e16/0x3020 [ 340.714356][T15906] do_syscall_64+0x12c/0x370 [ 340.714422][T15906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.714450][T15906] RIP: 0033:0x7f305097bf79 [ 340.714468][T15906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.714487][T15906] RSP: 002b:00007f304f3cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 340.714508][T15906] RAX: ffffffffffffffda RBX: 00007f3050bf5fa0 RCX: 00007f305097bf79 [ 340.714571][T15906] RDX: 000000000000fd5d RSI: 00000000000047fa RDI: 0000000000000004 [ 340.714585][T15906] RBP: 00007f304f3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 340.714627][T15906] R10: 0200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.714640][T15906] R13: 00007f3050bf6038 R14: 00007f3050bf5fa0 R15: 00007fff9c398a78 [ 340.714660][T15906] [ 340.774721][T15911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3682'. [ 341.022175][T15911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3682'. [ 341.165764][T15926] FAULT_INJECTION: forcing a failure. [ 341.165764][T15926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.179376][T15926] CPU: 0 UID: 0 PID: 15926 Comm: syz.0.3688 Not tainted syzkaller #0 PREEMPT(full) [ 341.179406][T15926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.179456][T15926] Call Trace: [ 341.179464][T15926] [ 341.179472][T15926] __dump_stack+0x1d/0x30 [ 341.179534][T15926] dump_stack_lvl+0x95/0xd0 [ 341.179605][T15926] dump_stack+0x15/0x1b [ 341.179637][T15926] should_fail_ex+0x263/0x280 [ 341.179659][T15926] should_fail+0xb/0x20 [ 341.179681][T15926] should_fail_usercopy+0x1a/0x20 [ 341.179709][T15926] _copy_from_user+0x1c/0xb0 [ 341.179783][T15926] input_event_from_user+0x5e/0x190 [ 341.179805][T15926] ? input_inject_event+0x104/0x120 [ 341.179834][T15926] evdev_write+0x1b0/0x2b0 [ 341.179937][T15926] ? __pfx_evdev_write+0x10/0x10 [ 341.179960][T15926] vfs_write+0x269/0x9f0 [ 341.179985][T15926] ? __rcu_read_unlock+0x4e/0x70 [ 341.180031][T15926] ? __fget_files+0x184/0x1c0 [ 341.180056][T15926] ksys_write+0xdc/0x1a0 [ 341.180084][T15926] __x64_sys_write+0x40/0x50 [ 341.180131][T15926] x64_sys_call+0x27e1/0x3020 [ 341.180156][T15926] do_syscall_64+0x12c/0x370 [ 341.180256][T15926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.180279][T15926] RIP: 0033:0x7f305097bf79 [ 341.180296][T15926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.180316][T15926] RSP: 002b:00007f304f3cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 341.180337][T15926] RAX: ffffffffffffffda RBX: 00007f3050bf5fa0 RCX: 00007f305097bf79 [ 341.180353][T15926] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 341.180364][T15926] RBP: 00007f304f3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 341.180378][T15926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.180393][T15926] R13: 00007f3050bf6038 R14: 00007f3050bf5fa0 R15: 00007fff9c398a78 [ 341.180412][T15926] [ 341.647166][T15957] FAULT_INJECTION: forcing a failure. [ 341.647166][T15957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.656824][T15952] xt_hashlimit: size too large, truncated to 1048576 [ 341.675793][T15957] CPU: 0 UID: 0 PID: 15957 Comm: syz.6.3697 Not tainted syzkaller #0 PREEMPT(full) [ 341.675823][T15957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.675836][T15957] Call Trace: [ 341.675914][T15957] [ 341.675922][T15957] __dump_stack+0x1d/0x30 [ 341.675971][T15957] dump_stack_lvl+0x95/0xd0 [ 341.675990][T15957] dump_stack+0x15/0x1b [ 341.676008][T15957] should_fail_ex+0x263/0x280 [ 341.676029][T15957] should_fail+0xb/0x20 [ 341.676074][T15957] should_fail_usercopy+0x1a/0x20 [ 341.676101][T15957] _copy_from_user+0x1c/0xb0 [ 341.676131][T15957] ___sys_sendmsg+0xc1/0x1e0 [ 341.676183][T15957] ? path_openat+0x1b01/0x2050 [ 341.676219][T15957] __sys_sendmmsg+0x185/0x320 [ 341.676257][T15957] __x64_sys_sendmmsg+0x57/0x70 [ 341.676327][T15957] x64_sys_call+0x27aa/0x3020 [ 341.676410][T15957] do_syscall_64+0x12c/0x370 [ 341.676445][T15957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.676467][T15957] RIP: 0033:0x7ff7a7bcbf79 [ 341.676506][T15957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.676522][T15957] RSP: 002b:00007ff7a661f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 341.676540][T15957] RAX: ffffffffffffffda RBX: 00007ff7a7e45fa0 RCX: 00007ff7a7bcbf79 [ 341.676554][T15957] RDX: 3284b164842c97f7 RSI: 0000200000000c40 RDI: 0000000000000004 [ 341.676570][T15957] RBP: 00007ff7a661f090 R08: 0000000000000000 R09: 0000000000000000 [ 341.676623][T15957] R10: 0000000000008014 R11: 0000000000000246 R12: 0000000000000001 [ 341.676636][T15957] R13: 00007ff7a7e46038 R14: 00007ff7a7e45fa0 R15: 00007fff4ee9c6e8 [ 341.676656][T15957] [ 342.048617][T15973] FAULT_INJECTION: forcing a failure. [ 342.048617][T15973] name failslab, interval 1, probability 0, space 0, times 0 [ 342.093768][T15973] CPU: 1 UID: 0 PID: 15973 Comm: syz.6.3701 Not tainted syzkaller #0 PREEMPT(full) [ 342.093868][T15973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.093880][T15973] Call Trace: [ 342.093886][T15973] [ 342.093894][T15973] __dump_stack+0x1d/0x30 [ 342.093917][T15973] dump_stack_lvl+0x95/0xd0 [ 342.093955][T15973] dump_stack+0x15/0x1b [ 342.093989][T15973] should_fail_ex+0x263/0x280 [ 342.094013][T15973] should_failslab+0x8c/0xb0 [ 342.094119][T15973] __kmalloc_noprof+0xb8/0x4e0 [ 342.094162][T15973] ? sel_write_validatetrans+0x1c6/0x370 [ 342.094330][T15973] ? _copy_from_user+0x89/0xb0 [ 342.094356][T15973] sel_write_validatetrans+0x1c6/0x370 [ 342.094431][T15973] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 342.094504][T15973] vfs_write+0x269/0x9f0 [ 342.094528][T15973] ? __rcu_read_unlock+0x4e/0x70 [ 342.094547][T15973] ? __fget_files+0x184/0x1c0 [ 342.094565][T15973] ? mutex_lock+0x57/0x90 [ 342.094652][T15973] ksys_write+0xdc/0x1a0 [ 342.094680][T15973] __x64_sys_write+0x40/0x50 [ 342.094764][T15973] x64_sys_call+0x27e1/0x3020 [ 342.094790][T15973] do_syscall_64+0x12c/0x370 [ 342.094821][T15973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.094883][T15973] RIP: 0033:0x7ff7a7bcbf79 [ 342.094898][T15973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.094923][T15973] RSP: 002b:00007ff7a661f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 342.094945][T15973] RAX: ffffffffffffffda RBX: 00007ff7a7e45fa0 RCX: 00007ff7a7bcbf79 [ 342.094960][T15973] RDX: 0000000000000073 RSI: 0000200000000780 RDI: 0000000000000003 [ 342.094973][T15973] RBP: 00007ff7a661f090 R08: 0000000000000000 R09: 0000000000000000 [ 342.094984][T15973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.094996][T15973] R13: 00007ff7a7e46038 R14: 00007ff7a7e45fa0 R15: 00007fff4ee9c6e8 [ 342.095025][T15973] [ 342.102876][T15948] chnl_net:caif_netlink_parms(): no params data found [ 342.393850][T15948] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.416936][T15948] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.424114][T15948] bridge_slave_0: entered allmulticast mode [ 342.437849][T15948] bridge_slave_0: entered promiscuous mode [ 342.464517][T15948] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.479139][ T28] audit: type=1400 audit(1771153812.910:3906): avc: denied { write } for pid=15987 comm="syz.8.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 342.484093][T15948] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.532831][T15948] bridge_slave_1: entered allmulticast mode [ 342.597702][T15948] bridge_slave_1: entered promiscuous mode [ 342.621081][T11325] usb 19-1: enqueue for inactive port 0 [ 342.626663][T11325] usb 19-1: enqueue for inactive port 0 [ 342.635371][ T28] audit: type=1400 audit(1771153813.060:3907): avc: denied { append } for pid=15991 comm="syz.8.3706" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 342.726958][T11325] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 342.887578][ T6095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.906454][ T6095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.935058][ T6095] bond0 (unregistering): Released all slaves [ 342.950149][ T6095] bond1 (unregistering): Released all slaves [ 343.101267][T15948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.113904][T15948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.157317][ T6095] tipc: Disabling bearer [ 343.167484][ T6095] tipc: Left network mode [ 343.198253][ T6095] hsr_slave_0: left promiscuous mode [ 343.217395][ T6095] hsr_slave_1: left promiscuous mode [ 343.223469][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.339977][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.359551][ T6095] veth1_vlan: left allmulticast mode [ 343.376326][ T6095] team0 (unregistering): Port device macvlan1 removed [ 343.424499][ T6095] team0 (unregistering): Port device team_slave_1 removed [ 343.525351][T16032] xt_hashlimit: size too large, truncated to 1048576 [ 343.538291][T15948] team0: Port device team_slave_0 added [ 343.552607][T15948] team0: Port device team_slave_1 added [ 343.574139][T15948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.596676][T15948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.626139][T15948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.638848][T15948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.646310][T15948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.647339][T16037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.674050][T15948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.715596][T15948] hsr_slave_0: entered promiscuous mode [ 343.722740][T15948] hsr_slave_1: entered promiscuous mode [ 343.728735][T15948] debugfs: 'hsr0' already exists in 'hsr' [ 343.734592][T15948] Cannot create hsr debugfs directory [ 343.743386][T16037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.888732][ T6095] IPVS: stop unused estimator thread 0... [ 344.148586][T15948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.160480][T15948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.171020][T15948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.189422][T15948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.299188][T15948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.340178][T15948] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.383352][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.390456][ T6095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.405344][T16083] delete_channel: no stack [ 344.416920][T16083] delete_channel: no stack [ 344.418392][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.428437][ T6095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.448984][T16095] program syz.9.3720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.470265][T15948] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.483549][T15948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.507445][T16095] syzkaller0: entered promiscuous mode [ 344.513011][T16095] syzkaller0: entered allmulticast mode [ 344.522542][T16095] tipc: Started in network mode [ 344.531398][T16095] tipc: Node identity 2e1b36b34145, cluster identity 4711 [ 344.547315][T16095] tipc: Enabled bearer , priority 0 [ 344.565018][T16094] tipc: Resetting bearer [ 344.581187][T16094] tipc: Disabling bearer [ 344.607424][T15948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.667670][T16121] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3724'. [ 344.696456][T15948] veth0_vlan: entered promiscuous mode [ 344.706735][T16121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.719608][T15948] veth1_vlan: entered promiscuous mode [ 344.726213][T16121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.749077][T15948] veth0_macvtap: entered promiscuous mode [ 344.757105][T15948] veth1_macvtap: entered promiscuous mode [ 344.760411][T16132] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3728'. [ 344.767986][T15948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.781914][T15948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.807030][ T6095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.841815][ T6095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.855751][ T6095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.875559][ T6095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.975016][ T28] audit: type=1400 audit(1771153815.380:3908): avc: denied { accept } for pid=16136 comm="syz.6.