last executing test programs: 6m7.156996871s ago: executing program 32 (id=50): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x10, 0x0, 0x945, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0xfefb) ptrace(0x10, r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x6, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x6}, 0x10, 0x32, 0x43a1bd76, 0x5, 0x3, 0xfff7fe01, 0x4, 0x0, 0x0, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x54, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x28, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_bp={0x0}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0x40b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xb4, 0xe, 0x81, 0x6, 0x0, 0x8000, 0x18000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xd5, 0x4, @perf_config_ext={0x7, 0xffff}, 0x1, 0x3a8, 0x5, 0x5, 0x81, 0x602a, 0x2, 0x0, 0x10001}, r0, 0x2, r4, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 6m4.111964449s ago: executing program 33 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) (async) unshare(0x62040200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00'}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}], 0x1, 0x8, 0x3) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000017c0)=""/177, 0xb1}], 0x1, 0x7, 0xbb18) (async) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000017c0)=""/177, 0xb1}], 0x1, 0x7, 0xbb18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x1ff, 0x400, 0x8, 0x29302, r4, 0xfff, '\x00', 0x0, r5, 0x4, 0x5, 0x2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x1ff, 0x400, 0x8, 0x29302, r4, 0xfff, '\x00', 0x0, r5, 0x4, 0x5, 0x2}, 0x50) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) (async) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x60d, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 5m58.682525896s ago: executing program 34 (id=130): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) pipe2(0x0, 0x0) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6], 0x40}, 0x1, 0xba01}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x4}]}, 0xbc}}, 0x0) r8 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r8, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}, 0x922bac8552bdad9e) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0x1, 0x204, 0xc684, 0x9}, 0x10) write$cgroup_pid(r1, &(0x7f00000003c0), 0x12) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 3m21.975547639s ago: executing program 35 (id=3237): socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x5761, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x90}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000700)={{0xd8, 0x1}, {0x47, 0x2f}, 0x40}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000"], 0xd8}}, 0x80) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) 2m28.469377428s ago: executing program 3 (id=3891): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x8000004, 0x3, 0x1800077, 0x8, 0x2, 0x6, 0x20000001004, 0x1, 0xfffffffd}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x600, 0x1) 2m27.993280436s ago: executing program 3 (id=3897): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1a, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1a}, 0x94) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) sendto$l2tp(r2, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r2, 0x0, 0x0, 0x40000120, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0xa, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20000050) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0x5420, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6ymqVKBU5pJvVSJ5ktSt2V8WmlMTEcjCWk5AQ0pjS1JekLS2lpx7TXEMuubUUWuih7anQHHrpoRDIpSUtLZSWUnDZ2V1r9Wcl/5HlNP39RPadfeeZd953drLPznpnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKqzpdJkErW8vnQ6Ha4622wsbDG/395P1xRbrDci6fwX+/bFgW7Vgf9dnX1/5+FoHOo+OxT7OsW+uHzP/fc+8T+jI/3lt+jQzToyfNbY4JMk4uudTl08u7Ky/Mpt6Mgu+taPexP7rnuRv1/tPM5n9bzVyBcq81matxrpzPR06ZFTc610Lq9lrTOtdraQVptZpd1opserJ9LJmZmpNJs401iqz89Walm/8vGHy6XSdPr0xGJWabYa9UeenmhVT+W1Wl6fL2LKpdejE/N4Z0d8Jm+n7ayykKbnL6wsT23X1U7Q5JqavWt2nEMP3fvxax/95cJyZ4cc1kjS2zHLk5Pl8uT0YzOPPV4qjZZL5bUVpXXiWkSMRHQibstOy511zyZ1o709ZsOMiKv/vTNv3nCLRnr5P2qRRz2W4nSkkcZI8bj6NxbVmI1mNGKh8/w3Y+vmb8j////IH3+11XoH838/yx9YnX0wivx/uPvs8LD8v6EXO/A3OqzV+vvd3gzWvRpvxOW4GGdjJVZiOV65mTXuWd/qbfwb2dn25iOLeuTRikbksRCVoibt1aQxE9MxHaV4Nk7FXLQijbnIoxZZtOJMtKIdWbFHVaMZWVSiHY1oRhrHoxonIo3JmImZmIo0spiIM9GIpajHfMxGpWjlfFwotvvUun7d/7XnfvTCrz9+pzN9LWhyi4EknQ9znaA/bxG0Id3fQP7vRIz09u5dyUnskn03+Kru0Ds33LqrRf4fvdPdAAAAAG6jpPj2PYmIsXigmJrLa9mX7nS3AAAAgB1U/K75UKcY60w9EEnn+L+0SeSHu943AAAAYGckxTl2SUSMx4Pdqf7pUpt9CQAAAAD8Gyr+/f9wpxiPeLOocPwPAAAAnzHfGHaN/Y/29K6x21rcm/zkT9FsjiVXFk8/lFyqdOIql+7qLtcrvnitxfbcwWR/r5GimB69fE8SEaPV7FDSv/rlP/d2y0+Kx4OrFyAcdq3/ZJsOxNYdKJ7Ft+NIN+bIuW55rj+nu5bxubyWTVQbtScmk96XI+3XXrzwlSiG/836wv4kzl9YWZ54/qWVc0VfrnRauXKpd3n4pL9URPeEii36crW3BeKBzUc8VpyI0VvveHe9pcHx964mO7L1+JPBdb4VR7sxR8e75fja8e/rrHNy4onJqFT2j7Sz0+3Xrg6MvteLydWR7+2PNrmBV+GtONaNOXb8WLfYpBflNb14cWMvyoPb//q2xXX34p0jb57+688bSTa1XS+mbrEXAHfK+eKqP6tZ6O4iC/3jalcnoa3Lu3f3l7yRd7nzq58y+ssP5LrR2JDd05vJ7m/F8W7M8e7nidGDm+SV0ibv6C9fePkXvXf0R9/7/g++fPiXH6zL6zfQi/fiRDemV8R9PxuSYztj/s66rPpuZ4l3h663VSsnr++dGku6Nx+Kyw9fuHT2heUXll8sl6emS4+WSo+VY6z4qNArhvRU5gH4z7bdPXY++Oq10GF34Uke3eao+r5rPymYiOfjpViJc3GyONsgIh7cvNXxgZ8hnNzmqHV84A4vJ7c5tlyNLa+P3XssiSGxUwNb7P++VxR/u00vCADsgqPb5OEk7u3Of/2/ekusi7grSU5uc9y9Npef6N44t390HMNz+aDf98rP3/YtAgCffVnzk2S8/XbSbOaLz07OzExW2qeytNmoPpM289n5LM3r7axZPVWpz2fpYrPRblT7Xx3PZq20tbS42Gi207lGM11stPLTxZ3f096t31vZQqXezqutxVpWaWVptVFvV6rtdDZvVdPFpadqeetU1iwWbi1m1Xwur1baeaOethpLzWo2kaatLBsIzGezejufy7OxNK+ni818odK8EhG1pYUsnc1a1Wa+2G50G+yvK6/PNZoLRbMTG4f/h93e3gDwafDqG5cvnl1ZWX7l5iZ+ez3Bd3qMAMBasjQAAAAAAAAAAAAAAHz6bTxdr1N7QycCjsVNnz746t64lbMPP3sTn3u/+7LsRIO30s7da17TPb2d5c5vnxueeO7JJy+u1iSjg5v3qTcPnPpdFv3RbdHO5v+nbHaq69v7I/b88Lvdmi8MCU5Gd3ikH0bETSx+NdkiZvffiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgO/8KAAD//wifUTs=") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f6164003400000008000240000000000000080003400000000408000840000000010800064000000003f5ffffff1000010000000000000000000000000a"], 0x9c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) 2m27.431914949s ago: executing program 3 (id=3907): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x3c}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2m27.349388994s ago: executing program 3 (id=3908): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2000c045, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r1, 0x0, 0x0, 0x40000042, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000b0ff0000000000000000000018110000", @ANYRES8=r0, @ANYRESDEC=r2, @ANYRES32, @ANYRES8], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x8000) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000002c0)={[{@abort}, {@noblock_validity}, {@grpquota}, {@oldalloc}, {@nodiscard}, {@inlinecrypt}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") unshare(0x20000400) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x189180, 0x2e0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000040)={@desc={0x1, 0x0, @desc3}}) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x25, 0x800, 0x10000) mlockall(0x7) getresuid(&(0x7f0000000140), &(0x7f00000001c0), 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x4e21, 0x0, 0x4e21, 0xa550, 0xa, 0x0, 0x0, 0x21, r4}, {0x9bf2, 0x15ac, 0xf1b7, 0x7, 0x2, 0x5, 0x3, 0xffffffff}, {0x2, 0x1, 0x806, 0x8}, 0x3, 0x6e6bb5, 0x2, 0x0, 0x2, 0x1}, {{@in6=@mcast1, 0x4d2, 0x32}, 0x2, @in6=@remote, 0x0, 0x4, 0x0, 0x7, 0x9, 0x4, 0xffffff68}}, 0xe8) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) openat(0xffffffffffffff9c, 0x0, 0xd40, 0xd2) 2m26.773826168s ago: executing program 3 (id=3913): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x10, 0x0, 0x945, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0xfefb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x6, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x6}, 0x10, 0x32, 0x43a1bd76, 0x5, 0x3, 0xfff7fe01, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_bp={0x0}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0x40b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d050005000200000005"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) perf_event_open(&(0x7f0000000480)={0x1, 0xffffffffffffffe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x9, 0x8, 0x0, 0x100, 0x0, 0x80}, 0x0, 0xffffffffffffffff, r0, 0x8) 2m22.937793592s ago: executing program 3 (id=3960): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x10, 0xfffd, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x6, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xda32}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000010900030073797a30000000000900010073797a310000000008000b4000000003640008"], 0x92fc}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000300)=""/124, 0x7c}], 0x2, 0x9, 0x8) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000002680)=""/4108, &(0x7f0000001080)=0x100c) fstatfs(r2, &(0x7f0000000280)=""/90) 2m22.931451382s ago: executing program 36 (id=3960): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x10, 0xfffd, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x6, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xda32}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000010900030073797a30000000000900010073797a310000000008000b4000000003640008"], 0x92fc}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000300)=""/124, 0x7c}], 0x2, 0x9, 0x8) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000002680)=""/4108, &(0x7f0000001080)=0x100c) fstatfs(r2, &(0x7f0000000280)=""/90) 44.539311496s ago: executing program 6 (id=4945): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x800000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 44.217636504s ago: executing program 6 (id=4951): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0xa0, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x76}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0xabd}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x4}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20041090}, 0x840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r4 = syz_open_pts(r3, 0x80) r5 = dup3(r4, r3, 0x80000) read(r5, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r5, &(0x7f0000001d40)=""/4095, 0xfdef) write$P9_RLERRORu(r5, &(0x7f0000000140)={0x16, 0x7, 0x1, {{0x9, '.^\'*&{}-#'}, 0x6}}, 0x16) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) 43.251479591s ago: executing program 6 (id=4962): r0 = io_uring_setup(0x263a, &(0x7f0000000540)={0x0, 0x733c, 0x80, 0x3, 0x265}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000dc0)={0x5, 0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000840)=""/250, 0xfa}, {&(0x7f0000000940)=""/82, 0x52}, {0x0}, {&(0x7f0000000a40)=""/210, 0xd2}, {&(0x7f0000000b40)=""/235, 0xeb}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001380)={0x4, 0x0, &(0x7f0000001300)=[{&(0x7f00000012c0)=""/59, 0x3b}], &(0x7f0000001340)=[0x7], 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCCONS(r1, 0x541d) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, 0xffffffffffffffff, 0x2ec37000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002980), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r9, 0xc058534b, &(0x7f00000029c0)={0x7, 0x6, 0x0, 0x4, 0xc404, 0x8001}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) r10 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f00000001c0)}, 0x10) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$rds(r11, &(0x7f0000000a00)={&(0x7f0000000500)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/153, 0x99}, {&(0x7f0000000680)=""/100, 0x64}, {&(0x7f0000000700)=""/181, 0xb5}], 0x3, &(0x7f0000000c40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x2, 0x8000}, &(0x7f0000000800)=0x5, &(0x7f00000009c0)=0x7, 0x6, 0x0, 0x400, 0xfffffffffffffff9, 0x3, 0x7}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x3}], 0x70, 0x20000000}, 0x80) 42.812941206s ago: executing program 6 (id=4963): ioperm(0x1, 0x3, 0x1000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e029a4c66810000000000d300e6d602090000000000000000000001", [0x204]}) open(&(0x7f0000000400)='./file0\x00', 0x143142, 0x43) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_submit(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) nanosleep(&(0x7f0000000000), 0x0) write$binfmt_elf64(r3, &(0x7f0000000e80)=ANY=[], 0x78) prlimit64(0x0, 0x1, &(0x7f0000000240)={0xbf2, 0x3d83}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffc0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_procfs(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sync() sendfile(r3, r3, &(0x7f0000000000)=0x9, 0xffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_MCAST_MLD_VERSION={0x5}]}}}]}, 0x44}, 0x1, 0xffffffea}, 0x414) 41.927782898s ago: executing program 6 (id=4971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c094}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc8}}, 0x0) 41.464480675s ago: executing program 6 (id=4974): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000180)=""/16, 0x10}], 0x1, 0xfff, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 41.404691509s ago: executing program 37 (id=4974): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000180)=""/16, 0x10}], 0x1, 0xfff, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 41.023633571s ago: executing program 8 (id=4977): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = inotify_init1(0x0) inotify_add_watch(r4, 0x0, 0xa4000061) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x71) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2b, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000040000000400000012000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000921a22c8e44458df83b27711f5cfeb121848074f4eabcb5bc32ea640b6dcbdd5fb26f3517d58c4a08c603d22a5fe9d0e6c32f39be1b8feee8e6408c6eddb647630c9eee6c7f36556903335d610feb446fe6fff651eb21d22248941be131f482b583a8411a067f548f3bc15d9144b2f98aa3ae42ca84dc3e7b0b0483ec865750e87afce4ec48adfe3a892b121793ff0d247e338871e6d8039808dfc43fbd4ff50aebe1b8640150df03f79fed703e78fa41fe69794f2b2b811e3de88b58df6d587601b6532170f4614666602f0307e394ee588ffe8fbefd80e8c"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x3, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00000007000000060000000100000020200400", @ANYRES32=r10, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000600"/28], 0x50) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 40.062496177s ago: executing program 8 (id=4984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c094}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc8}}, 0x0) 40.006451751s ago: executing program 8 (id=4985): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x7}], 0x10}, 0x4040805) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xfffffc01, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 39.917572716s ago: executing program 8 (id=4986): ioperm(0x1, 0x3, 0x1000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e029a4c66810000000000d300e6d602090000000000000000000001", [0x204]}) open(&(0x7f0000000400)='./file0\x00', 0x143142, 0x43) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_submit(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) nanosleep(&(0x7f0000000000), 0x0) write$binfmt_elf64(r3, &(0x7f0000000e80)=ANY=[], 0x78) prlimit64(0x0, 0x1, &(0x7f0000000240)={0xbf2, 0x3d83}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffc0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_procfs(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sync() 39.321836111s ago: executing program 8 (id=4989): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1a, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1a}, 0x94) r2 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r2, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r2, 0x0, 0x0, 0x40000120, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0xa, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20000050) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0x5420, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6ymqVKBU5pJvVSJ5ktSt2V8WmlMTEcjCWk5AQ0pjS1JekLS2lpx7TXEMuubUUWuih7anQHHrpoRDIpSUtLZSWUnDZ2V1r9Wcl/5HlNP39RPadfeeZd953drLPznpnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKqzpdJkErW8vnQ6Ha4622wsbDG/395P1xRbrDci6fwX+/bFgW7Vgf9dnX1/5+FoHOo+OxT7OsW+uHzP/fc+8T+jI/3lt+jQzToyfNbY4JMk4uudTl08u7Ky/Mpt6Mgu+taPexP7rnuRv1/tPM5n9bzVyBcq81matxrpzPR06ZFTc610Lq9lrTOtdraQVptZpd1opserJ9LJmZmpNJs401iqz89Walm/8vGHy6XSdPr0xGJWabYa9UeenmhVT+W1Wl6fL2LKpdejE/N4Z0d8Jm+n7ayykKbnL6wsT23X1U7Q5JqavWt2nEMP3fvxax/95cJyZ4cc1kjS2zHLk5Pl8uT0YzOPPV4qjZZL5bUVpXXiWkSMRHQibstOy511zyZ1o709ZsOMiKv/vTNv3nCLRnr5P2qRRz2W4nSkkcZI8bj6NxbVmI1mNGKh8/w3Y+vmb8j////IH3+11XoH838/yx9YnX0wivx/uPvs8LD8v6EXO/A3OqzV+vvd3gzWvRpvxOW4GGdjJVZiOV65mTXuWd/qbfwb2dn25iOLeuTRikbksRCVoibt1aQxE9MxHaV4Nk7FXLQijbnIoxZZtOJMtKIdWbFHVaMZWVSiHY1oRhrHoxonIo3JmImZmIo0spiIM9GIpajHfMxGpWjlfFwotvvUun7d/7XnfvTCrz9+pzN9LWhyi4EknQ9znaA/bxG0Id3fQP7vRIz09u5dyUnskn03+Kru0Ds33LqrRf4fvdPdAAAAAG6jpPj2PYmIsXigmJrLa9mX7nS3AAAAgB1U/K75UKcY60w9EEnn+L+0SeSHu943AAAAYGckxTl2SUSMx4Pdqf7pUpt9CQAAAAD8Gyr+/f9wpxiPeLOocPwPAAAAnzHfGHaN/Y/29K6x21rcm/zkT9FsjiVXFk8/lFyqdOIql+7qLtcrvnitxfbcwWR/r5GimB69fE8SEaPV7FDSv/rlP/d2y0+Kx4OrFyAcdq3/ZJsOxNYdKJ7Ft+NIN+bIuW55rj+nu5bxubyWTVQbtScmk96XI+3XXrzwlSiG/836wv4kzl9YWZ54/qWVc0VfrnRauXKpd3n4pL9URPeEii36crW3BeKBzUc8VpyI0VvveHe9pcHx964mO7L1+JPBdb4VR7sxR8e75fja8e/rrHNy4onJqFT2j7Sz0+3Xrg6MvteLydWR7+2PNrmBV+GtONaNOXb8WLfYpBflNb14cWMvyoPb//q2xXX34p0jb57+688bSTa1XS+mbrEXAHfK+eKqP6tZ6O4iC/3jalcnoa3Lu3f3l7yRd7nzq58y+ssP5LrR2JDd05vJ7m/F8W7M8e7nidGDm+SV0ibv6C9fePkXvXf0R9/7/g++fPiXH6zL6zfQi/fiRDemV8R9PxuSYztj/s66rPpuZ4l3h663VSsnr++dGku6Nx+Kyw9fuHT2heUXll8sl6emS4+WSo+VY6z4qNArhvRU5gH4z7bdPXY++Oq10GF34Uke3eao+r5rPymYiOfjpViJc3GyONsgIh7cvNXxgZ8hnNzmqHV84A4vJ7c5tlyNLa+P3XssiSGxUwNb7P++VxR/u00vCADsgqPb5OEk7u3Of/2/ekusi7grSU5uc9y9Npef6N44t390HMNz+aDf98rP3/YtAgCffVnzk2S8/XbSbOaLz07OzExW2qeytNmoPpM289n5LM3r7axZPVWpz2fpYrPRblT7Xx3PZq20tbS42Gi207lGM11stPLTxZ3f096t31vZQqXezqutxVpWaWVptVFvV6rtdDZvVdPFpadqeetU1iwWbi1m1Xwur1baeaOethpLzWo2kaatLBsIzGezejufy7OxNK+ni818odK8EhG1pYUsnc1a1Wa+2G50G+yvK6/PNZoLRbMTG4f/h93e3gDwafDqG5cvnl1ZWX7l5iZ+ez3Bd3qMAMBasjQAAAAAAAAAAAAAAHz6bTxdr1N7QycCjsVNnz746t64lbMPP3sTn3u/+7LsRIO30s7da17TPb2d5c5vnxueeO7JJy+u1iSjg5v3qTcPnPpdFv3RbdHO5v+nbHaq69v7I/b88Lvdmi8MCU5Gd3ikH0bETSx+NdkiZvffiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgO/8KAAD//wifUTs=") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f6164003400000008000240000000000000080003400000000408000840000000010800064000000003f5ffffff1000010000000000000000000000000a"], 0x9c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) 38.98097216s ago: executing program 8 (id=4992): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xfc, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000480), 0x1}, 0x100, 0x10000, 0x8, 0x9, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x8000020000006}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023629, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)={0x3, 0x3, 0x4}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r3, 0x11, 0xa, 0x0, &(0x7f0000000080)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x237, 0x0, &(0x7f0000000180)="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", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4048880) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xfc, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000480), 0x1}, 0x100, 0x10000, 0x8, 0x9, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x8000020000006}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023629, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x21}) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) socket$kcm(0xa, 0x1, 0x106) (async) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)={0x3, 0x3, 0x4}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$inet6_udp_int(r3, 0x11, 0xa, 0x0, &(0x7f0000000080)) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x237, 0x0, &(0x7f0000000180)="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", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6}, 0x50) (async) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) (async) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4048880) (async) 38.929540134s ago: executing program 38 (id=4992): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xfc, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000480), 0x1}, 0x100, 0x10000, 0x8, 0x9, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x8000020000006}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023629, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)={0x3, 0x3, 0x4}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r3, 0x11, 0xa, 0x0, &(0x7f0000000080)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x237, 0x0, &(0x7f0000000180)="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", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4048880) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xfc, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000480), 0x1}, 0x100, 0x10000, 0x8, 0x9, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x8000020000006}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023629, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x21}) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) socket$kcm(0xa, 0x1, 0x106) (async) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)={0x3, 0x3, 0x4}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$inet6_udp_int(r3, 0x11, 0xa, 0x0, &(0x7f0000000080)) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x237, 0x0, &(0x7f0000000180)="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", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6}, 0x50) (async) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) (async) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4048880) (async) 29.226166451s ago: executing program 9 (id=5062): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80210, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x400}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c092}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0x2, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="a3", 0x1}], 0x1, 0x8) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYRES8=r6, @ANYRES64=r2, @ANYRESDEC=r1], 0x18c6) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0x118) setresuid(r7, r7, r7) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) open_by_handle_at(r9, &(0x7f0000000180)=@OVL_FILEID_V0={0x15, 0xfe, {0x0, 0xfb, 0x15, 0x2, 0x44, "b464e15688d32a5c55332899da424cb5"}}, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x15, &(0x7f0000000480)=""/145, &(0x7f0000000200)=0x91) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$inet6(r10, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x8) mount$cgroup2(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x2200c00, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000030, &(0x7f0000000180)) 28.931138328s ago: executing program 9 (id=5064): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x9c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x76}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0xabd}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x4}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20041090}, 0x840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r4 = syz_open_pts(r3, 0x80) r5 = dup3(r4, r3, 0x80000) read(r5, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r5, &(0x7f0000001d40)=""/4095, 0xfdef) write$P9_RLERRORu(r5, &(0x7f0000000140)={0x16, 0x7, 0x1, {{0x9, '.