last executing test programs: 2m11.84773857s ago: executing program 1 (id=754): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000001000000000000000000030097000100ff7bffff95"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) 2m11.832420481s ago: executing program 1 (id=755): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@flowinfo={{0x14, 0x29, 0xb, 0x20000000}}], 0x18}, 0x400008c0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB="0a000100aa"], 0x48}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@flowinfo={{0x14, 0x29, 0xb, 0x20000000}}], 0x18}, 0x400008c0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB="0a000100aa"], 0x48}}, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 2m11.706622868s ago: executing program 1 (id=756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506fffffffffffffff300000000", @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 2m11.527677449s ago: executing program 1 (id=757): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x200000, &(0x7f0000000680)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10001}}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@nodelalloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x57b223fbde4650a7, 0x0, 0x0, {0x3, 0x0, 0x7}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4040085}, 0x840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000001cc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, r4, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x5) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[], 0x110}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x38, 0x1403, 0x400, 0xfffffffc, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000001b40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000001c00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, r8, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc800) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000002c0)=[@ioring_restriction_register_op={0x0, 0x38}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) r13 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(r12, &(0x7f00000066c0)=[{{&(0x7f0000000540)=@caif=@rfm={0x25, 0x2, "7a45ab05a938ea2572669b30b6ee62ae"}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000280)="4f9c", 0x2}, {&(0x7f0000000740)="00220108d7333750d6793474cd9ed2144ad204d728c96f977b87c8d8957febfceec5c6c4495279dc217f0ac94f3907be52b1cb71642378f36ec05d8c89804e48a6fd7dd0b1e6848c7086f643b991637efabe04c6a8b04ee0b4b21cd05a14f9be22107a8cee5465a2052b2db41c021c716e85de220df9f319692c6bc81125a08a84cffb0233a64e70d6c925bbad495b0df0151416a8ac3e96dce0ff3f08e06eb15fcdd8a2ee92730fda26bb48fead2d3f3159121c63d99f4bf6c7723c72bbbd99f760b95710592d79802dcf6fce9be68fb03ab02aa8eb5066812fe26aa9b81af291", 0xe1}, {&(0x7f0000000840)="ce95aea8f3baecf43165470688a6a2697861812a08ffd1a765c4c65a84775f0c79f3b4e0283ffa0e02b7cd59b101fcb985f8eb5beb5373b6578b3be42e3c2032441652ee7f45f7641b9a80aac236797add8d9171a7618a99392685e2f46d770bf06f4e0dfc4fed25ca", 0x69}, {&(0x7f00000008c0)="5cfcc944b5f6abe9c5c656ad02d168fddfa0cbab5b008bf420910a7ceb55462cebfa50da606cdf8700a2fea3b659154ab50d31452f35bf07b5f99c0165e9d01edd88802493c1b80f5a83ff1822238b275c42d22b15fbefd1f399e3de826a11e103c8d94891c078cec19ba5619d97bf", 0x6f}, {&(0x7f0000000940)="293a18456127074e33bba5ced08b69c68c7eb38c9d78ffedf6ba74583517bb179c74f515f3e94c73f164e0452c751989933ae75e97a687840a7c2135d4e98a7c0f5dd950f44bf9d778cff2273250932cee5b88f45aa57753b5779b90c2900f3f1ab7b6edb1d54c89d02421b13666580d8e9a6ae551f22cd35aa5ccd1c6d1f6eb7e9bcf57d33d77519974bfab8d2113aa5bd9b9328e4bb7ff9e8a02fd", 0x9c}, {&(0x7f0000000a00)="5e04a078ed478263f93b244cd4e5b3cfe378f375ca97077be9699ffcd65135f2b2be9a2cda4900060b6b4eddbe1867fc817f9568a8282ec712862581b432761c5b58310a174d289551c7b8aa86a285e660097bdb64dba48410693ef37c2834f27e55c89cf7637df9ee4fc164ba082ec465bf36340b5ecb54721645e14559545a64c8bf2502fd734124a8a303cf66262dcf", 0x91}, {&(0x7f0000000ac0)="34abd0c94bb3f9444ef68c42f22b81cd5a6e71cd43cc09294e7505429c99733679", 0x21}], 0x7}}, {{&(0x7f0000000b80)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c00)="1f72cabf6ac3a2075432042ef37add3ca4c82490775c2f188e44ad18c78b0a14d84f789954f7fd5082db3c48f8ff398506119972b7d4cd6e12b68ab20da142cf56527a8e188a98644933d6d7b092b087b814efef15bd0ac8b8164c724e843a7c81136c6c2c9c28be4bf06291a4a47463a00cd5748d6f04b7b5257db53850e4f924", 0x81}], 0x1, &(0x7f00000042c0)=[{0xe0, 0x11, 0x9, "8913838126b10c647b6658fc358e8c549339a9142e4258b5357c7e631ff892061b7905be3bf5aaef6cf31214c5f0747c2eb16436dcda895b80dd1258f7413dcbc68ef7c26900fb434011059f69ac2a36635630fa541c3abd4245282f0d73a469a0e98cfca26cd7b2b898a0a2394627bab95b3b2aef3dcb368b512f6dc8ca0037dc4899db8a673460d996f0a0a6f592d3c009b1bd51b7ca5ebbc6bf16c9b795e8c0defd62cc88f62d47f29b7bb3b517eb266cd6993d87ce40c92814890a4029a831045f66929545cf77"}, {0x100, 0x88, 0x5, "10227d8980a35bbae4eaa7171a56014e78feea07fbf4fbfbc241fc0663500184b4b6304e46a292026d241c403a4e8572b5ed788518fb6f38650c2a114b9e6fc652649fa4812f136dd4e69f2e892be56f9bc6eddd85907e7d846f8b466fc433e10240bb8a13989421da264c15f63060288091350c9373ce06a7aabef9e8516814dd23727cd6a81cb58aafd2ea1db28c8a2278a9e5d7b4a5c2221e5d350823a917516162a30bbd1764f415508b08ff12af958fb8fdf03988c57192716d0307426fc7aab8ac55948566baec5aefd722b795f4af7d3998b829388d5995c0be3735e440fe65fb2da6e3ddafe7c7a0a29b"}, {0x1010, 0x88, 0x9, "e8d0cec43c2a51772a26fd59e8d6cb7c3ec4b021d80ee8af12a099dab99931a067fdb232222f2e50c71153e1054b76d7380b39fb3fe957131d276e051cb5b4498d2032bd820aa4d8ed4405021e7d45a30e3cbcbdc1d25684b5427a5caf49e82aba4634246906acf8db07f2890543dc6edf16132fbbd2653fb676cd2a8fcb4eb99f8f5f9dfaf055ef9c653143344974e1f594a98883fbd5ea3b8f2fd7f83d0119eb183c277e575ba0b965d15f1a543209e11ab0635082296753470c520fffd02b29e48accb9ba64488c7018137dce4be1bcb2cf3d3492fe04d8c7a6fced679a24cf661691532d52b1ea11ea3a7cdee1594501feff61a8c43287acd517b4c6478616f50f8159fdd61285c6b1f711d426a4ccb2d005a085c32c01915a5d327fc66c23335784e1e1bfa500ca6bf896805947691f929bf3012c911d50088029f7e7f28aed232522abbff150a5f5aece44ca3e54cd4adbef876a0a6a838ad47a68b6da5fb6378e01a7c066a633ccfbff0a04cc14615e4f7a6a5525f7c60fed7d003e9fb0db1c7780bc571af6e6c514cd22cdbbdebcd09aeb7f630bdd14eb4a3ea482d9ed1fa5f426f2c1284eda34b0060babd5ff8a47c55263c6f766a64256ef99d1b7786d611f2883632ba80ed220eaa421ab5176fa81fd1ae3e4d9c17cab864bd4f38b7aacb78e9da7db274a447ca4091c24d4a2513343dfb8752993f6c1ee21a00478a33607230abf1593ea4fe1d5cb2a3b9c678118816bad6ca13dc3a1319a9998373e20d40de3f58bd7b93eb0f1b7e681587e232ea69877b4557e0303b1c0b9e7a1fee051d229e66c8f824b36270cd496da528dc6c00a4147d7112b78a50548b30f2292870541fe943167dd72ab45e5f49e10d7109ce957d307400e869530aa6ccac794807fa9bb1c374aa81539f4d776aaead75c61d8d0754165ebe1ca826c5adc107a52a48f58514fe3160ac783479116a9dc66c77c76776ac937e3faee35651c34aeb0ccff5ca1ff58304899cb08b1cd8c9c1cf28dc31aa1753961eb385dc13bb113f47152097f4a0b05b1f5fb2cc98834022fb26487e26a57223cbaa623083c10c9d08a9f7f71dbfbf31115212b821f280686894c72125ca03c5fe0a6f6542026333ad2e5b43addba50406f7c7b554a067b54670be7ce527db52b178bdcb5e86e0f765cf94a61c53fb87fe19319ffe89ffe41f9975b6d19659afffc6e93eb8ce9d4e7c4971dc60d88093c4dccaa1465e028320dc96e00268bc50ff272b10928f594b9f15c8f589d7238a406ee78138b5d628782ab3ad86c3fcbd10c21e76264ce0ff90820c9201a3713ba2594c0c02826eb69d90e9ac3d5d9b890727e5ea7474d38dd0e87e31daa37c536edffbb4ac77b83291a212453680f46ae48d86ab88dea041dd94aa7ba00668a0683b9f33c7d0b4bfe74d45de6933655445677d51ae82d292922748cd6bc9f082848657b229383d61c335097e5181d51e3aae7d8a4ef80482e0aed771a202fc02603025148ca1aa73155b5ca8efc5a66d78c447006d0f7be0af10ee70f1897fa5a3534afb0583aa15355146e74f5bc00a7a1829791a21ea7214cb9acef58694670cb27a92f520d0155537104bf04d1293bd6e664e25285b43515025445ba643cb6c7d8f30a874c243b526910e5d6a176ea64bfd619126cae35b06818ca5bb876f2dee1b7c1b5f194d0034a68a03245afb9c06d47cfe3baadf0aad8a3cb2bb24c63d65872fdb81f5dd4c7655bea5eb9bd5a67976b86115bfc03d3d63d5b9e10247fa3204f15a3644765f6a9bfe91fec475488ef13d04cf75def8ecc26adcaaa401cc89e09ebc4c494f0a599ebf69ff48202177dcb98564234a21c8ff2963e4966ebaeb398a6318c9d3bbccd0719905a90ac5e60c38cf9dd0e19845f351499010b5bd3b90df83bd326716e78f152663bd3b400583decc1220a2bf2d5864a6fe9cd16c8cc05b7baa8a5306dbecb098f94c82716c17cca568648d43b07ace179551199b7523cafe9ceda1c41fdd0a7c36f8f5341a48edb7896c280349ccbd5248f20587d7ebfbeb910ada8cc0cd63230f6b8736171cd44ab89d95868211176283c82fd866b82adaf0cedbab918d9c957f0c23ed588619bf34cd84f3057bef85d965dc448dfabf7e373e27eaf0eaeaa9b69e130a08a83b3e3b25d4f86bfcad92033a76de849b03cf6376137fe298ffb86823ab29b26465039fca2a37889b6962e642a6f01d3c89213da6c4fc440e35aa584f8aec3196b259135aa7785638808801a601465529c409745dc83eee246c84aee4562d3a8d3f62565fc49e5fa4faef16f631c1a7c7bd070983e3d7c8abb9f68c1cc78fda171f53802d7af1ee5d8ec384fbbcb29680a46e4feb89d8a0695a83bdf2c9ede27590da7a7d8cc2b280de93ebecac587f054e61519ea1894a311c1922536c2db151061dd6031fa6179fb2e9b7766839a0ba02051adde2cca6ce01547527758e3ea4dd433644203bc0e5e932e93a68916c992e8e717872bb9403c949ad380c2841ff9bd6391a993e6c8d80963115bbf12584c38a578836199ee60fd1fd0ec67db301993f7a3280b10a2f5baadd2e5100a0d23fe6f97d06909d373154febbe92076d59d9ed0fdd3f25029c816bca049bcf132f0e89d89ba021444da7f5c86ee8047922e938f5356a4f148f10738b0b0d00dc9498bbba55a2e2d1f1eea273717b9ae515d113a43b5acd6f20f9e9ceac7b2b9548a281d53e937d25fe6846c9fc192bedf40424f3173dfcbf1a2eaa473aff58eb1f94e1cd1946441c7b74241272cb1dc4dd16092045ddee1bed80aa603cff8fe0ccca0983909fb82c838ac3639e7c4516d5f7a699811a33764d596a59ec2faa209a36a30d8183018db52203bee7e82da5a50a7faa97bcc884166023ba2cfe4043deb2ce113a759fbcfa09ff1c84bc31df9cf8c17ed1eb82aa648939a1cd72d35ddec99fe45ee224e96b4cab6f11bb996ca9164a48e701c0c7ccd0abadb00772b3643c4dd08e8d4ed4ac38ea4cfba42653c613c1e7282160eb1e6dda9c355731b4b51921992d3394df0f1692ad3da734462dcd945d5dcd2b99671f53cde3734e627728ac7ff4ff9bb0cac67de17d709497bbdad72c4cc3f7052e7f83a6dd616cc82d8c490076061f4288651df0a90ea82ce245f9dd16ff4193ca6ce3882e8c4798954dae475dc267a9ba554176d939a000d504cde132af859119bcda7e2ec8e54f5db9f55f370c20c91f893897f7ca56032e41de7bd9adac0e76f3e0cd836fd9828cba2469c32c60d945a8865a7d071350a4bb12000b9bee9aeb9580669f1fc7d2ffeea5a0aa9b5862c0abdcb1fab15d2032112de1e81bf0837d99e051f928842b54902dd273a042fc5c66a42c7034276b70c8cef663745527de104a460c0dfd738b6c8b4448c210c0e83d3dc60410884b48adbd49a53ed5899abce978be48b457449c6565c767a09faeb70b125feae1a73c64388abf190138323591817d4c83c3a644b373cd6d0844ad2347f18fe1da8fb265827e6bc61aaf53fbf029fda9ea3cc49d004f80f9d032826ddf5403c8715d6aa8f1eaa22b3188a2a324eef104cfe9a257da0b75b0d584fa5f85d6985ab5d95381ad0d9c34cb3bf8c9d0739650b676980f0ff7c21ec927829b055398a133b69895da6946b1474d59f009c2590ce8df1bae3ea39fc4c87124aef91ee3e5369cc9a68727bbde12a6bc2a04c8