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.160770][T16150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.170029][T16150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.264843][ T28] audit: type=1400 audit(1771153815.690:3909): avc: denied { listen } for pid=16153 comm="syz.8.3735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.293230][ T28] audit: type=1400 audit(1771153815.720:3910): avc: denied { shutdown } for pid=16153 comm="syz.8.3735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.313581][ T28] audit: type=1400 audit(1771153815.720:3911): avc: denied { read } for pid=16153 comm="syz.8.3735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.370826][T16162] FAULT_INJECTION: forcing a failure. [ 345.370826][T16162] name failslab, interval 1, probability 0, space 0, times 0 [ 345.383733][T16162] CPU: 0 UID: 0 PID: 16162 Comm: syz.9.3739 Not tainted syzkaller #0 PREEMPT(full) [ 345.383777][T16162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 345.383784][T16162] Call Trace: [ 345.383788][T16162] [ 345.383858][T16162] __dump_stack+0x1d/0x30 [ 345.383912][T16162] dump_stack_lvl+0x95/0xd0 [ 345.383925][T16162] dump_stack+0x15/0x1b [ 345.383968][T16162] should_fail_ex+0x263/0x280 [ 345.383982][T16162] should_failslab+0x8c/0xb0 [ 345.384066][T16162] kmem_cache_alloc_noprof+0x66/0x400 [ 345.384109][T16162] ? security_file_alloc+0x32/0xf0 [ 345.384126][T16162] security_file_alloc+0x32/0xf0 [ 345.384203][T16162] init_file+0x5b/0x1b0 [ 345.384216][T16162] alloc_empty_file+0x8b/0x200 [ 345.384280][T16162] alloc_file_pseudo+0xf6/0x190 [ 345.384294][T16162] sock_alloc_file+0x9c/0x1e0 [ 345.384434][T16162] __sys_socket+0x115/0x180 [ 345.384446][T16162] __x64_sys_socket+0x3f/0x50 [ 345.384457][T16162] x64_sys_call+0x11fc/0x3020 [ 345.384472][T16162] do_syscall_64+0x12c/0x370 [ 345.384511][T16162] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 345.384527][T16162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.384540][T16162] RIP: 0033:0x7ff89d14bf79 [ 345.384550][T16162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.384571][T16162] RSP: 002b:00007ff89bba6fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 345.384584][T16162] RAX: ffffffffffffffda RBX: 00007ff89d3c5fa0 RCX: 00007ff89d14bf79 [ 345.384596][T16162] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 345.384603][T16162] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000101 [ 345.384612][T16162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 345.384619][T16162] R13: 00007ff89d3c6038 R14: 00007ff89d3c5fa0 R15: 00007ffd0ae4ed48 [ 345.384631][T16162] [ 345.608708][T16168] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 345.615261][T16168] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 345.623148][T16168] vhci_hcd vhci_hcd.0: Device attached [ 345.648000][T16174] block device autoloading is deprecated and will be removed. [ 345.688279][T16169] vhci_hcd: connection closed [ 345.688425][ T6095] vhci_hcd vhci_hcd.8: stop threads [ 345.698351][ T6095] vhci_hcd vhci_hcd.8: release socket [ 345.703787][ T6095] vhci_hcd vhci_hcd.8: disconnect device [ 346.492723][T16200] netlink: 'syz.9.3752': attribute type 4 has an invalid length. [ 346.528005][T16200] netlink: 'syz.9.3752': attribute type 4 has an invalid length. [ 346.555528][T16204] FAULT_INJECTION: forcing a failure. [ 346.555528][T16204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.596942][T16204] CPU: 1 UID: 0 PID: 16204 Comm: syz.1.3753 Not tainted syzkaller #0 PREEMPT(full) [ 346.596971][T16204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.597033][T16204] Call Trace: [ 346.597040][T16204] [ 346.597047][T16204] __dump_stack+0x1d/0x30 [ 346.597072][T16204] dump_stack_lvl+0x95/0xd0 [ 346.597132][T16204] dump_stack+0x15/0x1b [ 346.597151][T16204] should_fail_ex+0x263/0x280 [ 346.597238][T16204] should_fail+0xb/0x20 [ 346.597259][T16204] should_fail_usercopy+0x1a/0x20 [ 346.597290][T16204] _copy_from_user+0x1c/0xb0 [ 346.597367][T16204] generic_map_update_batch+0x4a9/0x680 [ 346.597399][T16204] ? __pfx_generic_map_update_batch+0x10/0x10 [ 346.597447][T16204] bpf_map_do_batch+0x25c/0x380 [ 346.597467][T16204] __sys_bpf+0x6a2/0x7e0 [ 346.597548][T16204] __x64_sys_bpf+0x41/0x50 [ 346.597671][T16204] x64_sys_call+0x10cb/0x3020 [ 346.597697][T16204] do_syscall_64+0x12c/0x370 [ 346.597728][T16204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.597784][T16204] RIP: 0033:0x7f3d62c0bf79 [ 346.597805][T16204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.597824][T16204] RSP: 002b:00007f3d61667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.597847][T16204] RAX: ffffffffffffffda RBX: 00007f3d62e85fa0 RCX: 00007f3d62c0bf79 [ 346.597886][T16204] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 346.597901][T16204] RBP: 00007f3d61667090 R08: 0000000000000000 R09: 0000000000000000 [ 346.597916][T16204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.597930][T16204] R13: 00007f3d62e86038 R14: 00007f3d62e85fa0 R15: 00007ffe9e6bb938 [ 346.597951][T16204] [ 346.911022][T16221] FAULT_INJECTION: forcing a failure. [ 346.911022][T16221] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 346.926225][T16223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3761'. [ 346.940368][T16224] ip6gre1: entered promiscuous mode [ 346.945687][T16221] CPU: 1 UID: 0 PID: 16221 Comm: syz.8.3760 Not tainted syzkaller #0 PREEMPT(full) [ 346.945729][T16221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.945743][T16221] Call Trace: [ 346.945748][T16221] [ 346.945810][T16221] __dump_stack+0x1d/0x30 [ 346.945837][T16221] dump_stack_lvl+0x95/0xd0 [ 346.945877][T16221] dump_stack+0x15/0x1b [ 346.945899][T16221] should_fail_ex+0x263/0x280 [ 346.945977][T16221] should_fail_alloc_page+0xf2/0x100 [ 346.946014][T16221] __alloc_frozen_pages_noprof+0x108/0x360 [ 346.946041][T16221] alloc_pages_mpol+0xb3/0x260 [ 346.946062][T16221] vma_alloc_folio_noprof+0x1a9/0x300 [ 346.946139][T16221] handle_mm_fault+0x111f/0x3020 [ 346.946177][T16221] do_user_addr_fault+0x62f/0x1050 [ 346.946206][T16221] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 346.946245][T16221] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 346.946271][T16221] ? trace_page_fault_user+0x1f/0xe0 [ 346.946302][T16221] exc_page_fault+0x62/0xa0 [ 346.946332][T16221] asm_exc_page_fault+0x26/0x30 [ 346.946430][T16221] RIP: 0033:0x7fae6aa3d92b [ 346.946448][T16221] Code: 00 00 00 48 8d 3d 45 ab 1a 00 48 89 c1 31 c0 e8 3b 36 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 79 ab 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 346.946468][T16221] RSP: 002b:00007fae695d5fa0 EFLAGS: 00010206 [ 346.946485][T16221] RAX: 0000000000000000 RBX: 00007fae6adf5fa0 RCX: 0000000000000000 [ 346.946497][T16221] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000080 [ 346.946568][T16221] RBP: 00007fae695d7090 R08: 0000000000000000 R09: 0000000000000000 [ 346.946581][T16221] R10: 0000200000000080 R11: 0000000000000000 R12: 0000000000000001 [ 346.946596][T16221] R13: 00007fae6adf6038 R14: 00007fae6adf5fa0 R15: 00007ffc17de1378 [ 346.946617][T16221] [ 346.946727][T16221] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 346.966788][T16224] ip6gre1: entered allmulticast mode [ 347.256286][T16238] team0: Port device team_slave_0 removed [ 347.287113][T16246] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 347.293724][T16246] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 347.307367][ T2058] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 347.314950][ T2058] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 347.327244][T16246] vhci_hcd vhci_hcd.0: Device attached [ 347.341198][ T3390] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 347.421725][T16247] vhci_hcd: connection closed [ 347.422059][ T2058] vhci_hcd vhci_hcd.9: stop threads [ 347.470395][ T2058] vhci_hcd vhci_hcd.9: release socket [ 347.498929][ T2058] vhci_hcd vhci_hcd.9: disconnect device [ 347.580723][T16263] ip6erspan0: entered allmulticast mode [ 347.625349][T16265] netlink: 'syz.1.3772': attribute type 2 has an invalid length. [ 347.635092][ T28] audit: type=1401 audit(1771153818.070:3912): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 347.747004][ T3390] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.377308][ T3390] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.589323][T16324] ip6erspan0: entered allmulticast mode [ 348.921266][T16345] xt_hashlimit: size too large, truncated to 1048576 [ 349.603118][T16382] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 349.637647][T16382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.221070][T16425] xt_hashlimit: size too large, truncated to 1048576 [ 350.573086][T16436] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 350.579675][T16436] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 350.588161][T16436] vhci_hcd vhci_hcd.0: Device attached [ 350.604291][T16441] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 350.716442][T16445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.827026][ T9] usb 17-1: new low-speed USB device number 3 using vhci_hcd [ 351.246934][T16481] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 351.253488][T16481] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 351.277010][T16481] vhci_hcd vhci_hcd.0: Device attached [ 351.307314][T16482] vhci_hcd: connection closed [ 351.307459][ T1869] vhci_hcd vhci_hcd.9: stop threads [ 351.325212][ T1869] vhci_hcd vhci_hcd.9: release socket [ 351.336933][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.337089][ T1869] vhci_hcd vhci_hcd.9: disconnect device [ 351.451540][T16437] vhci_hcd: connection reset by peer [ 351.466136][ T1869] vhci_hcd vhci_hcd.8: stop threads [ 351.471883][ T1869] vhci_hcd vhci_hcd.8: release socket [ 351.480988][ T1869] vhci_hcd vhci_hcd.8: disconnect device [ 351.993470][T16524] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3854'. [ 352.249818][T16537] xt_hashlimit: size too large, truncated to 1048576 [ 352.379876][ T28] audit: type=1400 audit(1771153822.810:3913): avc: denied { connect } for pid=16542 comm="syz.0.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 352.442277][ T28] audit: type=1400 audit(1771153822.840:3914): avc: denied { create } for pid=16542 comm="syz.0.3860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=nfc_socket permissive=1 [ 352.477090][T16547] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 352.483693][T16547] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 352.527191][T16547] vhci_hcd vhci_hcd.0: Device attached [ 352.587647][T16548] vhci_hcd: connection closed [ 352.588015][ T2058] vhci_hcd vhci_hcd.0: stop threads [ 352.621717][ T2058] vhci_hcd vhci_hcd.0: release socket [ 352.647036][ T2058] vhci_hcd vhci_hcd.0: disconnect device [ 352.707197][ T5976] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 352.736022][T16560] xt_hashlimit: size too large, truncated to 1048576 [ 352.824486][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3867'. [ 353.473399][T16602] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3879'. [ 353.935866][T16618] chnl_net:caif_netlink_parms(): no params data found [ 353.977940][T16618] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.985083][T16618] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.992458][T16618] bridge_slave_0: entered allmulticast mode [ 353.998927][T16618] bridge_slave_0: entered promiscuous mode [ 354.005802][T16618] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.012958][T16618] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.020299][T16618] bridge_slave_1: entered allmulticast mode [ 354.026944][T16618] bridge_slave_1: entered promiscuous mode [ 354.040520][ T6091] batman_adv: batadv0: Removing interface: netdevsim1 [ 354.068294][T16618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.091048][T16618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.117146][T16618] team0: Port device team_slave_0 added [ 354.123961][T16618] team0: Port device team_slave_1 added [ 354.143702][T16618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.150777][T16618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.176818][T16618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.188737][T16618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.195695][T16618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.222512][T16618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.262848][T16618] hsr_slave_0: entered promiscuous mode [ 354.270930][T16618] hsr_slave_1: entered promiscuous mode [ 354.280996][T16618] debugfs: 'hsr0' already exists in 'hsr' [ 354.286739][T16618] Cannot create hsr debugfs directory [ 354.331384][ T6091] bridge_slave_1: left allmulticast mode [ 354.339462][ T6091] bridge_slave_1: left promiscuous mode [ 354.352362][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.364078][ T6091] bridge_slave_0: left allmulticast mode [ 354.371408][ T6091] bridge_slave_0: left promiscuous mode [ 354.377698][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.386197][ T6091] veth0_to_bridge: left allmulticast mode [ 354.392223][ T6091] veth0_to_bridge: left promiscuous mode [ 354.398348][ T6091] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 354.658504][ T6091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.670148][ T6091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.679716][ T6091] bond0 (unregistering): Released all slaves [ 354.686284][T11473] IPVS: starting estimator thread 0... [ 354.687538][ T6091] bond1 (unregistering): Released all slaves [ 354.759515][ T6091] tipc: Left network mode [ 354.778163][ T6091] hsr_slave_0: left promiscuous mode [ 354.784974][ T6091] hsr_slave_1: left promiscuous mode [ 354.795166][ T6091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.802466][T16669] IPVS: using max 2448 ests per chain, 122400 per kthread [ 354.817384][ T6091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.838900][ T6091] veth1_vlan: left allmulticast mode [ 354.865890][ T6091] team0 (unregistering): Port device macvlan1 removed [ 354.919461][ T6091] team0 (unregistering): Port device team_slave_1 removed [ 355.092522][T16683] syz_tun: entered allmulticast mode [ 355.142977][T16690] FAULT_INJECTION: forcing a failure. [ 355.142977][T16690] name failslab, interval 1, probability 0, space 0, times 0 [ 355.171081][T16690] CPU: 0 UID: 0 PID: 16690 Comm: syz.8.3896 Not tainted syzkaller #0 PREEMPT(full) [ 355.171107][T16690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 355.171118][T16690] Call Trace: [ 355.171125][T16690] [ 355.171132][T16690] __dump_stack+0x1d/0x30 [ 355.171162][T16690] dump_stack_lvl+0x95/0xd0 [ 355.171218][T16690] dump_stack+0x15/0x1b [ 355.171241][T16690] should_fail_ex+0x263/0x280 [ 355.171266][T16690] should_failslab+0x8c/0xb0 [ 355.171376][T16690] kmem_cache_alloc_noprof+0x66/0x400 [ 355.171411][T16690] ? __kernfs_new_node+0x70/0x3c0 [ 355.171433][T16690] __kernfs_new_node+0x70/0x3c0 [ 355.171469][T16690] ? rb_insert_color+0x71/0x2b0 [ 355.171526][T16690] ? __rcu_read_unlock+0x4e/0x70 [ 355.171590][T16690] ? kernfs_activate_one+0x10c/0x140 [ 355.171657][T16690] ? __rcu_read_unlock+0x4e/0x70 [ 355.171674][T16690] ? up_write+0x18/0x60 [ 355.171693][T16690] ? kernfs_activate+0x210/0x220 [ 355.171742][T16690] kernfs_new_node+0xd0/0x140 [ 355.171788][T16690] __kernfs_create_file+0x4b/0x180 [ 355.171819][T16690] ? __pfx_drv_attr_show+0x10/0x10 [ 355.171852][T16690] ? __pfx_drv_attr_store+0x10/0x10 [ 355.172013][T16690] sysfs_add_file_mode_ns+0x132/0x1b0 [ 355.172046][T16690] sysfs_create_file_ns+0xd9/0x120 [ 355.172079][T16690] driver_create_file+0x39/0x50 [ 355.172100][T16690] bus_add_driver+0x347/0x450 [ 355.172203][T16690] driver_register+0x162/0x220 [ 355.172226][T16690] usb_gadget_register_driver_owner+0x92/0x1a0 [ 355.172260][T16690] raw_ioctl+0xc6c/0x1e10 [ 355.172405][T16690] ? ioctl_has_perm+0x27e/0x2d0 [ 355.172435][T16690] ? do_vfs_ioctl+0x84f/0xe70 [ 355.172459][T16690] ? selinux_file_ioctl+0x5f7/0xcb0 [ 355.172531][T16690] ? __rcu_read_unlock+0x4e/0x70 [ 355.172621][T16690] ? __fget_files+0x184/0x1c0 [ 355.172681][T16690] ? __pfx_raw_ioctl+0x10/0x10 [ 355.172755][T16690] __se_sys_ioctl+0xce/0x140 [ 355.172785][T16690] __x64_sys_ioctl+0x43/0x50 [ 355.172808][T16690] x64_sys_call+0x1563/0x3020 [ 355.172915][T16690] do_syscall_64+0x12c/0x370 [ 355.173011][T16690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.173035][T16690] RIP: 0033:0x7fae6ab7bc0b [ 355.173097][T16690] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 355.173113][T16690] RSP: 002b:00007fae695d4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.173131][T16690] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fae6ab7bc0b [ 355.173144][T16690] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 355.173155][T16690] RBP: 00007fae695d5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 355.173228][T16690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.173242][T16690] R13: 0000200000000080 R14: 0000000000000003 R15: 0000000000000000 [ 355.173260][T16690] [ 355.176653][T16690] bus_add_driver: add_bind_files(raw-gadget.0) failed [ 355.461391][T16690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.470400][T16690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.596822][ T6091] IPVS: stop unused estimator thread 0... [ 355.798545][T16618] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 355.815243][T16618] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 355.842883][T16618] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 355.864755][T16618] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 355.898983][ T9] usb 17-1: enqueue for inactive port 0 [ 355.915721][ T9] usb 17-1: enqueue for inactive port 0 [ 355.973766][T16618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.011783][T16618] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.016955][ T9] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 356.041200][ T6091] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.048294][ T6091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.089316][ T6091] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.096501][ T6091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.142916][T16753] ip6erspan0: entered allmulticast mode [ 356.294617][T16618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.327492][T16768] xt_hashlimit: size too large, truncated to 1048576 [ 356.575538][T16722] syz.1.3902 (16722) used greatest stack depth: 7224 bytes left [ 356.652205][T16618] veth0_vlan: entered promiscuous mode [ 356.673054][T16618] veth1_vlan: entered promiscuous mode [ 356.720756][T16618] veth0_macvtap: entered promiscuous mode [ 356.751880][T16618] veth1_macvtap: entered promiscuous mode [ 356.799381][T16618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.833159][T16618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.870420][ T2058] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.896591][ T2058] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.929515][ T2058] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.955785][ T2058] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.288218][T16829] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 357.294775][T16829] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 357.308700][T16829] vhci_hcd vhci_hcd.0: Device attached [ 357.374000][T16835] team0: Port device team_slave_0 removed [ 357.556982][ T5976] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 357.959045][T16866] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 357.965599][T16866] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 357.973761][T16866] vhci_hcd vhci_hcd.0: Device attached [ 357.998211][T16867] vhci_hcd: connection closed [ 357.998375][ T2058] vhci_hcd vhci_hcd.0: stop threads [ 358.018239][ T2058] vhci_hcd vhci_hcd.0: release socket [ 358.025913][ T2058] vhci_hcd vhci_hcd.0: disconnect device [ 358.147183][T16830] vhci_hcd: connection reset by peer [ 358.157105][ T1869] vhci_hcd vhci_hcd.1: stop threads [ 358.162372][ T1869] vhci_hcd vhci_hcd.1: release socket [ 358.179868][ T1869] vhci_hcd vhci_hcd.1: disconnect device [ 358.393524][T16885] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 358.400063][T16885] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 358.441507][T16885] vhci_hcd vhci_hcd.0: Device attached [ 358.556258][T16894] syz_tun: entered allmulticast mode [ 358.676933][ T3524] usb 17-1: new low-speed USB device number 4 using vhci_hcd [ 358.834889][T16915] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3957'. [ 358.988971][T16933] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3966'. [ 359.023167][T16935] ip6erspan0: entered allmulticast mode [ 359.158525][T16959] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3980'. [ 359.169544][T16959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.187194][T16959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.250778][T16968] ip6erspan0: entered allmulticast mode [ 359.277627][T16886] vhci_hcd: connection reset by peer [ 359.290628][ T1869] vhci_hcd vhci_hcd.8: stop threads [ 359.306489][ T1869] vhci_hcd vhci_hcd.8: release socket [ 359.312674][ T1869] vhci_hcd vhci_hcd.8: disconnect device [ 359.336903][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.842832][T17097] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 360.849385][T17097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 360.861336][T17097] vhci_hcd vhci_hcd.0: Device attached [ 360.908417][T17098] vhci_hcd: connection closed [ 360.908540][ T70] vhci_hcd vhci_hcd.8: stop threads [ 360.929223][ T70] vhci_hcd vhci_hcd.8: release socket [ 360.943473][ T70] vhci_hcd vhci_hcd.8: disconnect device [ 361.573425][T17147] xt_hashlimit: size too large, truncated to 1048576 [ 361.724875][T17156] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 361.731483][T17156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.739533][T17156] vhci_hcd vhci_hcd.0: Device attached [ 361.787350][T17157] vhci_hcd: connection closed [ 361.787568][ T2058] vhci_hcd vhci_hcd.8: stop threads [ 361.797840][ T2058] vhci_hcd vhci_hcd.8: release socket [ 361.803330][ T2058] vhci_hcd vhci_hcd.8: disconnect device [ 362.616907][ T5976] usb 3-1: enqueue for inactive port 0 [ 362.636923][ T5976] usb 3-1: enqueue for inactive port 0 [ 362.672356][T17195] xt_hashlimit: size too large, truncated to 1048576 [ 362.716896][ T5976] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 362.758344][T17205] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 362.764880][T17205] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 362.802264][T17205] vhci_hcd vhci_hcd.0: Device attached [ 362.811250][T17206] vhci_hcd: connection closed [ 362.817150][ T70] vhci_hcd vhci_hcd.1: stop threads [ 362.846898][ T70] vhci_hcd vhci_hcd.1: release socket [ 362.864107][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 363.019081][ T5976] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 363.331916][T17247] netlink: 1192 bytes leftover after parsing attributes in process `syz.1.4077'. [ 363.341829][T17247] program syz.1.4077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.412423][T17257] IPVS: length: 195 != 24 [ 363.452755][T17257] hub 2-0:1.0: USB hub found [ 363.461812][T17257] hub 2-0:1.0: 8 ports detected [ 363.505622][T17257] IPVS: length: 212 != 112 [ 363.589735][T17277] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 363.596285][T17277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 363.621429][T17277] vhci_hcd vhci_hcd.0: Device attached [ 363.658013][T17278] vhci_hcd: connection closed [ 363.658318][ T6091] vhci_hcd vhci_hcd.6: stop threads [ 363.677076][ T6091] vhci_hcd vhci_hcd.6: release socket [ 363.686987][ T6091] vhci_hcd vhci_hcd.6: disconnect device [ 363.737043][ T3524] usb 17-1: enqueue for inactive port 0 [ 363.742705][ T3524] usb 17-1: enqueue for inactive port 0 [ 363.826890][ T3524] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 363.846375][T17295] FAULT_INJECTION: forcing a failure. [ 363.846375][T17295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.859608][T17295] CPU: 0 UID: 0 PID: 17295 Comm: syz.9.4093 Not tainted syzkaller #0 PREEMPT(full) [ 363.859638][T17295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.859650][T17295] Call Trace: [ 363.859658][T17295] [ 363.859666][T17295] __dump_stack+0x1d/0x30 [ 363.859692][T17295] dump_stack_lvl+0x95/0xd0 [ 363.859788][T17295] dump_stack+0x15/0x1b [ 363.859807][T17295] should_fail_ex+0x263/0x280 [ 363.859829][T17295] should_fail+0xb/0x20 [ 363.859916][T17295] should_fail_usercopy+0x1a/0x20 [ 363.859931][T17295] _copy_from_user+0x1c/0xb0 [ 363.859948][T17295] memdup_user_nul+0x5f/0xe0 [ 363.860021][T17295] sel_write_checkreqprot+0x13c/0x2d0 [ 363.860037][T17295] ? __pfx_sel_write_checkreqprot+0x10/0x10 [ 363.860050][T17295] vfs_write+0x269/0x9f0 [ 363.860067][T17295] ? __rcu_read_unlock+0x4e/0x70 [ 363.860164][T17295] ? __fget_files+0x184/0x1c0 [ 363.860188][T17295] ? mutex_lock+0x57/0x90 [ 363.860203][T17295] ksys_write+0xdc/0x1a0 [ 363.860263][T17295] __x64_sys_write+0x40/0x50 [ 363.860280][T17295] x64_sys_call+0x27e1/0x3020 [ 363.860326][T17295] do_syscall_64+0x12c/0x370 [ 363.860414][T17295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.860427][T17295] RIP: 0033:0x7f517831bf79 [ 363.860438][T17295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.860452][T17295] RSP: 002b:00007f5176d77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 363.860465][T17295] RAX: ffffffffffffffda RBX: 00007f5178595fa0 RCX: 00007f517831bf79 [ 363.860474][T17295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 363.860481][T17295] RBP: 00007f5176d77090 R08: 0000000000000000 R09: 0000000000000000 [ 363.860489][T17295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.860497][T17295] R13: 00007f5178596038 R14: 00007f5178595fa0 R15: 00007ffe1291b828 [ 363.860540][T17295] [ 364.070507][T17299] IPVS: length: 195 != 24 [ 364.111205][T17299] hub 2-0:1.0: USB hub found [ 364.116109][T17299] hub 2-0:1.0: 8 ports detected [ 364.132023][T17299] IPVS: length: 212 != 112 [ 364.192608][T17313] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4101'. [ 364.206629][T17313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.215291][T17313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.228334][T17315] tipc: Started in network mode [ 364.233345][T17315] tipc: Node identity 62c3693af5f1, cluster identity 4711 [ 364.243065][T17315] tipc: Enabled bearer , priority 0 [ 364.250026][ T28] audit: type=1400 audit(1771153834.690:3915): avc: denied { setopt } for pid=17316 comm="syz.9.4103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 364.250719][T17315] syzkaller0: entered promiscuous mode [ 364.275289][T17315] syzkaller0: entered allmulticast mode [ 364.299247][T17314] tipc: Resetting bearer [ 364.311850][T17314] tipc: Disabling bearer [ 364.463101][T17339] FAULT_INJECTION: forcing a failure. [ 364.463101][T17339] name failslab, interval 1, probability 0, space 0, times 0 [ 364.465920][T17340] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 364.475873][T17339] CPU: 0 UID: 0 PID: 17339 Comm: syz.8.4112 Not tainted syzkaller #0 PREEMPT(full) [ 364.475947][T17339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.475997][T17339] Call Trace: [ 364.476005][T17339] [ 364.476014][T17339] __dump_stack+0x1d/0x30 [ 364.476037][T17339] dump_stack_lvl+0x95/0xd0 [ 364.476127][T17339] dump_stack+0x15/0x1b [ 364.476159][T17339] should_fail_ex+0x263/0x280 [ 364.476184][T17339] ? vt_do_diacrit+0x119/0x810 [ 364.476290][T17339] should_failslab+0x8c/0xb0 [ 364.476322][T17339] __kmalloc_cache_noprof+0x5f/0x410 [ 364.476346][T17339] vt_do_diacrit+0x119/0x810 [ 364.476373][T17339] vt_ioctl+0xe2a/0x18d0 [ 364.476424][T17339] ? tty_jobctrl_ioctl+0x29c/0x810 [ 364.476457][T17339] tty_ioctl+0x7d7/0xb80 [ 364.476481][T17339] ? __pfx_tty_ioctl+0x10/0x10 [ 364.476549][T17339] __se_sys_ioctl+0xce/0x140 [ 364.476579][T17339] __x64_sys_ioctl+0x43/0x50 [ 364.476606][T17339] x64_sys_call+0x1563/0x3020 [ 364.476691][T17339] do_syscall_64+0x12c/0x370 [ 364.476779][T17339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.476803][T17339] RIP: 0033:0x7fae6ab7bf79 [ 364.476890][T17339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.476908][T17339] RSP: 002b:00007fae695d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.476929][T17339] RAX: ffffffffffffffda RBX: 00007fae6adf5fa0 RCX: 00007fae6ab7bf79 [ 364.476980][T17339] RDX: 0000200000002f80 RSI: 0000000000004b4a RDI: 0000000000000003 [ 364.476994][T17339] RBP: 00007fae695d7090 R08: 0000000000000000 R09: 0000000000000000 [ 364.477074][T17339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.477088][T17339] R13: 00007fae6adf6038 R14: 00007fae6adf5fa0 R15: 00007ffc17de1378 [ 364.477107][T17339] [ 364.662243][T17340] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 364.677997][T17340] vhci_hcd vhci_hcd.0: Device attached [ 364.727359][T17341] vhci_hcd: connection closed [ 364.727497][ T70] vhci_hcd vhci_hcd.0: stop threads [ 364.737489][ T70] vhci_hcd vhci_hcd.0: release socket [ 364.742901][ T70] vhci_hcd vhci_hcd.0: disconnect device [ 364.936534][T17352] FAULT_INJECTION: forcing a failure. [ 364.936534][T17352] name failslab, interval 1, probability 0, space 0, times 0 [ 364.949985][T17352] CPU: 1 UID: 0 PID: 17352 Comm: syz.1.4116 Not tainted syzkaller #0 PREEMPT(full) [ 364.950016][T17352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.950109][T17352] Call Trace: [ 364.950116][T17352] [ 364.950162][T17352] __dump_stack+0x1d/0x30 [ 364.950191][T17352] dump_stack_lvl+0x95/0xd0 [ 364.950216][T17352] dump_stack+0x15/0x1b [ 364.950239][T17352] should_fail_ex+0x263/0x280 [ 364.950266][T17352] should_failslab+0x8c/0xb0 [ 364.950311][T17352] __kmalloc_cache_node_noprof+0x6b/0x480 [ 364.950337][T17352] ? __get_vm_area_node+0x106/0x1d0 [ 364.950361][T17352] __get_vm_area_node+0x106/0x1d0 [ 364.950384][T17352] __vmalloc_node_range_noprof+0x291/0x12b0 [ 364.950449][T17352] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 364.950480][T17352] ? selinux_file_open+0x2e6/0x330 [ 364.950511][T17352] ? __rcu_read_unlock+0x4e/0x70 [ 364.950611][T17352] ? avc_has_perm_noaudit+0xab/0x130 [ 364.950637][T17352] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 364.950670][T17352] __vmalloc_noprof+0xa4/0xf0 [ 364.950744][T17352] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 364.950777][T17352] bpf_prog_alloc_no_stats+0x47/0x390 [ 364.950810][T17352] ? bpf_prog_alloc+0x2a/0x150 [ 364.950884][T17352] bpf_prog_alloc+0x3c/0x150 [ 364.950947][T17352] bpf_prog_load+0x506/0x1140 [ 364.950997][T17352] ? security_bpf+0x2b/0x90 [ 364.951027][T17352] __sys_bpf+0x505/0x7e0 [ 364.951093][T17352] __x64_sys_bpf+0x41/0x50 [ 364.951123][T17352] x64_sys_call+0x10cb/0x3020 [ 