^\'*&{}-#'}, 0x6}}, 0x16) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) 27.976983534s ago: executing program 9 (id=5077): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x0) 27.948309626s ago: executing program 9 (id=5078): ioperm(0x1, 0x3, 0x1000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e029a4c66810000000000d300e6d602090000000000000000000001", [0x204]}) open(&(0x7f0000000400)='./file0\x00', 0x143142, 0x43) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_submit(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) nanosleep(&(0x7f0000000000), 0x0) write$binfmt_elf64(r3, &(0x7f0000000e80)=ANY=[], 0x78) prlimit64(0x0, 0x1, &(0x7f0000000240)={0xbf2, 0x3d83}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffc0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync() 26.823359321s ago: executing program 9 (id=5090): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = inotify_init1(0x0) inotify_add_watch(r4, 0x0, 0xa4000061) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x71) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2b, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000921a22c8e44458df83b27711f5cfeb121848074f4eabcb5bc32ea640b6dcbdd5fb26f3517d58c4a08c603d22a5fe9d0e6c32f39be1b8feee8e6408c6eddb647630c9eee6c7f36556903335d610feb446fe6fff651eb21d22248941be131f482b583a8411a067f548f3bc15d9144b2f98aa3ae42ca84dc3e7b0b0483ec865750e87afce4ec48adfe3a892b121793ff0d247e338871e6d8039808dfc43fbd4ff50aebe1b8640150df03f79fed703e78fa41fe69794f2b2b811e3de88b58df6d587601b6532170f4614666602f0307e394ee588ffe8fbefd80e8c"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB], 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x3, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00000007000000060000000100000020200400", @ANYRES32=r10, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000600"/28], 0x50) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 24.97716804s ago: executing program 7 (id=5103): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000001c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997", 0x27}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020", 0xe6}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b4", 0x3a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea3822", 0x4e}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05", 0x88}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db23544f", 0x60}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2e91f3af98057ad0674eff7875169861ce6274b379522d411d3766aa7de767671efa60a1fb949feae7ec37efdfbcf1afd4d5cf86a0f9ae55644480d6a5e735b84303583d6c2534badb3981b5448037697faa59cc666dd9ac5c7d019b47f102d78fcc0f1b609fdc51fd8d0ff81d918cbd51e9215d34ed61bd9b1bdc7afd86dc924080a278f4a7c1031bd8c64d14781e109678224f0af3631ca72a0f9c1da8d03e2f9fda9368b50f087578e25371749e0ba68e30e020b44de5ce89e0e", 0x13d}], 0x5}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e21, 0x10001, @empty, 0x2}, 0x1c) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) 24.057447844s ago: executing program 7 (id=5110): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x0}) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) readv(r3, &(0x7f0000000180)=[{&(0x7f0000001480)=""/4082, 0xff2}, {0x0}], 0x2) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2220072, &(0x7f0000000340)={[{@release_agent={'release_agent', 0x3d, './file0'}}], [{@smackfshat={'smackfshat', 0x3d, '\\'}}]}) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000380)={@mcast2, 0x9, 0x1, 0x0, 0x5, 0x7, 0x7}, 0x20) syz_emit_ethernet(0x124, &(0x7f0000000500)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "1f959e", 0x95, 0x3a, 0x0, @loopback, @local, {[@fragment={0x5c, 0x0, 0x1, 0x0, 0x0, 0x2, 0x64}, @fragment={0x32, 0x0, 0x1e, 0x0, 0x0, 0xa, 0x66}, @routing={0xac, 0x2, 0x0, 0x76, 0x0, [@mcast2]}], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x8, "c88a7e902b04b555a4d26358b0a40e4ce62c3e70f42645eee6b224e05889e2ea54d7bee8b97c7716b72d33c64c414ae3a668a61aa29847e56e64be296b3b87ddda94cc8b4fb0e4ee6adb6e8fa3e4ea642d1d6a974560337598fc178f1d03184b89030e335efca48f83ae5e010c2835b579f718747f477d661db370b4e2bf29937f9697467904663f293a43bf1477521a4cc93e260c40fcbe19c216d3a58894cd60de4698cee0f6344f481cdab265a043c77b895b6ab9226a06aab4df1cd9"}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'ipvlan0\x00', 0x800}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x36, 0x0, 0xd}]}) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0), r6) r8 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) ptrace(0x4206, r8) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r10, 0x0}]) wait4(0x0, 0x0, 0x8, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 23.985348277s ago: executing program 9 (id=5111): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) sendto$l2tp(r2, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r2, 0x0, 0x0, 0x40000120, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0xa, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20000050) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0x5420, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f6164003400000008000240000000000000080003400000000408000840000000010800064000000003f5ffffff1000010000000000000000000000000a"], 0x9c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) 23.965045348s ago: executing program 39 (id=5111): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) sendto$l2tp(r2, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r2, 0x0, 0x0, 0x40000120, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0xa, 0xa, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20000050) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0x5420, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f6164003400000008000240000000000000080003400000000408000840000000010800064000000003f5ffffff1000010000000000000000000000000a"], 0x9c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) 23.872711164s ago: executing program 7 (id=5113): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) 23.851965745s ago: executing program 7 (id=5114): ioperm(0x1, 0x3, 0x1000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e029a4c66810000000000d300e6d602090000000000000000000001", [0x204]}) open(&(0x7f0000000400)='./file0\x00', 0x143142, 0x43) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_submit(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) nanosleep(&(0x7f0000000000), 0x0) write$binfmt_elf64(r3, &(0x7f0000000e80)=ANY=[], 0x78) prlimit64(0x0, 0x1, &(0x7f0000000240)={0xbf2, 0x3d83}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffc0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_procfs(0x0, 0x0) sync() 22.901828191s ago: executing program 7 (id=5126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a01"], 0x40}}, 0x8000) (fail_nth: 2) 22.06099389s ago: executing program 7 (id=5130): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fchown(r0, 0x0, 0x0) 22.009344673s ago: executing program 40 (id=5130): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fchown(r0, 0x0, 0x0) 4.821675718s ago: executing program 0 (id=5246): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80210, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x400}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c092}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0x2, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="a3", 0x1}], 0x1, 0x8) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYRES8=r6, @ANYRES64=r2, @ANYRESDEC=r1], 0x18c6) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0x118) setresuid(r7, r7, r7) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) open_by_handle_at(r9, &(0x7f0000000180)=@OVL_FILEID_V0={0x15, 0xfe, {0x0, 0xfb, 0x15, 0x2, 0x44, "b464e15688d32a5c55332899da424cb5"}}, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x15, &(0x7f0000000480)=""/145, &(0x7f0000000200)=0x91) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$inet6(r10, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r0, 0x0) mount$cgroup2(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x2200c00, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000030, &(0x7f0000000180)) setsockopt$sock_int(r10, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r10, 0x0) unshare(0x40000000) 3.906478282s ago: executing program 0 (id=5255): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@grpquota}, {@init_itable}]}, 0x1, 0x4c5, &(0x7f0000000a00)="$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") socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)=""/109, 0x6d}, {&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000480)}, {&(0x7f0000001f00)=""/4096, 0x1000}], 0x4, &(0x7f00000008c0)=""/242, 0xf2}}, {{&(0x7f0000002f00), 0x80, &(0x7f0000003440)=[{&(0x7f0000002f80)=""/116, 0x74}, {&(0x7f0000003000)=""/184, 0xb8}, {&(0x7f00000009c0)=""/49, 0x31}, {&(0x7f00000030c0)=""/185, 0xb9}, {&(0x7f0000003180)=""/167, 0xa7}, {&(0x7f0000003240)=""/91, 0x5b}, {&(0x7f00000032c0)=""/236, 0xec}, {&(0x7f00000033c0)=""/84, 0x54}], 0x8, &(0x7f00000034c0)=""/237, 0xed}, 0x1}, {{&(0x7f00000035c0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003640)=""/218, 0xda}, {&(0x7f0000003740)=""/88, 0x58}, {&(0x7f00000037c0)=""/198, 0xc6}, {&(0x7f00000038c0)=""/79, 0x4f}, {&(0x7f0000003940)=""/137, 0x89}], 0x5}, 0x3}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/139, 0x8b}], 0x2, &(0x7f0000004b80)=""/177, 0xb1}, 0x6}, {{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004c40)=""/46, 0x2e}], 0x1, &(0x7f0000004cc0)=""/98, 0x62}, 0x2}], 0x5, 0x12022, &(0x7f0000004e80)={0x77359400}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) write$binfmt_register(r1, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x462, 0x3a, 'q', 0x3a, ':$[%&2[@[}-', 0x3a, './file1'}, 0x33) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$sock(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000000140)="158d04fd5097133f194a5975e389ae7ee2f45f5892949baacaf1acebf537860c3097e5d555e979befc38d0935c89e4d60c356ee2c81108ea06858308c4a371f3b82c8436b4565624a2eb21589156083047dee0b7a03a8ea44ed05f850bf29da637b2d0a738c755879a5fda9f2340c8b2bc0280a593b4adecdc04faa6b882380d111cf5a020a0", 0x86}, {&(0x7f0000000240)="88979d952106e08eb7327cbcf5f2c85877222d5f6ddcebb02c8591f173dd451ec639ffeb8dfe1193afe5d2d8a97b2f2ec67e37cc4c10284fd32e7cb26cf5db7caf9dd00f1c60d548b69e7d44d60a66c3ff48f1c5ab75985b75d6e8b338cb5459d65909ebdc98c4fe05b24648cff34a6601c795c27ad96e5d176dca2e6f6546699a0a69fa72f6aed17b6442daa37db3db943fedb343011d77fdffa7a8df4fd4f73e6581f7ad80c29f536cfc756145a4fe05d1bf41ca32d3fcb4848883fef471e071a446578d95ad807f73d3eb", 0xcc}, {&(0x7f0000000500)="7f927a87397d4e68039968242f5cb6bedf8464de2be2b6365779444b847adc867991d99118c2d21892c92e72bb2567738d2f69ac747d1ac976c577c12fa8a287fb020f68c1b27ea4d8def9ba210f3d5496e8eb76276c074bc3e597cff0d8742b3317b7a377e6a00ff42c6ba25802a24d8a66fa37faed361ae92bf1baa6b8c7bdc8e3ac1cb2d30fa200a0543c086886b956288ac86995a853ca9d16c1feeb9ac371bcb9a853cc4832d236cec4355877e0cc60fceec360dc6dc5b481d860414e249c0bf06380fcfad32da3797d9bc8a159a5bd8e3f0756ee1a", 0xd8}, {&(0x7f0000000600)="add30caeea8e0e752e199bf8c274f71f18335e6b1203b58c2af9d5c2810bde0f5c53e83d906b209f07ad2f14aa3a847cc46bfeafea22d8075d11e8fc315c62f2fbb9cb0681b08c6f5916b1efe6ce3d4e9a34fd39d8be4925351bfc99df4e01acf784c3106ef811372d50e570d2f6fafb2c1786cd44731c5aa0bfc9e2c582b99699f4afb38c24f66df768c4133ffd938dcf9645600e8a0db7dae340985c1274d1ff5705ef7e52850db2b933fb4736dfcc125be5cf93455f81423eb8b49e5a331d1031fa31df317855e9354680597f4f2f0835db31b98aaabca53652dddbe1b708a6", 0xe1}], 0x5}, 0x20000000) unshare(0x2c020400) r3 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) accept4$vsock_stream(r3, 0x0, 0x0, 0x100000) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000340)=0x80000001) write$P9_RFSYNC(r5, &(0x7f00000003c0)={0x7, 0x33, 0x2}, 0x7) 3.097511819s ago: executing program 1 (id=5260): syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)='H', 0x206c}], 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x206c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1248, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1001, 0x4, "b7caae3d61a68221ff3097ee16b60ea922c11a482605dcb7981d59e5c63740701735c26bea76d1a74cb659f1cb0fd645ecbcf32b486ac78a0f179ceca9c9433aa794fcdee4770362df819624a355c6ca3fec42a42dc6d4d45c27dd4fdbf5b9b375b223c767b897fece25f1063123918cdfcb2c4e82d98928cc708bf11aa7f86a018572209de1ac3d96beeba9b4add21b54e9f31001f66e64f996e6c014e79aa743caf6cb0c8560a546c740a07eccb375ea1819f3ca6b7294dc456d33d714e3012919991cc48f8640c35747f0702082074dc5b2763c83ee6524c1bcb711f75f43adee9479d260c7e7aaefe01aaa846ef29f29c6dff1d906b311e862aa79a116d84c0b96c19894c677940ef0ba7b1073960b9acb93c3250e0e0b2d2e65c1ed25cad1a1185e9a73287c0b1c96903346969fe19aad230d57ab7a8cbeac7c60a2ba6c31d9fb5fc2cef04f6eb5221069b8d3878b8f337cf88932db5b0df0628d659a217d19cb9af4ac2da1954fa1f41ebe03fab81cae683022303a397e0ae7185e97a8a87ccff0f40f04330df261e80b3aae6d1b1ce33014451d2d13a973939eb08bcefc50271176cda0cd6c463ffea15c87fdba38c4a4a4be2835539c99bd8e6cc95b655a2616b46b823e21555a5fe6ceab6a00f4425b9406e9bc34555820e3292040f0f91fc9c9f27b0c89295c6ee5c413b3a693bde70cd4809a9325457fff11bdbeff436a4e1cf77c345a10c55a1041b3e283c8696b8f5204d37a18c31734ae8c2936561acf151c43471e892d530d47dcecba0049fbb3d6f8687773987eba364d172ca46ea9a52cb6a19fbd96035747c84aec7df3aced460f34c6bb3a7dd5c32f8a5139cd94227aab310cf2fc07189c0fbce29762f2a0d164c6beef35672c5f2e1a307b8898df02c97cf19370d5f7eea383649ba8185abc99134aa9de0bb14f75560218fac8a817a7fdafa9ce16e8647bcbbb3ff455d84aa1fcf54a951bf45b10fdafdd002c5d3cbcf65a44a2cbe120f9a82791a9a8f03e934fafac477506df38adf07215df3d4044807a1fff0cceb5457429e30a21c0375775a36fea7056806c577e9c5fca6d6c79c662d3c6c34cb387a7d7193734b98e8c587ac8449d6ef342ddfc1de42dfb1693c82bc2093337b6b5daefe9cd565304826709da403e4b6c8b8ada4e791c5c7bbea258588d43032829ed40f2836083abe0c78a016710a56e1f1456823f8b41b4bda342b675b68e485a3a251dcd90ba3189b75f3b58bef53d67e05efaf6fc65c94d6fe2557f69aec2fe10b4dd9f95f08a7c563b9e0fd178b15ad45c60fa6ae74b0b08c96db947c384d600e63695f351dbf3030b9f0b5b7c8286f8e486dae80106ec374c963fb3d9f755c8195e46304f8d77f675642cbb2978c8a124f6829db8f471a041109453b0b54c54c9d3a329245a6e5729eeb29ebd598442c451f580ef6005c3bbe26e8bcddd7d268f4341048895a1cd63fb91542f150eec02fd30ec9f3ccdadaed5272b6b1a5e42d13f797934e4d2c81e83e2ed5d58f6a6d40eb29649ce110b91654826035e20311d983685f0dc1651c89dd88d55c1e72931aa41a058ffe03bd84f5c78515850a3ddbfeecfde458838bc05cda9641b7290913fece3adfd79a8408c8e6506d22a21e1a8f6aad35d31c5e27bd33a9ffbd92ab4238744c1a62c1b14d1a1661940fc4652500ce8b1f67fd1c304eb8f0bf30f273ab3cbb86efd0d00f607a724f88b3f699046787aba65ccaa2682fd6b1308128544a1f72532180a6889e63a23a9ccfc2d3ccc0fdc5a5108bc4a201c45a2250b4f6cc49c4b41cc581d01f7059b0338253f81b8a6ceca915dfb0e50fd63e6deda2d04906f9e40458cfc1206c7737428bd357eaba6212a328c7c5af54a2e0aa4c74eb4e71eb6ba79654de71e90b0a3a2cc2089de3072cea044b47b7bd69ea670b59ece7d62a4f26aa379258e602440dc68be4268defb2fe5585a031ceccb6b94354dc1c1ede9e5720eb3fbc53905601af661795f963fe82f65828381cbd9d1915c046f5ac453269100891e70bed763c9e9191c38840af0a16eb61c7ce246d4385552c991dc4d9c6f9ac18838ba79d7652e3444074485eaf7b46c3b4ec69d615f6c9e648643de4407d4ae00a6ebac2e1118c763e437e8b0af6f450698b7b3d504a1598d3737f6286559d1290468dfca7925f28502b7ed2734cf63bd0d53811e893009c55ca1a8d4b6c8aa924e04d75b3ca7f38c4bc1be2cb73b01613ec1f0eb3ccae22c00495e159bd3cd8dee48fae356f891215810431128d08e3b9abc4e0a27e491727e5e1fd3d464ff97e907a37c249745e10f81ea3994370775b6e290394fc86bbc73557e38fc92062f2b4858e5c9d6078c3b3b21ceb83a2d37deb2965d57c0cb702cf6df0ef93af6e7cca7cf38f1c37a9da6e0b52f3de2c826f6fe13984af21ac45ed9dc0ad0dc460678f4339f25dc3211b760bb9324a856c755e21f9549f6bf7431eaf183639ff5f8c9b4cc6f8b804d465a31163c75cdb72ad4e18ba7083bcdeaeb28f88eddca8317a7ffd0f4d14af3a9991fe9eda7371cd6149374d3daa05fa550ba25eb3435c56b65314b0d5df2c0503ed75b0da061ef2d90ba17df6dc1eb958371f4d73720c4e79c626bbde76907af3bdda3af1d571deea934eb20efa56556bea4520f6946d2864036bf862f666649194d29b031cf7250954ded8156529cd651aec230c691490e3c2a56b9f785471762947fb1c479ecfc7a5a52fcad178beeabf1f59a3305224bc78e563829784aa9a09ec47f52aeb572bd6a4e3fee9091f7ff4ad220d3b60756871b3fef01093483a25908c1622ae063f3435fc7d4739df4fea0462da2d8a31c005a43398cab701f0a71d220e8e52276c3a3855ecb90f0a80bae57a83cffec28e8ab4554902158066ff6199afd93e7fff9eed4094924138586e7bc598769bf55908e6ada010fe566e9d5a41d9fa07014310293aa7afc5647931c1b63e24f6296193ce829f73425cfcc6c22a3467c265d9e50386f5e41f73ee632050909ef81215689fe6445e12b670daccb87dfcd03e0dac25449b7392cc2ebc121e079dc62c1546ca929294adee7970fdb796bc7f388d02c159383d9b24861c1a91b849106db45753da9f53f39e3ffee031d6bc241bd0716997d1dbaeac808c07299e351469f7961e773d73471a179ea846757db2bbe3918548eb86cc5a8d820910454685a0cab4b29299edcffd82f206efe68cf0f81cf96b89afa571b9c15ea7fcc5bdfccee1e92dc7721452d9688c1de948a0525e226fb438f46abe6b7df4b00e977439a5ff42d8dfae57c35cbe6417be101de301538b024b4d0c1831751db5907bd949839c8fd711e2bc742b178aa5890309a793677a4e3f065c51f11f8c5faff6dca94ce5d6f440aba52ea915ed01fad4126c596b4cb5cd805a4867b223397ffbca538691226cfb23b78896b9a46cec1426909f27b6b4b16eb14e062588ce7129930ae8feb3be9fdfd8b88ed250471c773a280b00f30952d4f5a95f78752fe6d633e4982f3c79cc9e4830403163271a36956a1dbed67e33dc5730ac2503b1a4af8a1e967e890d14c13ff84283c57d1557d4164d466fe48d7402acbabca24baa2048a1ad71025cfe2124401bc3bda69d17b11528a596dd2ca08b33d2ce05be1b14b925badfd65eb45997b2e8811e70d621457a78da354f5626d8370346b2c6e1dbaa5fa31707be9b06040e08e8824fc42ece00b5cdd4e5c3cae1b704d5fd052958f1cc261e2bcf97412bdcb8e07115ff79354ca8dbd32788e2ecdd770781b29a616007b56251fa55de7eb0b7051c651369f2cb96a6ba5d14aae92bf1d88b5aab111a4ff222e6395434b10e4acce7a2f2e8fc08e4ddf23aa483ff5ca6f202b0e7ab6f4c3d6390e95da0e7ac2a3a353d9dd3a671e2344471054031146f0c43712ea80cb17f64896900c88a45aa2d22bb58611ec29b994fe245525c548e5e9e67256e7841ca949a4a73d167a0dcb99cd422564454722edaaa3ec9cfd0d097cad734d23c1b0cbeb40e0a9fe7954b61765c3398d765195c652f3a3b15e2306a9a2ec62cb6e6453d9cd7d943f6d5c9f54da2bd6ecc927c9c72816e3077bddf57807f15721b9cf29efb9c67d82dcb2f80f3d65dd9ab5ffe95d264c401ff875abda07fbd73b2db4bebb4a2d5e0a6399bdb1f3fd2a854616b40649d4761e6b025c4baacd0ecb38658168dcc4fc12f04338c7e046da4b8ada77c71254fa096b21dc71c9799df8238eecbd232d649a2986293f3fd84fa17c8a78a195e69b7f95f5e4d73a52958373d0304914f94ccc8c7ce13693f9545389bd926294ac7c216806b32eb93e4fb7c07b14f57dfc22e0aeb36dea5aade5f867342bdadfd1f698ac71951d983aa663adc83aea8a748770a100233cee51dca3c59d9d32cf7ea61c093ca5f232afbcda76de3a25979e07a33686605e7bf86aa32f43cb5121a4bebe0a1826c40e7c2f6106a138ef970a2928083719cfe2d96c6874442896c183ce30c0099354f0efb06ff663fd4e496be5bc4e818692e86a102ee3ba5813b0ad9ae17a9804ea2011b7d07f788630f0fa34b6fef98b8148ecbaeed69543d0c4197318823ea3081976d6f70eecbd34c08766b8d4f929eed1c10cf2c3b14b1e35b15c32719aff4468e6ee501cd2b09847f3ce868a0546ab2871f2c13cde3bd61b5ea8de8caa0496e0440af953acecf6f7d7f88d0514d52d5ee8cd0f460e5b38a0c53b17ab1ed399f8d564dabc3e6d396fb9df705b4f15e9f675750e82d10c82fade7798b791c55a4ed9d1a7bbbce534c3db064a77ac0fd1a7b8c1a8043072394aedc4cdeb1b7046d0d1e0eec0d98c6ff85fbb38ccd5b2f40634e175a8298ee29284a7263512b4c7422ffd2e19403069776b8247857620f8172a7c27c18b294f42ed1d44df542a297f4a357e933693259045ec083d1aecdf15f7fd81f7493faf46d301b094f47293729f0e74bdff84fc96429c4fca7b4de06ef7108bf7f74ae38101a75e2d7fd431eaa8fc3aa7826c964b94bcc0cc2f4cf242936b3566d1d8f96cbd113a89e751f078373c2a27be46189a17719922c471e5dcbb9094d4ca73fe4af1e063afe2869ea7fbe1f09e32cb7f66055f659dd45d13724776e16534e003200a3874663f26503b8bf9e9dfb21b217c47ab041598c85853a32d5b654e1e79e03ffd6e512adac80ff67082231926f0366cce73805905cbf4b6ca4823ebb36c40eef767aa62f34a2fad988f3de31319571af44927584ea2181fd3c3cbb773ffe81d888c842b6852a7d304f305fbb1c1ee4a9053cb40b2a621e9ee65c15e87b5c94e03f72164defb5c445804222f39d7b96ffb0ae7adc3556ddf0882b8e696467f64735c585dcf3ed01e6707eff446934e67bdf5e0b312bd9bfad7e0f4ff951d44e6753658d0196d03f963eaadec01c8f3a1741034146899dd332512c06a8e0b310d30f3d7c5cd8b5bb3b39e8191ff3485b1a9b55dd8d1585fb4eea4a1ea510131c238d1ff9c18c6f9619793b315cd27f6ef91c37aacea4ec12e4d35c71b893680242537ae192ea99d5d9c800751441551d9cc0283275738b1dc06b6907e52c6b67184799154f3fda05991868691252325205f53b6c04be9c0a4bb1a604a650ef7ceb3abdbecb29d7ceac78f7fb0eb36dbef68ff3893fc100b697b09237734fcafb2177c6e3b87837802d8ae3e4ecd7f148487cfcdd358e52f3dba012db112cb5b6196311d9c7406846a0d22c2e8500db202acf8d37856e6684c452893184488806bab"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x41}, @ETHTOOL_A_BITSET_MASK={0x35, 0x5, "ed9b489cf5510804a7a8db39eba8e3124467244dce5cfb6e25a63c826c3eab95cb7480352c10d6353109bb015cee95270e"}, @ETHTOOL_A_BITSET_VALUE={0x8d, 0x4, "5a596496fe648c0e39e408291baacc9d6385fe5974f40e33234ef1bd48fc1fff0b642df2714b7b4f8f07313c7be50ac5ff3492cda5e95cfeb8cb15d7214dee676545173af6bb6694462e5e95c592dd108775b98e9acd7b6be155a2d3c844a3450641a9462cdd9e29cc76d85dba29125c0b077beb9f234a676a687d2698d673067b3a424afb9af1bb0e"}, @ETHTOOL_A_BITSET_MASK={0xf9, 0x5, "e540ca69e550aabd896c3f8d26582ed8d936e7392b3a8e30233ccbfeba6d3f4b2345da33d311be77ddfcb1fe7cf6363bc99d3ded74652810172e400c73bd059d8a6dc555b898ff39b6c8fc15ba426e60caa88be788c02ab5593d64765ae9732ea0db5ec2e7f222f08a48eea5b5d83ce394bc2bc5840b23dad51ab99354bc4f44ea665502db59195e3012667a97ab1119df821965307ee4950ecaab5abe18cb73024aafd540b0e79954b66225b323366e8f3a5e2f7a03e7d7be66b560c6ddaaee0b888e8b36bf210f717d2bd2b5c2ee55b556b1eb067bda81e2734de264de294d7d22b47aa543dbe1e1814b0de80d327c1e75101ddc"}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ',-O:{\xbb]#%#$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(&)^\\{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe09, 