e0a5d2f856d51faf65e9a8a5a58057c73926cd2936d43bc58e3b25585d7f21d12ab078051e3eda086c02314f30de2ccf023dec9a6b4deb5c30cb6d754a22df0b39d76d6614e8911b2cc92841d5452cfa3357b55e6e8fe44c66882e6d705a64bb1ad29d45e48a35c7170deeae701c828c26a3a04ad7682cdb952d5927b287c07c49c19690a8d3ffafb2ffa629c5e5a92ed031f0170a58fb5e1cab923751d63ac3c8512ae9861728e5e93edcfb4e2085a15e869c8ac37a8327ce6cb503037d0663370423e3659d822313bc7654a116b97a823f7c98bc92ed26f603b29493652334dfe039c90347dc382bad5a01a39b67e2fcfa0dbde4e88f71522555e12dff2c28e7c8359356bf05bf33dba7312ff5c1fc9336a900393550f85c11f71f99864edb3612a959e45a3dfef1ef146a01e4d99ed83e011dc0313ee5a45a9d1de5b044cceeca0fec8811ed96f8882e2d2126d3d9bc96f8a07742ca79371d4da5dbb6972523b88309ee9c6158eda8858ad31587d4f0413e0e0eb280983c6c34ccbfbb628e9a24172bb662ac759ea5ee4265f04ec58dd10cde3d651da4ee888941e6ae5d6777858935b46fbdc3c5bd4a41ef5ce89aaea9f9674ebfa1e7ffeb770e30e0a202eee14a43cf77ee5095d7b162274a6f96451293d549e81beeea2e6bca4f913fb7236c7b4036bce16d1fc735350173ba26fc513ea471f5317f645d35fda5c88959e6cbe3b015bef3042127a94f41b3d5c4829da1881503cda2f3ff169ffb0069584c49ad4110492c1217263879ba9ed9e77c6ac842eebfc384af383d6e5b0aa633abc11d1dcbffd4deaa6cccc1cbdecf27b12467d9921038a8740a2eeb5826eeb37e8e8f4e7596f12f62e0c3f325337dd04cf1e2b9dd2a61f0941201e30af4e6b18568465c4de8bbed9b6dbc65aaeb8a65cc87be8278a1bfdd400c1b386544fb889dfb3720c6cf80496e16ca5e8612a991bf2ce3f8c499bc234bf42abb9b5418036c4cefddf18386b9f5ed99e82ab36cc8a68e2b21abfb53837eeefe64eae8c7b858dba33ba94897cdee905731aff9c010e914848598321afe19b2ff860b3c368378273bc4bb9ada1bbe4058841d2a69e7df8356a72a99e5c271d72badcd48160dc9a68107259827e05f6a54b8b5b47aeb98c8e269d4fd702315cabaccdfded2b9c8b633cc8acbf8ef320a3ae00ac2eca22db87f01055b712704ff4ef9c1f806b7f0e6b8be9998cf6c841c3b5ee01a2382ea278fc984c68f4e415aff5c79730fb4e3f54bc7131b2853e0a87d02c7e493bff08785078d8cce5f47388ba115efb87830dc7346936637b7656f393c5e391db71e959baf629048b767bbbba5151e37cc494336d29426f1a9ccd17ffed022290845aa5afd90721bc22629ba58a38d4107edbdbae1845771f1296c31635439ae548964b9e0a0c6ec855677d13edf0d613896734938f556f5dfbb64f3eee3f4d7e52c728e89835d81da06354f8964bf2d57c92ac6261e19ea7a99233a52f73cdf5c205c7ccaef4186120fcb34a449f56c9e5813091926b66a90eb4bffbc409904cf0b065aa5c1bb4b5c4c6807e0a8931bd36e116994bff960924fad4f90ad96bd8954926fcdc2663bc36c9bbc365e4a736fcb98699f12b1d8a7747ad4bafb525b8b1eac373a86d79fd78c1d17d80c6e183e800da45107626a78cc14fa5780e417699d98b60656cc0facc2945a92624dec9c46aee4114554bfab972aaee1d992ef83bd2cfc14fcf61785bccdb489f2b6d4ae718b07a8e54c5fb730e28e65442df30e8eab3f32834435b1fd44a496a84fc14b50c18580af21105a9c20d65851889e20647a6b0dd2b17a41d3e61f8f42fbf843311c507f0c091776c8a01d7a3cd188d3e6f44c7122729c68699887253bbff53737c3982513870f75a266fce39d0a0655b2dc99a14b40b48342ead10bf9771d7df646ca163f9cd70a9da5ec240a127bfb56c5b9942da5bcd16a7a5b1cd8c4a48730d59a9566e9479a2dc05371ebd8350b38ae023e9c82d4ee712f46b398cd0c23415278c1057fc7d1e1c6fd219bf91145f7ff0faaac78"}, {0x68, 0x104, 0x9, "564f9e263893c8fdf23bac85cfd7c4d57768d7d5a2010597862754e847d27908f3102f2549f72e39cf7b6e8676c436f6939534b3aca7f0bb83a454fca523eb02f1d399bbfc9b21378003cfc507e0e0ec70e810f8d977"}, {0x10, 0x110, 0x1}, {0x100, 0x10c, 0x5, "b26b033dee8c1ae0f128cb3da082f9c0077ed87590a0d6d0c99363c5d49afcdb5ee9137f9cf1a438eb000d65ec74a5dbf1fe429dc9fb158ff8412070e736d8b400d05c49ef84cf4d73c176de3fec2e51e4376a44251debd8ad171f55f5a4cd5259b720c4e3aca08ad7edfb566561649d6757768e1f41c728f40713bf3971ec864d9d9d17299bf8397d51db133ae9a6a6b5b6cc7f576094cfa40c0bd91dc7aabb520d10f09ac02418b5d9e9a52e8434518520f59b702e748919b07c167bd952817ab073657fb0427ae7cffdd6144612dcea86c5f6d2db479bf79f2b78bbea1203896c6643bba10848a0a867be2f7cc9"}, {0xc0, 0x10b, 0xa, "71a1c4389f7e650d131460af49f74b4a1714c6ddd7a6861a74c9f634002d51e0fb1f2fe83dedfb8d6721d0d35a15fe4561097931a42b1f3464402172535afb5aa985c3cdf6648f1fa7173509e8417282796822d9d624f45607c61bb0f8148d663f04dc568a383f7e5d666b236d0a5039718f0d4a498089ee7cc908114eee58877cd1b412e6629ebd614501070000000000000069a88b56aa0b7ce5fd6a1b935df3b138d5545b78b8260d"}, {0xf0, 0x107, 0x10, "765478e4837ff69441c634558a02fc74166581f61f29bb2b2e49726c110cee9eed45c18dea4f86d3b5b8f77248f9afa1df9c1267add6fbccbcf6e286f414810ea393c9a6628a2474b69912f0a66fd83c30bc22b7766921942623052dd48bdfd1aa0827ec8d87c538861c0871df6f41427851e3424b5d1c4b516b5d8b68b3d9f8d0b6a2d33d3a931e786913a46c15119966988a7d016a33001550b00a834c337271014baf437fb977834264353cac9cb994473bf67887b43503198020f60422c7d8c2771e6eeafbe29bf0104258a1ad0e5523ea5828f225cd8a492bb5bcb4"}], 0x1518}}, {{&(0x7f0000000d00)=@ethernet={0x1}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000068c0)="dc548a0872c6ffff59fa275ca2e168bd3d5ba51a984bffffffffff182c41c4219e7a9b64e778f1e92375d74131e8a2da7db6d41a21cb3d3b1e5e9e2dbba206adb16c38aed85e3148f3cd72702add607d4bb040fec71f3d854209b68c24fbf62a00000000000000b9000000000000000000", 0x71}], 0x1, &(0x7f0000003080)=[{0xf0, 0x10c, 0x8, "c843b81c64a37b231d8bb12a01205a2b6a3e84f9709b150e77bd2ba580587e6ab5f0733d965ebc0455988f478407f54d845aa8673dfb2bb7375f8259ae6c1756bf63c02cd223131d2db3f88208df51b3bbc9a65ca9a0d7da19715b44157dcfc9e3626dcebecc818eda4d674753f0a4133539ea2da98ccd8ce4f2ae2c87f6b4cd5a24139dffa228fff94e804e47e41de608aab50b697763046cc36a5757e60f18ce558f8448268a0eacbc7f0fb80fc9d012e059a2c61f9123ac2d68894ed67e6f79539e7075cae71a4a1d0998af328cb1f8cb539b5ff473ae49d03e"}, {0x1010, 0x1, 0x9, "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"}, {0xf8, 0x10a, 0xf90, "2f595850250c323b6b50e04c2d9aa08e2f69a2f8d3f3e4a1673f6b704259b6e03837271c0480d2a5f4e71b35e9c922fe721341b8e60193d7ae296ae006cb181013db6a1e34b1e9b41991bb1a2a5b69207bb24c51e08d09cba856d188a23ce44fc930e9c5d4eed9c6a8019c7adcbda23e818fbc43cdfe7a5a068ba4c935d1e56b0f5cbb8cbf53478b7609ebfb8d0fabfb27d794e8b87065d22eeb6840fc0952210f2d4a055b50487a90391bc7ca90dd5fdf2fa82e9bddae1a70aca079a875144bb5723d7f06b1669584e880d242886047de926c1d0faea35e1fc01051aec9786585e975073371"}, {0x40, 0x115, 0x200, "471415718cbd4f43c2e7e399245a2587362c6508fb4fa851e83c822f10b4098d283093736248743bb27c"}], 0x1238}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000e40)="92bb27c22499fee62b3763dca26caa7fd60c742b5b2a877f2c18a8312e316b86c3e5311d97141a0d856a322ac2f162a6a75dfbfd165a23ca9faefe3ae79005adee4f4f721d5ca8bdf7c67ef34ebd5ea7ee59b37872356caf0165ff1230ef85ee99cfced354aad7b02da6d231043af3f968aa55ad249c39fa4c1eeb77", 0x7c}, {&(0x7f0000000ec0)="10f86ea4b49dcaa50a293b4ce6f669fde58e0f179d6bc805856bfefc61f9454d3d20ffe1ae1daaf11cdf2bf3d82a61583e32062cb3ed4081d4e8fd5f4ae9b321d54b4a2ebdd8d758e68dbec63f2d0ae54d5c6d10e18d938d6bac2df957be84ccf7083eb20f988850ca3c907708601104902986dfe0bc85fd125ca5d43fbe2647e0198d00e1d0f4aba48d1b43c6f8402bb18ae99642c6ffd60f17dcabe0fd22a5971f95992ed03be00b1a94caadd88635cf21ce2a221d21a9efbc6c998c8212176fd9e2c94bdd6287be6b2ddd67dddf64f89290b68edd8e9e0173d8feb61b6ac1de7a934d9b", 0xe5}, {&(0x7f0000000fc0)="36d1ffd71353e9d68681707df83e35b0a2c93dbaae9c236fa4e31dc4e6683f", 0x1f}, {&(0x7f0000001000)="6d999ec392267319c316fa86266de2ee78047dcfbb3eecbe54b81939e5a5c327a9808b1e3d124cb87b066d52e6e0c3024b3a4f93b621ac86be7c359fe8cd9180e32537dfd26b913b1d791a2518d36138aecef48a33663696d6fd4afc555d1d490b0c29", 0x63}, {&(0x7f0000001080)="a9a523ae5eaf1131c5df8746e946e018b5f7bf0bc7618ec78573a48467abdb", 0x1f}, {&(0x7f00000010c0)="78adc0f221a3751df2a02c3bff739cf43b2048c5e819eaa74e2ac75af34decac350725eb207ea2f2fd2eee08fe0e6bfc87d62671c672912b3e9baa408c9f3fa06d562b93529e393ae1db068a715cf7b4b953db27db75c939d6b4a122c6e998ebeebfa9c61b274b4f7a310645bf6f9a6bb38d140c5842360dfc677c9ffeca1702de1ada40", 0x84}, {&(0x7f0000001180)="4261a8812fc94015c2683534562ee365a86c6c523a2d632c4572cd2b4fa695a62927bbb17ba32bac1b874e5a182a970d6ad57c3f8a86b08957db6ba1d2d8e31aaf6c5a667dc5e263ffdfd217e4ca22fd9c8595c45d8818f545ad74681202dbc81c456d066e", 0x65}], 0x7, &(0x7f00000042c0)}}, {{&(0x7f00000012c0)=@pptp={0x18, 0x2, {0x3, @remote}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)="04ef7d9445d3fc49a02dd7501e4fdb7e21ee30e0df269b2371c92717f094f82867ef185dc4ba1e4b28ebf04751d743de5a9b6d0456c9414bd6bb89f1cbb371f3dd5a6d81132bdfee08992c0a5403cfd4b443461bb48f2aba6cd91873e1c5f516eae50d5f83ec651957dc4f940143054be85e6aa6c571fbe0db95127207915cb2d2537eb989ee33913584625113d1ccc2634c7f6853aeb51fe1e3809669542b7a3a6370e01b607ce03f374483ae34bf5a", 0xb0}], 0x1, &(0x7f00000058c0)=ANY=[@ANYBLOB="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"], 0x268}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001440)="28fe6156b8fc7f98e1ace89ab8fcb654038eec4e66f8c84025245dd1f4d13ab8af8990bfaa77a38d28e65ee30e3bde3b48a82e3cd9b3474aa558c4a0", 0x3c}, {&(0x7f0000001480)="6dee914011fc1aaf2806dffe75286fdb4d8583ebd98e5560427b338ca74ea0835c653244436eebc1f3d721a3284177273af5e3b2ec75fe3b5ac65aa428942176e3fa6aefc4af4747315aead4db9cea31c867fa89e3d0875480041f4a87e2fe5cbcf4662743b9b4efeef14789c05557da005de845306270635e09b46d9b00fce8383881dd0c94e87c632382cecbddf55a0bae0aaad4cd2ba95193c1c342bdec65fcb3ed23bc5e82b0ff59fff983bccd7e6e21bd7027fe5ec6e4a81732cd8f748223fd5ef038a6fc2dea5354b6cec8035392d1f629eb1789123727a0ccedf26be7ac9849d8019cd6f59fd3df", 0xeb}], 0x2, &(0x7f0000005b40)=[{0x90, 0x11, 0x6, "8ffb45c6003cb569d163de651aa881682319f3751ec3caed61c9a62741d0e2d63c271a0f1cf689fa9ca560f39abc299c06fe16e844111c906a36365a67bb55ad9cd0fc12e7f85a007f1613c57a305bf647b24d7c9440c633fd0a7c4ab0b62b6687127b00a616dd396e3c33168bafc270f5d4ffd1c860e91c8dd74326"}, {0x20, 0x6, 0xfffffff8, "009923985c2e261cbd3bc4"}], 0xb0}}, {{&(0x7f0000005c00)=@ethernet={0x1, @random="6cf65885f649"}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000005c80)="79fa57bfe3a74e28f865d06899668568ef762724ec42fa8d59973f8fb625f0db35db9e24af3a5aa3d2fa805a768043c92322a61792e0286e492ab634795738b8d19e6de9ba211f06a045f951cf0a37bc346b71aaeb8af8c14ef73854a54d8cf2144ce365ecd03a963f4a8fe733e1711dcddf80e0a12c687debef588b9d5aecc84fb781a2a7dab28f", 0x88}, {&(0x7f0000005d40)="17c571f918e7ea0c58bcdae14efad7f3e823fcc0a62129e1adfdf4e33b0b7fdf38f12240032fbcf0c70cc4d5b4bae7439e67022e57740e0796fad9bd0b65fc3aebdbf49b612548ca8977ce2af6fd9c22a05425c61b61d0462fe8e484b34cd76d0afb38f0eeb38599969889ed76626358bc17477babc2ca1f348ab6c6e02c609333b28b79e3115dcade1464ab6d727f47cec4565aec90332fdb14db3442171aed966ab783d821653d0f870e430e116dfb7d43afb9c4a72fb78f94f504aa3c1408ac8f85054362a66c99930cb4e0c9e302e6b7cbbe25e0f0caf35bebe4f7bbd1b4", 0xe0}, {&(0x7f0000005e40)="6e49623c4b412bd17952c90dda046956dfd00e", 0x13}, {&(0x7f0000005e80)="0d8c80bc33b9b85cde302ce2f23bcf0bb5df01535cacc94bff720943f0e887e24d5baec14700305b1a49f5f353e2fb5658417173375145e075a68c12660e210a6f8d2df9cdae5d616232f090211a364867dcaff9337f0c57e165ef3806853b6445a06a30f5138567b271b53052982badea3d91218449e9540255396f04", 