364.951152][T17352] do_syscall_64+0x12c/0x370 [ 364.951187][T17352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.951277][T17352] RIP: 0033:0x7f3d62c0bf79 [ 364.951294][T17352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.951320][T17352] RSP: 002b:00007f3d61667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 364.951386][T17352] RAX: ffffffffffffffda RBX: 00007f3d62e85fa0 RCX: 00007f3d62c0bf79 [ 364.951402][T17352] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 364.951416][T17352] RBP: 00007f3d61667090 R08: 0000000000000000 R09: 0000000000000000 [ 364.951431][T17352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.951495][T17352] R13: 00007f3d62e86038 R14: 00007f3d62e85fa0 R15: 00007ffe9e6bb938 [ 364.951513][T17352] [ 364.951786][T17352] warn_alloc: 2 callbacks suppressed [ 364.951798][T17352] syz.1.4116: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 365.197966][T17358] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 365.207253][T17352] CPU: 1 UID: 0 PID: 17352 Comm: syz.1.4116 Not tainted syzkaller #0 PREEMPT(full) [ 365.207357][T17352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 365.207372][T17352] Call Trace: [ 365.207380][T17352] [ 365.207388][T17352] __dump_stack+0x1d/0x30 [ 365.207418][T17352] dump_stack_lvl+0x95/0xd0 [ 365.207469][T17352] dump_stack+0x15/0x1b [ 365.207525][T17352] warn_alloc+0x145/0x1c0 [ 365.207562][T17352] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 365.207585][T17352] ? selinux_file_open+0x2e6/0x330 [ 365.207795][T17352] ? __rcu_read_unlock+0x4e/0x70 [ 365.207843][T17352] ? avc_has_perm_noaudit+0xab/0x130 [ 365.207868][T17352] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 365.207901][T17352] __vmalloc_noprof+0xa4/0xf0 [ 365.207923][T17352] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 365.208025][T17352] bpf_prog_alloc_no_stats+0x47/0x390 [ 365.208088][T17352] ? bpf_prog_alloc+0x2a/0x150 [ 365.208118][T17352] bpf_prog_alloc+0x3c/0x150 [ 365.208221][T17352] bpf_prog_load+0x506/0x1140 [ 365.208263][T17352] ? security_bpf+0x2b/0x90 [ 365.208343][T17352] __sys_bpf+0x505/0x7e0 [ 365.208380][T17352] __x64_sys_bpf+0x41/0x50 [ 365.208407][T17352] x64_sys_call+0x10cb/0x3020 [ 365.208476][T17352] do_syscall_64+0x12c/0x370 [ 365.208509][T17352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.208565][T17352] RIP: 0033:0x7f3d62c0bf79 [ 365.208582][T17352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.208601][T17352] RSP: 002b:00007f3d61667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 365.208661][T17352] RAX: ffffffffffffffda RBX: 00007f3d62e85fa0 RCX: 00007f3d62c0bf79 [ 365.208676][T17352] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 365.208703][T17352] RBP: 00007f3d61667090 R08: 0000000000000000 R09: 0000000000000000 [ 365.208717][T17352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.208730][T17352] R13: 00007f3d62e86038 R14: 00007f3d62e85fa0 R15: 00007ffe9e6bb938 [ 365.208750][T17352] [ 365.208788][T17352] Mem-Info: [ 365.422664][T17352] active_anon:7456 inactive_anon:1 isolated_anon:0 [ 365.422664][T17352] active_file:12735 inactive_file:13206 isolated_file:0 [ 365.422664][T17352] unevictable:0 dirty:355 writeback:0 [ 365.422664][T17352] slab_reclaimable:4008 slab_unreclaimable:20243 [ 365.422664][T17352] mapped:29885 shmem:304 pagetables:3432 [ 365.422664][T17352] sec_pagetables:0 bounce:0 [ 365.422664][T17352] kernel_misc_reclaimable:0 [ 365.422664][T17352] free:1863402 free_pcp:11548 free_cma:0 [ 365.468434][T17352] Node 0 active_anon:29940kB inactive_anon:4kB active_file:50940kB inactive_file:52824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119540kB dirty:1420kB writeback:0kB shmem:1216kB kernel_stack:4416kB pagetables:13844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 365.496168][T17352] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.526628][T17352] lowmem_reserve[]: 0 2879 7857 7857 [ 365.556868][T17352] Node 0 DMA32 free:2944800kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948324kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 365.588681][T17352] lowmem_reserve[]: 0 0 4978 4978 [ 365.595668][T17352] Node 0 Normal free:4502856kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29684kB inactive_anon:4kB active_file:51032kB inactive_file:52824kB unevictable:0kB writepending:1440kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:44748kB local_pcp:17024kB free_cma:0kB [ 365.629579][T17352] lowmem_reserve[]: 0 0 0 0 [ 365.634396][T17374] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4125'. [ 365.634443][T17352] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 365.658153][T17352] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 5*16kB (M) 2*32kB (M) 2*64kB (M) 4*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944800kB [ 365.675399][ T28] audit: type=1400 audit(1771153836.090:3916): avc: denied { unlink } for pid=16618 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 365.676693][T17352] Node 0 Normal: 1295*4kB (UME) 2824*8kB (UME) 1386*16kB (UM) 940*32kB (UME) 735*64kB (UME) 548*128kB (UME) 299*256kB (UME) 196*512kB (UME) 146*1024kB (UME) 76*2048kB (UM) 932*4096kB (UM) = 4496732kB [ 365.740868][T17374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.754014][T17374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.764170][T17352] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 365.774287][T17352] 30142 total pagecache pages [ 365.780755][T17352] 4 pages in swap cache [ 365.785589][T17352] Free swap = 124820kB [ 365.790063][T17352] Total swap = 124996kB [ 365.794356][T17352] 2097051 pages RAM [ 365.808435][T17352] 0 pages HighMem/MovableOnly [ 365.810428][ T28] audit: type=1400 audit(1771153836.230:3917): avc: denied { setattr } for pid=17367 comm="syz.6.4123" name="task" dev="proc" ino=58243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 365.813353][T17352] 81570 pages reserved [ 365.959001][T17397] xt_hashlimit: size too large, truncated to 1048576 [ 366.192943][T17415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17415 comm=syz.8.4139 [ 366.211812][T17415] netlink: 'syz.8.4139': attribute type 1 has an invalid length. [ 366.223697][T17415] gretap1: entered allmulticast mode [ 366.414709][T17439] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4146'. [ 366.485151][T17449] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4151'. [ 366.491345][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4148'. [ 366.504882][ T28] audit: type=1400 audit(1771153836.930:3918): avc: denied { listen } for pid=17442 comm="syz.6.4148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 366.545432][T17453] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 366.552008][T17453] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 366.564365][T17453] vhci_hcd vhci_hcd.0: Device attached [ 366.610757][T17462] FAULT_INJECTION: forcing a failure. [ 366.610757][T17462] name failslab, interval 1, probability 0, space 0, times 0 [ 366.623790][T17462] CPU: 1 UID: 0 PID: 17462 Comm: syz.9.4156 Not tainted syzkaller #0 PREEMPT(full) [ 366.623905][T17462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.623976][T17462] Call Trace: [ 366.623984][T17462] [ 366.623993][T17462] __dump_stack+0x1d/0x30 [ 366.624020][T17462] dump_stack_lvl+0x95/0xd0 [ 366.624097][T17462] dump_stack+0x15/0x1b [ 366.624119][T17462] should_fail_ex+0x263/0x280 [ 366.624141][T17462] ? cma_alloc_port+0x3d/0x320 [ 366.624167][T17462] should_failslab+0x8c/0xb0 [ 366.624199][T17462] __kmalloc_cache_noprof+0x5f/0x410 [ 366.624224][T17462] cma_alloc_port+0x3d/0x320 [ 366.624253][T17462] rdma_bind_addr_dst+0x1813/0x2290 [ 366.624283][T17462] ? selinux_file_open+0x2e6/0x330 [ 366.624314][T17462] ? lockref_put_return+0xf7/0x130 [ 366.624343][T17462] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 366.624416][T17462] rdma_resolve_addr+0x43a/0x1350 [ 366.624439][T17462] ? terminate_walk+0x1e6/0x210 [ 366.624462][T17462] ? path_openat+0x1ab2/0x2050 [ 366.624493][T17462] ucma_resolve_ip+0x283/0x370 [ 366.624555][T17462] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 366.624644][T17462] ucma_write+0x1c9/0x260 [ 366.624808][T17462] vfs_writev+0x42b/0x900 [ 366.624830][T17462] ? __pfx_ucma_write+0x10/0x10 [ 366.624868][T17462] do_writev+0xe9/0x210 [ 366.624888][T17462] __x64_sys_writev+0x45/0x50 [ 366.624946][T17462] x64_sys_call+0x1c0c/0x3020 [ 366.624968][T17462] do_syscall_64+0x12c/0x370 [ 366.625020][T17462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.625043][T17462] RIP: 0033:0x7f517831bf79 [ 366.625059][T17462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.625209][T17462] RSP: 002b:00007f5176d77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 366.625231][T17462] RAX: ffffffffffffffda RBX: 00007f5178595fa0 RCX: 00007f517831bf79 [ 366.625246][T17462] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000b [ 366.625324][T17462] RBP: 00007f5176d77090 R08: 0000000000000000 R09: 0000000000000000 [ 366.625338][T17462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.625351][T17462] R13: 00007f5178596038 R14: 00007f5178595fa0 R15: 00007ffe1291b828 [ 366.625373][T17462] [ 366.853529][T17454] vhci_hcd: connection closed [ 366.857609][ T6085] vhci_hcd vhci_hcd.8: stop threads [ 366.870254][ T6085] vhci_hcd vhci_hcd.8: release socket [ 366.876064][ T6085] vhci_hcd vhci_hcd.8: disconnect device [ 366.916962][ T5976] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 366.966396][T17481] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 366.972942][T17481] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 366.992673][T17481] vhci_hcd vhci_hcd.0: Device attached [ 367.008336][T17482] vhci_hcd: connection closed [ 367.008548][ T1869] vhci_hcd vhci_hcd.0: stop threads [ 367.019302][ T1869] vhci_hcd vhci_hcd.0: release socket [ 367.024746][ T1869] vhci_hcd vhci_hcd.0: disconnect device [ 367.393009][T17501] xt_hashlimit: size too large, truncated to 1048576 [ 367.406977][ T28] audit: type=1400 audit(1771153837.820:3919): avc: denied { getopt } for pid=17504 comm="syz.8.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 367.508488][T17513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4172'. [ 367.558074][T17513] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4172'. [ 367.576258][T17512] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4172'. [ 367.891023][T17539] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4179'. [ 367.922471][T17539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.933275][T17539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.048622][T17550] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 368.055203][T17550] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.062903][T17550] vhci_hcd vhci_hcd.0: Device attached [ 368.091105][T17546] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.102459][T17551] vhci_hcd: connection closed [ 368.102676][ T70] vhci_hcd vhci_hcd.1: stop threads [ 368.114308][ T70] vhci_hcd vhci_hcd.1: release socket [ 368.120338][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 368.136859][T17546] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.152651][T17556] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 368.159201][T17556] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.167016][T17556] vhci_hcd vhci_hcd.0: Device attached [ 368.177993][T17557] vhci_hcd: connection closed [ 368.178313][ T6091] vhci_hcd vhci_hcd.9: stop threads [ 368.188592][ T6091] vhci_hcd vhci_hcd.9: release socket [ 368.194026][ T6091] vhci_hcd vhci_hcd.9: disconnect device [ 368.216968][T17546] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.267010][T17546] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.313201][ T1869] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.325540][ T6091] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.337828][ T6091] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.350152][ T6091] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.434992][T17573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4192'. [ 368.444741][T17573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=17573 comm=syz.0.4192 [ 368.672801][T17587] xt_hashlimit: size too large, truncated to 1048576 [ 368.821817][T17600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.831465][T17600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.132830][T17615] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 369.139413][T17615] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 369.148116][T17615] vhci_hcd vhci_hcd.0: Device attached [ 369.178178][T17616] vhci_hcd: connection closed [ 369.179009][ T1869] vhci_hcd vhci_hcd.0: stop threads [ 369.189048][ T1869] vhci_hcd vhci_hcd.0: release socket [ 369.194446][ T1869] vhci_hcd vhci_hcd.0: disconnect device [ 369.937189][T17668] __nla_validate_parse: 3 callbacks suppressed [ 369.937206][T17668] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4228'. [ 369.977841][T17668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.986449][T17668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.052525][T17672] xt_hashlimit: size too large, truncated to 1048576 [ 370.516454][T17685] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 370.523090][T17685] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 370.534559][T17685] vhci_hcd vhci_hcd.0: Device attached [ 370.557457][T17686] vhci_hcd: connection closed [ 370.557739][ T6091] vhci_hcd vhci_hcd.1: stop threads [ 370.581654][ T6091] vhci_hcd vhci_hcd.1: release socket [ 370.590258][ T6091] vhci_hcd vhci_hcd.1: disconnect device [ 370.658258][T17696] macsec0: entered promiscuous mode [ 370.665451][ T28] audit: type=1400 audit(1771153841.090:3920): avc: denied { shutdown } for pid=17695 comm="syz.9.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 370.665624][T17696] macsec0: entered allmulticast mode [ 370.690059][ T28] audit: type=1400 audit(1771153841.120:3921): avc: denied { shutdown } for pid=17699 comm="syz.0.