0x5, "d8ed9f663f8f235e46a767338d7a53bbb4062dc7fdc3603e76cae50250871ccb5d716382a1b85e7c10d8f41cfd07e8234ec10ec55ddb0f7b1ac2739460dbcbdc0fe1b1d00e37e363e97900ddc3c3d7a1e17fb10f574f74c9cdb2bbace1bfc0eba780809fb5b21bd81c2ddb33b40e45a6552fb6bf10c284372106423fc392f27f02041f97bae8b0a8ad2ca4650b614029ef424b64be19c54cb291e39c864f63d9202b535352d499ad2ac3aa070c8464a0b9e0b96d4b503e6545a58c5e5e2d67b501f7a6371625a47419051f70610c538915b8f5d9aea03e673154e2787865dd39f9adde3902eb354b211737efec0a6d67ad6656ecac690df0a9a657f41e83d5a25f91bddb9b6da1f1f7dc668bf76618e601eda8e2d4a059cce92d2f275e42d3911f2a61173b2b633c9d39b2d824411265b902273cbf844d1aa8d65cff40d8dc03dce216cb14a1c676d01d9dccadbe0bde428a795de22817657d4eaa7ec159d1a14d3c3ecadbca51bf78a3f36c937b13774ecd34a3d6234256374ba8df1b8bcdab5bb6f5936afece0cc6ad3c0261d3046fabd4bae1860f9d065a99321f408d43b376d1a6298e0c97e8002d3726776730e5242e136185cef20fbe48a097fec3712f1261b585361cdefe7a25d359bd001ee45fde23f31a4368eec3dc3db76ce7b68f93d130e2c15c2903d4f47c77b23e29fd86d11414b066ae8e8daafd237d19bdd1e7d767ab9120f3a40efc195229146745b6cfdaeb9acebc3e2a1893b554153c42b5826d704606e97482271764e15b7082b5ecee0229417248a07b674568903d793fb078568012f006fd36ccd0beb3f7614cfa77e5e398d44d25c215ca2ecbc3e3cce2f0b8ed05865e0ce48237f8151486a87a033b8e3c09c88a5da644f4b04670e9b14fd55c34a0532e2b68a5e703ae1c6d6a7b526f7979e9ce39419cde2daf13515da5c919697386805a77f6e3172e243228e1fd7903d5659bbbda19e53853d766a5cec813a1a70f3c997b54a54369c65ec920c647ba54ff04bd6597ecaf8020e97e75dddccaec161b68424918ad10a6d1df36effc87a8dc94b79002c616174a28da2467e94a14d85137b109a7e2ba76b2a144b3fccf8639499a5a777f91c9683c5c07f1113e43d6434989f5c2a89e52fbab5c1c11856d1ac9659f8fcabe956a309426f1ee5e8d9360d86b544fd5f7eae0969d24c08d039aad542beb54935657f309d51252858acb298c4d0d3146b2c5d075c4c55946d1708b3c0ce07acca633b109923e67f278a7013c35ca850615007310ee0f5aa94f49298a2aa87ec4068bfe833590f435f04a066c06ef5ae90bf19ecaba87f130cef1d52bd9394fb5b87c6170f3bdc8cbc24e098e286e94f8afa1a59a49a5ec56f7de5ae57997df73efc57d545d8ac516c71bad41c0c66af01f2bf5a360fbed79d146af4d8782d65c6187787809c4fb9470a80accde086af6fb3c783c3baa36dc5ad220f1ceb0cd1911cdd868267bd0dace005e1df418789e7629475f502134792d06b28101f5dc783732242b8d1d783a88420f45dc51cdf4bb1c3b45a8d6579cec1a3e5efbe96e0ca7dfc248422e45b4311296c7a654ffbbd80d27cdf570e10fc3b4e4bd41a2226e8968473ee50bcc43bb5497a2a1ed3bea4f5b209f0cbb80da3a192269819e5bc28055b0ec676e214bb04c80f65ae85c7626538575691929c882150d1b3734bb1eccd8d48f83a78d788edbd55763d24e643b60f765ac81f9d2934cacafd21c1eda699953f570a5d98da92509c38b609a8e8f5c2ff8a6cc043eff9655efdd9ef31a0470899a6c7a64610051a127446b99058193af5a7682c8d1f90b64e4e5c440bdce61e246044f4bddeb966c9c4574f437e07096f92e6e3525dad3bec4b4e0c8f8bf5fa8bd3d2ceb218f496ef4ca1aa3ed1f09115a1b89a521171df9a048a267e53ee4f660ac92216c753e52ef67a3cb2883598006fc3ffecbed7aadf13e26e6c92415692ebe06af24e507fe6db2044ac0c08413a45af690395e85ba37326babd1547ff04690fa1a0e6e9bf28ebdd17352ad60ec4d1127fb25e65ea0abe2ae7cb2cd195d5b87bb9eb394aca15a28687a6de49d4d9854dcee5fe81a17e137dd9ef498ec6a89a4147371799589e27a582334dbddaa4104cb4f29d6d2b0346b0925a1198de065899b01f58905025bde3887ff0ca23b43225eab3352d57d7b6094205281e204a3173f4d8a1f029a8c5379bcf05e73fc2becf1a542bb467ce53325e7e3fc5dc4f384f384fd4087147f8a1fd1e824b40309b92ba6bc683f96f676a076047497821a1f161e15ca22e9d8a8b2996322b720310ae26e7b3f963020a035bcddf55cc2a681cc1acccc4c97a10ab7c55cf36b74ba4ff380dc2b988800638e7c82f3e4b0a1c1d331187b6dca9689006066ed8fc4991ce7970729acf9ee772bde1b326fa92e7c56db2d377d254700e16a55c0f4e753cb68ca62687869e3fd4bd603d52bdc32a42020aab380bdb8ce73c7ee50b88b774424eeae8b9cfe0b80d51aa38a8bca11af2616ff7657c90a1dc77f4bf59e03497eb264840a96213a8f995654d7e031beebafd63a0e282de04eaef85bb27847b1241012e1d7cbb16ca97154268ab1686cd1c57e4e68c5090746ceb377402b566bbf883283939577f21d7e39d658ad4e70831d8da60e0966db6210a5f79824f1f99ce7e817212e07ce9ce96f67c504fe258056c05912ab327594946c9c4d8c55f015b7f1f5a08a104c82d2b084bb9b28b2e63a1410259a8c521a067b9c8c043fcb2b67f44936750e1239f1e59f4be3f0712b3e540c457b9c619142546274b275a56e7a21c9a8e56f636ee6ab8e6a2922a65a7a8db06967e51ce7480c9787e9d03629345a7e2f6db8ef247a451c6d40fe1b715e335c497d2abcddf328c70476d9db38ab4cfd5d1702abb9997a4d6452f98a051d65f831acf14aa209073bf22579869bda0ebe55250a65beeda291481d01ebc598828c7660ad2bc4cca62f0434f26d3720ef552118f974106b70cd042091df06c17dbb8996f0552aa57d457894f171ce2f51e07c8c85c66f826227da9dc70838ea72071abbbb5a4859dacddbc130ea1625997ca08e91669b7c7768f9117fd9e399b5327cb40a9b6b54bad438bfa5e1dd8df77c50bc9003f3910af0330e1e5ee1497dbe6b1f4eb7c5d25508566b15fa5499ba93a3759c3c964d204abf3658f7718847ee153f86791b33439efadfe47299da56b848f16749ab64cbff7c378a91095a4dd6ecfa0441f084e032ac32da1b0309655d08436ba1e8bb0e5a36ada5553214d9837a835f038d24ef3a414ca5c5f3d07fcd719b8fee95790ddd66ce581da7bb85c23f12ded9d885dbf249d3944610b3460d28756c2d01df7030bbce45a2934e2065aceb23173c90b6656c076910916a468852aad180ef81fa5526aa53dd20a4695f08aa6cd37568de159f214eeb194bcb49d3cc2865cc9c80647f442e01b094740141a996d7344ef3b8944f7c3f62161d49c8f4a62819a52a1382872f28ff6b330686b698f2149989a3142507bb45c9609eed73eeeaa1343a1a0d5590955114f3cc3ed6eb31d003ea6ed614276daf637de779258c094ccbb8ff3a2392caadaeea7c52d544824f26005703bb02b5f9fea4834cfa0d3d33d5232c169ca4055a5816abd9a4a4fde43c1e830cac5313d053dd8168e9e7cdea38b2596464f2ff3f8080e83457b77737a11095c636058151023ab530f70202531da2483348ef06a54310908b5332492129a774a794a97e4edf4b7e7caf96dcb0b6dd1bb866926e2df763773443f4738af7bced7b9f30eeb72f63be85130f2bc017f92633a10d13849bd742aa81f8ec3173cc849872b16622a0e9961a3b1ea743a51cf8d8252f8301e0d2a6e0b849d1cd97eba3a873f8fd58514bb0920b7d077576c06340dc2e40a5b7d17b5aa9cd36437b0216dc3d40a6bbea90935bcf3c87ad476be38056ee0b076496fa9c83c1f75e06a0f0bedf047057a42b3a39e3d838135a173465221ae4fe76bc0fa39ab2d21088de7a972b97f89f14ebb92175e03b4b0587ddba64a4c59c1842f2c1ef6202012dd7ad3948d78cda9639c8da9ca062db02a08dcc51c80fdc9ed826af3538f28734504e7b0d63f30f0ba119d3f7f51a043083de224ceadb922763c601dcb22401a0f01f675e2b863eadc5d412c43289ed97d423bcd3bcd8aa3df2a2d164ece7b09b0a42fac7e71dc7cba900b716aff9cca1a48752de1545b4420596813d525a37f90a88004235c0ed48682451b1393952c8ed114dfb5119a2c1b0535affdff36f538b5f858ec8478b7101a547820e9ad3c4e0815a0b3ff03b30ecd23df1a771d6a1ff0033fd96512125ae5eee43abda9c881a2278ed0804db8babb2f1d1d5edd19dfd2c5a6ddd5fae5f15aa83918553064aa3ebcf27c1e80c93e12a8f0da7b13e35735df2e1d254281900bb184df9afceba2c11d0cb13843ac5138b9d1f1eef89dc59a448cf06c20e80222521bc736cc8ab6066eb1f13bd4b25b67abd78f4da5723b38f8b7560bb2f70a8ccafe8aa9d5db4fa55845a5e6a07bf95fa2bca3b692bfd2c9b5ac2550ddae5f22299d4673f0553e43e8ae9ce8c61d85b3554ea60d12273164b1cfc5c632500c08245171a03111415c3ee92b163b851bf9d674524c3300fb568b07eea094906803666692a9f0a6979be0092a24ce363b4ac263f6f3f0d9f4879f30c71619125c6060e5b98ea16f299d82662809732f3cb8e1738147972882bc29670eb6055263c3dbd6fd94b6391013d0888ae831780da6f5351c7c9ce08607f2910ce7dd39d273cfacc9454f8aa19f3b4e1ecdab9bf149c3ed94457b56eaaebf1d53b6a2866004c6e7658324aa111bfc662b40539ca90c5bfd38f83f4a625f7928217b3d236ded8f09eb340e0de006ef4303afcd3716269bc12eaabca3461339d5be6390140877096cc2d166bcb8bf9ed23d131acb30ca157d2c7ee7455a15f4beedcdd9802f12f2c49046401a552389806d8ef8b89c6c25ef83c1ba301347d221919f0107d25d26199cf115a0432713b6d5695463ba9"}]}]}, 0x206c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4048080) 2.925885559s ago: executing program 0 (id=5262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000500000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008"], 0x10c}}, 0x0) 2.925300729s ago: executing program 0 (id=5264): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_ethernet(0x57, &(0x7f0000000740)={@local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "cb8f97", 0x21, 0x6, 0x0, @private1, @mcast2, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xc, 0x0, 0x0, {[@sack={0x5, 0x2}, @eol]}}, {"1c3115f576738cf9ee"}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) sendmsg$can_j1939(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x480c4) 2.008617433s ago: executing program 4 (id=5272): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x9c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x76}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0xabd}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x4}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20041090}, 0x840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r4 = syz_open_pts(r3, 0x80) r5 = dup3(r4, r3, 0x80000) read(r5, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r5, &(0x7f0000001d40)=""/4095, 0xfdef) write$P9_RLERRORu(r5, &(0x7f0000000140)={0x16, 0x7, 0x1, {{0x9, '.^\'*&{}-#'}, 0x6}}, 0x16) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) 1.54256449s ago: executing program 2 (id=5275): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001c80)="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", 0x382}, {0x0}], 0x2}}], 0x2, 0x8014) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x8, 0x1, 0x8, 0x2020005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r1, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x20008000) 1.497816182s ago: executing program 2 (id=5276): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e3", 0x5e}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2e91f3af98057ad0674eff7875169861ce6274b379522d411d3766aa7de767671efa60a1fb949feae7ec37efdfbcf1afd4d5cf86a0f9ae55644480d6a5e735b84303583d6c2534badb3981b5448037697faa5", 0xd4}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="157873e2c9542e45e27dea3315e396369a51bd63b2c4f6a8272d27ff0675547ec9a31d3a42ecb0583efde7adc254e59416050c1eb7a1fc02536c070f4964e8b18941198253d8da9fbf8c456af254ebf1795878f3a3256ee70c2964d3f010587a5fe800f697966822ccb7cc3257b6f1ed3d66646315c63b79f1c87ada02da4cf577d9dc1daaf1332400dead2760122a2669a387ad030550c0580bd9adc59af055e059c887c0b5c02779310337b803821ccf3aa365e1a057d5129c02d8c4", 0xbd}, {&(0x7f0000000800)="775d1ea0235b1d8979bc06a446925deee745776767c450620fa4e27c6dbaa98ec6c093e8d1e1519164a5f89f42ea672b529b4c4d1644463bcaf7c0cb1879b6eda4faf92a8ef59a375beb350482930d962e17d10db3ebb49508d4dfe192e193054216615c1b80ad3efb23a8b29a420bf54e9b5fef66f6eddddfb1f80a2d5b006053bad44d711e65980031615426249bc62c092feb5db72a135b", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a40)="1d21ba0cd66e3473c68037fab094c9cbe4565c1161aeb51bee605c71f26915faee4ed9170dfcd774388bdf06b356b4f709160aa83cfc1b63d25602c52b282054cd28085f7215a74e8e2a5e342150886b2a7b18dec8e7ecddccc2d698", 0x5c}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.467948754s ago: executing program 1 (id=5277): syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x242, &(0x7f00000001c0)={@empty, @local, @val={@val={0x88a8, 0x4}, {0x8100, 0x2}}, {@mpls_mc={0x8848, {[{0x7fff, 0x0, 0x1}, {0x9}, {0x5}], @ipv6=@tcp={0xc, 0x6, "53ef28", 0x1f8, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', {[@routing={0x2c, 0xa, 0x1, 0x7, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @local]}, @dstopts={0x1d, 0x4, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffffb}]}, @fragment={0x2, 0x0, 0x2, 0x0, 0x0, 0x1e, 0x65}, @hopopts={0x0, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x44a00000}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x800, [0x6, 0x80, 0x3a, 0x6be]}}, @ra={0x5, 0x2, 0x313}, @jumbo={0xc2, 0x4, 0x10}, @ra={0x5, 0x2, 0xe}]}, @srh={0x87, 0x6, 0x4, 0x3, 0x9, 0x8, 0x9, [@private0, @mcast2, @mcast2]}, @srh={0x2c, 0xa, 0x4, 0x5, 0x81, 0x20, 0x3, [@private0, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @empty, @empty]}], {{0x4e20, 0x4e24, r0, r1, 0x0, 0x0, 0x8, 0x20, 0x8, 0x0, 0x800, {[@exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x9a}, @window={0x3, 0x3, 0x51}]}}, {"8e41b61b979914615bc63168f6c9de765aeeca406282130c9afe535586aee99da79e7af948fdf38c1b9de0a1b9ac50c12a3a6e15123417351db82685f126ccd0525229ad8cc8fa8caecc30f9b1436cf9cb92ff58a5f4081994410bfd052bb95f"}}}}}}}}, &(0x7f0000000440)={0x1, 0x3, [0xbb1, 0x89a, 0xf3b, 0xe36]}) setuid(0xee00) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x173, &(0x7f00000005c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x8, 0x165, 0x68, 0x0, 0xc, 0x6, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x4, 0x7c, 0x1, 0x5}, @rr={0x7, 0x2b, 0x55, [@multicast2, @multicast2, @multicast1, @loopback, @broadcast, @multicast2, @local, @broadcast, @empty, @remote]}]}}, {{0x4e21, 0x4e22, r0, r3, 0x0, 0x0, 0xb, 0x2, 0x1ff, 0x0, 0x4, {[@md5sig={0x13, 0x12, "b428e25e07c22e03a17d9161646b0d47"}, @exp_smc={0xfe, 0x6}]}}, {"ac731e0b036d5955f1b49feb1cfde78381e2d7d1181fcfde662269e2d5c096cdbe5afb4a3bfd38d5282a3140bd586d6bc0c9da644d83a1aabf3af525d86b2f3a59e72d2742372a30e25fed6246f2041d8c46a04dc0d16ce16ff2861e857027ae7858046bd83dd1d3bb8ffd4d923e02a72178a3c86c80f61c40f5234ed6c9fb509f89cf09f3d474e703dcef6b81a1b87ac1980a900ffa51ac8663c90449e6ce83141b0f59a4b6908a51b57673aa396c53887fbbff141b765cd9d0a4d78038d5c1dc80ab0288793f6eeb732da0b55e2591d53c34e7ca308784282f47fe2aa957900c2ea401985f047d986cc6c3e283b627a8089cdac6"}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c001800fffc020000000000000000000000000001fc010000000000000000000000000001060105"], 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) syz_extract_tcp_res(&(0x7f0000000180), 0x8, 0x5) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000400)={0x1, 0x2, [0xc9e, 0xe77, 0xdab, 0xe96]}) syz_emit_ethernet(0x10c, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@llc={0x4, {@snap={0x0, 0x1, "c032", "bc927e", 0x9300, "540d2be4f8f40db39d13044842c2ec46f5a86b2b3ead3529b367a7dc1ac636e841742d170a9e5a0e2ce5d503a830c658fbd8ca2b7bbd1a7ad0f91254a0cdf088d3abb87ccf6639e3e62944b333733a37008cd894cc6720c080963a824ef66c37bf636fe9730b8f43d537da3732ba1e667a0da75bb63fc499e238032e1da78fecd27554cd19b4bdf539f8903af21579a021df89a5e31b1aabf8da868ef130aeb233f8fcc7c770c8d0e73222839bbc59c4ad535f16bf5b55eddb265688ce49654389a0bcfd161189a8720479a52585d3a478f6d22ccc466dc57e2baa28eebe899793809efbd0a9900ee0e1ce67fcc4b5ce52d49b3b35"}}}}}, 0x0) 1.403752798s ago: executing program 1 (id=5278): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000040)={0x2, 0x101, 0x4, 0xffffffff, 0x401, 0x0, 0xa}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8fe9}, 0x94) 1.341162142s ago: executing program 1 (id=5279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008004) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfff, 0x5f19}, 0x9885, 0x0, 0x7fc, 0x6, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x100000001}}, 0x30) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0xf7e3, @empty, 0xb49}, 0x1c) listen(0xffffffffffffffff, 0xff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f00000000c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001800dd8d00000040fadbdf2502201000fd04fe020000002008001e00010000000c0009"], 0x30}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ftruncate(r5, 0x5) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r7, 0x5411, 0x1000000000000) semop(0x0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) socket$netlink(0x10, 0x3, 0xf) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2, 0xd, 0x6d, 0xc1, 0x0, 0xf4, 0x45000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x2c73}, 0x100000, 0x3, 0x6, 0x7, 0x23, 0x6, 0x4, 0x0, 0x1000, 0x0, 0x7}, r8, 0x2, r5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000814) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000e88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f08000140000000002400057b090001006d6574610000000014000280081001400000000908000240000000100900010073797aa70b0230000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.325328103s ago: executing program 1 (id=5280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = timerfd_create(0x9, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) timerfd_settime(r3, 0x2, &(0x7f0000000680)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r5 = timerfd_create(0x9, 0x80000) timerfd_settime(r5, 0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) readv(r3, &(0x7f0000002580)=[{&(0x7f0000000240)=""/79, 0x4f}], 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x60, r1, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) clock_adjtime(0x6, &(0x7f00000002c0)={0x6, 0x5, 0x81, 0xfb7, 0x0, 0x1, 0x9, 0xae, 0xf5de, 0x3, 0x5, 0x89, 0x10001, 0x37d93a1, 0x3, 0x4dd3, 0x6, 0x3000, 0x4, 0xffffffffffffffff, 0x5, 0x8000000000000001, 0x46f80000000, 0x7, 0x8, 0x4d}) r6 = socket$netlink(0x10, 0x3, 0xe) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000580)=0x16, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040844}, 0x404c8f1) 1.310108813s ago: executing program 5 (id=5281): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000001c0)=ANY=[]) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002b80)={'batadv_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x2086, 0x8, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x80, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) close(0x3) perf_event_open(0x0, 0x0, 0xdffffeffffffffff, 0xffffffffffffffff, 0x1) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r1], 0x78}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x5, 0xdf6}, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0xa) 1.241762507s ago: executing program 1 (id=5282): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) unshare(0x2a020400) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4c081) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) syz_usbip_server_init(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r5, 0x4, 0x0, @val=@perf_event={0x3}}, 0x18) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1.048708809s ago: executing program 4 (id=5283): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80210, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x400}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c092}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0x2, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="a3", 0x1}], 0x1, 0x8) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYRES8=r6, @ANYRES64=r2, @ANYRESDEC=r1], 0x18c6) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0x118) setresuid(r7, r7, r7) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) open_by_handle_at(r9, &(0x7f0000000180)=@OVL_FILEID_V0={0x15, 0xfe, {0x0, 0xfb, 0x15, 0x2, 0x44, "b464e15688d32a5c55332899da424cb5"}}, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x15, &(0x7f0000000480)=""/145, &(0x7f0000000200)=0x91) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$inet6(r10, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) mkdir(&(0x7f0000000000)='./file0\x00', 0x8) mount$cgroup2(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x2200c00, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000030, &(0x7f0000000180)) setsockopt$sock_int(r10, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r10, 0x0) unshare(0x40000000) 1.005062671s ago: executing program 0 (id=5284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$userns(0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1], 0x5) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000540)="43210098") r5 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r5, 0x80705864, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) 745.637777ms ago: executing program 5 (id=5285): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe20cfd7ba75f1993, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x71, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="bd792a98180000000000000009efffffff8000fac32100001001000095000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x13}, 0x94) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_cache\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x4, 0xb}, 0x2, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x20, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0x7, &(0x7f0000000200)={0x5, 0xb}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r10], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) epoll_create(0xaf2) 608.301925ms ago: executing program 2 (id=5286): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e8005"], 0x1c}}, 0x0) 574.266687ms ago: executing program 2 (id=5287): socket$kcm(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f00000002c0)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000badb000000040000001200000000000000", @ANYRESOCT, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f00000003c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x8010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000001", @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf251600000018000180140002007465616d5f736c6176655f3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000090}, 0x44014) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$kcm(r2, 0x0, 0x4000844) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0xc8e80, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000300)="bb8af3382be8cecdf3ff8ef89dfa192e", 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r6, 0xb) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000080)="0843055ed6e465f3d712e0f59c693507", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) capset(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) utimes(&(0x7f0000000080)='./file0/file0\x00', 0x0) 524.900889ms ago: executing program 4 (id=5288): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000"], 0xa4}}, 0x0) 383.243368ms ago: executing program 4 (id=5289): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001500192340834b80040d8c560a067f024e22000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fefeffe809005300fff5dd00000010000100050c10000000010000000000", 0x58}], 0x1) 324.950811ms ago: executing program 5 (id=5290): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x5, 0xe, 0x0, &(0x7f0000000440)="469dc2d34ae2b700000000000000", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0xfffffffffffffe9e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x31) sendmmsg(r4, &(0x7f0000001280)=[{{&(0x7f00000003c0)=@xdp={0x2c, 0xe, r6, 0x29}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)="53261e0be194a7b5024cb9f12eeb", 0xe}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb0000000000000000020001000000000000000b0705000080030005000000000002004e22ac14140a0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x0) (async) sendmmsg$unix(r7, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000001800)="046284cb2c3ec61450be8e99ead1a3a91753ee7a76fb5451159e57bc99d83182a78d76a7d1ed4e8256ddb2b812cbea83747180a745b2e5b7f4da21a31fdf443f90dcab9a6031e7ff3e96e0e84b8f7d91693b02ea01ccbbf85f9f1a5c1e3a1133a70c58bf2ef8f6c587e384c682ddbbcb0105d0ac9f16a45903d4d4f580f19f05bcd6d58b6dbb8619139a2a40964607ae182310e5146152ba186894dd0baf110bc75366cfe44a5039642baa0061903df94e3e237e1c14186b1ed4e6219f06381032e7ec462b88583340daeff7d22dc873c433baa457662cee6c0dfbde8d5c9f88e30590b273b519502a77dfd46d844576186e28", 0xf3}], 0x1}}], 0x1, 