0x7d}], 0x4, &(0x7f0000005f40)=[{0xf0, 0x10e, 0x0, "7b78b53e15cfebb61c4ef3a8613a498fc5e81f4573568dd6d5a0427250102fae73e8c3d45a2089a784e36eaaedea9175b81cfcb9c26c36a4cc7ed3ac0e5ffd8483bf3394723cfb8a4e89a18595cbbd770d7f3db9654f40e134ac46994c9c4d3c34ae9c0714b63656783e8ffa616a2bc2efa4250061fa7c85744b4d4a675184ad2003f2b41d185d35facae7eaee31b416e8fd8160248a2cd4e5a29856fd9855372f3dae6193726d461dfdb97f54d5a8a63b0a403647e82693d8b1bdc73879c2e6c45af2e6eec337d80b19e82539fabc4efb3f48a2bddd22196c6ed01397"}, {0x50, 0x112, 0x4, "27ef6508e8fca8647218d759334528a2cd799da06382db774359682cf58e57d89ca73a1b6c4e47f02c35ef86bcd50fa9a8c1814b2e933d2ee5f0ea30e9cfeb"}], 0x140}}, {{0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f0000006080)="12a535f5cad4b9090342040e5ad1badbb5e82381646ba296505af5231a2ee22c6825a77830458a53c9fcf2c26a7bea34b84757375a1fdc08977ab4ec4fa72c8d6811f2a829c5e1cce329916a988f597c91cb22ae9b1009620fe808bf9485b948c7aa003e71", 0x65}, {&(0x7f0000006100)="43b10e62df37dfef967db6b95a4ba4edf9b897e1b5af859b3db464145c0f2e7854ee5e523ed8cf6d8527e917f09e468b7873b99fe5a1be97cba2cfa2b6d3607763fb4fb8953ed2a082172ae830ed7a17ae72bd246dc81a995e9644d21e6dbeaaf52c53ede83665384416f25a666bb955899e6a1340b1eee643f7810456bf764d00fee5069674e878ceb079e1bc560abd053dec58a2f401578575a21e1df7706b4d148b8fe8c2e6c3cdc5", 0xaa}, {&(0x7f00000061c0)="1c6ce4b7ed80962fdf1aa430b73e5cf06832eda9174e745744dec21a660322f1e6849f23b4", 0x25}, {&(0x7f0000006200)="5e234b6e02d71d1f7965505e2551898d", 0x10}, {&(0x7f0000006240)="9d97bf6591ed993bec6cd0154e073947672241dacb98caccce458dd43e6832c7a7c52f83fda55ba4e73f3b5cec81bc74bb54f5c43997040a3c3a99cc8dfb49d1388af198c2f816432f8a44d691cdd230d8b1e9d8bb159fa785f4f92eeb33ec25e8504fefa5a9887d8fc1304a827c29c1d2362e13e6b24e9fa2da47a3c6", 0x7d}, {&(0x7f00000062c0)="31b4cd730fcdce511d637270eaa1b6ba0eedbc2e64a6a201", 0x18}, {&(0x7f0000006300)="42c4fe78275f06dd465e49a6641138d6f01f7e9a21738afe742005f9c79b285758c7720798294d501ff440094f638c3c7b", 0x31}, {&(0x7f0000006340)="e26c31382fc27f50b20d5abbfa33d0439c7fa7fb97c51d5ec04482b4f5af73b12c0a0a92391277a25aaecc5d74905b8cb7889de7c7084f63343b84dd1e5bcbf72d22d38d893a4bf69c7df17a2be608e2ee308ba3a5456d2e1a27c469a80320949aed4e3e5fc987f825a1da01a6d7d6b575bc128b50e4159f9c84f126e873ba89b1e22a331a5da3c5fa6cc0f5dd65ea4a63fcfa6085e9c578af908eb48db4a47bb3d0e98ec1b7d754cc2e9d", 0xab}, {&(0x7f0000006400)="626cbf3e89ef885e8a9f485739bcfc534ca15bcc95c82a823d4623407bb5b048b90f3ce1f705acccab311b74f75017e4839643c92fa89319bec00a6061f06b2ff21f1c399e732f629b1ca739584cc421e20b652f6e1f6f8db3eaff7bb77a25b25a29eff85f8b9e9b7cd5da50776efcab22b6879301ac52573c6b5ebe29884a6a97ec", 0x82}], 0x9, &(0x7f0000006580)=ANY=[@ANYBLOB="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"], 0x110}}], 0x8, 0x40080) sendto$l2tp6(r13, 0x0, 0x0, 0x20000804, &(0x7f00000002c0)={0xa, 0x0, 0x70e, @mcast1, 0x84c7, 0x3}, 0x20) 2m11.209306317s ago: executing program 1 (id=761): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x318, 0x158, 0x0, 0x148, 0x158, 0x148, 0x280, 0x240, 0x240, 0x280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x75}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1a, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r1, &(0x7f0000000840)={@void, @val={0x0, 0x0, 0x8, 0x100, 0x19, 0xc}, @ipv4=@icmp={{0x8, 0x4, 0x2, 0x5, 0x8008, 0x66, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@timestamp_addr={0x44, 0xc, 0xdb, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8004}]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0x4}}}, 0xfec9) (async) write$tun(r1, &(0x7f0000000840)={@void, @val={0x0, 0x0, 0x8, 0x100, 0x19, 0xc}, @ipv4=@icmp={{0x8, 0x4, 0x2, 0x5, 0x8008, 0x66, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@timestamp_addr={0x44, 0xc, 0xdb, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8004}]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0x4}}}, 0xfec9) 2m10.882881926s ago: executing program 1 (id=768): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x122) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) (async) close(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f00000008c0)={0x0, 0xfffffffffffffffc, 0x77, 0x3e, @scatter={0x7, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/246, 0xf6}, {&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000640)=""/172, 0xac}, {&(0x7f0000000400)=""/78, 0x4e}]}, &(0x7f0000000780)="4e6b32ab14eb5c3921872aad1f8a0c0f31def34575d7187f77d8f31e2418cd6a3f20a66cf43dce3aa797746dd81d8d6c8728cc13c7e37fb9786c05d442a9ab12f7194ccaa8fdc90351abdc807832f59be8e3d853ace337bcc485e4b70ae699db7ff32ff748c3c71102361a6de6f45a93f6a0c50a28ce7b", &(0x7f0000000800)=""/118, 0x9, 0x1, 0x0, &(0x7f0000000880)}) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) close(r0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x2, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r3, 0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 2m10.843239318s ago: executing program 32 (id=768): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x122) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48) (async) close(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f00000008c0)={0x0, 0xfffffffffffffffc, 0x77, 0x3e, @scatter={0x7, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/246, 0xf6}, {&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000640)=""/172, 0xac}, {&(0x7f0000000400)=""/78, 0x4e}]}, &(0x7f0000000780)="4e6b32ab14eb5c3921872aad1f8a0c0f31def34575d7187f77d8f31e2418cd6a3f20a66cf43dce3aa797746dd81d8d6c8728cc13c7e37fb9786c05d442a9ab12f7194ccaa8fdc90351abdc807832f59be8e3d853ace337bcc485e4b70ae699db7ff32ff748c3c71102361a6de6f45a93f6a0c50a28ce7b", &(0x7f0000000800)=""/118, 0x9, 0x1, 0x0, &(0x7f0000000880)}) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) close(r0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x2, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r3, 0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 1m31.1585491s ago: executing program 0 (id=1414): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1ff, 0x80000000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304, 0x34}, "f6d0d3f08ab5922f", "ae224a0d7a4a27ff96d9692d2c7408f1", "7209ca5b", "eaeb2dc22759c82f"}, 0x28) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x2010, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='f\xf6\x19\xfc', &(0x7f0000000040)='\x00\x1f\"\f\x82\xfe\x8f\xc1Z\r\xe4\xce\x99\xd7\x05\xc0\x14\x15_\"\x00\r\"\x00\x04\x00\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510000002000000720000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000003300)=""/4064, 0xfe0}, {0x0}], 0x2) 1m31.104841473s ago: executing program 0 (id=1416): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000e3f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1100}, 0x50) 1m31.034173117s ago: executing program 0 (id=1417): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x3a, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000003900093af036d6760000110004000000040000000c0001800600060086dd"], 0x24}}, 0x10) 1m31.033905318s ago: executing program 0 (id=1418): chdir(&(0x7f0000000400)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@delalloc}, {@grpquota}, {@nouid32}, {@nouid32}, {@data_writeback}]}, 0x2, 0x55d, &(0x7f0000000e80)="$eJzs3VFsG3cZAPDvLnGbthnJgIcxiTGxoXZAnWahW8TDAAnB0yRgiCekEhIniurEVeJsjVWxTLwigRCCSbzAEy9IvPCGhPbCO0KaNN4RIBAaLTyAtO3Qnc9t49ppKmwfpL+fdLn739n+vs9J/v6ffb4L4KH1ZERciIipiHgmIubK9Wk5xUF3ym936+aN1XxKIsteejuJpFzXe6zT5fxcebeZiPjKFyO+mdwbd3e/c3Wl2WzslO2F9lbyTpZ1Lm5urWw0NhrbS0uLzy0/v3x5+dJI6pyPiBc+/+cffvdnX3jh15985Q9X/nrhW3la/86yV6OvjlHqll4rnoue6YjYGUewikwXFXZdrjgXAACOlo/33x8RHy3G/3MxVYzmAAAAgJMk+8xsvJNEZAAAAMCJlUbEbCRpvTzed7Y8YvVcRHwwzqbN1m77E+utve21fFvEfNTS9c1m41LMFMcOzEctyduL5TG2vfazfe2liHg0In4wd6Zo11dbzbWq3/wAAACAh8S5vv3/f86lab1ebjyoODkAAABgdOarTgAAAAAYO/v/AAAAcPLNZwOu0HWvdPyZAAAAAGPwpRdfzKesd/3rtZf39662Xr641ti9Wt/aW62vtnau1TdarY3inH1b93u8Zqt17VOxvXd9od3YbS/s7neubLX2tttXNg9dAhsAAACYoEc/8sbvk4g4+PSZYsqdKrfVIrKpu288XUWGwLg80DE9fxpfHsDk3f36fqbCPIDJGzikd6AvPBRqVScAVO5+XwAaevDOb0efCwAAMB7nPzT88/+31ytNDRiz8q3+5FgnAAFOlKmqEwAq0/38772sq+psgEmqHTUCsFMAJ146ms//7/PtoESHAgAAFZstpiStl/sBs5Gm9XrEI8VlAWvJ+mazcSki3hcRb83VTuftxeKeidE8AAAAAAAAAAAAAAAAAAAAAAAAABxTliWRAQAAACdaRPqX3pW5zs89Pdv//sCp5F9zxTwiXvnxSz+6vtJu7yzm6/9+e3379XL9s1W8gwEAAAD06+2n9/bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCUbt28sXory7Ls5o3VScb92+ciYr6MX07dLdMxU8xnohYRZ/+RxPRd90siYmoE8Q9ei4jHBsVP8rRivsziUPxTEWlEnBlV/HjA+NGNf24E8eFh9kbe/3x20P9fGk8W88H/f9Pl9N8a3v+lt/u/qSH93yPDHrR2uPn4m79YGBr/tYjHpwf3P734Sf54A+I/dcwav/HVTmfYtuynEecH9X/J4VgL7a1rC7v7nYubWysbjY3G9tLS4nPLzy9fXr60sL7ZbJQ/B8b4/od/9d6d1rv31H/2iP63qH/I8//0Met/983rNz/QXez7zUQtfpJlF54a/Pt/LJ99/N74vde+j5WvA3k7fw7T1782MP4TP//dE8mQ3PL614bUP9NX/+m++i8cs/5nvvztPx7zpgDABOzud66uNJuNnf+7hbSsYCwhYr76Av+nF9JxPfMPspBEEvnCW4c2rRSJTUVnpvwLmXhiSTfoq2X8lWaM9m/1N+VofpxVTLgfAgAAxu/OoD9vfe+Xd7YM+8QAAAAAAAAAAAAAAAAAAAAAGLX7ngZs2KY0Iu6s+fp3jjgbWX/Mg2pKBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40n8CAAD//9g7zl8=") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) 1m30.778228742s ago: executing program 0 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x17, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m30.607195082s ago: executing program 0 (id=1427): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) chdir(&(0x7f0000000700)='mnt/encrypted_dir\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x6}}, 0x20) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) perf_event_open(&(0x7f0000001140)={0x4, 0x80, 0xc, 0x2, 0x10, 0x8, 0x0, 0x2, 0x200, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000001100), 0x5}, 0x200, 0x4, 0x7, 0x9, 0x7fffffff, 0x2, 0x1, 0x0, 0x2, 0x0, 0xe2d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121c80, 0x47) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000001000)=0x1000) 1m30.588155403s ago: executing program 33 (id=1427): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) chdir(&(0x7f0000000700)='mnt/encrypted_dir\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x6}}, 0x20) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) perf_event_open(&(0x7f0000001140)={0x4, 0x80, 0xc, 0x2, 0x10, 0x8, 0x0, 0x2, 0x200, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000001100), 0x5}, 0x200, 0x4, 0x7, 0x9, 0x7fffffff, 0x2, 0x1, 0x0, 0x2, 0x0, 0xe2d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121c80, 0x47) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000001000)=0x1000) 48.253892329s ago: executing program 4 (id=2157): signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x80]}, 