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.692201][T17696] veth1_macvtap: entered allmulticast mode [ 370.740750][T17700] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 370.750761][T17700] bridge1: entered promiscuous mode [ 371.015456][T15948] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 371.031963][T17731] FAULT_INJECTION: forcing a failure. [ 371.031963][T17731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.062464][T15948] CPU: 1 UID: 0 PID: 15948 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 371.062491][T15948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.062503][T15948] Call Trace: [ 371.062573][T15948] [ 371.062582][T15948] __dump_stack+0x1d/0x30 [ 371.062607][T15948] dump_stack_lvl+0x95/0xd0 [ 371.062629][T15948] dump_stack+0x15/0x1b [ 371.062652][T15948] dump_header+0x80/0x240 [ 371.062676][T15948] oom_kill_process+0x295/0x350 [ 371.062726][T15948] out_of_memory+0x97d/0xb80 [ 371.062765][T15948] try_charge_memcg+0x62e/0xa10 [ 371.062795][T15948] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 371.062820][T15948] __swap_cache_prepare_and_add+0x386/0x530 [ 371.062864][T15948] swap_cache_alloc_folio+0xa2/0x120 [ 371.062907][T15948] swap_cluster_readahead+0x26e/0x3d0 [ 371.062933][T15948] swapin_readahead+0xde/0x840 [ 371.062953][T15948] ? __rcu_read_unlock+0x4e/0x70 [ 371.063006][T15948] ? __perf_event_task_sched_in+0xa65/0xad0 [ 371.063060][T15948] ? __list_add_valid_or_report+0x38/0xe0 [ 371.063087][T15948] ? xfd_validate_state+0x45/0xf0 [ 371.063158][T15948] ? __rcu_read_unlock+0x4e/0x70 [ 371.063195][T15948] ? swap_cache_get_folio+0x26f/0x280 [ 371.063348][T15948] do_swap_page+0x309/0x2210 [ 371.063370][T15948] ? __schedule+0x85a/0xd40 [ 371.063389][T15948] ? __rcu_read_lock+0x36/0x50 [ 371.063405][T15948] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 371.063542][T15948] handle_mm_fault+0xb40/0x3020 [ 371.063602][T15948] ? vma_start_read+0x1c7/0x2c0 [ 371.063623][T15948] do_user_addr_fault+0x62f/0x1050 [ 371.063650][T15948] ? trace_page_fault_user+0x1f/0xe0 [ 371.063748][T15948] exc_page_fault+0x62/0xa0 [ 371.063887][T15948] asm_exc_page_fault+0x26/0x30 [ 371.063906][T15948] RIP: 0033:0x7f7786b77197 [ 371.063921][T15948] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 371.063937][T15948] RSP: 002b:00007fff44e2fac0 EFLAGS: 00010202 [ 371.064012][T15948] RAX: 0000000000000000 RBX: 0000555589727500 RCX: 00007f7786b77197 [ 371.064024][T15948] RDX: 00007fff44e2fb00 RSI: 0000000000000000 RDI: 0000000000000000 [ 371.064036][T15948] RBP: 00007fff44e2fb6c R08: 0000000000000000 R09: 0000000000000000 [ 371.064048][T15948] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 371.064060][T15948] R13: 00000000000927c0 R14: 000000000005a875 R15: 00007fff44e2fbc0 [ 371.064077][T15948] [ 371.064149][T15948] memory: usage 275480kB, limit 307200kB, failcnt 1106 [ 371.064153][T17731] CPU: 0 UID: 0 PID: 17731 Comm: syz.6.4251 Not tainted syzkaller #0 PREEMPT(full) [ 371.064179][T17731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.064266][T17731] Call Trace: [ 371.064272][T17731] [ 371.064279][T17731] __dump_stack+0x1d/0x30 [ 371.064360][T17731] dump_stack_lvl+0x95/0xd0 [ 371.064382][T17731] dump_stack+0x15/0x1b [ 371.064404][T17731] should_fail_ex+0x263/0x280 [ 371.064429][T17731] should_fail+0xb/0x20 [ 371.064451][T17731] should_fail_usercopy+0x1a/0x20 [ 371.064515][T17731] _copy_from_iter+0xcf/0xea0 [ 371.064601][T17731] ? __alloc_skb+0x4f6/0x690 [ 371.064624][T17731] ? __alloc_skb+0x200/0x690 [ 371.064647][T17731] netlink_sendmsg+0x4ae/0x6f0 [ 371.064727][T17731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.064754][T17731] ____sys_sendmsg+0x5af/0x600 [ 371.064848][T17731] ___sys_sendmsg+0x195/0x1e0 [ 371.064885][T17731] __x64_sys_sendmsg+0xd4/0x160 [ 371.064916][T17731] x64_sys_call+0x194c/0x3020 [ 371.064956][T17731] do_syscall_64+0x12c/0x370 [ 371.064989][T17731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.065089][T17731] RIP: 0033:0x7ff7a7bcbf79 [ 371.065105][T17731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.065124][T17731] RSP: 002b:00007ff7a661f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.065144][T17731] RAX: ffffffffffffffda RBX: 00007ff7a7e45fa0 RCX: 00007ff7a7bcbf79 [ 371.065159][T17731] RDX: 0000000004040000 RSI: 0000200000000540 RDI: 0000000000000003 [ 371.065232][T17731] RBP: 00007ff7a661f090 R08: 0000000000000000 R09: 0000000000000000 [ 371.065245][T17731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.065259][T17731] R13: 00007ff7a7e46038 R14: 00007ff7a7e45fa0 R15: 00007fff4ee9c6e8 [ 371.065278][T17731] [ 371.232356][T17737] xt_hashlimit: size too large, truncated to 1048576 [ 371.366632][T15948] memory+swap: usage 1092kB, limit 9007199254740988kB, failcnt 0 [ 371.519830][T15948] kmem: usage 476kB, limit 9007199254740988kB, failcnt 0 [ 371.526941][T15948] Memory cgroup stats for /syz0: [ 371.527280][T15948] cache 0 [ 371.535173][T15948] rss 20480 [ 371.541934][T15948] shmem 0 [ 371.544885][T15948] mapped_file 0 [ 371.548505][T15948] dirty 0 [ 371.551433][T15948] writeback 0 [ 371.554752][T15948] workingset_refault_anon 46 [ 371.559446][T15948] workingset_refault_file 0 [ 371.564023][T15948] swap 176128 [ 371.567451][T15948] swapcached 8753152 [ 371.571347][T15948] pgpgin 458401 [ 371.574802][T15948] pgpgout 458395 [ 371.578804][T15948] pgfault 365462 [ 371.582354][T15948] pgmajfault 21 [ 371.585805][T15948] inactive_anon 0 [ 371.589880][T15948] active_anon 24576 [ 371.620013][T15948] inactive_file 0 [ 371.626929][T15948] active_file 0 [ 371.656048][T15948] unevictable 0 [ 371.667503][T15948] hierarchical_memory_limit 314572800 [ 371.693242][T15948] hierarchical_memsw_limit 9223372036854771712 [ 371.710876][T15948] total_cache 0 [ 371.722510][T15948] total_rss 20480 [ 371.732713][T15948] total_shmem 0 [ 371.741205][T15948] total_mapped_file 0 [ 371.749621][T15948] total_dirty 0 [ 371.753247][T15948] total_writeback 0 [ 371.757177][T15948] total_workingset_refault_anon 46 [ 371.762585][T15948] total_workingset_refault_file 0 [ 371.784099][T15948] total_swap 176128 [ 371.789257][T15948] total_swapcached 8753152 [ 371.800215][T15948] total_pgpgin 458795 [ 371.804261][T15948] total_pgpgout 458789 [ 371.808917][T15948] total_pgfault 365850 [ 371.813100][T15948] total_pgmajfault 21 [ 371.826648][T15948] total_inactive_anon 0 [ 371.833835][T15948] total_active_anon 24576 [ 371.839684][T15948] total_inactive_file 0 [ 371.863462][T15948] total_active_file 0 [ 371.873294][T15948] total_unevictable 0 [ 371.888399][T15948] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4239,pid=17699,uid=0 [ 371.918476][T15948] Memory cgroup out of memory: Killed process 17699 (syz.0.4239) total-vm:96204kB, anon-rss:1248kB, file-rss:22600kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 371.953669][T17783] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4271'. [ 372.513790][T17814] xt_hashlimit: size too large, truncated to 1048576 [ 372.530478][T17819] all: renamed from bridge_slave_1 (while UP) [ 372.806354][T17830] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4291'. [ 372.828931][T17830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.857336][T17830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.930028][T17846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4298'. [ 372.940680][T17846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4298'. [ 372.950380][T17846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4298'. [ 372.973391][T17846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4298'. [ 372.983595][T17847] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65313 sclass=netlink_xfrm_socket pid=17847 comm=syz.1.4298 [ 373.004159][T17846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65313 sclass=netlink_route_socket pid=17846 comm=syz.1.4298 [ 373.017588][T17846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65313 sclass=netlink_route_socket pid=17846 comm=syz.1.4298 [ 373.030715][T17846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65313 sclass=netlink_route_socket pid=17846 comm=syz.1.4298 [ 373.043786][T17846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65313 sclass=netlink_route_socket pid=17846 comm=syz.1.4298 [ 373.058865][T17846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65313 sclass=netlink_route_socket pid=17846 comm=syz.1.4298 [ 373.072506][T17846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65313 sclass=netlink_route_socket pid=17846 comm=syz.1.4298 [ 373.086763][T17846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65313 sclass=netlink_route_socket pid=17846 comm=syz.1.4298 [ 373.099911][T17846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65313 sclass=netlink_route_socket pid=17846 comm=syz.1.4298 [ 373.113037][T17846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65313 sclass=netlink_route_socket pid=17846 comm=syz.1.4298 [ 373.329179][T17869] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4304'. [ 373.643370][T17908] xt_hashlimit: size too large, truncated to 1048576 [ 373.842670][T17886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.851995][T17886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.948034][T17965] FAULT_INJECTION: forcing a failure. [ 373.948034][T17965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.983873][T17965] CPU: 0 UID: 0 PID: 17965 Comm: syz.9.4321 Not tainted syzkaller #0 PREEMPT(full) [ 373.983906][T17965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.983921][T17965] Call Trace: [ 373.983928][T17965] [ 373.983958][T17965] __dump_stack+0x1d/0x30 [ 373.983982][T17965] dump_stack_lvl+0x95/0xd0 [ 373.984005][T17965] dump_stack+0x15/0x1b [ 373.984028][T17965] should_fail_ex+0x263/0x280 [ 373.984071][T17965] ? __pfx_ucma_set_option+0x10/0x10 [ 373.984092][T17965] should_fail+0xb/0x20 [ 373.984132][T17965] should_fail_usercopy+0x1a/0x20 [ 373.984160][T17965] _copy_from_user+0x1c/0xb0 [ 373.984190][T17965] ucma_set_option+0x54/0x950 [ 373.984209][T17965] ? terminate_walk+0x1e6/0x210 [ 373.984305][T17965] ? path_openat+0x1ab2/0x2050 [ 373.984335][T17965] ? mutex_unlock+0x4e/0x90 [ 373.984362][T17965] ? ucma_resolve_ip+0x316/0x370 [ 373.984442][T17965] ? should_fail_ex+0xd9/0x280 [ 373.984502][T17965] ? __pfx_ucma_set_option+0x10/0x10 [ 373.984524][T17965] ucma_write+0x1c9/0x260 [ 373.984557][T17965] vfs_writev+0x42b/0x900 [ 373.984580][T17965] ? __pfx_ucma_write+0x10/0x10 [ 373.984692][T17965] do_writev+0xe9/0x210 [ 373.984715][T17965] __x64_sys_writev+0x45/0x50 [ 373.984747][T17965] x64_sys_call+0x1c0c/0x3020 [ 373.984779][T17965] do_syscall_64+0x12c/0x370 [ 373.984840][T17965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.984985][T17965] RIP: 0033:0x7f517831bf79 [ 373.985003][T17965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.985022][T17965] RSP: 002b:00007f5176d56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 373.985050][T17965] RAX: ffffffffffffffda RBX: 00007f5178596090 RCX: 00007f517831bf79 [ 373.985064][T17965] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000a [ 373.985078][T17965] RBP: 00007f5176d56090 R08: 0000000000000000 R09: 0000000000000000 [ 373.985138][T17965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.985219][T17965] R13: 00007f5178596128 R14: 00007f5178596090 R15: 00007ffe1291b828 [ 373.985239][T17965] [ 374.324770][T17983] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 374.334767][T17983] bridge1: entered promiscuous mode [ 374.696925][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.906185][T18083] FAULT_INJECTION: forcing a failure. [ 374.906185][T18083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.919908][T18083] CPU: 1 UID: 0 PID: 18083 Comm: syz.0.4330 Not tainted syzkaller #0 PREEMPT(full) [ 374.919937][T18083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.919967][T18083] Call Trace: [ 374.919973][T18083] [ 374.919981][T18083] __dump_stack+0x1d/0x30 [ 374.920004][T18083] dump_stack_lvl+0x95/0xd0 [ 374.920024][T18083] dump_stack+0x15/0x1b [ 374.920125][T18083] should_fail_ex+0x263/0x280 [ 374.920146][T18083] should_fail+0xb/0x20 [ 374.920169][T18083] should_fail_usercopy+0x1a/0x20 [ 374.920225][T18083] _copy_from_user+0x1c/0xb0 [ 374.920249][T18083] input_event_from_user+0x5e/0x190 [ 374.920322][T18083] ? input_inject_event+0x104/0x120 [ 374.920349][T18083] evdev_write+0x1b0/0x2b0 [ 374.920379][T18083] ? __pfx_evdev_write+0x10/0x10 [ 374.920415][T18083] vfs_write+0x269/0x9f0 [ 374.920444][T18083] ? __rcu_read_unlock+0x4e/0x70 [ 374.920466][T18083] ? __fget_files+0x184/0x1c0 [ 374.920560][T18083] ksys_write+0xdc/0x1a0 [ 374.920590][T18083] __x64_sys_write+0x40/0x50 [ 374.920675][T18083] x64_sys_call+0x27e1/0x3020 [ 374.920701][T18083] do_syscall_64+0x12c/0x370 [ 374.920733][T18083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.920761][T18083] RIP: 0033:0x7f7786bbbf79 [ 374.920779][T18083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.920800][T18083] RSP: 002b:00007f778560f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 374.920823][T18083] RAX: ffffffffffffffda RBX: 00007f7786e35fa0 RCX: 00007f7786bbbf79 [ 374.920840][T18083] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 374.920872][T18083] RBP: 00007f778560f090 R08: 0000000000000000 R09: 0000000000000000 [ 374.920884][T18083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.920944][T18083] R13: 00007f7786e36038 R14: 00007f7786e35fa0 R15: 00007fff44e2f7c8 [ 374.920967][T18083] [ 375.165770][T18093] FAULT_INJECTION: forcing a failure. [ 375.165770][T18093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.179566][T18093] CPU: 0 UID: 0 PID: 18093 Comm: syz.9.4335 Not tainted syzkaller #0 PREEMPT(full) [ 375.179607][T18093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.179620][T18093] Call Trace: [ 375.179699][T18093] [ 375.179706][T18093] __dump_stack+0x1d/0x30 [ 375.179730][T18093] dump_stack_lvl+0x95/0xd0 [ 375.179791][T18093] dump_stack+0x15/0x1b [ 375.179810][T18093] should_fail_ex+0x263/0x280 [ 375.179836][T18093] should_fail+0xb/0x20 [ 375.179857][T18093] should_fail_usercopy+0x1a/0x20 [ 375.179888][T18093] _copy_to_user+0x20/0xa0 [ 375.179917][T18093] simple_read_from_buffer+0xb5/0x130 [ 375.179987][T18093] proc_fail_nth_read+0x10e/0x150 [ 375.180014][T18093] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 375.180104][T18093] vfs_read+0x1ab/0x7f0 [ 375.180133][T18093] ? __rcu_read_unlock+0x4e/0x70 [ 375.180154][T18093] ? __fget_files+0x184/0x1c0 [ 375.180223][T18093] ? mutex_lock+0x57/0x90 [ 375.180327][T18093] ksys_read+0xdc/0x1a0 [ 375.180395][T18093] __x64_sys_read+0x40/0x50 [ 375.180423][T18093] x64_sys_call+0x2886/0x3020 [ 375.180471][T18093] do_syscall_64+0x12c/0x370 [ 375.180501][T18093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.180593][T18093] RIP: 0033:0x7f51782dc84e [ 