0x44801) (async) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) (async) sendmmsg$inet(r10, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r10, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) (async) close(r0) (async) munmap(&(0x7f00007fe000/0x800000)=nil, 0x800000) eventfd2(0x200, 0x800) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 292.632773ms ago: executing program 2 (id=5291): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x1, 0xff, 0x3, 0x1}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 285.451093ms ago: executing program 5 (id=5292): socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) 284.029723ms ago: executing program 4 (id=5293): r0 = gettid() r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f00000003c0)=""/254, 0x100c000, 0x1000, 0x7}, 0x20) timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009020020a02f000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000020000000c001500c405000070000000fd0008"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syslog(0x4, &(0x7f0000000180)=""/244, 0xf4) prlimit64(0x0, 0xe, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x6) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) 237.323776ms ago: executing program 2 (id=5294): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_ethernet(0x57, &(0x7f0000000740)={@local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "cb8f97", 0x21, 0x6, 0x0, @private1, @mcast2, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xc, 0x0, 0x0, {[@sack={0x5, 0x2}, @eol]}}, {"1c3115f576738cf9ee"}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) sendmsg$can_j1939(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000081}, 0x480c4) 236.230016ms ago: executing program 5 (id=5295): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 201.211708ms ago: executing program 5 (id=5296): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e3", 0x5e}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2e91f3af98057ad0674eff7875169861ce6274b379522d411d3766aa7de767671efa60a1fb949feae7ec37efdfbcf1afd4d5cf86a0f9ae55644480d6a5e735b84303583d6c2534badb3981b5448037697faa5", 0xd4}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="157873e2c9542e45e27dea3315e396369a51bd63b2c4f6a8272d27ff0675547ec9a31d3a42ecb0583efde7adc254e59416050c1eb7a1fc02536c070f4964e8b18941198253d8da9fbf8c456af254ebf1795878f3a3256ee70c2964d3f010587a5fe800f697966822ccb7cc3257b6f1ed3d66646315c63b79f1c87ada02da4cf577d9dc1daaf1332400dead2760122a2669a387ad030550c0580bd9adc59af055e059c887c0b5c02779310337b803821ccf3aa365e1a057d5129c02d8c4", 0xbd}, {&(0x7f0000000800)="775d1ea0235b1d8979bc06a446925deee745776767c450620fa4e27c6dbaa98ec6c093e8d1e1519164a5f89f42ea672b529b4c4d1644463bcaf7c0cb1879b6eda4faf92a8ef59a375beb350482930d962e17d10db3ebb49508d4dfe192e193054216615c1b80ad3efb23a8b29a420bf54e9b5fef66f6eddddfb1f80a2d5b006053bad44d711e65980031615426249bc62c092feb5db72a135b", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a40)="1d21ba0cd66e3473c68037fab094c9cbe4565c1161aeb51bee605c71f26915faee4ed9170dfcd774388bdf06b356b4f709160aa83cfc1b63d25602c52b282054cd28085f7215a74e8e2a5e342150886b2a7b18dec8e7ecddccc2d698", 0x5c}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 12.12479ms ago: executing program 0 (id=5297): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5d2d, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x41, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x814) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060070335a1400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0x119}, {&(0x7f0000000300)="6f80de36094b1a354dcd261fc1adde877a11beb47fa6ab2ab079d3049a4387f54083d4af01156fc21cadec3b172c13ae4b6a6d549e91c24d91d3b267ea59d97cf0824f56dae374de6ed5a04ae18ce136b583c2d29682c3b556bc5b9441424ac2121248395c8aee98d33374dae42fdd1fdf2fe30c71dcbfcca43b56d1e6277230ec09fdc8a9a9a3bbfab25adee95f664538a8ba76b1e0cf59d5ccdc37c9946b31bece367d5f31aa9e6b1cec892f6dc4e2edb1a1986492d102c990edf02bccc1be8f4d2a39ce28616326d941e09ef680cbd5bd"}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f00000007c0)="6fd499418915f111847a5322fcb77dffa8b232b75c686ee4ca0296c99e5c4faf0787bb7e6d2556a7d8a8c95b17a7cf6909984126ba51461dd707fda8c9431d471c239644dd56c1e959000d54667c6292", 0x50}], 0x2}, 0x4004) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) close(0x3) 0s ago: executing program 4 (id=5298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80210, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x400}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c092}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0x2, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="a3", 0x1}], 0x1, 0x8) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYRES8=r6, @ANYRES64=r2, @ANYRESDEC=r1], 0x18c6) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0x118) setresuid(r7, r7, r7) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) open_by_handle_at(r9, &(0x7f0000000180)=@OVL_FILEID_V0={0x15, 0xfe, {0x0, 0xfb, 0x15, 0x2, 0x44, "b464e15688d32a5c55332899da424cb5"}}, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x15, &(0x7f0000000480)=""/145, &(0x7f0000000200)=0x91) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$inet6(r10, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) mkdir(&(0x7f0000000000)='./file0\x00', 0x8) mount$cgroup2(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x2200c00, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000030, &(0x7f0000000180)) setsockopt$sock_int(r10, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r10, 0x0) unshare(0x40000000) kernel console output (not intermixed with test programs): S Google 01/24/2026 [ 358.852084][T17620] Call Trace: [ 358.852092][T17620] [ 358.852102][T17620] __dump_stack+0x1d/0x30 [ 358.852167][T17620] dump_stack_lvl+0x95/0xd0 [ 358.852197][T17620] dump_stack+0x15/0x1b [ 358.852427][T17620] should_fail_ex+0x263/0x280 [ 358.852463][T17620] should_failslab+0x8c/0xb0 [ 358.852498][T17620] __kmalloc_cache_noprof+0x64/0x4a0 [ 358.852537][T17620] ? sctp_datamsg_from_user+0x57/0x950 [ 358.852676][T17620] ? __rcu_read_unlock+0x4e/0x70 [ 358.852722][T17620] sctp_datamsg_from_user+0x57/0x950 [ 358.852807][T17620] ? __sk_mem_raise_allocated+0x1be/0x990 [ 358.852842][T17620] ? __sk_mem_schedule+0x80/0xc0 [ 358.852869][T17620] sctp_sendmsg_to_asoc+0xa7a/0xf50 [ 358.852942][T17620] ? lockref_put_return+0xf7/0x130 [ 358.852984][T17620] ? _raw_spin_lock_bh+0x56/0xb0 [ 358.853077][T17620] ? _raw_spin_unlock_bh+0x18/0x20 [ 358.853178][T17620] ? __rcu_read_unlock+0x4e/0x70 [ 358.853423][T17620] ? sctp_sendmsg_check_sflags+0x142/0x1e0 [ 358.853461][T17620] sctp_sendmsg+0x13b9/0x1d60 [ 358.853500][T17620] ? selinux_socket_sendmsg+0x192/0x1c0 [ 358.853607][T17620] ? __pfx_sctp_sendmsg+0x10/0x10 [ 358.853706][T17620] inet_sendmsg+0xc5/0xd0 [ 358.853752][T17620] sock_write_iter+0x2e0/0x360 [ 358.853788][T17620] ? __pfx_sock_write_iter+0x10/0x10 [ 358.853818][T17620] vfs_write+0x5a6/0x9f0 [ 358.853866][T17620] ksys_write+0xdc/0x1a0 [ 358.853901][T17620] __x64_sys_write+0x40/0x50 [ 358.853936][T17620] x64_sys_call+0x27e1/0x3020 [ 358.854003][T17620] do_syscall_64+0x12c/0x370 [ 358.854057][T17620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.854088][T17620] RIP: 0033:0x7f171c22bf79 [ 358.854110][T17620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.854163][T17620] RSP: 002b:00007f171ac87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.854190][T17620] RAX: ffffffffffffffda RBX: 00007f171c4a5fa0 RCX: 00007f171c22bf79 [ 358.854215][T17620] RDX: 000000000000fffd RSI: 00002000000000c0 RDI: 0000000000000004 [ 358.854237][T17620] RBP: 00007f171ac87090 R08: 0000000000000000 R09: 0000000000000000 [ 358.854270][T17620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.854301][T17620] R13: 00007f171c4a6038 R14: 00007f171c4a5fa0 R15: 00007fff5c5565b8 [ 358.854348][T17620] [ 358.907259][T12381] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 359.228666][T17626] loop7: detected capacity change from 0 to 512 [ 359.396832][T17636] FAULT_INJECTION: forcing a failure. [ 359.396832][T17636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.419947][T17636] CPU: 1 UID: 0 PID: 17636 Comm: syz.1.4868 Not tainted syzkaller #0 PREEMPT(full) [ 359.419984][T17636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 359.420071][T17636] Call Trace: [ 359.420079][T17636] [ 359.420089][T17636] __dump_stack+0x1d/0x30 [ 359.420123][T17636] dump_stack_lvl+0x95/0xd0 [ 359.420313][T17636] dump_stack+0x15/0x1b [ 359.420342][T17636] should_fail_ex+0x263/0x280 [ 359.420378][T17636] should_fail+0xb/0x20 [ 359.420419][T17636] should_fail_usercopy+0x1a/0x20 [ 359.420455][T17636] copy_fpstate_to_sigframe+0x636/0x7d0 [ 359.420639][T17636] ? copy_fpstate_to_sigframe+0xe5/0x7d0 [ 359.420685][T17636] ? x86_task_fpu+0x36/0x60 [ 359.420715][T17636] get_sigframe+0x34c/0x470 [ 359.420750][T17636] ? get_signal+0xdbe/0xf60 [ 359.420845][T17636] x64_setup_rt_frame+0xa7/0x4e0 [ 359.420886][T17636] arch_do_signal_or_restart+0x24b/0x450 [ 359.421109][T17636] exit_to_user_mode_loop+0x6a/0x6f0 [ 359.421157][T17636] do_syscall_64+0x249/0x370 [ 359.421212][T17636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.421262][T17636] RIP: 0033:0x7f9e686fc84e [ 359.421359][T17636] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 359.421401][T17636] RSP: 002b:00007f9e67196fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 359.421435][T17636] RAX: 0000000000000001 RBX: 00007f9e671976c0 RCX: 00007f9e686fc84e [ 359.421452][T17636] RDX: 0000000000000001 RSI: 00007f9e67197090 RDI: 0000000000000004 [ 359.421470][T17636] RBP: 00007f9e67197090 R08: 0000000000000000 R09: 0000000000000000 [ 359.421487][T17636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.421504][T17636] R13: 00007f9e689b6038 R14: 00007f9e689b5fa0 R15: 00007ffecc3d6e38 [ 359.421530][T17636] [ 359.732730][T17645] loop7: detected capacity change from 0 to 512 [ 359.809429][T17645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.827398][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4871'. [ 359.833138][T17645] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.936737][T11169] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.065177][T17659] loop1: detected capacity change from 0 to 512 [ 360.100486][T17660] loop7: detected capacity change from 0 to 764 [ 360.123789][T17660] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 360.153358][T17660] Symlink component flag not implemented [ 360.162590][T17660] Symlink component flag not implemented (7) [ 360.546811][T17667] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 360.589417][T17667] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 361.205385][T17684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4884'. [ 361.367343][ T28] kauditd_printk_skb: 164 callbacks suppressed [ 361.367362][ T28] audit: type=1400 audit(1770782268.434:1574): avc: denied { mounton } for pid=17685 comm="syz.1.4885" path="/proc/832/task" dev="proc" ino=61189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 361.404345][ T28] audit: type=1400 audit(1770782268.444:1575): avc: denied { mount } for pid=17685 comm="syz.1.4885" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 361.429581][T17693] set_capacity_and_notify: 1 callbacks suppressed [ 361.429597][T17693] loop1: detected capacity change from 0 to 512 [ 361.518630][T17695] FAULT_INJECTION: forcing a failure. [ 361.518630][T17695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.533017][T17695] CPU: 0 UID: 0 PID: 17695 Comm: syz.1.4888 Not tainted syzkaller #0 PREEMPT(full) [ 361.533097][T17695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 361.533111][T17695] Call Trace: [ 361.533118][T17695] [ 361.533127][T17695] __dump_stack+0x1d/0x30 [ 361.533193][T17695] dump_stack_lvl+0x95/0xd0 [ 361.533228][T17695] dump_stack+0x15/0x1b [ 361.533253][T17695] should_fail_ex+0x263/0x280 [ 361.533360][T17695] should_fail+0xb/0x20 [ 361.533384][T17695] should_fail_usercopy+0x1a/0x20 [ 361.533421][T17695] _copy_from_user+0x1c/0xb0 [ 361.533525][T17695] ___sys_sendmsg+0xc1/0x1e0 [ 361.533668][T17695] __x64_sys_sendmsg+0xd4/0x160 [ 361.533711][T17695] x64_sys_call+0x194c/0x3020 [ 361.533797][T17695] do_syscall_64+0x12c/0x370 [ 361.533835][T17695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.533865][T17695] RIP: 0033:0x7f9e6873bf79 [ 361.533885][T17695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.533911][T17695] RSP: 002b:00007f9e67197028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.533961][T17695] RAX: ffffffffffffffda RBX: 00007f9e689b5fa0 RCX: 00007f9e6873bf79 [ 361.533976][T17695] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 361.533995][T17695] RBP: 00007f9e67197090 R08: 0000000000000000 R09: 0000000000000000 [ 361.534012][T17695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.534033][T17695] R13: 00007f9e689b6038 R14: 00007f9e689b5fa0 R15: 00007ffecc3d6e38 [ 361.534136][T17695] [ 361.763395][ T28] audit: type=1400 audit(1770782268.846:1576): avc: denied { create } for pid=17698 comm="syz.7.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 361.793773][T17699] loop7: detected capacity change from 0 to 512 [ 361.807526][T17699] EXT4-fs: Ignoring removed oldalloc option [ 361.823383][T17699] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.4889: corrupted in-inode xattr: e_value size too large [ 361.838749][T17699] fserror_report: 2 callbacks suppressed [ 361.838765][T17699] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.846191][T17699] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4889: couldn't read orphan inode 15 (err -117) [ 361.873135][T17699] loop7: lost filesystem error report for type 5 error -117 [ 361.874269][T17699] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.911661][ T28] audit: type=1400 audit(1770782268.995:1577): avc: denied { listen } for pid=17698 comm="syz.7.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 361.967802][T11169] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.052565][T17717] tipc: Enabling of bearer rejected, failed to enable media [ 362.066118][T17717] syzkaller0: entered promiscuous mode [ 362.072608][T17717] syzkaller0: entered allmulticast mode [ 362.082160][T17717] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4896'. [ 362.207689][ T28] audit: type=1326 audit(1770782269.276:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17722 comm="syz.6.4898" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f617fd6bf79 code=0x0 [ 362.782718][T17733] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.834803][T17733] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.855875][T17736] loop1: detected capacity change from 0 to 764 [ 362.867757][T17736] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 362.891643][T17736] Symlink component flag not implemented [ 362.900544][T17733] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.928191][T17736] Symlink component flag not implemented (7) [ 362.956866][T17738] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4902'. [ 362.995799][T17733] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.080387][T11234] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.093689][T17738] loop7: detected capacity change from 0 to 1024 [ 363.104093][T11234] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.115738][T11234] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.140647][T17742] loop9: detected capacity change from 0 to 512 [ 363.157267][T17742] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 363.187296][T11234] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.278356][T17738] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 363.300054][T17738] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.367656][ T28] audit: type=1400 audit(1770782270.361:1579): avc: denied { read } for pid=17760 comm="syz.8.4912" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 363.396261][ T28] audit: type=1400 audit(1770782270.389:1580): avc: denied { open } for pid=17760 comm="syz.8.4912" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 363.423499][ T28] audit: type=1400 audit(1770782270.389:1581): avc: denied { ioctl } for pid=17760 comm="syz.8.4912" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 363.453603][ T28] audit: type=1400 audit(1770782270.445:1582): avc: denied { getopt } for pid=17760 comm="syz.8.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 363.654940][T17769] netlink: 'syz.1.4914': attribute type 1 has an invalid length. [ 363.688956][T17769] bond1: entered promiscuous mode [ 363.723115][T17769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.753748][T17769] bond1: (slave bridge7): making interface the new active one [ 363.762215][T17769] bridge7: entered promiscuous mode [ 363.769606][T17769] bond1: (slave bridge7): Enslaving as an active interface with an up link [ 363.784259][T17602] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 363.885815][ T1641] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 4) [ 363.902934][ T1641] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 363.919529][ T1641] EXT4-fs (loop7): This should not happen!! Data will be lost [ 363.919529][ T1641] [ 363.944527][T11169] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 364.213272][T17780] loop6: detected capacity change from 0 to 512 [ 364.438006][ T28] audit: type=1400 audit(1770782271.362:1583): avc: denied { sqpoll } for pid=17793 comm="syz.6.4922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 364.753552][T17807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.761417][T17807] IPv6: NLM_F_CREATE should be set when creating new route [ 364.801008][T17811] loop1: detected capacity change from 0 to 512 [ 364.987334][T17821] loop7: detected capacity change from 0 to 512 [ 364.996403][T17821] FAT-fs (loop7): bogus number of FAT sectors [ 365.006163][T17821] FAT-fs (loop7): Can't find a valid FAT filesystem [ 366.066720][T17862] loop9: detected capacity change from 0 to 1024 [ 366.140870][T17862] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.178957][T17862] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 366.278286][T17877] loop6: detected capacity change from 0 to 512 [ 366.313252][T17877] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.378087][T17875] EXT4-fs error (device loop9): ext4_lookup:1785: inode #16: comm syz.9.4943: iget: bad extended attribute block 8 [ 366.422779][T17877] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.548981][T12229] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.577601][T17892] FAULT_INJECTION: forcing a failure. [ 366.577601][T17892] name failslab, interval 1, probability 0, space 0, times 0 [ 366.630409][T17892] CPU: 0 UID: 0 PID: 17892 Comm: syz.7.4950 Not tainted syzkaller #0 PREEMPT(full) [ 366.630446][T17892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 366.630464][T17892] Call Trace: [ 366.630532][T17892] [ 366.630542][T17892] __dump_stack+0x1d/0x30 [ 366.630577][T17892] dump_stack_lvl+0x95/0xd0 [ 366.630706][T17892] dump_stack+0x15/0x1b [ 366.630754][T17892] should_fail_ex+0x263/0x280 [ 366.630788][T17892] should_failslab+0x8c/0xb0 [ 366.630823][T17892] __kmalloc_noprof+0xb8/0x580 [ 366.630909][T17892] ? bpf_test_init+0x86/0x130 [ 366.630944][T17892] bpf_test_init+0x86/0x130 [ 366.630985][T17892] bpf_prog_test_run_xdp+0x306/0xa10 [ 366.631077][T17892] ? __rcu_read_unlock+0x4e/0x70 [ 366.631124][T17892] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 366.631167][T17892] bpf_prog_test_run+0x204/0x340 [ 366.631287][T17892] __sys_bpf+0x52e/0x7e0 [ 366.631334][T17892] __x64_sys_bpf+0x41/0x50 [ 366.631368][T17892] x64_sys_call+0x10cb/0x3020 [ 366.631403][T17892] do_syscall_64+0x12c/0x370 [ 366.631502][T17892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.631596][T17892] RIP: 0033:0x7f0acb79bf79 [ 366.631618][T17892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.631643][T17892] RSP: 002b:00007f0aca1ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 366.631670][T17892] RAX: ffffffffffffffda RBX: 00007f0acba15fa0 RCX: 00007f0acb79bf79 [ 366.631748][T17892] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 366.631762][T17892] RBP: 00007f0aca1ef090 R08: 0000000000000000 R09: 0000000000000000 [ 366.631778][T17892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.631796][T17892] R13: 00007f0acba16038 R14: 00007f0acba15fa0 R15: 00007ffdc49bea78 [ 366.631841][T17892] [ 366.888554][T17899] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4952'. [ 366.916958][T14594] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.106161][T17911] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4958'. [ 367.216029][T17914] loop9: detected capacity change from 0 to 128 [ 367.592002][T17923] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4962'. [ 367.715640][T17924] loop1: detected capacity change from 0 to 512 [ 367.753877][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 367.753895][ T28] audit: type=1400 audit(1770782274.468:1592): avc: denied { write } for pid=17922 comm="syz.6.4962" path="socket:[63902]" dev="sockfs" ino=63902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 367.817216][T17924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.869803][T17924] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.064047][T17929] loop6: detected capacity change from 0 to 512 [ 368.124622][T12674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.186802][T17929] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.204062][T17929] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.221793][ T28] audit: type=1400 audit(1770782274.907:1593): avc: denied { read write open } for pid=17928 comm="syz.6.4963" path="/373/bus/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 368.259127][ T28] audit: type=1400 audit(1770782274.907:1594): avc: denied { mounton } for pid=17928 comm="syz.6.4963" path="/373/bus/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 368.321391][T17929] loop6: detected capacity change from 512 to 0 [ 368.329581][ C0] I/O error, dev loop6, sector 12 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2 [ 368.343075][T17942] EXT4-fs error (device loop6): __ext4_find_entry:1615: inode #2: comm syz.6.4963: reading directory lblock 0 [ 368.360262][T17942] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 368.373462][T17942] EXT4-fs (loop6): I/O error while writing superblock [ 368.422601][T17929] EXT4-fs error (device loop6): __ext4_find_entry:1615: inode #2: comm syz.6.4963: reading directory lblock 0 [ 368.437696][T17929] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 368.448960][T17929] EXT4-fs (loop6): I/O error while writing superblock [ 368.464204][ T12] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4953: inode #18: block 35: comm kworker/u8:0: unable to read itable block [ 368.481912][ T28] audit: type=1326 audit(1770782275.122:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17928 comm="syz.6.