0x8) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) pipe(&(0x7f0000000180)) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000030000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 47.991145814s ago: executing program 4 (id=2160): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x8cffffffffffffff, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") 47.905640459s ago: executing program 4 (id=2161): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0xfe}, 0x40) 47.757118528s ago: executing program 4 (id=2162): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3818744, &(0x7f0000000000)={[{@noauto_da_alloc}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@sysvgroups}, {@acl}, {@noauto_da_alloc}, {@usrquota}]}, 0x1, 0x47f, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711823000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000391000/0x4000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, &(0x7f0000001500)=[{0x7, 0x0, 0x3}], 0x1, 0x2b2, 0x0, 0x0, 0x0, 0x18}) fchdir(0xffffffffffffffff) syz_open_procfs(r2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0xd270, 0x0, 0x1, 0xd05, 0xd4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0xc0, 0x0, 0x0, 0xc3, 0x3}) 46.728515978s ago: executing program 4 (id=2164): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1e0, 0x148, 0x0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, '\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0x108, 0x148, 0x0, {0x100000000000000}, [@common=@addrtype={{0x30}, {0x0, 0xa, 0x0, 0x1}}, @common=@unspec=@physdev={{0x68}, {'vlan1\x00', {0xff}, 'ip6gre0\x00', {}, 0x17}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0xd0, {0x9}}}}, {{@ip={@loopback, @rand_addr=0x640100fe, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 'dvmrp1\x00', 'dvmrp0\x00', {}, {}, 0x5c, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x35, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x33, 0x2f, 0x2d, 0x39, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 46.363174729s ago: executing program 4 (id=2171): r0 = syz_io_uring_setup(0x1f96, &(0x7f0000000000)={0x0, 0x16e2, 0x809, 0xfc800001, 0x251}, &(0x7f00000012c0)=0x0, &(0x7f0000001240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x6fe1, 0x10a4, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x5e3, 0xf419, 0x1, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) ioctl$FIONCLEX(r2, 0x5450) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x54, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, 0x0, 0x4000000) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r7], 0x18}, 0x40c0) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000040)=@x25={0x9, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/143, 0x8f}], 0x1}, 0x5}, {{&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/105, 0x69}], 0x1}, 0x23}, {{&(0x7f0000000300)=@nfc_llcp, 0x80, &(0x7f0000002440)=[{&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x3}, 0x81}, {{&(0x7f0000002480)=@qipcrtr, 0x80, &(0x7f0000003900)=[{&(0x7f0000002500)=""/129, 0x81}, {&(0x7f00000025c0)=""/37, 0x25}, {&(0x7f0000002600)=""/209, 0xd1}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/199, 0xc7}, {&(0x7f0000003800)=""/222, 0xde}], 0x6, &(0x7f0000003980)=""/128, 0x80}, 0xe895}], 0x4, 0x1, &(0x7f0000003b00)={0x77359400}) 46.359264349s ago: executing program 34 (id=2171): r0 = syz_io_uring_setup(0x1f96, &(0x7f0000000000)={0x0, 0x16e2, 0x809, 0xfc800001, 0x251}, &(0x7f00000012c0)=0x0, &(0x7f0000001240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x6fe1, 0x10a4, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x5e3, 0xf419, 0x1, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) ioctl$FIONCLEX(r2, 0x5450) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x54, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, 0x0, 0x4000000) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r7], 0x18}, 0x40c0) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000040)=@x25={0x9, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/143, 0x8f}], 0x1}, 0x5}, {{&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/105, 0x69}], 0x1}, 0x23}, {{&(0x7f0000000300)=@nfc_llcp, 0x80, &(0x7f0000002440)=[{&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x3}, 0x81}, {{&(0x7f0000002480)=@qipcrtr, 0x80, &(0x7f0000003900)=[{&(0x7f0000002500)=""/129, 0x81}, {&(0x7f00000025c0)=""/37, 0x25}, {&(0x7f0000002600)=""/209, 0xd1}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/199, 0xc7}, {&(0x7f0000003800)=""/222, 0xde}], 0x6, &(0x7f0000003980)=""/128, 0x80}, 0xe895}], 0x4, 0x1, &(0x7f0000003b00)={0x77359400}) 14.082485399s ago: executing program 7 (id=2883): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0x2, 0x0, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@getsa={0x48, 0x12, 0x8, 0x70bd28, 0x25dfdbff, {@in6=@local, 0x4d3, 0xa, 0x2b}, [@mark={0xc, 0x15, {0x35075a, 0x4}}, @srcaddr={0x14, 0xd, @in6=@mcast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r5, 0x19499a12d66852af, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004800) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r6, r6, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008050}, 0x4000010) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x7e, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="6f0883", 0xfe92}], 0x1}}], 0x1, 0x2400c040) 14.009348634s ago: executing program 7 (id=2884): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x50, 0xffffffffffffffff, 0x52cdd000) socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) capset(&(0x7f0000a31000), &(0x7f0000000080)) 13.843788563s ago: executing program 7 (id=2886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x1000000, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 13.795225706s ago: executing program 7 (id=2887): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000300)=ANY=[], 0xfb, 0x1208, &(0x7f0000003680)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010003805fcfffffffcdbdf2500000000345ae65d78693ce02f8ac0fd0ceb1cfd9cf9434dd6755aadd829daa8001aeb556b13543b4a2596b343dc1dcf1f0dae02db8fd674f63e3aa47613ed31258b3a1dc09195f81d3eb59954d2ad1db50de22acbf680f273fa87f19e0d68ba4203c95aaf8ea172f6bd23a439f953c025dc63fe5d74c99510f070da7975a917d2673ee5b85090023c9235f84c437593aac32d3b59b1a4a01df0fad0cd0b334d86afc84c1598b2f34b7134a8255a249d", @ANYRES32=0x0, @ANYBLOB="025504000400000008000500", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x1, 0x264, &(0x7f0000000a80)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r1 = creat(&(0x7f0000000040)='./bus\x00', 0xa) r2 = socket(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000001880)=ANY=[@ANYBLOB="aa2aaa9daa26aaaaaaaaaa2a88474502001400660000d55c907800000000ac1e0101"], 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0xf0ff, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x20000002}, 0x1c) r8 = syz_clone(0x8000, &(0x7f0000000600)="1965fe4f3caac92ae52bdc1bec4f08ddddec4362dec29448e11d9aed589d93ab6bfbae14a2e00af69c03b79697201d40397adbd500d460823f81fc4989f07959c499c62bca48a4f5e39510fb93166214cc088f04f03611f1c6fc3d061080d872e684b51608f2f8ec84e878bc351f508d7dc12a7fe50da7b631899fc85edf781b37ef34ece2a66c5536e1de67b83551fe18dae737e2215d25ceb45c5d63bc679d57bc6813404acfd67c5afabc2411d4", 0xaf, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="3d861af42638c8b50f499389694620194408f3ad65ea52bf72cf888a11e3664081e307322af1f43f04d83692f89833353db72dbc43be47c7c2a372badf20e1ed763021397bdad259396d1d15e4ebb3f59aea49d359e3789ff5f7e3ffbc6635b0e2135a9a589fde440b313a49b8a5afb6ea04afb3b05136b9df12842cc164e5dbb7a0aac17cbe7daecd41e378500ec48bf4c5ada6513548feae365b") r9 = getpid() syz_clone3(&(0x7f0000000840)={0x20000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x13}, &(0x7f0000000500)=""/9, 0x9, &(0x7f0000000580)=""/78, &(0x7f0000000800)=[r8, 0x0, r9], 0x3, {r1}}, 0x58) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x9, @empty}}}, &(0x7f0000000080)=0x84) r11 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r11, 0x29, 0xd4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r10, @in6={{0xa, 0x4e21, 0xb, @local, 0xd}}}, &(0x7f00000002c0)=0x84) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x16) 12.822834133s ago: executing program 7 (id=2896): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x50, 0xffffffffffffffff, 0x52cdd000) socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) capset(&(0x7f0000a31000), &(0x7f0000000080)) 12.432964835s ago: executing program 7 (id=2907): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) socket(0x2, 0xa, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x802, r4, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000802"], 0x0) socket$inet(0x2, 0x800, 0x8001) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000280)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8602, 0x0) r5 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100), &(0x7f00000007c0)) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x1f6, &(0x7f0000000440)=""/168, 0x41100, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x26, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) unshare(0x2c020400) syz_open_dev$sg(0x0, 0x0, 0x208143) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020500030e0000000000000007000000050006"], 0x70}, 0x1, 0x400000000000000}, 0x20000000) io_uring_enter(r5, 0x4d10, 0x2, 0x2, 0x0, 0x0) 12.399957097s ago: executing program 35 (id=2907): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) socket(0x2, 0xa, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x802, r4, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000802"], 0x0) socket$inet(0x2, 0x800, 0x8001) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000280)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8602, 0x0) r5 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100), &(0x7f00000007c0)) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000fff916a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x1f6, &(0x7f0000000440)=""/168, 0x41100, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x26, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) unshare(0x2c020400) syz_open_dev$sg(0x0, 0x0, 0x208143) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020500030e0000000000000007000000050006"], 0x70}, 0x1, 0x400000000000000}, 0x20000000) io_uring_enter(r5, 0x4d10, 0x2, 0x2, 0x0, 0x0) 4.705451785s ago: executing program 8 (id=3058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) 4.586260172s ago: executing program 8 (id=3061): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0x2, 0x0, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x7e, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="6f0883", 