375.180611][T18093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 375.180630][T18093] RSP: 002b:00007f5176d76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.180653][T18093] RAX: ffffffffffffffda RBX: 00007f5176d776c0 RCX: 00007f51782dc84e [ 375.180669][T18093] RDX: 000000000000000f RSI: 00007f5176d770a0 RDI: 0000000000000003 [ 375.180684][T18093] RBP: 00007f5176d77090 R08: 0000000000000000 R09: 0000000000000000 [ 375.180750][T18093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.180765][T18093] R13: 00007f5178596038 R14: 00007f5178595fa0 R15: 00007ffe1291b828 [ 375.180784][T18093] [ 375.447686][T18106] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4340'. [ 375.462166][T18099] xt_hashlimit: size too large, truncated to 1048576 [ 375.469813][ T28] audit: type=1400 audit(1771153845.910:3922): avc: denied { accept } for pid=18105 comm="syz.1.4340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 375.471666][T18106] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 375.517929][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4340'. [ 375.713954][T18126] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4347'. [ 375.724645][T18126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.739385][T18126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.765901][T18130] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4349'. [ 375.790378][T18132] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 375.796985][T18132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 375.804719][T18132] vhci_hcd vhci_hcd.0: Device attached [ 375.812679][T18133] vhci_hcd: connection closed [ 375.812816][ T2058] vhci_hcd vhci_hcd.0: stop threads [ 375.822928][ T2058] vhci_hcd vhci_hcd.0: release socket [ 375.828361][ T2058] vhci_hcd vhci_hcd.0: disconnect device [ 376.052614][T18140] xt_hashlimit: size too large, truncated to 1048576 [ 376.105244][T18141] netlink: 'syz.6.4353': attribute type 8 has an invalid length. [ 376.406107][T18172] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.428943][T18172] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.448874][T18172] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 376.455418][T18172] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 376.477520][T18172] vhci_hcd vhci_hcd.0: Device attached [ 376.488264][T18172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4365'. [ 376.500862][T18172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4365'. [ 376.510493][T18174] vhci_hcd: connection closed [ 376.511224][ T2058] vhci_hcd vhci_hcd.0: stop threads [ 376.541544][ T2058] vhci_hcd vhci_hcd.0: release socket [ 376.561814][ T2058] vhci_hcd vhci_hcd.0: disconnect device [ 376.625018][T18185] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4369'. [ 376.647357][T18185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.665932][T18185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.692100][T18173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4364'. [ 377.224569][T18199] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 377.231125][T18199] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 377.248840][T18199] vhci_hcd vhci_hcd.0: Device attached [ 377.263448][T18204] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 377.270022][T18204] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 377.278011][T18204] vhci_hcd vhci_hcd.0: Device attached [ 377.284017][T18201] vhci_hcd: connection closed [ 377.284311][ T1869] vhci_hcd vhci_hcd.6: stop threads [ 377.294418][ T1869] vhci_hcd vhci_hcd.6: release socket [ 377.303613][ T1869] vhci_hcd vhci_hcd.6: disconnect device [ 377.517509][T18221] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 377.524045][T18221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 377.531925][T18221] vhci_hcd vhci_hcd.0: Device attached [ 377.546979][ T9] usb 3-1: new low-speed USB device number 4 using vhci_hcd [ 377.625113][ T28] audit: type=1400 audit(1771153848.050:3923): avc: denied { bind } for pid=18233 comm="syz.9.4381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 377.649504][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4381'. [ 377.664363][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4381'. [ 377.776889][ T3390] usb 17-1: new low-speed USB device number 6 using vhci_hcd [ 377.810033][T18238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.819786][T18238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.108508][T18205] vhci_hcd: connection reset by peer [ 378.114013][ T70] vhci_hcd vhci_hcd.1: stop threads [ 378.119520][ T70] vhci_hcd vhci_hcd.1: release socket [ 378.124996][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 378.146075][T18263] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 378.152667][T18263] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 378.160300][T18263] vhci_hcd vhci_hcd.0: Device attached [ 378.168630][T18264] vhci_hcd: connection closed [ 378.168796][ T2058] vhci_hcd vhci_hcd.9: stop threads [ 378.178840][ T2058] vhci_hcd vhci_hcd.9: release socket [ 378.184257][ T2058] vhci_hcd vhci_hcd.9: disconnect device [ 378.397496][T18222] vhci_hcd: connection reset by peer [ 378.407741][ T2058] vhci_hcd vhci_hcd.8: stop threads [ 378.412973][ T2058] vhci_hcd vhci_hcd.8: release socket [ 378.419854][ T2058] vhci_hcd vhci_hcd.8: disconnect device [ 378.790048][T18314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.808054][T18314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.915347][ T28] audit: type=1400 audit(1771153849.340:3924): avc: denied { write } for pid=18317 comm="syz.8.4411" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 378.992558][T18324] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 379.170816][T18334] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 379.177350][T18334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 379.185696][T18334] vhci_hcd vhci_hcd.0: Device attached [ 379.571239][T18355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.580560][T18355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.807604][T18373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.827016][T18373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.956699][T18379] FAULT_INJECTION: forcing a failure. [ 379.956699][T18379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.970011][T18379] CPU: 0 UID: 0 PID: 18379 Comm: syz.9.4431 Not tainted syzkaller #0 PREEMPT(full) [ 379.970037][T18379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.970110][T18379] Call Trace: [ 379.970116][T18379] [ 379.970123][T18379] __dump_stack+0x1d/0x30 [ 379.970146][T18379] dump_stack_lvl+0x95/0xd0 [ 379.970201][T18379] dump_stack+0x15/0x1b [ 379.970219][T18379] should_fail_ex+0x263/0x280 [ 379.970240][T18379] should_fail+0xb/0x20 [ 379.970257][T18379] should_fail_usercopy+0x1a/0x20 [ 379.970336][T18379] _copy_from_user+0x1c/0xb0 [ 379.970360][T18379] ___sys_sendmsg+0xc1/0x1e0 [ 379.970394][T18379] __x64_sys_sendmsg+0xd4/0x160 [ 379.970434][T18379] x64_sys_call+0x194c/0x3020 [ 379.970456][T18379] do_syscall_64+0x12c/0x370 [ 379.970506][T18379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.970526][T18379] RIP: 0033:0x7f517831bf79 [ 379.970551][T18379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.970568][T18379] RSP: 002b:00007f5176d77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.970585][T18379] RAX: ffffffffffffffda RBX: 00007f5178595fa0 RCX: 00007f517831bf79 [ 379.970598][T18379] RDX: 0000000000008000 RSI: 0000200000000180 RDI: 0000000000000003 [ 379.970610][T18379] RBP: 00007f5176d77090 R08: 0000000000000000 R09: 0000000000000000 [ 379.970622][T18379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.970650][T18379] R13: 00007f5178596038 R14: 00007f5178595fa0 R15: 00007ffe1291b828 [ 379.970668][T18379] [ 380.157592][T18335] vhci_hcd: connection closed [ 380.157790][ T1869] vhci_hcd vhci_hcd.1: stop threads [ 380.165489][T18385] netlink: 'syz.0.4434': attribute type 5 has an invalid length. [ 380.180590][ T1869] vhci_hcd vhci_hcd.1: release socket [ 380.196367][ T1869] vhci_hcd vhci_hcd.1: disconnect device [ 380.367332][T18394] xt_hashlimit: size too large, truncated to 1048576 [ 381.003754][T18416] FAULT_INJECTION: forcing a failure. [ 381.003754][T18416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.017352][T18416] CPU: 0 UID: 0 PID: 18416 Comm: syz.6.4446 Not tainted syzkaller #0 PREEMPT(full) [ 381.017382][T18416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.017418][T18416] Call Trace: [ 381.017480][T18416] [ 381.017489][T18416] __dump_stack+0x1d/0x30 [ 381.017516][T18416] dump_stack_lvl+0x95/0xd0 [ 381.017539][T18416] dump_stack+0x15/0x1b [ 381.017583][T18416] should_fail_ex+0x263/0x280 [ 381.017609][T18416] should_fail+0xb/0x20 [ 381.017650][T18416] should_fail_usercopy+0x1a/0x20 [ 381.017743][T18416] _copy_from_user+0x1c/0xb0 [ 381.017835][T18416] kstrtouint_from_user+0x69/0xf0 [ 381.017860][T18416] proc_fail_nth_write+0x50/0x160 [ 381.017887][T18416] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 381.017913][T18416] vfs_write+0x269/0x9f0 [ 381.017970][T18416] ? __rcu_read_unlock+0x4e/0x70 [ 381.017989][T18416] ? __fget_files+0x184/0x1c0 [ 381.018060][T18416] ? mutex_lock+0x57/0x90 [ 381.018088][T18416] ksys_write+0xdc/0x1a0 [ 381.018173][T18416] __x64_sys_write+0x40/0x50 [ 381.018204][T18416] x64_sys_call+0x27e1/0x3020 [ 381.018230][T18416] do_syscall_64+0x12c/0x370 [ 381.018262][T18416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.018327][T18416] RIP: 0033:0x7ff7a7b8c84e [ 381.018343][T18416] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 381.018380][T18416] RSP: 002b:00007ff7a661efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 381.018408][T18416] RAX: ffffffffffffffda RBX: 00007ff7a661f6c0 RCX: 00007ff7a7b8c84e [ 381.018420][T18416] RDX: 0000000000000001 RSI: 00007ff7a661f0a0 RDI: 0000000000000004 [ 381.018434][T18416] RBP: 00007ff7a661f090 R08: 0000000000000000 R09: 0000000000000000 [ 381.018480][T18416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.018492][T18416] R13: 00007ff7a7e46038 R14: 00007ff7a7e45fa0 R15: 00007fff4ee9c6e8 [ 381.018510][T18416] [ 381.020913][T18419] __nla_validate_parse: 4 callbacks suppressed [ 381.020966][T18419] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4444'. [ 381.052818][T18421] vlan0: entered promiscuous mode [ 381.132920][T18430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.249886][T18430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.252813][T18432] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 381.264162][T18432] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.284685][T18432] vhci_hcd vhci_hcd.0: Device attached [ 381.298118][T18433] vhci_hcd: connection closed [ 381.298294][ T70] vhci_hcd vhci_hcd.1: stop threads [ 381.313047][ T70] vhci_hcd vhci_hcd.1: release socket [ 381.322730][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 381.727841][T18466] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 381.743081][T11473] IPVS: starting estimator thread 0... [ 381.763561][ T28] audit: type=1400 audit(1771153852.190:3925): avc: denied { write } for pid=18465 comm="syz.0.4461" name="file0" dev="tmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 381.777767][T18466] block device autoloading is deprecated and will be removed. [ 381.820049][T18466] loop0: detected capacity change from 0 to 128 [ 381.834386][T18466] /dev/loop0: Can't open blockdev [ 381.846904][T18467] IPVS: using max 4080 ests per chain, 204000 per kthread [ 381.870514][T18471] xt_hashlimit: size too large, truncated to 1048576 [ 381.939030][T18476] FAULT_INJECTION: forcing a failure. [ 381.939030][T18476] name failslab, interval 1, probability 0, space 0, times 0 [ 381.953034][T18476] CPU: 0 UID: 0 PID: 18476 Comm: syz.1.4465 Not tainted syzkaller #0 PREEMPT(full) [ 381.953096][T18476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.953110][T18476] Call Trace: [ 381.953118][T18476] [ 381.953127][T18476] __dump_stack+0x1d/0x30 [ 381.953180][T18476] dump_stack_lvl+0x95/0xd0 [ 381.953200][T18476] dump_stack+0x15/0x1b [ 381.953221][T18476] should_fail_ex+0x263/0x280 [ 381.953249][T18476] should_failslab+0x8c/0xb0 [ 381.953323][T18476] __kmalloc_noprof+0xb8/0x4e0 [ 381.953344][T18476] ? io_cache_alloc_new+0x2a/0xb0 [ 381.953446][T18476] io_cache_alloc_new+0x2a/0xb0 [ 381.953469][T18476] io_msg_alloc_async+0xfb/0x190 [ 381.953492][T18476] io_connect_prep+0x118/0x170 [ 381.953516][T18476] io_submit_sqes+0x747/0x1260 [ 381.953586][T18476] __se_sys_io_uring_enter+0x1c9/0xf50 [ 381.953613][T18476] ? __fget_files+0x184/0x1c0 [ 381.953705][T18476] ? mutex_unlock+0x4e/0x90 [ 381.953749][T18476] ? fput+0x8f/0xc0 [ 381.953770][T18476] __x64_sys_io_uring_enter+0x78/0x90 [ 381.953862][T18476] x64_sys_call+0x1e16/0x3020 [ 381.953889][T18476] do_syscall_64+0x12c/0x370 [ 381.953997][T18476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.954095][T18476] RIP: 0033:0x7f3d62c0bf79 [ 381.954111][T18476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.954130][T18476] RSP: 002b:00007f3d61667028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 381.954164][T18476] RAX: ffffffffffffffda RBX: 00007f3d62e85fa0 RCX: 00007f3d62c0bf79 [ 381.954181][T18476] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 381.954203][T18476] RBP: 00007f3d61667090 R08: 0000000000000000 R09: 0000000000000000 [ 381.954217][T18476] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 381.954231][T18476] R13: 00007f3d62e86038 R14: 00007f3d62e85fa0 R15: 00007ffe9e6bb938 [ 381.954254][T18476] [ 382.440672][ T28] audit: type=1400 audit(1771153852.860:3926): avc: denied { setattr } for pid=18500 comm="syz.6.4474" name="NETLINK" dev="sockfs" ino=62835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 382.554082][T18510] selinux_netlink_send: 52 callbacks suppressed [ 382.554103][T18510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=18510 comm=syz.0.4475 [ 382.618130][ T9] usb 3-1: enqueue for inactive port 0 [ 382.623632][ T9] usb 3-1: enqueue for inactive port 0 [ 382.681389][T18532] loop0: detected capacity change from 0 to 2048 [ 382.726987][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 382.727422][T18532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.782634][T15948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.803325][T18547] FAULT_INJECTION: forcing a failure. [ 382.803325][T18547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.811955][T18543] xt_hashlimit: max too large, truncated to 1048576 [ 382.816948][T18547] CPU: 1 UID: 0 PID: 18547 Comm: syz.8.4488 Not tainted syzkaller #0 PREEMPT(full) [ 382.816976][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.816990][T18547] Call Trace: [ 382.816997][T18547] [ 382.817005][T18547] __dump_stack+0x1d/0x30 [ 382.817058][T18547] dump_stack_lvl+0x95/0xd0 [ 382.817081][T18547] dump_stack+0x15/0x1b [ 382.817103][T18547] should_fail_ex+0x263/0x280 [ 382.817128][T18547] should_fail+0xb/0x20 [ 382.817149][T18547] should_fail_usercopy+0x1a/0x20 [ 382.817207][T18547] _copy_from_user+0x1c/0xb0 [ 382.817235][T18547] get_user_ifreq+0x52/0x110 [ 382.817273][T18547] sock_ioctl+0x54e/0x610 [ 382.817357][T18547] ? __pfx_sock_ioctl+0x10/0x10 [ 382.817386][T18547] __se_sys_ioctl+0xce/0x140 [ 382.817490][T18547] __x64_sys_ioctl+0x43/0x50 [ 382.817517][T18547] x64_sys_call+0x1563/0x3020 [ 382.817543][T18547] do_syscall_64+0x12c/0x370 [ 382.817593][T18547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.817616][T18547] RIP: 0033:0x7fae6ab7bf79 [ 382.817633][T18547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.817653][T18547] RSP: 002b:00007fae695d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.817823][T18547] RAX: ffffffffffffffda RBX: 00007fae6adf5fa0 RCX: 00007fae6ab7bf79 [ 382.817838][T18547] RDX: 0000200000000500 RSI: 00000000000089f3 RDI: 0000000000000003 [ 382.817852][T18547] RBP: 00007fae695d7090 R08: 0000000000000000 R09: 0000000000000000 [ 382.817867][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.817915][T18547] R13: 00007fae6adf6038 R14: 00007fae6adf5fa0 R15: 00007ffc17de1378 [ 382.817936][T18547] [ 382.993991][ T3390] usb 17-1: enqueue for inactive port 0 [ 382.999616][ T3390] usb 17-1: enqueue for inactive port 0 [ 383.066879][ T3390] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 383.365328][T11325] IPVS: starting estimator thread 0... [ 383.477827][T18567] IPVS: using max 2400 ests per chain, 120000 per kthread [ 383.609982][T18575] netlink: 'syz.8.4495': attribute type 3 has an invalid length. [ 383.623916][T18575] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4495'. [ 384.008293][T18596] FAULT_INJECTION: forcing a failure. [ 384.008293][T18596] name failslab, interval 1, probability 0, space 0, times 0 [ 384.031533][T18596] CPU: 0 UID: 0 PID: 18596 Comm: syz.8.4504 Not tainted syzkaller #0 PREEMPT(full) [ 384.031562][T18596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.031628][T18596] Call Trace: [ 384.031634][T18596] [ 384.031641][T18596] __dump_stack+0x1d/0x30 [ 384.031665][T18596] dump_stack_lvl+0x95/0xd0 [ 384.031687][T18596] dump_stack+0x15/0x1b [ 384.031783][T18596] should_fail_ex+0x263/0x280 [ 384.031805][T18596] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 384.031828][T18596] should_failslab+0x8c/0xb0 [ 384.031856][T18596] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 384.031890][T18596] ? shmem_alloc_inode+0x34/0x50 [ 384.031915][T18596] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 384.031940][T18596] shmem_alloc_inode+0x34/0x50 [ 384.032003][T18596] alloc_inode+0x40/0x170 [ 384.032022][T18596] new_inode+0x1d/0xe0 [ 384.032044][T18596] shmem_get_inode+0x246/0x750 [ 384.032070][T18596] shmem_mknod+0x44/0x170 [ 384.032162][T18596] shmem_mkdir+0x33/0x70 [ 384.032257][T18596] vfs_mkdir+0x294/0x3e0 [ 384.032289][T18596] filename_mkdirat+0x138/0x300 [ 384.032320][T18596] __se_sys_mkdirat+0x32/0xf0 [ 384.032474][T18596] __x64_sys_mkdirat+0x43/0x50 [ 384.032511][T18596] x64_sys_call+0x2c4e/0x3020 [ 384.032538][T18596] do_syscall_64+0x12c/0x370 [ 384.032573][T18596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.032595][T18596] RIP: 0033:0x7fae6ab7ae57 [ 384.032623][T18596] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.032642][T18596] RSP: 002b:00007fae695d6e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 384.032665][T18596] RAX: ffffffffffffffda RBX: 00007fae695d6ee0 RCX: 00007fae6ab7ae57 [ 384.032681][T18596] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c [ 384.032694][T18596] RBP: 00002000000006c0 R08: 0000200000000080 R09: 0000000000000000 [ 384.032709][T18596] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000200000000280 [ 384.032757][T18596] R13: 00007fae695d6ea0 R14: 0000000000000000 R15: 0000000000000000 [ 384.032776][T18596] [ 384.960365][T18644] FAULT_INJECTION: forcing a failure. [ 384.960365][T18644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.004239][T18644] CPU: 1 UID: 0 PID: 18644 Comm: syz.0.4519 Not tainted syzkaller #0 PREEMPT(full) [ 385.004272][T18644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.004359][T18644] Call Trace: [ 385.004366][T18644] [ 385.004374][T18644] __dump_stack+0x1d/0x30 [ 385.004401][T18644] dump_stack_lvl+0x95/0xd0 [ 385.004480][T18644] dump_stack+0x15/0x1b [ 385.004499][T18644] should_fail_ex+0x263/0x280 [ 385.004524][T18644] should_fail+0xb/0x20 [ 385.004624][T18644] should_fail_usercopy+0x1a/0x20 [ 385.004654][T18644] _copy_to_user+0x20/0xa0 [ 385.004680][T18644] simple_read_from_buffer+0xb5/0x130 [ 385.004713][T18644] proc_fail_nth_read+0x10e/0x150 [ 385.004770][T18644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.004794][T18644] vfs_read+0x1ab/0x7f0 [ 385.004870][T18644] ? __rcu_read_unlock+0x4e/0x70 [ 385.004892][T18644] ? __fget_files+0x184/0x1c0 [ 385.004914][T18644] ? mutex_lock+0x57/0x90 [ 385.004944][T18644] ksys_read+0xdc/0x1a0 [ 385.004971][T18644] __x64_sys_read+0x40/0x50 [ 385.005001][T18644] x64_sys_call+0x2886/0x3020 [ 385.005089][T18644] do_syscall_64+0x12c/0x370 [ 385.005120][T18644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.005211][T18644] RIP: 0033:0x7f7786b7c84e [ 385.005227][T18644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 385.005247][T18644] RSP: 002b:00007f778560efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 385.005272][T18644] RAX: ffffffffffffffda RBX: 00007f778560f6c0 RCX: 00007f7786b7c84e [ 385.005327][T18644] RDX: 000000000000000f RSI: 00007f778560f0a0 RDI: 0000000000000004 [ 385.005338][T18644] RBP: 00007f778560f090 R08: 0000000000000000 R09: 0000000000000000 [ 385.005384][T18644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.005421][T18644] R13: 00007f7786e36038 R14: 00007f7786e35fa0 R15: 00007fff44e2f7c8 [ 385.005499][T18644] [ 385.255812][T18649] pim6reg1: entered promiscuous mode [ 385.266754][T18649] pim6reg1: entered allmulticast mode [ 385.283470][T18651] loop0: detected capacity change from 0 to 2048 [ 385.313603][T18651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.393107][T15948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.516208][T18676] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 385.521864][T18682] loop0: detected capacity change from 0 to 512 [ 385.557093][T18682] EXT4-fs: Ignoring removed bh option [ 385.568219][T18682] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 385.582708][T18676] block device autoloading is deprecated and will be removed. [ 385.593759][T18682] EXT4-fs (loop0): 1 truncate cleaned up [ 385.602751][T18682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.622485][ T28] audit: type=1400 audit(1771153856.050:3927): avc: denied { unlink } for pid=18679 comm="syz.0.4531" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 385.875800][T18682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.895059][T18682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.347533][T18707] SELinux: policydb version 81272844 does not match my version range 15-35 [ 386.403251][T18707] SELinux: failed to load policy [ 386.527068][T18713] FAULT_INJECTION: forcing a failure. [ 386.527068][T18713] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 386.548126][T18713] CPU: 0 UID: 0 PID: 18713 Comm: syz.8.4543 Not tainted syzkaller #0 PREEMPT(full) [ 386.548158][T18713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.548181][T18713] Call Trace: [ 386.548187][T18713] [ 386.548195][T18713] __dump_stack+0x1d/0x30 [ 386.548236][T18713] dump_stack_lvl+0x95/0xd0 [ 386.548303][T18713] dump_stack+0x15/0x1b [ 386.548326][T18713] should_fail_ex+0x263/0x280 [ 386.548353][T18713] should_fail_alloc_page+0xf2/0x100 [ 386.548385][T18713] __alloc_frozen_pages_noprof+0x108/0x360 [ 386.548488][T18713] alloc_pages_mpol+0xb3/0x260 [ 386.548516][T18713] alloc_pages_noprof+0x8f/0x130 [ 386.548596][T18713] pte_alloc_one+0x1e/0xd0 [ 386.548621][T18713] __pte_alloc+0x32/0x2c0 [ 386.548644][T18713] handle_mm_fault+0x204e/0x3020 [ 386.548674][T18713] ? mt_find+0x291/0x3d0 [ 386.548767][T18713] ? lock_mm_and_find_vma+0x8b/0x440 [ 386.548786][T18713] do_user_addr_fault+0x3fd/0x1050 [ 386.548820][T18713] exc_page_fault+0x62/0xa0 [ 386.548848][T18713] asm_exc_page_fault+0x26/0x30 [ 386.548906][T18713] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 386.548931][T18713] Code: c4 10 e9 04 1a 02 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 19 02 00 66 2e [ 386.548947][T18713] RSP: 0018:ffffc900026d3e08 EFLAGS: 00050202 [ 386.548964][T18713] RAX: ffff8881118a6d78 RBX: 0000000000000004 RCX: 0000000000000004 [ 386.548994][T18713] RDX: 0000000000000001 RSI: 0000200000002140 RDI: ffffc900026d3e44 [ 386.549010][T18713] RBP: 0000000000000000 R08: 0000000000000a04 R09: 0000000000000000 [ 386.549025][T18713] R10: 0001c900026d3e44 R11: 0001c900026d3e47 R12: 0000000000000000 [ 386.549041][T18713] R13: ffff888107dd16c0 R14: ffffc900026d3e44 R15: 0000200000002140 [ 386.549123][T18713] _copy_from_user+0x6f/0xb0 [ 386.549154][T18713] do_sock_getsockopt+0xf1/0x210 [ 386.549189][T18713] __x64_sys_getsockopt+0x11d/0x1a0 [ 386.549264][T18713] x64_sys_call+0x2dcf/0x3020 [ 386.549334][T18713] do_syscall_64+0x12c/0x370 [ 386.549367][T18713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.549459][T18713] RIP: 0033:0x7fae6ab7bf79 [ 386.549474][T18713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.549490][T18713] RSP: 002b:00007fae695d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 386.549509][T18713] RAX: ffffffffffffffda RBX: 00007fae6adf5fa0 RCX: 00007fae6ab7bf79 [ 386.549526][T18713] RDX: 0000000000000008 RSI: 0000000000000065 RDI: 0000000000000003 [ 386.549537][T18713] RBP: 00007fae695d7090 R08: 0000200000002140 R09: 0000000000000000 [ 386.549572][T18713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.549587][T18713] R13: 00007fae6adf6038 R14: 00007fae6adf5fa0 R15: 00007ffc17de1378 [ 386.549607][T18713] [ 387.041741][T15948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.090011][T18735] loop0: detected capacity change from 0 to 512 [ 387.134087][T18735] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 387.151713][T18735] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 387.174372][T18741] hsr0: entered promiscuous mode [ 387.288156][T18751] FAULT_INJECTION: forcing a failure. [ 387.288156][T18751] name failslab, interval 1, probability 0, space 0, times 0 [ 387.394632][T18751] CPU: 1 UID: 0 PID: 18751 Comm: syz.0.4554 Not tainted syzkaller #0 PREEMPT(full) [ 387.394662][T18751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.394674][T18751] Call Trace: [ 387.394682][T18751] [ 387.394690][T18751] __dump_stack+0x1d/0x30 [ 387.394764][T18751] dump_stack_lvl+0x95/0xd0 [ 387.394788][T18751] dump_stack+0x15/0x1b [ 387.394810][T18751] should_fail_ex+0x263/0x280 [ 387.394843][T18751] should_failslab+0x8c/0xb0 [ 387.394928][T18751] kmem_cache_alloc_noprof+0x66/0x400 [ 387.394976][T18751] ? __kernfs_new_node+0x70/0x3c0 [ 387.395056][T18751] __kernfs_new_node+0x70/0x3c0 [ 387.395078][T18751] ? rb_insert_color+0x277/0x2b0 [ 387.395105][T18751] ? __rcu_read_unlock+0x4e/0x70 [ 387.395166][T18751] ? kernfs_activate_one+0x10c/0x140 [ 387.395193][T18751] ? __rcu_read_unlock+0x4e/0x70 [ 387.395213][T18751] ? up_write+0x18/0x60 [ 387.395233][T18751] ? kernfs_activate+0x210/0x220 [ 387.395256][T18751] kernfs_new_node+0xd0/0x140 [ 387.395283][T18751] __kernfs_create_file+0x4b/0x180 [ 387.395368][T18751] ? __pfx_drv_attr_show+0x10/0x10 [ 387.395396][T18751] ? __pfx_drv_attr_store+0x10/0x10 [ 387.395426][T18751] sysfs_add_file_mode_ns+0x132/0x1b0 [ 387.395468][T18751] sysfs_create_file_ns+0xd9/0x120 [ 387.395498][T18751] driver_create_file+0x39/0x50 [ 387.395523][T18751] bus_add_driver+0x369/0x450 [ 387.395556][T18751] driver_register+0x162/0x220 [ 387.395698][T18751] usb_gadget_register_driver_owner+0x92/0x1a0 [ 387.395726][T18751] raw_ioctl+0xc6c/0x1e10 [ 387.395790][T18751] ? ioctl_has_perm+0x27e/0x2d0 [ 387.395826][T18751] ? do_vfs_ioctl+0x84f/0xe70 [ 387.395885][T18751] ? selinux_file_ioctl+0x5f7/0xcb0 [ 387.395915][T18751] ? __rcu_read_unlock+0x4e/0x70 [ 387.395937][T18751] ? __fget_files+0x184/0x1c0 [ 387.395961][T18751] ? __pfx_raw_ioctl+0x10/0x10 [ 387.395986][T18751] __se_sys_ioctl+0xce/0x140 [ 387.396050][T18751] __x64_sys_ioctl+0x43/0x50 [ 387.396124][T18751] x64_sys_call+0x1563/0x3020 [ 387.396150][T18751] do_syscall_64+0x12c/0x370 [ 387.396182][T18751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.396257][T18751] RIP: 0033:0x7f7786bbbc0b [ 387.396272][T18751] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 387.396289][T18751] RSP: 002b:00007f778560cf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.396309][T18751] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f7786bbbc0b [ 387.396380][T18751] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 387.396393][T18751] RBP: 00007f778560dfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 387.396486][T18751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.396537][T18751] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 387.396553][T18751] [ 387.396742][T18751] bus_add_driver: add_bind_files(raw-gadget.0) failed [ 387.683254][T18751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.704489][T18751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.763564][T18761] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 387.770099][T18761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 387.778180][T18761] vhci_hcd vhci_hcd.0: Device attached [ 387.786511][T18762] vhci_hcd: connection closed [ 387.786764][ T1869] vhci_hcd vhci_hcd.8: stop threads [ 387.797356][ T1869] vhci_hcd vhci_hcd.8: release socket [ 387.802748][ T1869] vhci_hcd vhci_hcd.8: disconnect device [ 387.981882][T18777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.990581][T18777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.601832][T18805] block device