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617fd6bf79 code=0x7ffc0000 [ 368.530174][ T12] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 368.544281][ T12] EXT4-fs (loop6): I/O error while writing superblock [ 368.555100][ T28] audit: type=1326 audit(1770782275.122:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17928 comm="syz.6.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f617fd2c84e code=0x7ffc0000 [ 368.593506][T17947] 9p: Bad value for 'rfdno' [ 368.618900][ T28] audit: type=1326 audit(1770782275.122:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17928 comm="syz.6.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f617fd2c84e code=0x7ffc0000 [ 368.664296][ T28] audit: type=1326 audit(1770782275.122:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17928 comm="syz.6.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617fd6bf79 code=0x7ffc0000 [ 368.675353][T17950] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4969'. [ 368.694724][ T28] audit: type=1326 audit(1770782275.122:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17928 comm="syz.6.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f617fd6bf79 code=0x7ffc0000 [ 368.740686][ T28] audit: type=1326 audit(1770782275.122:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17928 comm="syz.6.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617fd6bf79 code=0x7ffc0000 [ 368.771635][ T28] audit: type=1326 audit(1770782275.122:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17928 comm="syz.6.4963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617fd6bf79 code=0x7ffc0000 [ 368.930225][T17950] loop1: detected capacity change from 0 to 1024 [ 369.058960][T14136] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.075718][T14136] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 369.092296][T17950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 369.113635][T14136] EXT4-fs (loop6): I/O error while writing superblock [ 369.125469][T17937] Buffer I/O error on dev loop6, logical block 12, lost sync page write [ 369.146325][T17950] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.612837][ T1641] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 4) [ 369.640754][ T1641] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 369.683599][ T1641] EXT4-fs (loop1): This should not happen!! Data will be lost [ 369.683599][ T1641] [ 369.710980][T12674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 369.728774][T17966] chnl_net:caif_netlink_parms(): no params data found [ 369.775244][T17978] FAULT_INJECTION: forcing a failure. [ 369.775244][T17978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.801059][T17978] CPU: 0 UID: 0 PID: 17978 Comm: syz.1.4976 Not tainted syzkaller #0 PREEMPT(full) [ 369.801094][T17978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 369.801120][T17978] Call Trace: [ 369.801128][T17978] [ 369.801138][T17978] __dump_stack+0x1d/0x30 [ 369.801337][T17978] dump_stack_lvl+0x95/0xd0 [ 369.801451][T17978] dump_stack+0x15/0x1b [ 369.801477][T17978] should_fail_ex+0x263/0x280 [ 369.801569][T17978] should_fail+0xb/0x20 [ 369.801599][T17978] should_fail_usercopy+0x1a/0x20 [ 369.801648][T17978] _copy_from_user+0x1c/0xb0 [ 369.801689][T17978] ___sys_sendmsg+0xc1/0x1e0 [ 369.801751][T17978] __x64_sys_sendmsg+0xd4/0x160 [ 369.801801][T17978] x64_sys_call+0x194c/0x3020 [ 369.801890][T17978] do_syscall_64+0x12c/0x370 [ 369.801930][T17978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.801956][T17978] RIP: 0033:0x7f9e6873bf79 [ 369.801974][T17978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.801995][T17978] RSP: 002b:00007f9e67197028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.802108][T17978] RAX: ffffffffffffffda RBX: 00007f9e689b5fa0 RCX: 00007f9e6873bf79 [ 369.802127][T17978] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 369.802143][T17978] RBP: 00007f9e67197090 R08: 0000000000000000 R09: 0000000000000000 [ 369.802238][T17978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.802255][T17978] R13: 00007f9e689b6038 R14: 00007f9e689b5fa0 R15: 00007ffecc3d6e38 [ 369.802282][T17978] [ 370.028506][T17966] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.038647][T17966] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.048452][T17966] bridge_slave_0: entered allmulticast mode [ 370.056256][T17966] bridge_slave_0: entered promiscuous mode [ 370.067875][T17966] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.071258][T17987] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4978'. [ 370.076950][T17966] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.096329][T17966] bridge_slave_1: entered allmulticast mode [ 370.104269][T17966] bridge_slave_1: entered promiscuous mode [ 370.124259][T17988] netlink: 460 bytes leftover after parsing attributes in process `syz.7.4979'. [ 370.139501][T17966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.154020][T17966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.183018][T17966] team0: Port device team_slave_0 added [ 370.195986][T17966] team0: Port device team_slave_1 added [ 370.216688][T17966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.225581][T17966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.258808][T17966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.273110][T17966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.280530][T17966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.341553][T17966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.425348][T17966] hsr_slave_0: entered promiscuous mode [ 370.433316][T17987] loop9: detected capacity change from 0 to 1024 [ 370.442107][T17966] hsr_slave_1: entered promiscuous mode [ 370.482335][T17966] debugfs: 'hsr0' already exists in 'hsr' [ 370.503159][T17966] Cannot create hsr debugfs directory [ 370.552692][T17987] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 370.570876][T17987] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.855349][T18022] loop8: detected capacity change from 0 to 512 [ 370.891946][T18022] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.936442][T18022] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.937077][T18000] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 371.006048][T17966] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 371.037797][ T12] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 4) [ 371.042472][T18022] loop8: detected capacity change from 512 to 0 [ 371.058394][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 371.069305][T18029] EXT4-fs error (device loop8): __ext4_find_entry:1615: inode #2: comm syz.8.4986: reading directory lblock 0 [ 371.083763][T17966] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.117383][T18029] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 371.124009][ T12] EXT4-fs (loop9): This should not happen!! Data will be lost [ 371.124009][ T12] [ 371.138359][T18029] EXT4-fs (loop8): I/O error while writing superblock [ 371.144624][T17966] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.162088][T17966] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.178499][T14594] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 371.194773][T18029] EXT4-fs error (device loop8): __ext4_find_entry:1615: inode #2: comm syz.8.4986: reading directory lblock 0 [ 371.215128][T18029] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 371.233765][T18029] EXT4-fs (loop8): I/O error while writing superblock [ 371.252854][ T12] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4953: inode #18: block 35: comm kworker/u8:0: unable to read itable block [ 371.303987][ T12] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 371.323109][ T12] EXT4-fs (loop8): I/O error while writing superblock [ 371.413332][T17966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.479719][T17966] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.514886][ T1641] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.525701][ T1641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.545572][T16017] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.568822][T16017] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 371.581549][T16017] EXT4-fs (loop8): I/O error while writing superblock [ 371.590840][T18025] Buffer I/O error on dev loop8, logical block 12, lost sync page write [ 371.618777][ T402] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.627006][ T402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.637968][T18055] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4990'. [ 371.666503][T17966] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.681501][T17966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.759757][T17966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.824053][ T1641] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.901526][ T1641] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.920332][ T12] tipc: Resetting bearer [ 371.953660][ T1641] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.007903][ T1641] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.108889][T17966] veth0_vlan: entered promiscuous mode [ 372.133745][ T1641] bridge_slave_1: left allmulticast mode [ 372.141842][ T1641] bridge_slave_1: left promiscuous mode [ 372.150609][ T1641] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.161725][ T1641] bridge_slave_0: left allmulticast mode [ 372.169388][ T1641] bridge_slave_0: left promiscuous mode [ 372.178064][ T1641] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.315501][T18115] loop9: detected capacity change from 0 to 512 [ 372.441136][T18122] loop1: detected capacity change from 0 to 1024 [ 372.460147][T18122] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 372.486909][T18122] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 372.503252][T18122] EXT4-fs error (device loop1): ext4_get_journal_inode:5854: inode #32: comm syz.1.4998: iget: special inode unallocated [ 372.520192][T18122] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 372.520578][T18122] EXT4-fs (loop1): Remounting filesystem read-only [ 372.540546][T18122] EXT4-fs (loop1): no journal found [ 372.548033][T18122] EXT4-fs (loop1): can't get journal size [ 372.555073][T18122] EXT4-fs (loop1): filesystem is read-only [ 372.565702][T18122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 372.589803][ T1641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.620248][ T1641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.637981][T18117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 372.654202][T18117] System zones: 0-1, 3-36 [ 372.655072][ T1641] bond0 (unregistering): Released all slaves [ 372.675570][T17966] veth1_vlan: entered promiscuous mode [ 372.682547][T18117] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.4996: bad orphan inode 134217728 [ 372.706190][T18117] loop9: lost filesystem error report for type 5 error -117 [ 372.719749][T18117] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.767226][ T1641] tipc: Disabling bearer [ 372.786762][T12674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.800093][ T1641] tipc: Disabling bearer [ 372.828052][T18130] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5000'. [ 372.838475][ T1641] tipc: Left network mode [ 372.845050][T17966] veth0_macvtap: entered promiscuous mode [ 372.877158][T17966] veth1_macvtap: entered promiscuous mode [ 372.935627][ T1641] hsr_slave_0: left promiscuous mode [ 372.958520][ T1641] hsr_slave_1: left promiscuous mode [ 372.992964][ T1641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.017510][ T1641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.038931][ T1641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.060733][ T1641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.105276][T14594] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.118520][T18130] set_capacity_and_notify: 1 callbacks suppressed [ 373.118556][T18130] loop1: detected capacity change from 0 to 1024 [ 373.145872][ T1641] veth1_macvtap: left promiscuous mode [ 373.159912][ T1641] veth1_vlan: left promiscuous mode [ 373.181234][ T1641] veth0_vlan: left promiscuous mode [ 373.211962][T18128] loop7: detected capacity change from 0 to 1024 [ 373.304324][T18128] EXT4-fs: Ignoring removed orlov option [ 373.360665][T18128] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 373.380043][T18149] loop9: detected capacity change from 0 to 764 [ 373.381320][T18130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 373.409625][T18149] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 373.427194][T18149] Symlink component flag not implemented [ 373.433549][T18149] Symlink component flag not implemented (7) [ 373.443077][T18130] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.489270][T18128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.507472][ T1641] team0 (unregistering): Port device team_slave_1 removed [ 373.523315][ T1641] team0 (unregistering): Port device team_slave_0 removed [ 373.716598][T17966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.734593][T17966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.747401][T11051] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:11: lblock 0 mapped to illegal pblock 0 (length 4) [ 373.774928][T11051] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 373.791251][T18155] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.805166][T11051] EXT4-fs (loop1): This should not happen!! Data will be lost [ 373.805166][T11051] [ 373.815094][T11169] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.826716][T12674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 373.897371][T18155] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.927314][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.937942][T18181] loop7: detected capacity change from 0 to 512 [ 373.944620][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.984685][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.032435][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.050379][T18155] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.082891][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 374.082908][ T28] audit: type=1400 audit(1770782280.379:1653): avc: denied { mounton } for pid=17966 comm="syz-executor" path="/root/syzkaller.bfMQCs/syz-tmp" dev="sda1" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 374.101425][T18084] chnl_net:caif_netlink_parms(): no params data found [ 374.121755][ T28] audit: type=1400 audit(1770782280.379:1654): avc: denied { mounton } for pid=17966 comm="syz-executor" path="/root/syzkaller.bfMQCs/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 374.158292][ T28] audit: type=1400 audit(1770782280.379:1655): avc: denied { mounton } for pid=17966 comm="syz-executor" path="/root/syzkaller.bfMQCs/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=64396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 374.202612][ T28] audit: type=1400 audit(1770782280.426:1656): avc: denied { mounton } for pid=17966 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 374.248407][T18155] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.297634][ T28] audit: type=1400 audit(1770782280.426:1657): avc: denied { mount } for pid=17966 comm="syz-executor" name="/" dev="gadgetfs" ino=4359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 374.306000][T18195] vlan0: entered promiscuous mode [ 374.338039][T18195] team0: entered promiscuous mode [ 374.344930][T18195] team_slave_0: entered promiscuous mode [ 374.351916][T18195] team_slave_1: entered promiscuous mode [ 374.452779][T18084] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.462801][T18084] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.472289][T18084] bridge_slave_0: entered allmulticast mode [ 374.480092][T18084] bridge_slave_0: entered promiscuous mode [ 374.489839][T18084] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.502278][T18084] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.512263][T18084] bridge_slave_1: entered allmulticast mode [ 374.520144][T18084] bridge_slave_1: entered promiscuous mode [ 374.696937][T18084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.750253][T18084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.837655][T14373] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.908837][T18084] team0: Port device team_slave_0 added [ 374.948938][T14373] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.983005][T14373] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.029514][T18084] team0: Port device team_slave_1 added [ 375.050144][T14373] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.084823][T18084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.108003][T18084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.159838][T18084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.178663][T18252] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5011'. [ 375.225694][T18084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.245412][T18084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.294944][T18084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.340667][T18257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5012'. [ 375.354051][T18084] hsr_slave_0: entered promiscuous mode [ 375.370897][T18252] loop9: detected capacity change from 0 to 1024 [ 375.374804][T18084] hsr_slave_1: entered promiscuous mode [ 375.388689][T18084] debugfs: 'hsr0' already exists in 'hsr' [ 375.400272][T18084] Cannot create hsr debugfs directory [ 375.499416][T18257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5012'. [ 375.602395][T18252] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 375.650963][T18252] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.827184][T18287] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5016'. [ 375.939504][T18084] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 375.966123][T18084] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 375.991976][T18084] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 376.016749][T18084] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 376.085136][ T1878] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 4) [ 376.226694][T18287] loop1: detected capacity change from 0 to 1024 [ 376.247399][T18084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.313857][ T1878] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 376.387526][T18084] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.409683][ T1878] EXT4-fs (loop9): This should not happen!! Data will be lost [ 376.409683][ T1878] [ 376.438740][T18287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 376.467274][T14372] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.477052][T14372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.496468][T18287] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.519962][T14594] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 376.543842][T11234] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.552769][T11234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.785697][T18084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.851687][ T12] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 4) [ 376.888699][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 376.954526][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 376.954526][ T12] [ 376.999600][T12674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 377.060770][T18084] veth0_vlan: entered promiscuous mode [ 377.091476][T18084] veth1_vlan: entered promiscuous mode [ 377.138686][T18084] veth0_macvtap: entered promiscuous mode [ 377.159477][T18084] veth1_macvtap: entered promiscuous mode [ 377.182534][T18084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.212374][T18084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.246038][T14372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.279065][T14372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.311962][T14372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.354256][T14372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.398150][T18377] selection: kmalloc() failed [ 377.492661][T18386] netlink: 'syz.4.5028': attribute type 4 has an invalid length. [ 377.544596][T18386] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5028'. [ 377.694222][ T28] audit: type=1326 audit(1770782283.756:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18401 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 377.759152][ T28] audit: type=1326 audit(1770782283.756:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18401 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 377.764383][T18400] tmpfs: Unknown parameter 'nïs{' [ 377.833910][ T28] audit: type=1326 audit(1770782283.756:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18401 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 377.878429][T18411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5031'. [ 377.957108][ T28] audit: type=1326 audit(1770782283.756:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18401 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 378.006906][T18418] bond3: option resend_igmp: invalid value (1024) [ 378.021272][ T28] audit: type=1326 audit(1770782283.756:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18401 comm="syz.1.