0xfe92}], 0x1}}], 0x1, 0x2400c040) 4.573601523s ago: executing program 8 (id=3062): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x1, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0, 0x0, 0x0, 0xfc00}, 0x0) 4.485752288s ago: executing program 8 (id=3066): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53a, &(0x7f0000000e00)="$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") r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000002080001400000001408000240000000120c000800000001008faa00000c000480060001008a9500000900010073797a30"], 0x118}}, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2, &(0x7f0000000200)=@raw=[@exit, @exit], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f00000004c0)=[{0x5, 0x2, 0x7, 0xa}, {0x4, 0x5, 0x10}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r5}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x0, 0x0, 0x90001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readlink(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000280)=""/71, 0x47) setxattr$incfs_metadata(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) 3.716567903s ago: executing program 8 (id=3075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700002000000000006574683a73"], 0x38}}, 0x0) 2.826816965s ago: executing program 8 (id=3089): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x58) setsockopt(r0, 0x1, 0x7, &(0x7f0000000000)="0100ddff", 0x4) connect$inet6(r0, &(0x7f00000006c0)={0xa, 0x4e24, 0x7, @empty, 0x2}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x700, 0x1, 0x9, 0x3, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x64, 0x0, 0x1, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@generic={0x44, 0x4, 'Y\v'}, @ssrr={0x89, 0xb, 0x2d, [@private=0xa010102, @remote]}, @timestamp={0x44, 0x14, 0x84, 0x0, 0x3, [0x6, 0xff, 0x402, 0x8]}, @timestamp_addr={0x44, 0xc, 0xde, 0x1, 0x1, [{@empty, 0x5}]}, @lsrr={0x83, 0x3, 0xe5}]}}}}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$tun(0xffffffffffffffff, 0x0, 0xffe) syz_usb_disconnect(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'virt_wifi0\x00'}) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="600000004040000008000300", @ANYRES32, @ANYBLOB="180012800e00010077697265677561726400000004000280f822750a37"], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 2.826646775s ago: executing program 36 (id=3089): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x58) setsockopt(r0, 0x1, 0x7, &(0x7f0000000000)="0100ddff", 0x4) connect$inet6(r0, &(0x7f00000006c0)={0xa, 0x4e24, 0x7, @empty, 0x2}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x700, 0x1, 0x9, 0x3, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x64, 0x0, 0x1, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@generic={0x44, 0x4, 'Y\v'}, @ssrr={0x89, 0xb, 0x2d, [@private=0xa010102, @remote]}, @timestamp={0x44, 0x14, 0x84, 0x0, 0x3, [0x6, 0xff, 0x402, 0x8]}, @timestamp_addr={0x44, 0xc, 0xde, 0x1, 0x1, [{@empty, 0x5}]}, @lsrr={0x83, 0x3, 0xe5}]}}}}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$tun(0xffffffffffffffff, 0x0, 0xffe) syz_usb_disconnect(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'virt_wifi0\x00'}) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="600000004040000008000300", @ANYRES32, @ANYBLOB="180012800e00010077697265677561726400000004000280f822750a37"], 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 2.508147953s ago: executing program 2 (id=3102): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000001000000000000000000000097000084ff7bffff95"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) 2.454383637s ago: executing program 2 (id=3103): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001b00010000000000ffdbdf25fe880000000000000000000000000101ac1414bb000000000000000000000000000000000000000002"], 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.441514077s ago: executing program 2 (id=3104): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0xc003, 0x100, 0x4}, 0x18) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000240)) mount_setattr(r0, &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000280)={0x0, 0x80, 0x0, {r1}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)={0x1ec, 0x13, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0xf9, 0x8, "050fc757f9335964d190e99e22fb93a82eeeecf20f66d193cb57aacbbe63738161aa050e4601710e525cc1026c378e110bee45a53a23ab2c7b538933ec16bfe5594e724dec80608305e2a792e6e2910d39a713f3560609a4e7bb9a8eb0d73b8f8b2fd0a20eeed8e6099b8d4b9992ab6041881351e951261d4c57b9f312e0de46d0d0cee336e01266c9b77dc5f48e03486ce5a1be85419087bb85b3ca845d9cc164b32246214b991b9ca5d96620089b94e1f52f3def5e269661eb901e29b0ff47817252373447a6044777f6baee60aedff5a231cc638c772c5158a691c5d98c57bce7555a91d66ee3433593875ae9c3585a8d100ec1"}, @NFTA_OBJ_USERDATA={0xda, 0x8, "0028948159135a74842eee20f0a4c9c6c2a45c733323ab0dfbe2447f0bf3cb17f647fc154a94ca7801abb4ebc0c3b40d0613aacadd640b4c25ab05aab834e5d12087db5a7234bac2de4eed12ce78e32fa483804679a57d029a10413239393844d98ac3faab16e344c41582801c75bf1d7d93e94f2978202f47eb235adc99845ddfc3e5d93956b22f326a2232e89257885cabe705ef69bd01203a5ae83b2d5e31d39d15453d8ca95def13b4914772232fefbcba89e0d87a0590b54a2a4ab5ab6e9e2943eb63dd6f38b695ae93070c722d46dc426abe5f"}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x800}, 0x20004080) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11000, 0x0, &(0x7f0000fec000/0x11000)=nil) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x41c}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000ef0000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f7461000000100002800c0001"], 0x110}}, 0x0) 1.940531526s ago: executing program 6 (id=3115): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7ffd, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x2, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x404fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x8, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x40000, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x209, 0x100, 0x1, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x1000, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xffffff01, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0x0, 0x9, 0x8, 0x1, 0xc2e6, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x0, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0xc, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0xab34, 0x0, 0x21000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x8, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x44291943, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x20009, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0x6, 0x2, 0x3f, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x1000009, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x3, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x1ff, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x80000000, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827787, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x5, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x202, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0xfff, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1a2, 0x1, 0x3, 0x40, 0x1000, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x3, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x800, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0xffffffff, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x2, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x4, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x6, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0x8, 0x2, 0xfff, 0x5, 0x9]}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8c2b01) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3696, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x0, 0x0, 0x4}}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x5}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) pwrite64(r4, 0x0, 0x0, 0x9) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) ppoll(&(0x7f0000000240)=[{r0, 0x2200}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./cgroup.cpu/cpuset.cpus\x00', 0x2208000, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x1, 0x2e0, &(0x7f00000000c0)="$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") recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x610040, 0x0) fchmod(r7, 0x0) 1.797469155s ago: executing program 5 (id=3119): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001801c00038006000300a1aa0000060001000100000008000200020000000800010000000400050002"], 0x64}}, 0x0) 1.674482862s ago: executing program 5 (id=3121): syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "abb9bfe0c34c72d50c66fa8369f6e787"}, @md5sig={0x13, 0x12, "2a9c444be69caceb3fbd4ef8047b79a3"}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4000, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2c8, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x234, 0x1, [@m_xt={0x9c, 0xa, 0x0, 0x0, {{0x34}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd4, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0xec}, @TCA_SKBEDIT_PTYPE, @TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x9}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x6}]}, {0x8d, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e85e6"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0xc0, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0x7d, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x80, 0x1, [@m_nat={0x7c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x51, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868f369b56956160b81c6d053c8d2219598f2e3d34c0212052e"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000080)) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.606079756s ago: executing program 6 (id=3122): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.390746778s ago: executing program 5 (id=3123): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000400)=0x13) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x25, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a2d, 0x0, 0x7fc, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x37f, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x40007, 0x20002f7}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="7cb2", 0x2}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) 1.111837895s ago: executing program 3 (id=3124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffca00000000c0a010100000000008400000a0000060900020073797a31000000000900010073797a31000000007400038070000080080003400000000264000b80340001800a0001006c696d6974000000240002800c00024000000000000000030c0001"], 