autoloading is deprecated and will be removed. [ 388.630466][T18807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.639640][T18807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.566218][T18842] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 389.572777][T18842] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.580744][T18842] vhci_hcd vhci_hcd.0: Device attached [ 389.699640][T18843] vhci_hcd: connection closed [ 389.700289][ T1869] vhci_hcd vhci_hcd.9: stop threads [ 389.711493][ T1869] vhci_hcd vhci_hcd.9: release socket [ 389.717624][ T1869] vhci_hcd vhci_hcd.9: disconnect device [ 389.745009][T18853] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 389.751574][T18853] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.759498][T18853] vhci_hcd vhci_hcd.0: Device attached [ 389.768107][T11325] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 389.776347][T18854] vhci_hcd: connection closed [ 389.776514][ T6091] vhci_hcd vhci_hcd.8: stop threads [ 389.787193][ T6091] vhci_hcd vhci_hcd.8: release socket [ 389.792576][ T6091] vhci_hcd vhci_hcd.8: disconnect device [ 390.195388][T18870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4596'. [ 390.291039][T18875] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 390.297586][T18875] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.305896][T18875] vhci_hcd vhci_hcd.0: Device attached [ 390.314574][T18876] vhci_hcd: connection closed [ 390.314651][ T1869] vhci_hcd vhci_hcd.9: stop threads [ 390.325043][ T1869] vhci_hcd vhci_hcd.9: release socket [ 390.330808][ T1869] vhci_hcd vhci_hcd.9: disconnect device [ 390.470837][T18883] netlink: 404 bytes leftover after parsing attributes in process `syz.0.4600'. [ 390.480139][T18883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4600'. [ 390.489162][T18883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4600'. [ 390.498904][T18883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4600'. [ 390.632249][T18894] loop0: detected capacity change from 0 to 512 [ 390.640140][T18894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.648861][T18894] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 390.721203][T18897] loop0: detected capacity change from 0 to 2048 [ 390.741271][T18897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.764439][T15948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.814651][T18906] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 390.821188][T18906] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.830199][T18906] vhci_hcd vhci_hcd.0: Device attached [ 390.880723][T18907] vhci_hcd: connection closed [ 390.881713][ T6095] vhci_hcd vhci_hcd.0: stop threads [ 390.891984][ T6095] vhci_hcd vhci_hcd.0: release socket [ 390.897651][ T6095] vhci_hcd vhci_hcd.0: disconnect device [ 391.079087][T18917] xt_hashlimit: size too large, truncated to 1048576 [ 391.286718][T18922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.296485][T18922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.447086][T18937] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 391.453719][T18937] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 391.469000][T18937] vhci_hcd vhci_hcd.0: Device attached [ 391.483105][T18938] vhci_hcd: connection closed [ 391.483388][ T1869] vhci_hcd vhci_hcd.8: stop threads [ 391.483827][ T28] audit: type=1326 audit(1771153861.910:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18942 comm="syz.0.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7786bbbf79 code=0x7ffc0000 [ 391.488193][ T1869] vhci_hcd vhci_hcd.8: release socket [ 391.494080][ T28] audit: type=1326 audit(1771153861.910:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18942 comm="syz.0.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f7786bbbf79 code=0x7ffc0000 [ 391.518856][ T1869] vhci_hcd vhci_hcd.8: disconnect device [ 391.523198][ T28] audit: type=1326 audit(1771153861.910:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18942 comm="syz.0.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7786bbbf79 code=0x7ffc0000 [ 391.575417][ T28] audit: type=1326 audit(1771153861.910:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18942 comm="syz.0.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7786bbbf79 code=0x7ffc0000 [ 391.599545][ T28] audit: type=1326 audit(1771153861.910:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18942 comm="syz.0.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7786bbbf79 code=0x7ffc0000 [ 391.623263][ T28] audit: type=1326 audit(1771153861.910:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18942 comm="syz.0.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7786bbbc0b code=0x7ffc0000 [ 391.647539][ T28] audit: type=1326 audit(1771153861.910:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18942 comm="syz.0.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7786bbbf79 code=0x7ffc0000 [ 391.676928][ T28] audit: type=1326 audit(1771153861.910:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18942 comm="syz.0.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7786bbbf79 code=0x7ffc0000 [ 391.712868][T18944] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4621'. [ 391.969073][ T28] audit: type=1400 audit(1771153862.400:3936): avc: denied { shutdown } for pid=18961 comm="syz.9.4628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 392.051996][T18973] xt_cluster: you have exceeded the maximum number of cluster nodes (3131 > 32) [ 392.100637][T18977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.127753][T18977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.489628][T18997] xt_hashlimit: size too large, truncated to 1048576 [ 392.823501][T19017] xt_hashlimit: size too large, truncated to 1048576 [ 392.963508][T19042] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 393.280849][ T28] audit: type=1326 audit(1771153863.710:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19050 comm="syz.0.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7786bbbf79 code=0x7ffc0000 [ 393.347909][T19053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.393689][T19053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.855102][T19065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.866488][T19065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.422978][T19125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.439960][T19125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.459755][T19127] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 394.472337][T19117] xt_hashlimit: size too large, truncated to 1048576 [ 394.926729][T19203] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 394.933322][T19203] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 395.001066][T19203] vhci_hcd vhci_hcd.0: Device attached [ 395.017654][T19221] å1ÿ: renamed from bond_slave_0 (while UP) [ 395.035415][T19221] sit0: entered allmulticast mode [ 395.120692][T19227] xt_cluster: you have exceeded the maximum number of cluster nodes (3131 > 32) [ 395.134430][T19204] vhci_hcd: connection closed [ 395.137726][ T6095] vhci_hcd vhci_hcd.1: stop threads [ 395.149720][T19227] loop0: detected capacity change from 0 to 256 [ 395.160653][ T6095] vhci_hcd vhci_hcd.1: release socket [ 395.171978][ T6095] vhci_hcd vhci_hcd.1: disconnect device [ 395.174289][T19227] loop0: detected capacity change from 0 to 512 [ 395.202483][T19227] EXT4-fs: Invalid want_extra_isize 168 [ 395.208368][T11325] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 395.317433][T19233] netlink: 'syz.8.4691': attribute type 1 has an invalid length. [ 395.357483][T19233] bond1: (slave geneve2): making interface the new active one [ 395.365557][T19233] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 395.379173][ T1762] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 395.387677][ T1762] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 395.396308][ T1762] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 395.416117][T19226] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4686'. [ 395.447903][ T1762] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 395.629120][ T3390] Process accounting resumed [ 395.960441][T19294] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 395.993529][T19294] block device autoloading is deprecated and will be removed. [ 396.005544][T19298] loop0: detected capacity change from 0 to 256 [ 396.039183][T19298] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 396.076225][T19298] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 396.083331][T19313] FAULT_INJECTION: forcing a failure. [ 396.083331][T19313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.101810][T19313] CPU: 1 UID: 0 PID: 19313 Comm: syz.6.4705 Not tainted syzkaller #0 PREEMPT(full) [ 396.101837][T19313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.101849][T19313] Call Trace: [ 396.101856][T19313] [ 396.101879][T19313] __dump_stack+0x1d/0x30 [ 396.101907][T19313] dump_stack_lvl+0x95/0xd0 [ 396.101971][T19313] dump_stack+0x15/0x1b [ 396.101991][T19313] should_fail_ex+0x263/0x280 [ 396.102019][T19313] should_fail+0xb/0x20 [ 396.102078][T19313] should_fail_usercopy+0x1a/0x20 [ 396.102103][T19313] _copy_to_user+0x20/0xa0 [ 396.102130][T19313] simple_read_from_buffer+0xb5/0x130 [ 396.102162][T19313] proc_fail_nth_read+0x10e/0x150 [ 396.102245][T19313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.102270][T19313] vfs_read+0x1ab/0x7f0 [ 396.102297][T19313] ? __rcu_read_unlock+0x4e/0x70 [ 396.102340][T19313] ? __fget_files+0x184/0x1c0 [ 396.102362][T19313] ? mutex_lock+0x57/0x90 [ 396.102389][T19313] ksys_read+0xdc/0x1a0 [ 396.102419][T19313] __x64_sys_read+0x40/0x50 [ 396.102484][T19313] x64_sys_call+0x2886/0x3020 [ 396.102510][T19313] do_syscall_64+0x12c/0x370 [ 396.102578][T19313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.102617][T19313] RIP: 0033:0x7ff7a7b8c84e [ 396.102634][T19313] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 396.102697][T19313] RSP: 002b:00007ff7a661efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.102793][T19313] RAX: ffffffffffffffda RBX: 00007ff7a661f6c0 RCX: 00007ff7a7b8c84e [ 396.102808][T19313] RDX: 000000000000000f RSI: 00007ff7a661f0a0 RDI: 0000000000000008 [ 396.102822][T19313] RBP: 00007ff7a661f090 R08: 0000000000000000 R09: 0000000000000000 [ 396.102834][T19313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.102845][T19313] R13: 00007ff7a7e46038 R14: 00007ff7a7e45fa0 R15: 00007fff4ee9c6e8 [ 396.102863][T19313] [ 396.319839][ T50] ================================================================== [ 396.327941][ T50] BUG: KCSAN: data-race in alloc_pid / copy_process [ 396.334528][ T50] [ 396.336837][ T50] read-write to 0xffffffff86c61f68 of 4 bytes by task 6092 on cpu 1: [ 396.344887][ T50] alloc_pid+0x62c/0x8e0 [ 396.349149][ T50] copy_process+0xf37/0x20c0 [ 396.353727][ T50] kernel_clone+0x16b/0x5d0 [ 396.358222][ T50] user_mode_thread+0x9c/0xd0 [ 396.362893][ T50] call_usermodehelper_exec_work+0x7a/0x160 [ 396.368785][ T50] process_scheduled_works+0x4de/0x9e0 [ 396.374242][ T50] worker_thread+0x581/0x770 [ 396.378831][ T50] kthread+0x22a/0x280 [ 396.382889][ T50] ret_from_fork+0x150/0x360 [ 396.387475][ T50] ret_from_fork_asm+0x1a/0x30 [ 396.392231][ T50] [ 396.394549][ T50] read to 0xffffffff86c61f68 of 4 bytes by task 50 on cpu 0: [ 396.401906][ T50] copy_process+0x1895/0x20c0 [ 396.406573][ T50] kernel_clone+0x16b/0x5d0 [ 396.411065][ T50] user_mode_thread+0x9c/0xd0 [ 396.415734][ T50] call_usermodehelper_exec_work+0x7a/0x160 [ 396.421628][ T50] process_scheduled_works+0x4de/0x9e0 [ 396.427092][ T50] worker_thread+0x581/0x770 [ 396.431684][ T50] kthread+0x22a/0x280 [ 396.435743][ T50] ret_from_fork+0x150/0x360 [ 396.440332][ T50] ret_from_fork_asm+0x1a/0x30 [ 396.445091][ T50] [ 396.447406][ T50] value changed: 0x80000131 -> 0x80000132 [ 396.453104][ T50] [ 396.455413][ T50] Reported by Kernel Concurrency Sanitizer on: [ 396.461546][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 396.470827][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.480878][ T50] Workqueue: events_unbound call_usermodehelper_exec_work [ 396.487990][ T50] ================================================================== [ 396.857329][T15226] syz_tun (unregistering): left allmulticast mode [ 397.021740][ T6091] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.032078][ T6091] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 397.078521][ T6091] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.088395][ T6091] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 397.128348][ T6091] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.138796][ T6091] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 397.178429][ T6091] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.188323][ T6091] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 397.249416][ T6091] bridge_slave_1: left allmulticast mode [ 397.255135][ T6091] bridge_slave_1: left promiscuous mode [ 397.263005][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.271402][ T6091] bridge_slave_0: left allmulticast mode [ 397.277187][ T6091] bridge_slave_0: left promiscuous mode [ 397.282879][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.358229][ T6091] bond1 (unregistering): (slave geneve2): Releasing active interface [ 397.380301][ T6091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.390120][ T6091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.399890][ T6091] bond0 (unregistering): Released all slaves [ 397.407515][ T6091] bond1 (unregistering): Released all slaves [ 397.440270][ T6091] hsr_slave_0: left promiscuous mode [ 397.455744][ T6091] hsr_slave_1: left promiscuous mode [ 397.467603][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.474999][ T6091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.489036][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.496441][ T6091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.508834][ T6091] veth1_macvtap: left promiscuous mode [ 397.514341][ T6091] veth0_macvtap: left promiscuous mode [ 397.519907][ T6091] veth1_vlan: left promiscuous mode [ 397.525244][ T6091] veth0_vlan: left promiscuous mode [ 397.617104][ T6091] team0 (unregistering): Port device team_slave_1 removed [ 397.889725][ T6091] IPVS: stop unused estimator thread 0... [ 405.416978][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!