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 378.058125][T18418] bond3: option resend_igmp: allowed values 0 - 255 [ 378.084578][T18418] bond3 (unregistering): Released all slaves [ 378.120309][T18426] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.262772][T18426] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.308765][T18426] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.356825][T18440] loop7: detected capacity change from 0 to 1024 [ 378.368158][T18442] loop4: detected capacity change from 0 to 512 [ 378.390477][T18426] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.575927][T11234] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.599871][T18440] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 378.631820][T11234] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.648018][T18440] System zones: 0-1, 3-36 [ 378.664401][T11234] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.681055][T11234] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.712114][T18440] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.5039: bad orphan inode 134217728 [ 378.767449][T18442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.814649][T18442] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 378.820213][T18454] loop1: detected capacity change from 0 to 1024 [ 378.828784][T18440] loop7: lost filesystem error report for type 5 error -117 [ 378.839257][T18440] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.903276][T18454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.024646][T18442] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5038'. [ 379.398954][T11169] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.576524][T18497] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5044'. [ 379.596699][T17966] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.655004][T18497] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.747986][T18514] loop4: detected capacity change from 0 to 512 [ 379.780608][T18514] EXT4-fs: Ignoring removed orlov option [ 379.820378][T18514] EXT4-fs: Ignoring removed mblk_io_submit option [ 379.842028][T18514] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 379.862140][T18514] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.5047: attempt to clear invalid blocks 2 len 1 [ 379.879896][T18514] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 379.880251][T18514] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 379.926397][T18514] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5047: invalid indirect mapped block 1819239214 (level 0) [ 379.946312][T18497] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.992132][T18514] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 379.996360][T18514] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5047: invalid indirect mapped block 1819239214 (level 1) [ 380.050757][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 380.050776][ T28] audit: type=1400 audit(1770782285.954:1701): avc: denied { mounton } for pid=18527 comm="syz.0.5051" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 380.111724][T18529] rdma_op ffff88810ce57980 conn xmit_rdma 0000000000000000 [ 380.185424][T18497] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.214944][T18514] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 380.341249][T18514] EXT4-fs (loop4): 1 truncate cleaned up [ 380.366450][ T28] audit: type=1400 audit(1770782286.263:1702): avc: denied { read } for pid=18548 comm="syz.0.5052" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 380.404563][T18514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.429612][T18497] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.444255][ T28] audit: type=1400 audit(1770782286.263:1703): avc: denied { open } for pid=18548 comm="syz.0.5052" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 380.499798][ T28] audit: type=1400 audit(1770782286.263:1704): avc: denied { ioctl } for pid=18548 comm="syz.0.5052" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 380.547275][ T28] audit: type=1400 audit(1770782286.366:1705): avc: denied { create } for pid=18552 comm="syz.0.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 380.622761][T18565] SELinux: security_context_str_to_sid (ôa`yv©—-”|J+0lè8G[økT—ƒ_È×|nœÉUÓ5 [ 380.622761][T18565] M9) failed with errno=-22 [ 380.651174][T18565] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 380.672300][ T402] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.693711][ T402] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.763393][ T402] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.794105][ T402] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.043141][ T28] audit: type=1400 audit(1770782286.890:1706): avc: denied { write } for pid=18580 comm="syz.0.5057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.367793][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5059'. [ 381.453438][ T28] audit: type=1326 audit(1770782287.264:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18590 comm="syz.0.5060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2444bbf79 code=0x7ffc0000 [ 381.506625][ T28] audit: type=1326 audit(1770782287.264:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18590 comm="syz.0.5060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2444bbf79 code=0x7ffc0000 [ 381.520489][T17966] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.573840][T18606] bond2: option resend_igmp: invalid value (1024) [ 381.581841][T18606] bond2: option resend_igmp: allowed values 0 - 255 [ 381.592713][ T28] audit: type=1326 audit(1770782287.264:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18590 comm="syz.0.5060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb24447c84e code=0x7ffc0000 [ 381.626205][ T28] audit: type=1326 audit(1770782287.264:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18590 comm="syz.0.5060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb24447c84e code=0x7ffc0000 [ 381.659263][T18606] bond2 (unregistering): Released all slaves [ 382.001439][T18644] loop4: detected capacity change from 0 to 128 [ 382.125574][T18658] SET target dimension over the limit! [ 382.210615][T18667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5072'. [ 382.845844][T18748] loop9: detected capacity change from 0 to 512 [ 382.874588][T18748] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.891931][T18748] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 382.941129][T18748] loop9: detected capacity change from 512 to 0 [ 382.960405][T18748] EXT4-fs error (device loop9): __ext4_find_entry:1615: inode #2: comm syz.9.5078: reading directory lblock 0 [ 382.989312][T18748] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 382.998598][T18748] EXT4-fs (loop9): I/O error while writing superblock [ 383.063220][T18770] EXT4-fs error (device loop9): __ext4_find_entry:1615: inode #2: comm syz.9.5078: reading directory lblock 0 [ 383.076908][T18770] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 383.086979][T18770] EXT4-fs (loop9): I/O error while writing superblock [ 383.100143][ T1641] EXT4-fs error (device loop9): __ext4_get_inode_loc_noinmem:4953: inode #18: block 35: comm kworker/u8:5: unable to read itable block [ 383.123878][ T1641] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 383.135272][ T1641] EXT4-fs (loop9): I/O error while writing superblock [ 383.311655][T18776] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5080'. [ 383.347393][T18776] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5080'. [ 383.412645][T12674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.470866][T18782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5083'. [ 383.624428][T18796] FAULT_INJECTION: forcing a failure. [ 383.624428][T18796] name failslab, interval 1, probability 0, space 0, times 0 [ 383.644297][T18796] CPU: 1 UID: 0 PID: 18796 Comm: syz.7.5089 Not tainted syzkaller #0 PREEMPT(full) [ 383.644328][T18796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 383.644346][T18796] Call Trace: [ 383.644354][T18796] [ 383.644368][T18796] __dump_stack+0x1d/0x30 [ 383.644436][T18796] dump_stack_lvl+0x95/0xd0 [ 383.644463][T18796] dump_stack+0x15/0x1b [ 383.644489][T18796] should_fail_ex+0x263/0x280 [ 383.644557][T18796] should_failslab+0x8c/0xb0 [ 383.644595][T18796] kmem_cache_alloc_noprof+0x68/0x490 [ 383.644632][T18796] ? dst_alloc+0xbd/0x100 [ 383.644728][T18796] dst_alloc+0xbd/0x100 [ 383.644763][T18796] ? ip_vs_sh_dest_changed+0x92/0x200 [ 383.644886][T18796] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 383.644920][T18796] ip_route_output_flow+0x65/0x110 [ 383.644952][T18796] udp_sendmsg+0x13c3/0x15d0 [ 383.644980][T18796] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 383.645004][T18796] ? avc_has_perm+0x101/0x190 [ 383.645074][T18796] ? __pfx_udp_sendmsg+0x10/0x10 [ 383.645098][T18796] inet_sendmsg+0xac/0xd0 [ 383.645343][T18796] ____sys_sendmsg+0x53a/0x600 [ 383.645431][T18796] ___sys_sendmsg+0x195/0x1e0 [ 383.645544][T18796] ? path_openat+0x1b01/0x2050 [ 383.645583][T18796] __sys_sendmmsg+0x185/0x320 [ 383.645626][T18796] __x64_sys_sendmmsg+0x57/0x70 [ 383.645682][T18796] x64_sys_call+0x27aa/0x3020 [ 383.645903][T18796] do_syscall_64+0x12c/0x370 [ 383.645962][T18796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.645984][T18796] RIP: 0033:0x7f0acb79bf79 [ 383.645999][T18796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.646017][T18796] RSP: 002b:00007f0aca1ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 383.646037][T18796] RAX: ffffffffffffffda RBX: 00007f0acba15fa0 RCX: 00007f0acb79bf79 [ 383.646129][T18796] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 383.646141][T18796] RBP: 00007f0aca1ef090 R08: 0000000000000000 R09: 0000000000000000 [ 383.646153][T18796] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 383.646217][T18796] R13: 00007f0acba16038 R14: 00007f0acba15fa0 R15: 00007ffdc49bea78 [ 383.646234][T18796] [ 383.982569][T18799] delete_channel: no stack [ 384.010715][T18801] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5091'. [ 384.055484][T15133] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.067123][T18801] loop4: detected capacity change from 0 to 512 [ 384.076860][T18801] ext4: Unknown parameter 'uid>00000000000000000000' [ 384.091529][T15133] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 384.101830][T18802] loop7: detected capacity change from 0 to 512 [ 384.106330][T15133] EXT4-fs (loop9): I/O error while writing superblock [ 384.128694][T18750] Buffer I/O error on dev loop9, logical block 12, lost sync page write [ 384.193285][T18802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.210340][T18802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5092'. [ 384.878070][T18798] delete_channel: no stack [ 385.304905][T11169] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.324448][T18811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5095'. [ 385.460218][T18825] FAULT_INJECTION: forcing a failure. [ 385.460218][T18825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.478515][T18825] CPU: 1 UID: 0 PID: 18825 Comm: syz.1.5100 Not tainted syzkaller #0 PREEMPT(full) [ 385.478616][T18825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 385.478635][T18825] Call Trace: [ 385.478644][T18825] [ 385.478655][T18825] __dump_stack+0x1d/0x30 [ 385.478833][T18825] dump_stack_lvl+0x95/0xd0 [ 385.478866][T18825] dump_stack+0x15/0x1b [ 385.478963][T18825] should_fail_ex+0x263/0x280 [ 385.479017][T18825] should_fail+0xb/0x20 [ 385.479041][T18825] should_fail_usercopy+0x1a/0x20 [ 385.479160][T18825] _copy_to_user+0x20/0xa0 [ 385.479202][T18825] simple_read_from_buffer+0xb5/0x130 [ 385.479288][T18825] proc_fail_nth_read+0x10e/0x150 [ 385.479312][T18825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.479333][T18825] vfs_read+0x1ab/0x7f0 [ 385.479359][T18825] ? __rcu_read_unlock+0x4e/0x70 [ 385.479537][T18825] ? __fget_files+0x184/0x1c0 [ 385.479734][T18825] ? mutex_lock+0x57/0x90 [ 385.479825][T18825] ksys_read+0xdc/0x1a0 [ 385.479854][T18825] __x64_sys_read+0x40/0x50 [ 385.479883][T18825] x64_sys_call+0x2886/0x3020 [ 385.479909][T18825] do_syscall_64+0x12c/0x370 [ 385.480014][T18825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.480038][T18825] RIP: 0033:0x7f9e686fc84e [ 385.480054][T18825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 385.480074][T18825] RSP: 002b:00007f9e67196fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 385.480095][T18825] RAX: ffffffffffffffda RBX: 00007f9e671976c0 RCX: 00007f9e686fc84e [ 385.480172][T18825] RDX: 000000000000000f RSI: 00007f9e671970a0 RDI: 0000000000000004 [ 385.480185][T18825] RBP: 00007f9e67197090 R08: 0000000000000000 R09: 0000000000000000 [ 385.480198][T18825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.480211][T18825] R13: 00007f9e689b6038 R14: 00007f9e689b5fa0 R15: 00007ffecc3d6e38 [ 385.480231][T18825] [ 385.822638][T18831] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 386.014372][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 386.014404][ T28] audit: type=1326 audit(1770782291.539:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18839 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 386.053999][ T28] audit: type=1326 audit(1770782291.539:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18839 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 386.093775][ T28] audit: type=1326 audit(1770782291.557:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18839 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 386.126502][ T28] audit: type=1326 audit(1770782291.557:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18839 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 386.158403][ T28] audit: type=1326 audit(1770782291.557:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18839 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 386.191679][ T28] audit: type=1326 audit(1770782291.557:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18839 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 386.234986][ T28] audit: type=1326 audit(1770782291.557:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18839 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 386.269475][ T28] audit: type=1326 audit(1770782291.557:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18839 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 386.302209][ T28] audit: type=1326 audit(1770782291.557:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18839 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 386.333683][ T28] audit: type=1326 audit(1770782291.557:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18839 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 386.372972][T18845] FAULT_INJECTION: forcing a failure. [ 386.372972][T18845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.388286][T18845] CPU: 1 UID: 0 PID: 18845 Comm: syz.0.5107 Not tainted syzkaller #0 PREEMPT(full) [ 386.388322][T18845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 386.388340][T18845] Call Trace: [ 386.388347][T18845] [ 386.388354][T18845] __dump_stack+0x1d/0x30 [ 386.388454][T18845] dump_stack_lvl+0x95/0xd0 [ 386.388473][T18845] dump_stack+0x15/0x1b [ 386.388491][T18845] should_fail_ex+0x263/0x280 [ 386.388585][T18845] should_fail+0xb/0x20 [ 386.388632][T18845] should_fail_usercopy+0x1a/0x20 [ 386.388738][T18845] strncpy_from_user+0x27/0x250 [ 386.388760][T18845] do_getname+0x59/0x1c0 [ 386.388788][T18845] __se_sys_mknod+0x21/0xf0 [ 386.388812][T18845] __x64_sys_mknod+0x43/0x50 [ 386.388915][T18845] x64_sys_call+0x2acd/0x3020 [ 386.388938][T18845] do_syscall_64+0x12c/0x370 [ 386.389003][T18845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.389034][T18845] RIP: 0033:0x7fb2444bbf79 [ 386.389048][T18845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.389065][T18845] RSP: 002b:00007fb242f17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 386.389148][T18845] RAX: ffffffffffffffda RBX: 00007fb244735fa0 RCX: 00007fb2444bbf79 [ 386.389168][T18845] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000000000 [ 386.389179][T18845] RBP: 00007fb242f17090 R08: 0000000000000000 R09: 0000000000000000 [ 386.389268][T18845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.389279][T18845] R13: 00007fb244736038 R14: 00007fb244735fa0 R15: 00007ffc9cba0288 [ 386.389297][T18845] [ 386.746718][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811bb4c800: rx timeout, send abort [ 386.757814][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bb4c800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 386.778011][T18694] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.834724][T18694] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.888709][T18694] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.943482][T18694] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.956994][T18867] loop7: detected capacity change from 0 to 512 [ 386.975814][T18867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.995528][T18867] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 387.082565][T18694] bridge_slave_1: left allmulticast mode [ 387.090304][T18694] bridge_slave_1: left promiscuous mode [ 387.096756][T18694] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.106094][T18694] bridge_slave_0: left allmulticast mode [ 387.114769][T18694] bridge_slave_0: left promiscuous mode [ 387.122243][T18694] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.196258][T18867] loop7: detected capacity change from 512 to 0 [ 387.240831][T18881] EXT4-fs error (device loop7): __ext4_find_entry:1615: inode #2: comm syz.7.5114: reading directory lblock 0 [ 387.257484][T18881] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 387.267878][T18881] EXT4-fs (loop7): I/O error while writing superblock [ 387.278504][T18883] loop1: detected capacity change from 0 to 512 [ 387.293885][T18883] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 387.332308][T18881] EXT4-fs error (device loop7): __ext4_find_entry:1615: inode #2: comm syz.7.5114: reading directory lblock 0 [ 387.351951][T18881] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 387.364681][T18881] EXT4-fs (loop7): I/O error while writing superblock [ 387.376667][T14371] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4953: inode #18: block 35: comm kworker/u8:16: unable to read itable block [ 387.397529][T14371] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 387.410767][T14371] EXT4-fs (loop7): I/O error while writing superblock [ 387.421781][T18694] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 387.432856][T18694] bridge1 (unregistering): left promiscuous mode [ 387.479092][T18892] loop1: detected capacity change from 0 to 512 [ 387.503595][T18892] netlink: 'syz.1.5121': attribute type 27 has an invalid length. [ 387.591214][T18897] Cannot find del_set index 0 as target [ 387.600491][T18897] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5124'. [ 387.625888][T18694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.639945][T18694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.655053][T18694] bond0 (unregistering): Released all slaves [ 387.666281][T18694] bond1 (unregistering): Released all slaves [ 387.681064][T18689] tipc: Resetting bearer [ 387.690076][T18892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.699913][T18892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.710995][T18892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.719592][T18892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.740327][T18694] tipc: Disabling bearer [ 387.755188][T18694] tipc: Disabling bearer [ 387.765861][T18694] tipc: Left network mode [ 387.782039][T18694] hsr_slave_0: left promiscuous mode [ 387.789209][T18694] hsr_slave_1: left promiscuous mode [ 387.800265][T18694] veth1_macvtap: left promiscuous mode [ 387.825343][T18694] veth0_macvtap: left promiscuous mode [ 387.835444][T18694] veth1_vlan: left promiscuous mode [ 387.842002][T18694] veth0_vlan: left promiscuous mode [ 388.135741][T13964] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.155802][T18694] team0 (unregistering): Port device team_slave_1 removed [ 388.179037][T13964] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 388.191007][T18694] team0 (unregistering): Port device team_slave_0 removed [ 388.231969][T13964] EXT4-fs (loop7): I/O error while writing superblock [ 388.692815][T18868] Buffer I/O error on dev loop7, logical block 12, lost sync page write [ 388.733675][T18857] chnl_net:caif_netlink_parms(): no params data found [ 388.832794][T18857] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.843881][T18857] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.851621][T18857] bridge_slave_0: entered allmulticast mode [ 388.859895][T18857] bridge_slave_0: entered promiscuous mode [ 388.867551][T18857] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.875504][T18857] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.886530][T18857] bridge_slave_1: entered allmulticast mode [ 388.894441][T18857] bridge_slave_1: entered promiscuous mode [ 388.914347][T18857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.982298][T18857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.057319][T18857] team0: Port device team_slave_0 added [ 389.076592][T18857] team0: Port device team_slave_1 added [ 389.171387][T18857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.187708][T18857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.256554][T18962] loop4: detected capacity change from 0 to 164 [ 389.266471][T18857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.291091][T18857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.309370][T18857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.386575][T18857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.441834][T18967] FAULT_INJECTION: forcing a failure. [ 389.441834][T18967] name failslab, interval 1, probability 0, space 0, times 0 [ 389.481485][T18857] hsr_slave_0: entered promiscuous mode [ 389.490557][T18967] CPU: 1 UID: 0 PID: 18967 Comm: syz.4.5135 Not tainted syzkaller #0 PREEMPT(full) [ 389.490589][T18967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 389.490605][T18967] Call Trace: [ 389.490613][T18967] [ 389.490622][T18967] __dump_stack+0x1d/0x30 [ 389.490652][T18967] dump_stack_lvl+0x95/0xd0 [ 389.490677][T18967] dump_stack+0x15/0x1b [ 389.490702][T18967] should_fail_ex+0x263/0x280 [ 389.490738][T18967] should_failslab+0x8c/0xb0 [ 389.490774][T18967] kmem_cache_alloc_noprof+0x68/0x490 [ 389.490812][T18967] ? vm_area_dup+0x33/0x2c0 [ 389.490841][T18967] ? refill_obj_stock+0x246/0x400 [ 389.490863][T18967] vm_area_dup+0x33/0x2c0 [ 389.490901][T18967] __split_vma+0xe9/0x660 [ 389.490935][T18967] ? mas_find+0x5d5/0x700 [ 389.490972][T18967] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 389.491136][T18967] mmap_region+0x723/0x1d20 [ 389.491178][T18967] ? avc_has_perm+0x101/0x190 [ 389.491212][T18967] ? selinux_file_open+0x2e6/0x330 [ 389.491268][T18967] do_mmap+0x9b2/0xbd0 [ 389.491319][T18967] vm_mmap_pgoff+0x183/0x2d0 [ 389.491360][T18967] ksys_mmap_pgoff+0x267/0x310 [ 389.491385][T18967] x64_sys_call+0x14df/0x3020 [ 389.491419][T18967] do_syscall_64+0x12c/0x370 [ 389.491464][T18967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.491492][T18967] RIP: 0033:0x7f364e21bf79 [ 389.491509][T18967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.491528][T18967] RSP: 002b:00007f364cc4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 389.491552][T18967] RAX: ffffffffffffffda RBX: 00007f364e496090 RCX: 00007f364e21bf79 [ 389.491570][T18967] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 0000200000ffc000 [ 389.491593][T18967] RBP: 00007f364cc4e090 R08: 0000000000000006 R09: 0000000180000000 [ 389.491610][T18967] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 