0x104}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 962.163003ms ago: executing program 3 (id=3125): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40881) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006000000018200000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000cd0a0100000000002500000001000480180000000200048000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x61}, 0x94) 730.481827ms ago: executing program 3 (id=3126): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYRES32], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x8, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0x0, 0x7, 0x7, 0x9, 0x40, 0x6, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe500fcff0000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xfa, &(0x7f0000000300)=""/250}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000400000010100000890000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r11, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0x9, 0x8, {{0xc, 0x4, 0x0, 0x18, 0x30, 0x67, 0x0, 0x4, 0x4, 0x0, @multicast1, @multicast1, {[@lsrr={0x83, 0x1b, 0x3a, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @rand_addr=0x64010100, @private=0xa010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r9, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x90, r11, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x54}, 0xc090) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r8, 0x0, 0x7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x14}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 729.990627ms ago: executing program 2 (id=3127): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x50, 0x0, r9, 0x0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}, 0x0, 0x40002103}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x0) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r5) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000e00)="be", 0x1}], 0x1}, 0x0) r11 = socket(0x10, 0x803, 0x4) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00030000003f000008000a00", @ANYRES32=r12, @ANYBLOB="140012800b000100627269646765000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 707.165298ms ago: executing program 6 (id=3128): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r0 = inotify_init() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000180009040000000000bb1fa2792f0fd843fd0b3e3a682aa80000000a008000f3"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000000000000000000000d3134b4a4b3574d5eb0eeeb4c8a22c5300851000000600000018000000000000000000000000000000660000000000e51de23966270000180000000000000000000000000000009500000000000000c7030000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) 680.66361ms ago: executing program 5 (id=3129): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000140)=""/46, 0x2c, 0x2e, 0x0, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2, 0x0, 0x0, 0xa00}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000540)='(pu&00\t||') socketpair$unix(0x1, 0x2, 0x0, 0x0) 512.10972ms ago: executing program 5 (id=3130): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xfff7ffdf, 0x173}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x5, 0x29fd, 0x84, 0x105}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000008000000911173000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 504.33376ms ago: executing program 6 (id=3131): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0x2, 0x0, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x7e, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="6f0883", 0xfe92}], 0x1}}], 0x1, 0x2400c040) 449.825843ms ago: executing program 2 (id=3132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xf, 0x40, 0x40, 0x41}, 0x50) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x77359400}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000140)="0d92dc6643a70c7545e2a666163ccaffda9da5a706aad8c13c2f6c10fed2", 0x1003, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) 370.636638ms ago: executing program 5 (id=3133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x35, 0x0, &(0x7f0000000400)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e2996ae78765790f", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000d80)=""/190, 0xbe}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)=""/226, 0xe2}], 0x5}, 0x3}], 0x1, 0x40010001, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="0c1874268c0000bd3f4c2ee4c3e4fdfea05e8e04a1a42a60557fb65e7388442bcb546079b365311561bb95fb1aff7128184ea4ca0f437142f62b8f3200e2eb47d44e67968ef5a2b24506d380fd62fac61aa99133d75de2774168ed1224dee2e650791e490c7c3f514a1b39c61d40894d45c2205a1d988b31cd6dc9ba0908fb6e4cd35d064b5085cd470e8282240c64159ba4b6b084446629f37ec8700db7d6dea32c10c93f7f19f2de78816ca02e67b7ab59f59fdf2bea3156f5938df17892e404e8ae", 0x6e}], 0x1, 0x0, 0x0, 0x2000000}}], 0x800000000000369, 0x44000) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) sendfile(r0, r0, &(0x7f0000000200)=0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000240), 0xff, 0x548, &(0x7f0000001880)="$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") syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f0000000000)) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 370.414648ms ago: executing program 3 (id=3134): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000001000008500000075000000850000002a00010095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 356.643819ms ago: executing program 2 (id=3135): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x3) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x4, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x56d92c88, 0x0, 0x0, 0x10000}, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) timerfd_create(0x7, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000100), 0x8) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000701, r3, &(0x7f0000000280)) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="fa868fd81607", @void, {@x25={0x805, {0x0, 0x9, 0x1b, "272bfcead682c2b5e5ad845a83dda7e3902531ebbae856c94195a485932bf22dfc5964d74531a0fdbe739403e73282593423e87f1f704bdf9b730a4d793dc481eb03199f1f75f4545ced3446440cbd2b1de8ee2f42e45c5ed872a080e0"}}}}, 0x0) shutdown(r1, 0x1) 347.920019ms ago: executing program 6 (id=3136): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$eJzs3U9vHGcZAPBn1l7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQt0pI5R6MvbGsrL2RvW5jq4LNJ0BCCJA4wYULEh8ACUXiwhEhRYIzSEUgBClIcCgdNLOzdrqZtTdhvUvs30+azPvOv+d5N57ZmZ1XMwGcWc9HxBsR8WGapi9FxHwxvVIM0ekO2XLv3393NRuSSNO3/pZEUkzLFkvTNO1t82K+ytRBjG8mDwScLcZ7+zdXms3GdlGttzdv1Xf29q9ubK6sN9YbW0tLi68uv7b8yvK1kbTzUkS8/pU/ff87P/3q67/8/Dt/vP6XK9/K0por5vfa8Rimj5rZbXr13GzfCtuPGez/Udae6gdF5fxw69w5yYQAABgoO8f/WER8JiJeivmYOvp0FgAAAHgCpV+aiw+S7v27EjMDpgMAAABPkEreBzap1Iq+AHNRqdRq3T68n4gLlWZrp/25G63drbVuX9mFqFZubDQb14q+wgtRTbL6Yl4+rL/cV1+KiKcj4nvz5/N6bbXVXJv0jx8AAABwRlzsu/7/53z3+v9oyXiSAwAAAEZnYdIJAAAAACfO9T8AAACcatVJJwAAAACcuK+9+WY2pL33X6+9vbd7s/X21bXGzs3a5u5qbbW1fau23mqt58/s2zxue81W69YXYmv3dr3d2GnXL+3tX99s7W61r2/E7FgaBAAAADzk6U/f/X0SEZ0vns+HzMykkwLGYvqg1HumZ8ne/4enuuP3xpQUMBZTQyzz3rny6c4T4Mk23T9hwL4OnD76/wPHvdFjYOed33RHlRHnAwAAjN7lT5Xf/z/+fL7jlB+ecHZiOLv67v+n85NKBBi7/P7/sB15nCzAqVIdqgcgcJr9r/f/j5emj5QQAAAwcnP5kFRqxc97c1Gp1GoRl/LXAlaTGxvNxrWIeCoifjdfPZfVF/M1k2OvGQAAAAAAAAAAAAAAAAAAAAAAAACArjRNIgUAAABOtYjKn5NfdZ/lf3n+xbn+3wdmkn/nrwSeiYh3fvTWD26vtNvbi9n0vx9Mb/+wmP7yJH7BAAAAAPr1rtPz8b8mnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp837999d7Q1DLH5+VHH/+uWIWCiLPx2z+Xg2qhFx4R9JTD+wXhIRUyOI37kTEZ8si59kaR2ELIs/ig+hcyfppLnS+LFQfApl8S+OID6cZXez488bZft/JZ7Px+X733TER+qPa/DxLw6Of1MD9v9LQ8Z45t7P6wPj34l4Zrr8+NeLnwyI/8JQ0avxja/v7w+am/444nLv+yc/4j0Y4bBUb2/equ/s7V/d2FxZb6w3tpaWFl9dfm35leVr9RsbzUbxb2mM7z77iw+Pav+F0u+/pMhmcPtfLNneVEn+/7l3+/7He5XOw/GvvFAS/9c/KZZ4OH6liPPZopzNv9wrd7rlBz33s98+d1T71w7bX32U//8rgzba76Ed5dnh/nQAgBOxs7d/c6XZbGyfdCG7WB5XrI8UssBjDzqawsxkPrGzU/h2Vrg3qg2maZpm+1TJrLsRMcx2khhxSyvl+RwWBh4BJn1kAgAARu3wpH/SmQAAAAAAAAAAAAAAAAAAAMDZNY6nrPXHPHwEcjKKR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzEfwMAAP//O7TZvA==") r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) accept4$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x10, 0x80000) 278.838333ms ago: executing program 3 (id=3137): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000002c00), 0x3, 0x544, &(0x7f0000001300)="$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") mkdir(0x0, 0x81) 37.091507ms ago: executing program 6 (id=3138): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000003c0), 0x10) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x0, 0xffffff80, 0x178, 0x320, 0x178, 0x480, 0x22b, 0x258, 0x480, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x2}, {}, {}, {}, {}, {0x4000}, {}, {0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x10}]}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @remote, [], [0x0, 0x0, 0x0, 0xff000000], 'team_slave_1\x00', 'dummy0\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0xf, "efc5"}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) fallocate(r1, 0x0, 0x0, 0x1000f4) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x800000a1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r5], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r6 = gettid() pause() r7 = syz_open_procfs(r6, &(0x7f0000000180)='wchan\x00') r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r10, &(0x7f00000008c0)={&(0x7f0000000600)=@name={0x1e, 0x2, 0x0, {{0x0, 0x101d0}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) pread64(r3, &(0x7f0000000000)=""/4096, 0x1000, 0x4ed5a86b) 0s ago: executing program 3 (id=3139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x1b, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0xcc}, 0x1, 0xf5}, 0x0) kernel console output (not intermixed with test programs): 0279] netlink: 'syz.2.2247': attribute type 4 has an invalid length. [ 161.188933][T10290] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 161.198913][ T28] audit: type=1400 audit(1770833541.346:2339): avc: denied { load_policy } for pid=10289 comm="syz.6.2251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 161.219356][T10290] SELinux: failed to load policy [ 161.457760][T10311] loop2: detected capacity change from 0 to 512 [ 161.505527][T10311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.555238][T10311] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.572757][ T28] audit: type=1326 audit(1770833541.725:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.6.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 161.726165][T10311] EXT4-fs: Cannot change journaled quota options when quota turned on [ 161.744059][T10311] netlink: 'syz.2.2258': attribute type 4 has an invalid length. [ 161.751861][ T28] audit: type=1326 audit(1770833541.725:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.6.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 161.778272][ T28] audit: type=1326 audit(1770833541.725:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.6.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 161.806674][T10264] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.818201][T10323] netlink: 'syz.2.2258': attribute type 4 has an invalid length. [ 161.827792][ T28] audit: type=1326 audit(1770833541.725:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.6.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 161.856039][ T28] audit: type=1326 audit(1770833541.725:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.6.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 161.962015][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.306256][T10329] loop6: detected capacity change from 0 to 256 [ 162.331797][T10329] vfat: Bad value for 'errors' [ 162.410295][T10336] bridge: RTM_NEWNEIGH with invalid ether address [ 162.634106][T10264] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.660182][T10336] bridge: RTM_NEWNEIGH with invalid ether address [ 162.717935][T10264] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.796652][T10356] loop3: detected capacity change from 0 to 1024 [ 162.826975][ T8655] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.835872][T10356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.856770][ T8655] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.865155][T10358] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 162.871834][T10358] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.884238][T10358] vhci_hcd vhci_hcd.0: Device attached [ 162.892672][ T8641] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.902418][T10366] vhci_hcd: connection closed [ 162.902559][ T3337] vhci_hcd vhci_hcd.6: stop threads [ 162.902663][ T8641] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.907788][ T3337] vhci_hcd vhci_hcd.6: release socket [ 162.926838][ T3337] vhci_hcd vhci_hcd.6: disconnect device [ 162.945325][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.320917][T10397] tipc: Can't bind to reserved service type 1 [ 163.476497][T10416] netlink: 'syz.3.2294': attribute type 1 has an invalid length. [ 163.492227][T10416] netlink: 'syz.3.2294': attribute type 2 has an invalid length. [ 163.709581][T10435] __nla_validate_parse: 25 callbacks suppressed [ 163.709598][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2301'. [ 163.727428][T10435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2301'. [ 163.839003][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2307'. [ 163.849067][T10446] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2307'. [ 163.949798][T10458] tipc: Enabling of bearer rejected, failed to enable media [ 164.022156][T10462] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2313'. [ 164.055421][T10464] FAULT_INJECTION: forcing a failure. [ 164.055421][T10464] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 164.068966][T10464] CPU: 1 UID: 0 PID: 10464 Comm: syz.3.2314 Tainted: G W syzkaller #0 PREEMPT(full) [ 164.069004][T10464] Tainted: [W]=WARN [ 164.069011][T10464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 164.069068][T10464] Call Trace: [ 164.069075][T10464] [ 164.069084][T10464] __dump_stack+0x1d/0x30 [ 164.069114][T10464] dump_stack_lvl+0x95/0xd0 [ 164.069146][T10464] dump_stack+0x15/0x1b [ 164.069268][T10464] should_fail_ex+0x263/0x280 [ 164.069302][T10464] should_fail_alloc_page+0xf2/0x100 [ 164.069351][T10464] __alloc_frozen_pages_noprof+0x108/0x350 [ 164.069468][T10464] alloc_pages_mpol+0xb3/0x260 [ 164.069493][T10464] ? css_rstat_updated+0xbb/0x280 [ 164.069529][T10464] vma_alloc_folio_noprof+0x1a9/0x300 [ 164.069558][T10464] handle_mm_fault+0x111f/0x3030 [ 164.069627][T10464] ? vma_start_read+0x1c7/0x2c0 [ 164.069690][T10464] do_user_addr_fault+0x62f/0x1050 [ 164.069725][T10464] ? ksys_mmap_pgoff+0xc1/0x310 [ 164.069747][T10464] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 164.069838][T10464] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 164.069897][T10464] ? irqentry_exit+0x3c/0x520 [ 164.069935][T10464] exc_page_fault+0x62/0xa0 [ 164.069970][T10464] asm_exc_page_fault+0x26/0x30 [ 164.069994][T10464] RIP: 0033:0x7f3bbbd13898 [ 164.070014][T10464] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 164.070035][T10464] RSP: 002b:00007f3bba8ae470 EFLAGS: 00010282 [ 164.070056][T10464] RAX: 0000000000001000 RBX: 00007f3bba8ae530 RCX: 000000000000001e [ 164.070152][T10464] RDX: 0000000000002bff RSI: 0000000000000800 RDI: 00007f3bba8ae5d0 [ 164.070170][T10464] RBP: 000000000000001f R08: 00007f3bb248f000 R09: 00000000000000f8 [ 164.070189][T10464] R10: 0000200000000742 R11: 00000000000002cf R12: 0000000000000601 [ 164.070203][T10464] R13: 00007f3bbbf11ea0 R14: 0000000000000015 R15: 00007f3bba8ae5d0 [ 164.070226][T10464] [ 164.070308][T10464] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 164.274150][T10464] loop3: detected capacity change from 0 to 256 [ 164.382603][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2320'. [ 164.463385][T10485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.496896][ T8655] Bluetooth: hci0: Frame reassembly failed (-84) [ 164.727230][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2332'. [ 164.903363][T10526] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2341'. [ 164.950647][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2344'. [ 165.782337][T10554] bridge0: entered promiscuous mode [ 165.788501][T10554] bridge0: port 3(vlan0) entered blocking state [ 165.794838][T10554] bridge0: port 3(vlan0) entered disabled state [ 165.801215][T10554] vlan0: entered allmulticast mode [ 165.814151][T10554] bridge0: entered allmulticast mode [ 165.831376][T10554] vlan0: left allmulticast mode [ 165.836303][T10554] bridge0: left allmulticast mode [ 165.841729][T10554] bridge0: left promiscuous mode [ 165.917242][T10558] loop2: detected capacity change from 0 to 1024 [ 166.067182][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 166.067199][ T28] audit: type=1326 audit(1770833546.225:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.6.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 166.119351][T10569] IPVS: Error connecting to the multicast addr [ 166.129582][ T28] audit: type=1326 audit(1770833546.225:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.6.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 166.153430][ T28] audit: type=1326 audit(1770833546.255:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.6.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 166.186944][ T28] audit: type=1326 audit(1770833546.255:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.6.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 166.211700][T10558] loop2: detected capacity change from 0 to 512 [ 166.219668][ T28] audit: type=1326 audit(1770833546.255:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.6.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 166.232371][T10558] EXT4-fs: Ignoring removed bh option [ 166.243583][ T28] audit: type=1326 audit(1770833546.265:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.6.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 166.248669][T10572] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2360'. [ 166.283726][T10558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.295642][ T28] audit: type=1326 audit(1770833546.265:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.6.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 166.331882][ T28] audit: type=1326 audit(1770833546.265:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.6.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 166.357554][ T28] audit: type=1326 audit(1770833546.265:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.6.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 166.360623][T10579] openvswitch: netlink: Missing key (keys=40, expected=100) [ 166.381369][ T28] audit: type=1326 audit(1770833546.265:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.6.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 166.416626][T10558] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2354: Invalid block bitmap block 0 in block_group 0 [ 166.430198][T10558] loop2: lost filesystem error report for type 5 error -117 [ 166.430402][T10558] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 166.476298][T10558] loop2: lost filesystem error report for type 5 error -117 [ 166.476582][T10558] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.2354: attempt to clear invalid blocks 983261 len 1 [ 166.498458][T10558] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 166.498633][T10558] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.2354: Invalid inode table block 0 in block_group 0 [ 166.520864][T10558] loop2: lost filesystem error report for type 5 error -117 [ 166.521016][T10558] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 166.534053][ T3586] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 166.537948][ T9942] Bluetooth: hci0: command 0x1003 tx timeout [ 166.549859][T10558] loop2: lost filesystem error report for type 5 error -117 [ 166.550031][T10558] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 166.566936][T10558] loop2: lost filesystem error report for type 5 error -117 [ 166.568835][T10558] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.2354: Invalid inode table block 0 in block_group 0 [ 166.609382][T10558] loop2: lost filesystem error report for type 5 error -117 [ 166.609556][T10558] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 166.626781][T10558] loop2: lost filesystem error report for type 5 error -117 [ 166.626950][T10558] EXT4-fs error (device loop2): ext4_truncate:4635: inode #11: comm syz.2.2354: mark_inode_dirty error [ 166.646009][T10558] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 166.646218][T10558] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 166.665058][T10558] loop2: lost filesystem error report for type 5 error -117 [ 166.665373][T10558] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.2354: Invalid inode table block 0 in block_group 0 [ 166.688405][T10558] loop2: lost filesystem error report for type 5 error -117 [ 166.688565][T10558] EXT4-fs (loop2): 1 truncate