389.491628][T18967] R13: 00007f364e496128 R14: 00007f364e496090 R15: 00007ffe1d2fd358 [ 389.491655][T18967] [ 389.492584][T18857] hsr_slave_1: entered promiscuous mode [ 389.753904][T18857] debugfs: 'hsr0' already exists in 'hsr' [ 389.760536][T18857] Cannot create hsr debugfs directory [ 389.795832][T18982] loop1: detected capacity change from 0 to 512 [ 389.806585][T18982] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #12: comm syz.1.5138: corrupted in-inode xattr: bad e_name length [ 389.834391][T18982] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 389.840294][T18982] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.5138: couldn't read orphan inode 12 (err -117) [ 389.867256][T18982] loop1: lost filesystem error report for type 5 error -117 [ 389.874956][T18982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.948933][T12674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.170268][T18694] bridge_slave_1: left allmulticast mode [ 390.178068][T18694] bridge_slave_1: left promiscuous mode [ 390.186968][T18694] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.199233][T18694] bridge_slave_0: left allmulticast mode [ 390.206719][T18694] bridge_slave_0: left promiscuous mode [ 390.214633][T18694] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.110789][T19018] loop4: detected capacity change from 0 to 512 [ 391.124108][T19018] EXT4-fs (loop4): fragment/cluster size (4096) != block size (2048) [ 391.263089][T18694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.277133][T18694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.289653][T18694] bond0 (unregistering): Released all slaves [ 391.298525][T18694] bond1 (unregistering): Released all slaves [ 391.308786][T18694] bond2 (unregistering): Released all slaves [ 391.325950][T19001] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5141'. [ 391.338633][T19005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5141'. [ 391.358505][T19009] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 391.361373][T18940] chnl_net:caif_netlink_parms(): no params data found [ 391.409558][T18694] tipc: Disabling bearer [ 391.437359][T18694] tipc: Disabling bearer [ 391.459728][T18694] tipc: Left network mode [ 391.601732][T18694] hsr_slave_0: left promiscuous mode [ 391.622325][T19042] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 392.122278][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 392.122294][ T28] audit: type=1400 audit(1770782297.254:1826): avc: denied { append } for pid=19047 comm="syz.4.5148" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 392.166237][T19049] program syz.4.5148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.193635][T18694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.203898][T18694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.221006][T18694] batman_adv: batadv0: Removing interface: dummy0 [ 392.231766][T18694] macsec0: left allmulticast mode [ 392.286908][T18694] team_slave_1 (unregistering): left promiscuous mode [ 392.299423][T18694] team0 (unregistering): Port device team_slave_1 removed [ 392.315062][T18694] team_slave_0 (unregistering): left promiscuous mode [ 392.324404][T18694] team0 (unregistering): Port device team_slave_0 removed [ 392.370835][T18694] lo (unregistering): left allmulticast mode [ 392.496498][T18940] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.504914][T18940] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.514237][T18940] bridge_slave_0: entered allmulticast mode [ 392.522076][T18940] bridge_slave_0: entered promiscuous mode [ 392.536409][T18940] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.552915][T18940] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.566547][T18940] bridge_slave_1: entered allmulticast mode [ 392.574466][T18940] bridge_slave_1: entered promiscuous mode [ 392.600893][T19064] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5152'. [ 392.622986][T18940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.647504][T18940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.693267][T18940] team0: Port device team_slave_0 added [ 392.712752][T18940] team0: Port device team_slave_1 added [ 392.744391][T18940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.753827][T18940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.805506][T18940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.834905][T18940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.844528][T18940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.874840][T18940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.888905][T18857] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 392.915513][T18857] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 392.946194][T18857] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 392.982576][T18857] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 392.999207][T18940] hsr_slave_0: entered promiscuous mode [ 393.008391][T18940] hsr_slave_1: entered promiscuous mode [ 393.015579][T18940] debugfs: 'hsr0' already exists in 'hsr' [ 393.021985][T18940] Cannot create hsr debugfs directory [ 393.191008][T18857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.221107][T18857] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.257389][T14371] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.267399][T14371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.283130][ T1878] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.293125][ T1878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.394001][T18857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.513780][T18940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 393.529611][ T28] audit: type=1400 audit(1770782298.573:1827): avc: denied { setopt } for pid=19123 comm="syz.0.5154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 393.555112][T18940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 393.570645][T18940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 393.604466][T18940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 393.632598][ T28] audit: type=1400 audit(1770782298.638:1828): avc: denied { override_creds } for pid=19129 comm="syz.0.5155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 393.659755][T19135] netlink: 'syz.0.5155': attribute type 1 has an invalid length. [ 393.707191][T19135] bond1: entered promiscuous mode [ 393.713456][T19135] bond1: entered allmulticast mode [ 393.724009][T19135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.753573][T19130] macvlan2: entered promiscuous mode [ 393.765761][T19130] macvlan2: entered allmulticast mode [ 393.778760][T19130] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 393.804636][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5155'. [ 393.842755][T18857] veth0_vlan: entered promiscuous mode [ 393.879973][T18857] veth1_vlan: entered promiscuous mode [ 393.913588][T19147] syzkaller0: entered promiscuous mode [ 393.930981][T19147] syzkaller0: entered allmulticast mode [ 393.971856][T18940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.986855][T18857] veth0_macvtap: entered promiscuous mode [ 394.003005][T18940] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.021815][T18857] veth1_macvtap: entered promiscuous mode [ 394.058256][T18689] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.066585][T18689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.163418][T18857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.181068][T14371] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.192264][T14371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.206562][T18857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.258610][T18940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 394.283832][T18940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.316984][T14371] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.341693][ T28] audit: type=1400 audit(1770782299.330:1829): avc: denied { read } for pid=19153 comm="syz.0.5157" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 394.376200][T14371] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.387524][ T28] audit: type=1400 audit(1770782299.330:1830): avc: denied { open } for pid=19153 comm="syz.0.5157" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 394.390343][T14371] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.432730][ T28] audit: type=1400 audit(1770782299.330:1831): avc: denied { ioctl } for pid=19153 comm="syz.0.5157" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 394.479405][T14371] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.502056][ T28] audit: type=1326 audit(1770782299.480:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19175 comm="syz.1.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 394.538708][ T28] audit: type=1326 audit(1770782299.480:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19175 comm="syz.1.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 394.579643][ T28] audit: type=1326 audit(1770782299.480:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19175 comm="syz.1.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 394.618581][T18940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.658438][T19184] loop5: detected capacity change from 0 to 1024 [ 394.672031][T19184] EXT4-fs: Ignoring removed orlov option [ 394.704779][ T28] audit: type=1326 audit(1770782299.480:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19175 comm="syz.1.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 394.813614][T19184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.881967][T19184] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 394.908145][T19184] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 4 with error 28 [ 394.908274][T19184] EXT4-fs (loop5): This should not happen!! Data will be lost [ 394.908274][T19184] [ 394.908352][T19184] EXT4-fs (loop5): Total free blocks count 0 [ 394.957529][T19184] EXT4-fs (loop5): Free/Dirty block details [ 394.957588][T19184] EXT4-fs (loop5): free_blocks=0 [ 394.957605][T19184] EXT4-fs (loop5): dirty_blocks=0 [ 394.957618][T19184] EXT4-fs (loop5): Block reservation details [ 394.957629][T19184] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 395.093340][T18940] veth0_vlan: entered promiscuous mode [ 395.103509][T18940] veth1_vlan: entered promiscuous mode [ 395.168441][T18940] veth0_macvtap: entered promiscuous mode [ 395.182701][T18940] veth1_macvtap: entered promiscuous mode [ 395.220268][T18940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.236377][T18940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.246342][ T1878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.294090][ T1878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.294149][ T1878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.294182][ T1878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.584738][T18857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.901085][T19275] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 396.606001][T19312] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5172'. [ 396.855144][T19312] loop4: detected capacity change from 0 to 1024 [ 396.959296][T19312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 396.974867][T19312] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.925508][T19360] netlink: 'syz.1.5177': attribute type 11 has an invalid length. [ 397.998580][T18694] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm kworker/u8:30: lblock 0 mapped to illegal pblock 0 (length 4) [ 398.019856][T18694] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 398.039626][T18694] EXT4-fs (loop4): This should not happen!! Data will be lost [ 398.039626][T18694] [ 398.060593][T17966] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 398.154387][T19374] FAULT_INJECTION: forcing a failure. [ 398.154387][T19374] name failslab, interval 1, probability 0, space 0, times 0 [ 398.191975][T19374] CPU: 0 UID: 0 PID: 19374 Comm: syz.4.5178 Not tainted syzkaller #0 PREEMPT(full) [ 398.192011][T19374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 398.192025][T19374] Call Trace: [ 398.192033][T19374] [ 398.192042][T19374] __dump_stack+0x1d/0x30 [ 398.192067][T19374] dump_stack_lvl+0x95/0xd0 [ 398.192094][T19374] dump_stack+0x15/0x1b [ 398.192120][T19374] should_fail_ex+0x263/0x280 [ 398.192157][T19374] should_failslab+0x8c/0xb0 [ 398.192194][T19374] kmem_cache_alloc_noprof+0x68/0x490 [ 398.192232][T19374] ? vm_area_dup+0x33/0x2c0 [ 398.192264][T19374] vm_area_dup+0x33/0x2c0 [ 398.192295][T19374] copy_vma+0x386/0x630 [ 398.192332][T19374] move_vma+0x461/0xd40 [ 398.192369][T19374] ? arch_get_unmapped_area_topdown+0x152/0x550 [ 398.192407][T19374] ? __rcu_read_unlock+0x4e/0x70 [ 398.192452][T19374] ? __get_unmapped_area+0x2c8/0x2f0 [ 398.192497][T19374] mremap_to+0x3ea/0x440 [ 398.192551][T19374] ? check_prep_vma+0x49b/0x660 [ 398.192582][T19374] __se_sys_mremap+0x7dd/0xb50 [ 398.192618][T19374] ? ksys_write+0x194/0x1a0 [ 398.192648][T19374] __x64_sys_mremap+0x67/0x80 [ 398.192685][T19374] x64_sys_call+0x29db/0x3020 [ 398.192716][T19374] do_syscall_64+0x12c/0x370 [ 398.192760][T19374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.192788][T19374] RIP: 0033:0x7f364e21bf79 [ 398.192804][T19374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.192822][T19374] RSP: 002b:00007f364cc6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 398.192844][T19374] RAX: ffffffffffffffda RBX: 00007f364e495fa0 RCX: 00007f364e21bf79 [ 398.192862][T19374] RDX: 0000000000001000 RSI: 0000000000001000 RDI: 000020000007e000 [ 398.192879][T19374] RBP: 00007f364cc6f090 R08: 0000200000ffd000 R09: 0000000000000000 [ 398.192896][T19374] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 398.192911][T19374] R13: 00007f364e496038 R14: 00007f364e495fa0 R15: 00007ffe1d2fd358 [ 398.192936][T19374] [ 398.503772][T19377] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5181'. [ 398.515929][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 398.515948][ T28] audit: type=1400 audit(1770782303.231:1854): avc: denied { read write } for pid=19380 comm="syz.5.5182" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 398.586746][ T28] audit: type=1400 audit(1770782303.231:1855): avc: denied { open } for pid=19380 comm="syz.5.5182" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 398.620461][ T28] audit: type=1400 audit(1770782303.334:1856): avc: denied { write } for pid=19371 comm="syz.0.5180" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 399.305963][T19421] bond2: option resend_igmp: invalid value (1024) [ 399.337856][T19421] bond2: option resend_igmp: allowed values 0 - 255 [ 399.352490][T19421] bond2 (unregistering): Released all slaves [ 399.411180][T19416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5185'. [ 399.448661][T19416] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.527007][T19416] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.645840][T19416] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.699832][T19451] geneve2: entered promiscuous mode [ 399.738245][T18689] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 36824 - 0 [ 399.738378][T19451] FAULT_INJECTION: forcing a failure. [ 399.738378][T19451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.738405][T19451] CPU: 0 UID: 0 PID: 19451 Comm: syz.2.5190 Not tainted syzkaller #0 PREEMPT(full) [ 399.738539][T19451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 399.738602][T19451] Call Trace: [ 399.738665][T19451] [ 399.738695][T19451] __dump_stack+0x1d/0x30 [ 399.738776][T19451] dump_stack_lvl+0x95/0xd0 [ 399.738835][T19451] dump_stack+0x15/0x1b [ 399.738855][T19451] should_fail_ex+0x263/0x280 [ 399.738953][T19451] should_fail+0xb/0x20 [ 399.739073][T19451] should_fail_usercopy+0x1a/0x20 [ 399.739221][T19451] _copy_from_iter+0xcf/0xea0 [ 399.739358][T19451] ? __alloc_skb+0x397/0x4b0 [ 399.739446][T19451] ? __alloc_skb+0x219/0x4b0 [ 399.739542][T19451] netlink_sendmsg+0x4ae/0x6f0 [ 399.739699][T19451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.739869][T19451] ____sys_sendmsg+0x5af/0x600 [ 399.739981][T19451] ___sys_sendmsg+0x195/0x1e0 [ 399.740168][T19451] __x64_sys_sendmsg+0xd4/0x160 [ 399.740350][T19451] x64_sys_call+0x194c/0x3020 [ 399.740476][T19451] do_syscall_64+0x12c/0x370 [ 399.740565][T19451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.740632][T19451] RIP: 0033:0x7fa2989bbf79 [ 399.740685][T19451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.740780][T19451] RSP: 002b:00007fa297417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.740845][T19451] RAX: ffffffffffffffda RBX: 00007fa298c35fa0 RCX: 00007fa2989bbf79 [ 399.740899][T19451] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000008 [ 399.740928][T19451] RBP: 00007fa297417090 R08: 0000000000000000 R09: 0000000000000000 [ 399.740972][T19451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.741074][T19451] R13: 00007fa298c36038 R14: 00007fa298c35fa0 R15: 00007fffe01f9858 [ 399.741131][T19451] [ 400.056706][T18689] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 36824 - 0 [ 400.093797][T19416] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.139726][T18689] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 36824 - 0 [ 400.162732][T18689] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 36824 - 0 [ 400.202993][T18690] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.241831][T18690] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.263512][ T1878] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.303558][ T1878] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.374365][T19494] netlink: 'syz.0.5197': attribute type 2 has an invalid length. [ 400.429181][T19494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5197'. [ 400.447348][T19502] FAULT_INJECTION: forcing a failure. [ 400.447348][T19502] name failslab, interval 1, probability 0, space 0, times 0 [ 400.461612][T19502] CPU: 0 UID: 0 PID: 19502 Comm: syz.5.5198 Not tainted syzkaller #0 PREEMPT(full) [ 400.461724][T19502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 400.461738][T19502] Call Trace: [ 400.461746][T19502] [ 400.461806][T19502] __dump_stack+0x1d/0x30 [ 400.461878][T19502] dump_stack_lvl+0x95/0xd0 [ 400.461908][T19502] dump_stack+0x15/0x1b [ 400.461935][T19502] should_fail_ex+0x263/0x280 [ 400.461972][T19502] should_failslab+0x8c/0xb0 [ 400.462089][T19502] kmem_cache_alloc_noprof+0x68/0x490 [ 400.462135][T19502] ? skb_clone+0x151/0x1f0 [ 400.462176][T19502] skb_clone+0x151/0x1f0 [ 400.462235][T19502] dev_queue_xmit_nit+0x13e/0x510 [ 400.462279][T19502] ? validate_xmit_xfrm+0x43/0x7a0 [ 400.462365][T19502] dev_hard_start_xmit+0xd3/0x3e0 [ 400.462411][T19502] __dev_queue_xmit+0xdb1/0x1f20 [ 400.462512][T19502] ? __dev_queue_xmit+0x148/0x1f20 [ 400.462589][T19502] ? should_fail_ex+0x30/0x280 [ 400.462621][T19502] ? should_fail_ex+0xd9/0x280 [ 400.462653][T19502] ? __copy_skb_header+0x22f/0x2b0 [ 400.462706][T19502] ? __skb_clone+0x2a6/0x2d0 [ 400.462755][T19502] __netlink_deliver_tap+0x3c3/0x500 [ 400.462817][T19502] netlink_unicast+0x66b/0x690 [ 400.462857][T19502] netlink_sendmsg+0x5c8/0x6f0 [ 400.462911][T19502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.463013][T19502] ____sys_sendmsg+0x5af/0x600 [ 400.463062][T19502] ___sys_sendmsg+0x195/0x1e0 [ 400.463118][T19502] __x64_sys_sendmsg+0xd4/0x160 [ 400.463156][T19502] x64_sys_call+0x194c/0x3020 [ 400.463186][T19502] do_syscall_64+0x12c/0x370 [ 400.463265][T19502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.463291][T19502] RIP: 0033:0x7f6d30f2bf79 [ 400.463311][T19502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.463332][T19502] RSP: 002b:00007f6d2f95e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.463367][T19502] RAX: ffffffffffffffda RBX: 00007f6d311a6090 RCX: 00007f6d30f2bf79 [ 400.463420][T19502] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 400.463512][T19502] RBP: 00007f6d2f95e090 R08: 0000000000000000 R09: 0000000000000000 [ 400.463527][T19502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.463539][T19502] R13: 00007f6d311a6128 R14: 00007f6d311a6090 R15: 00007ffd7944fea8 [ 400.463604][T19502] [ 400.824960][T19513] bond2: option resend_igmp: invalid value (1024) [ 400.832785][T19513] bond2: option resend_igmp: allowed values 0 - 255 [ 400.843832][T19513] bond2 (unregistering): Released all slaves [ 400.862901][T19510] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5201'. [ 400.875120][ T1034] IPVS: starting estimator thread 0... [ 400.986732][T19520] IPVS: using max 2400 ests per chain, 120000 per kthread [ 401.005203][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5203'. [ 401.021022][T19535] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.055678][ T28] audit: type=1400 audit(1770782305.607:1857): avc: denied { create } for pid=19509 comm="syz.0.5201" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 401.102304][ T28] audit: type=1400 audit(1770782305.654:1858): avc: denied { unlink } for pid=18084 comm="syz-executor" name="file0" dev="tmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 401.136151][T19535] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.137767][T19545] FAULT_INJECTION: forcing a failure. [ 401.137767][T19545] name failslab, interval 1, probability 0, space 0, times 0 [ 401.157977][ T28] audit: type=1400 audit(1770782305.654:1859): avc: denied { remount } for pid=19512 comm="syz.1.5202" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 401.162482][T19545] CPU: 1 UID: 0 PID: 19545 Comm: syz.0.5206 Not tainted syzkaller #0 PREEMPT(full) [ 401.162585][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 401.162648][T19545] Call Trace: [ 401.162678][T19545] [ 401.162708][T19545] __dump_stack+0x1d/0x30 [ 401.162908][T19545] dump_stack_lvl+0x95/0xd0 [ 401.163028][T19545] dump_stack+0x15/0x1b [ 401.163094][T19545] should_fail_ex+0x263/0x280 [ 401.163219][T19545] should_failslab+0x8c/0xb0 [ 401.163376][T19545] kmem_cache_alloc_noprof+0x68/0x490 [ 401.163472][T19545] ? dst_alloc+0xbd/0x100 [ 401.163569][T19545] dst_alloc+0xbd/0x100 [ 401.163691][T19545] ip_route_input_rcu+0x1683/0x1c10 [ 401.163787][T19545] ip_route_input_noref+0x5f/0x90 [ 401.163872][T19545] ip_rcv_finish_core+0x312/0xb60 [ 401.164002][T19545] ? iptable_mangle_hook+0x119/0x260 [ 401.164187][T19545] ip_rcv_finish+0x100/0x1c0 [ 401.164411][T19545] ip_rcv+0x62/0x160 [ 401.164550][T19545] ? __pfx_ip_rcv_finish+0x10/0x10 [ 401.164661][T19545] ? __pfx_ip_rcv+0x10/0x10 [ 401.164789][T19545] netif_receive_skb+0x137/0x500 [ 401.164826][T19545] ? tun_rx_batched+0xd1/0x440 [ 401.164891][T19545] tun_rx_batched+0x106/0x440 [ 401.164955][T19545] ? eth_type_trans+0x215/0x3d0 [ 401.165040][T19545] tun_get_user+0x2011/0x27c0 [ 401.165137][T19545] ? ref_tracker_alloc+0x1f2/0x2f0 [ 401.165237][T19545] tun_chr_write_iter+0x15e/0x210 [ 401.165310][T19545] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 401.165367][T19545] vfs_write+0x5a6/0x9f0 [ 401.165506][T19545] ksys_write+0xdc/0x1a0 [ 401.165598][T19545] __x64_sys_write+0x40/0x50 [ 401.165686][T19545] x64_sys_call+0x27e1/0x3020 [ 401.165796][T19545] do_syscall_64+0x12c/0x370 [ 401.165925][T19545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.166003][T19545] RIP: 0033:0x7fb24447c84e [ 401.166060][T19545] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 401.166144][T19545] RSP: 002b:00007fb242f16fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.166282][T19545] RAX: ffffffffffffffda RBX: 00007fb242f176c0 RCX: 00007fb24447c84e [ 401.166328][T19545] RDX: 000000000000002a RSI: 0000200000000240 RDI: 00000000000000c8 [ 401.166371][T19545] RBP: 00007fb242f17090 R08: 0000000000000000 R09: 0000000000000000 [ 401.166413][T19545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.166499][T19545] R13: 00007fb244736038 R14: 00007fb244735fa0 R15: 00007ffc9cba0288 [ 401.166566][T19545] [ 401.553697][ T28] audit: type=1400 audit(1770782306.065:1860): avc: denied { getopt } for pid=19554 comm="syz.4.5208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 401.585465][ T3414] IPVS: starting estimator thread 0... [ 401.597102][T19535] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.624855][T19559] xt_hashlimit: size too large, truncated to 1048576 [ 401.681653][T19560] IPVS: using max 1968 ests per chain, 98400 per kthread [ 401.694212][ T28] audit: type=1400 audit(1770782306.215:1861): avc: denied { write } for pid=19556 comm="syz.2.5209" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 401.850980][T19535] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.991165][T19581] netlink: 'syz.4.5211': attribute type 2 has an invalid length. [ 402.035366][T19581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5211'. [ 402.108098][ T402] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.144646][ T402] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.185864][ T402] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.195944][ T28] audit: type=1400 audit(1770782306.664:1862): avc: denied { wake_alarm } for pid=19588 comm="syz.4.5212" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 402.237649][ T402] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.300330][T19597] loop4: detected capacity change from 0 to 512 [ 402.307488][ T28] audit: type=1400 audit(1770782306.776:1863): avc: denied { ioctl } for pid=19595 comm="syz.5.5215" path="socket:[70087]" dev="sockfs" ino=70087 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 402.354690][T19597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 402.474412][T19597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.581771][T19597] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 402.663492][T19620] bond1: option resend_igmp: invalid value (1024) [ 402.691354][T19620] bond1: option resend_igmp: allowed values 0 - 255 [ 402.720310][T19620] bond1 (unregistering): Released all slaves [ 402.931660][T19646] netlink: 'syz.5.5223': attribute type 2 has an invalid length. [ 402.943859][T17966] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.965793][T19646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5223'. [ 403.116006][T19658] FAULT_INJECTION: forcing a failure. [ 403.116006][T19658] name failslab, interval 1, probability 0, space 0, times 0 [ 403.168249][T19658] CPU: 1 UID: 0 PID: 19658 Comm: syz.0.5225 Not tainted syzkaller #0 PREEMPT(full) [ 403.168319][T19658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 403.168336][T19658] Call Trace: [ 403.168343][T19658] [ 403.168352][T19658] __dump_stack+0x1d/0x30 [ 403.168388][T19658] dump_stack_lvl+0x95/0xd0 [ 403.168465][T19658] dump_stack+0x15/0x1b [ 403.168490][T19658] should_fail_ex+0x263/0x280 [ 403.168522][T19658] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 403.168613][T19658] should_failslab+0x8c/0xb0 [ 403.168644][T19658] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 403.168742][T19658] ? shmem_alloc_inode+0x34/0x50 [ 403.168762][T19658] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 403.168830][T19658] shmem_alloc_inode+0x34/0x50 [ 403.168855][T19658] alloc_inode+0x40/0x170 [ 403.168886][T19658] new_inode+0x1d/0xe0 [ 403.168921][T19658] shmem_get_inode+0x246/0x750 [ 403.169030][T19658] shmem_mknod+0x44/0x170 [ 403.169056][T19658] shmem_mkdir+0x33/0x70 [ 403.169082][T19658] vfs_mkdir+0x294/0x3e0 [ 403.169150][T19658] filename_mkdirat+0x138/0x300 [ 403.169218][T19658] __se_sys_mkdirat+0x32/0xf0 [ 403.169253][T19658] __x64_sys_mkdirat+0x43/0x50 [ 403.169319][T19658] x64_sys_call+0x2c4e/0x3020 [ 403.169344][T19658] do_syscall_64+0x12c/0x370 [ 403.169430][T19658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.169472][T19658] RIP: 0033:0x7fb2444bbf79 [ 403.169492][T19658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.169514][T19658] RSP: 002b:00007fb242f17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 403.169599][T19658] RAX: ffffffffffffffda RBX: 00007fb244735fa0 RCX: 00007fb2444bbf79 [ 403.169633][T19658] RDX: 00000000000000c9 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 403.169650][T19658] RBP: 00007fb242f17090 R08: 0000000000000000 R09: 0000000000000000 [ 403.169665][T19658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.169682][T19658] R13: 00007fb244736038 R14: 00007fb244735fa0 R15: 00007ffc9cba0288 [ 403.169776][T19658] [ 403.437955][T19673] FAULT_INJECTION: forcing a failure. [ 403.437955][T19673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.469879][T19673] CPU: 1 UID: 0 PID: 19673 Comm: syz.1.5228 Not tainted syzkaller #0 PREEMPT(full) [ 403.469919][T19673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 403.469935][T19673] Call Trace: [ 403.469943][T19673] [ 403.469969][T19673] __dump_stack+0x1d/0x30 [ 403.469995][T19673] dump_stack_lvl+0x95/0xd0 [ 403.470019][T19673] dump_stack+0x15/0x1b [ 403.470043][T19673] should_fail_ex+0x263/0x280 [ 403.470072][T19673] should_fail+0xb/0x20 [ 403.470114][T19673] should_fail_usercopy+0x1a/0x20 [ 403.470211][T19673] strncpy_from_user+0x27/0x250 [ 403.470243][T19673] do_getname+0x59/0x1c0 [ 403.470356][T19673] __se_sys_link+0x20/0x1c0 [ 403.470455][T19673] __x64_sys_link+0x31/0x40 [ 403.470516][T19673] x64_sys_call+0x12d1/0x3020 [ 403.470545][T19673] do_syscall_64+0x12c/0x370 [ 403.470579][T19673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.470632][T19673] RIP: 0033:0x7f9e6873bf79 [ 403.470653][T19673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.470677][T19673] RSP: 002b:00007f9e67197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 403.470703][T19673] RAX: ffffffffffffffda RBX: 00007f9e689b5fa0 RCX: 00007f9e6873bf79 [ 403.470722][T19673] RDX: 0000000000000000 RSI: 0000200000001f40 RDI: 0000000000000000 [ 403.470762][T19673] RBP: 00007f9e67197090 R08: 0000000000000000 R09: 0000000000000000 [ 403.470858][T19673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.470875][T19673] R13: 00007f9e689b6038 R14: 00007f9e689b5fa0 R15: 00007ffecc3d6e38 [ 403.470910][T19673] [ 403.684070][T19681] FAULT_INJECTION: forcing a failure. [ 403.684070][T19681] name failslab, interval 1, probability 0, space 0, times 0 [ 403.708120][T19681] CPU: 0 UID: 0 PID: 19681 Comm: syz.1.5230 Not tainted syzkaller #0 PREEMPT(full) [ 403.708163][T19681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 403.708180][T19681] Call Trace: [ 403.708192][T19681] [ 403.708201][T19681] __dump_stack+0x1d/0x30 [ 403.708226][T19681] dump_stack_lvl+0x95/0xd0 [ 403.708316][T19681] dump_stack+0x15/0x1b [ 403.708343][T19681] should_fail_ex+0x263/0x280 [ 403.708375][T19681] should_failslab+0x8c/0xb0 [ 403.708488][T19681] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 403.708609][T19681] ? sidtab_sid2str_get+0xa0/0x130 [ 403.708667][T19681] kmemdup_noprof+0x2b/0x70 [ 403.708759][T19681] sidtab_sid2str_get+0xa0/0x130 [ 403.708860][T19681] security_sid_to_context_core+0x1eb/0x2e0 [ 403.708977][T19681] security_sid_to_context+0x27/0x40 [ 403.709021][T19681] selinux_lsmprop_to_secctx+0x67/0xf0 [ 403.709050][T19681] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 403.709157][T19681] audit_log_subj_ctx+0xa4/0x3e0 [ 403.709329][T19681] ? skb_put+0xa9/0xf0 [ 403.709412][T19681] audit_log_task_context+0x48/0x70 [ 403.709451][T19681] audit_log_task+0xf3/0x250 [ 403.709485][T19681] audit_seccomp+0x60/0x100 [ 403.709526][T19681] ? __seccomp_filter+0x8db/0x1350 [ 403.709570][T19681] __seccomp_filter+0x8ec/0x1350 [ 403.709601][T19681] ? __rcu_read_unlock+0x4e/0x70 [ 403.709652][T19681] ? __fget_files+0x184/0x1c0 [ 403.709692][T19681] ? mutex_lock+0x57/0x90 [ 403.709718][T19681] ? mutex_unlock+0x4e/0x90 [ 403.709745][T19681] ? xfd_validate_state+0x45/0xf0 [ 403.709794][T19681] __secure_computing+0x81/0x150 [ 403.709824][T19681] do_syscall_64+0xd3/0x370 [ 403.709886][T19681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.709916][T19681] RIP: 0033:0x7f9e6873bf79 [ 403.709937][T19681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.709960][T19681] RSP: 002b:00007f9e67197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 403.709991][T19681] RAX: ffffffffffffffda RBX: 00007f9e689b5fa0 RCX: 00007f9e6873bf79 [ 403.710009][T19681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.710091][T19681] RBP: 00007f9e67197090 R08: 0000000000000000 R09: 0000000000000000 [ 403.710108][T19681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.710123][T19681] R13: 00007f9e689b6038 R14: 00007f9e689b5fa0 R15: 00007ffecc3d6e38 [ 403.710216][T19681] [ 404.124411][T19690] geneve2: entered promiscuous mode [ 404.134914][ T402] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 50874 - 0 [ 404.182392][ T402] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 50874 - 0 [ 404.191324][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 404.191381][ T28] audit: type=1326 audit(1770782308.095:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9e686fc84e code=0x7ffc0000 [ 404.242114][ T402] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 50874 - 0 [ 404.269579][T19691] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5232'. [ 404.293280][ T402] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 50874 - 0 [ 404.341579][ T28] audit: type=1326 audit(1770782308.376:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e686fc84e code=0x7ffc0000 [ 404.391183][T19663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5227'. [ 404.421682][ T28] audit: type=1326 audit(1770782308.376:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9e686fc84e code=0x7ffc0000 [ 404.512646][ T28] audit: type=1326 audit(1770782308.376:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 404.544953][ T28] audit: type=1326 audit(1770782308.376:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.1.5230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6873bf79 code=0x7ffc0000 [ 404.731147][T19718] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5235'. [ 405.012215][T19745] loop5: detected capacity change from 0 to 512 [ 405.041267][T19745] EXT4-fs: Ignoring removed orlov option [ 405.064915][T19730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=19730 comm=syz.4.5235 [ 405.080042][T19745] EXT4-fs: Ignoring removed mblk_io_submit option [ 405.103927][T19751] ipt_REJECT: TCP_RESET invalid for non-tcp [ 405.111648][T19745] ext2: Unknown parameter 'obj_role' [ 405.155076][T19745] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5241'. [ 405.167367][T19745] lo speed is unknown, defaulting to 1000 [ 405.173544][T19745] lo speed is unknown, defaulting to 1000 [ 405.179158][T19751] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5242'. [ 405.316647][T19745] lo speed is unknown, defaulting to 1000 [ 405.330367][T19745] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 405.345867][T19745] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 405.390361][T19745] lo speed is unknown, defaulting to 1000 [ 405.408446][T19745] lo speed is unknown, defaulting to 1000 [ 405.427709][T19745] lo speed is unknown, defaulting to 1000 [ 405.438232][T19745] lo speed is unknown, defaulting to 1000 [ 405.457355][T19745] lo speed is unknown, defaulting to 1000 [ 405.480672][T19745] lo speed is unknown, defaulting to 1000 [ 405.490412][T19745] lo speed is unknown, defaulting to 1000 [ 405.505555][T19745] lo speed is unknown, defaulting to 1000 [ 405.514893][T19745] lo speed is unknown, defaulting to 1000 [ 405.640254][T19718] lo speed is unknown, defaulting to 1000 [ 405.663717][T19788] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5244'. [ 405.680774][T19735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5235'. [ 405.735229][ T28] audit: type=1400 audit(1770782309.975:1886): avc: denied { ioctl } for pid=19723 comm="syz.2.5237" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 405.900668][ T28] audit: type=1400 audit(1770782310.144:1887): avc: denied { write } for pid=19800 comm="syz.4.5245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 405.958336][ T28] audit: type=1400 audit(1770782310.172:1888): avc: denied { getopt } for pid=19800 comm="syz.4.5245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 406.081314][T19811] bond2: option resend_igmp: invalid value (1024) [ 406.118637][T19811] bond2: option resend_igmp: allowed values 0 - 255 [ 406.155960][T19811] bond2 (unregistering): Released all slaves [ 406.222763][T19821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5249'. [ 406.264448][T19828] FAULT_INJECTION: forcing a failure. [ 406.264448][T19828] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 406.284297][ T28] audit: type=1400 audit(1770782310.480:1889): avc: denied { create } for pid=19827 comm="syz.5.5250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 406.332078][T19828] CPU: 0 UID: 0 PID: 19828 Comm: syz.5.5250 Not tainted syzkaller #0 PREEMPT(full) [ 406.332108][T19828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 406.332122][T19828] Call Trace: [ 406.332158][T19828] [ 406.332168][T19828] __dump_stack+0x1d/0x30 [ 406.332194][T19828] dump_stack_lvl+0x95/0xd0 [ 406.332218][T19828] dump_stack+0x15/0x1b [ 406.332241][T19828] should_fail_ex+0x263/0x280 [ 406.332303][T19828] should_fail_alloc_page+0xf2/0x100 [ 406.332343][T19828] __alloc_frozen_pages_noprof+0x108/0x350 [ 406.332386][T19828] alloc_pages_mpol+0xb3/0x260 [ 406.332416][T19828] alloc_pages_noprof+0x8f/0x130 [ 406.332442][T19828] __pmd_alloc+0x47/0x480 [ 406.332495][T19828] handle_mm_fault+0x1ed8/0x3030 [ 406.332526][T19828] ? mt_find+0x291/0x3b0 [ 406.332586][T19828] ? lock_mm_and_find_vma+0x88/0x400 [ 406.332655][T19828] do_user_addr_fault+0x3fd/0x1050 [ 406.332700][T19828] exc_page_fault+0x62/0xa0 [ 406.332726][T19828] asm_exc_page_fault+0x26/0x30 [ 406.332746][T19828] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 406.332871][T19828] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 406.332896][T19828] RSP: 0018:ffffc90002edfdf0 EFLAGS: 00050212 [ 406.332995][T19828] RAX: ffff88811006dba8 RBX: 0000000000000010 RCX: 0000000000000010 [ 406.333039][T19828] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc90002edfe18 [ 406.333057][T19828] RBP: 0000000000000010 R08: 000000000000008d R09: 0000000000000000 [ 406.333098][T19828] R10: 0001c90002edfe18 R11: 0001c90002edfe27 R12: 0000200000000040 [ 406.333116][T19828] R13: 0000000000000010 R14: ffffc90002edfe18 R15: 0000200000000040 [ 406.333213][T19828] _copy_from_user+0x6f/0xb0 [ 406.333256][T19828] __sys_bind+0x106/0x290 [ 406.333320][T19828] __x64_sys_bind+0x3f/0x50 [ 406.333355][T19828] x64_sys_call+0x2b30/0x3020 [ 406.333389][T19828] do_syscall_64+0x12c/0x370 [ 406.333480][T19828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.333503][T19828] RIP: 0033:0x7f6d30f2bf79 [ 406.333522][T19828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.333547][T19828] RSP: 002b:00007f6d2f97f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 406.333573][T19828] RAX: ffffffffffffffda RBX: 00007f6d311a5fa0 RCX: 00007f6d30f2bf79 [ 406.333671][T19828] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 406.333766][T19828] RBP: 00007f6d2f97f090 R08: 0000000000000000 R09: 0000000000000000 [ 406.333784][T19828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.333801][T19828] R13: 00007f6d311a6038 R14: 00007f6d311a5fa0 R15: 00007ffd7944fea8 [ 406.333828][T19828] [ 406.387414][T19811] lo speed is unknown, defaulting to 1000 [ 406.389958][ T28] audit: type=1400 audit(1770782310.537:1890): avc: denied { ioctl } for pid=19816 comm="syz.4.5249" path="socket:[71128]" dev="sockfs" ino=71128 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 406.875546][T19848] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 407.146957][T19875] team0: Cannot enslave team device to itself [ 407.154940][T19875] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 407.512453][T19904] lo speed is unknown, defaulting to 1000 [ 407.655629][T19923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5259'. [ 407.911116][T19951] loop5: detected capacity change from 0 to 764 [ 407.932907][T19951] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 407.984324][T19955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5267'. [ 408.035465][T19959] loop4: detected capacity change from 0 to 1024 [ 408.046287][T19959] EXT4-fs: Ignoring removed orlov option [ 408.074401][T19959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.102666][T19959] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 408.115924][T19959] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 4 with error 28 [ 408.132277][T19959] EXT4-fs (loop4): This should not happen!! Data will be lost [ 408.132277][T19959] [ 408.148555][T19959] EXT4-fs (loop4): Total free blocks count 0 [ 408.155201][T19959] EXT4-fs (loop4): Free/Dirty block details [ 408.162049][T19959] EXT4-fs (loop4): free_blocks=0 [ 408.168339][T19959] EXT4-fs (loop4): dirty_blocks=0 [ 408.174822][T19959] EXT4-fs (loop4): Block reservation details [ 408.183048][T19959] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 408.766053][T17966] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.025141][T19991] netlink: 'syz.5.5273': attribute type 29 has an invalid length. [ 409.039395][T19991] netlink: 'syz.5.5273': attribute type 6 has an invalid length. [ 409.053325][T19991] loop5: detected capacity change from 0 to 512 [ 409.065476][T19991] ext4: Unknown parameter 'smackfsfloor' [ 409.181490][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811cd67e00: rx timeout, send abort [ 409.190967][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811cd67e00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 409.246853][T20005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 409.343684][T20007] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20007 comm=syz.1.5277 [ 409.568188][T20020] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 409.581501][T20017] loop5: detected capacity change from 0 to 1024 [ 409.599281][T20017] EXT4-fs: Ignoring removed orlov option [ 409.621438][T20017] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 409.668661][T20017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.773408][T20024] bond1: option resend_igmp: invalid value (1024) [ 409.815290][T20024] bond1: option resend_igmp: allowed values 0 - 255 [ 409.839405][T20024] bond1 (unregistering): Released all slaves [ 409.990330][T18857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.107074][T20024] lo speed is unknown, defaulting to 1000 [ 410.271868][T20041] __nla_validate_parse: 1 callbacks suppressed [ 410.271915][T20041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5288'. [ 410.304971][T20033] loop5: detected capacity change from 0 to 128 [ 410.437107][ T28] kauditd_printk_skb: 827 callbacks suppressed [ 410.437138][ T28] audit: type=1400 audit(1770782314.381:2718): avc: denied { listen } for pid=20038 comm="syz.2.5287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 410.538857][T20053] lo speed is unknown, defaulting to 1000 [ 410.786643][T20068] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5297'. [ 410.800621][T20070] bond1: option resend_igmp: invalid value (1024) [ 410.809615][T20070] bond1: option resend_igmp: allowed values 0 - 255 [ 410.820142][T20070] bond1 (unregistering): Released all slaves [ 410.841091][ T3665] ================================================================== [ 410.841137][ T3665] BUG: KCSAN: data-race in set_nlink / set_nlink [ 410.841189][ T3665] [ 410.841195][ T3665] read to 0xffff888107549ac0 of 4 bytes by task 3000 on cpu 0: [ 410.841210][ T3665] set_nlink+0x29/0xb0 [ 410.841242][ T3665] kernfs_iop_permission+0x1e2/0x220 [ 410.841283][ T3665] inode_permission+0x31f/0x3b0 [ 410.841321][ T3665] link_path_walk+0x779/0xe30 [ 410.841343][ T3665] path_openat+0x1c6/0x2050 [ 410.841370][ T3665] do_file_open+0x16c/0x290 [ 410.841393][ T3665] do_sys_openat2+0x94/0x130 [ 410.841410][ T3665] __x64_sys_openat+0xf2/0x120 [ 410.841436][ T3665] x64_sys_call+0x1e39/0x3020 [ 410.841465][ T3665] do_syscall_64+0x12c/0x370 [ 410.841492][ T3665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.841525][ T3665] [ 410.841533][ T3665] write to 0xffff888107549ac0 of 4 bytes by task 3665 on cpu 1: [ 410.841553][ T3665] set_nlink+0x99/0xb0 [ 410.841587][ T3665] kernfs_iop_permission+0x1e2/0x220 [ 410.841627][ T3665] inode_permission+0x31f/0x3b0 [ 410.841673][ T3665] link_path_walk+0x779/0xe30 [ 410.841694][ T3665] path_openat+0x1c6/0x2050 [ 410.841723][ T3665] do_file_open+0x16c/0x290 [ 410.841760][ T3665] do_sys_openat2+0x94/0x130 [ 410.841784][ T3665] __x64_sys_openat+0xf2/0x120 [ 410.841805][ T3665] x64_sys_call+0x1e39/0x3020 [ 410.841829][ T3665] do_syscall_64+0x12c/0x370 [ 410.841854][ T3665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.841879][ T3665] [ 410.841885][ T3665] value changed: 0x00000024 -> 0x00000025 [ 410.841898][ T3665] [ 410.841903][ T3665] Reported by Kernel Concurrency Sanitizer on: [ 410.841914][ T3665] CPU: 1 UID: 0 PID: 3665 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 410.841937][ T3665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 410.841952][ T3665] ================================================================== [ 411.098444][T20070] lo speed is unknown, defaulting to 1000 [ 411.874486][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811edc6800: rx timeout, send abort [ 411.885325][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811edc6800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.