cleaned up [ 166.688972][T10558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.723104][T10558] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.2354: Invalid inode table block 0 in block_group 0 [ 166.723472][T10558] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 166.806662][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.881981][T10601] loop7: detected capacity change from 0 to 512 [ 166.924057][T10601] Invalid logical block size (3) [ 166.953953][T10602] Invalid logical block size (3) [ 167.409753][T10637] loop3: detected capacity change from 0 to 1024 [ 167.444215][T10637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.444282][T10637] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.455622][T10644] netlink: 'syz.2.2385': attribute type 1 has an invalid length. [ 167.534969][T10648] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.2383: lblock 0 mapped to illegal pblock 0 (length 6) [ 167.553771][T10648] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 167.553804][T10648] EXT4-fs (loop3): This should not happen!! Data will be lost [ 167.553804][T10648] [ 167.700575][T10656] syzkaller0: entered promiscuous mode [ 167.706234][T10656] syzkaller0: entered allmulticast mode [ 167.776429][ T8655] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.805810][T10667] netlink: 'syz.7.2395': attribute type 1 has an invalid length. [ 167.832327][T10667] vlan2: entered allmulticast mode [ 167.847974][T10667] veth0_to_bond: entered allmulticast mode [ 167.879829][T10670] loop6: detected capacity change from 0 to 512 [ 167.891044][T10670] ext4: Unknown parameter 'noacl' [ 168.078497][T10686] xfrm0 speed is unknown, defaulting to 1000 [ 168.103435][T10686] xfrm0 speed is unknown, defaulting to 1000 [ 168.112114][T10686] xfrm0 speed is unknown, defaulting to 1000 [ 168.208971][T10686] infiniband syz1: set active [ 168.213865][ T4795] xfrm0 speed is unknown, defaulting to 1000 [ 168.220408][T10686] infiniband syz1: added xfrm0 [ 168.242513][T10686] RDS/IB: syz1: added [ 168.247114][T10686] smc: adding ib device syz1 with port count 1 [ 168.247360][ T8655] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:26: lblock 8 mapped to illegal pblock 8 (length 5) [ 168.253457][T10686] smc: ib device syz1 port 1 has no pnetid [ 168.297527][ T8655] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 168.311766][T10686] xfrm0 speed is unknown, defaulting to 1000 [ 168.319952][ T4789] xfrm0 speed is unknown, defaulting to 1000 [ 168.329395][ T8655] EXT4-fs (loop3): This should not happen!! Data will be lost [ 168.329395][ T8655] [ 168.350352][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 168.431681][T10686] xfrm0 speed is unknown, defaulting to 1000 [ 168.550724][T10686] xfrm0 speed is unknown, defaulting to 1000 [ 168.602579][T10686] xfrm0 speed is unknown, defaulting to 1000 [ 168.696677][T10686] xfrm0 speed is unknown, defaulting to 1000 [ 168.717259][T10715] __nla_validate_parse: 6 callbacks suppressed [ 168.717274][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2414'. [ 168.748804][T10686] xfrm0 speed is unknown, defaulting to 1000 [ 168.780610][T10718] loop2: detected capacity change from 0 to 2048 [ 168.817797][T10718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.893803][T10728] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2418'. [ 169.008778][T10741] xt_hashlimit: size too large, truncated to 1048576 [ 169.085134][T10744] bond1: option mode: unable to set because the bond device is up [ 169.094026][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2423'. [ 169.102899][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2423'. [ 169.123800][T10744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.132212][T10744] bond1: (slave bond0): Enslaving as an active interface with an up link [ 169.151401][T10744] bond1: (slave bond0): Releasing backup interface [ 169.162878][T10747] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2424'. [ 169.172030][T10744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.173332][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2424'. [ 169.244162][T10753] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2427'. [ 169.253153][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2427'. [ 169.262245][T10753] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2427'. [ 169.316099][T10760] loop7: detected capacity change from 0 to 136 [ 169.316319][T10760] iso9660: Unknown parameter 's' [ 169.342347][T10760] xfrm0 speed is unknown, defaulting to 1000 [ 169.380721][T10762] netlink: 'syz.6.2431': attribute type 4 has an invalid length. [ 169.402598][T10762] netlink: 'syz.6.2431': attribute type 4 has an invalid length. [ 169.600961][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2430'. [ 169.661915][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.803280][ T3586] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.803495][ T9942] Bluetooth: hci0: command 0x1003 tx timeout [ 169.816247][T10796] loop2: detected capacity change from 0 to 8192 [ 169.864181][ T4444] loop2: p1 p3 p4 [ 169.868116][ T4444] loop2: p1 start 100663301 is beyond EOD, truncated [ 169.878731][T10810] program syz.3.2440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.880109][T10806] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20002 [ 169.893507][ T4444] loop2: p4 size 65536 extends beyond EOD, truncated [ 169.920346][T10796] loop2: p1 p3 p4 [ 169.936177][T10796] loop2: p1 start 100663301 is beyond EOD, truncated [ 169.949860][T10806] pimreg3: entered allmulticast mode [ 169.953872][T10796] loop2: p4 size 65536 extends beyond EOD, truncated [ 170.003409][ T4444] udevd[4444]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 170.005001][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 170.020350][T10820] FAULT_INJECTION: forcing a failure. [ 170.020350][T10820] name failslab, interval 1, probability 0, space 0, times 0 [ 170.036580][T10820] CPU: 0 UID: 0 PID: 10820 Comm: syz.2.2443 Tainted: G W syzkaller #0 PREEMPT(full) [ 170.036618][T10820] Tainted: [W]=WARN [ 170.036626][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 170.036638][T10820] Call Trace: [ 170.036719][T10820] [ 170.036729][T10820] __dump_stack+0x1d/0x30 [ 170.036756][T10820] dump_stack_lvl+0x95/0xd0 [ 170.036777][T10820] dump_stack+0x15/0x1b [ 170.036796][T10820] should_fail_ex+0x263/0x280 [ 170.036886][T10820] should_failslab+0x8c/0xb0 [ 170.036915][T10820] __kmalloc_cache_noprof+0x64/0x4a0 [ 170.037005][T10820] ? tcp_sendmsg_fastopen+0x172/0x520 [ 170.037039][T10820] tcp_sendmsg_fastopen+0x172/0x520 [ 170.037072][T10820] tcp_sendmsg_locked+0x271b/0x2c40 [ 170.037170][T10820] ? __rcu_read_unlock+0x4e/0x70 [ 170.037254][T10820] ? avc_has_perm_noaudit+0xab/0x130 [ 170.037315][T10820] ? avc_has_perm+0x101/0x190 [ 170.037338][T10820] ? _raw_spin_lock_bh+0x56/0xb0 [ 170.037363][T10820] ? __pfx_tcp_sendmsg+0x10/0x10 [ 170.037471][T10820] tcp_sendmsg+0x2f/0x50 [ 170.037496][T10820] inet_sendmsg+0x76/0xd0 [ 170.037523][T10820] ____sys_sendmsg+0x53a/0x600 [ 170.037627][T10820] ___sys_sendmsg+0x195/0x1e0 [ 170.037649][T10820] ? path_openat+0x1b01/0x2050 [ 170.037690][T10820] __sys_sendmmsg+0x185/0x320 [ 170.037725][T10820] __x64_sys_sendmmsg+0x57/0x70 [ 170.037823][T10820] x64_sys_call+0x27aa/0x3020 [ 170.037850][T10820] do_syscall_64+0x12c/0x370 [ 170.037959][T10820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.037987][T10820] RIP: 0033:0x7f904291bf79 [ 170.038006][T10820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.038083][T10820] RSP: 002b:00007f904136f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 170.038104][T10820] RAX: ffffffffffffffda RBX: 00007f9042b95fa0 RCX: 00007f904291bf79 [ 170.038120][T10820] RDX: 0000000000000001 RSI: 0000200000002000 RDI: 0000000000000003 [ 170.038134][T10820] RBP: 00007f904136f090 R08: 0000000000000000 R09: 0000000000000000 [ 170.038147][T10820] R10: 000000002400c040 R11: 0000000000000246 R12: 0000000000000001 [ 170.038212][T10820] R13: 00007f9042b96038 R14: 00007f9042b95fa0 R15: 00007fffee47f568 [ 170.038230][T10820] [ 170.288668][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 170.300009][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 170.442634][T10844] netlink: 'syz.6.2448': attribute type 4 has an invalid length. [ 170.464998][T10844] netlink: 'syz.6.2448': attribute type 4 has an invalid length. [ 170.481887][T10851] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 170.540605][T10855] netlink: 'syz.7.2451': attribute type 4 has an invalid length. [ 170.574917][T10855] netlink: 'syz.7.2451': attribute type 4 has an invalid length. [ 170.621897][T10863] sctp: [Deprecated]: syz.6.2453 (pid 10863) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.621897][T10863] Use struct sctp_sack_info instead [ 170.663039][T10871] loop7: detected capacity change from 0 to 1024 [ 170.679990][T10871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.709964][T10871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.751515][T10871] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 170.951115][ T9974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.084341][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 171.084361][ T28] audit: type=1326 audit(1770833551.246:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.6.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 171.164408][ T28] audit: type=1326 audit(1770833551.246:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.6.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 171.206791][T10935] FAULT_INJECTION: forcing a failure. [ 171.206791][T10935] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 171.233145][ T28] audit: type=1326 audit(1770833551.276:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.6.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 171.270084][T10935] CPU: 1 UID: 0 PID: 10935 Comm: syz.6.2471 Tainted: G W syzkaller #0 PREEMPT(full) [ 171.270161][T10935] Tainted: [W]=WARN [ 171.270168][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 171.270183][T10935] Call Trace: [ 171.270190][T10935] [ 171.270198][T10935] __dump_stack+0x1d/0x30 [ 171.270240][T10935] dump_stack_lvl+0x95/0xd0 [ 171.270266][T10935] dump_stack+0x15/0x1b [ 171.270357][T10935] should_fail_ex+0x263/0x280 [ 171.270391][T10935] should_fail_alloc_page+0xf2/0x100 [ 171.270426][T10935] __alloc_frozen_pages_noprof+0x108/0x350 [ 171.270539][T10935] alloc_pages_mpol+0xb3/0x260 [ 171.270565][T10935] ? css_rstat_updated+0xbb/0x280 [ 171.270606][T10935] vma_alloc_folio_noprof+0x1a9/0x300 [ 171.270631][T10935] handle_mm_fault+0x111f/0x3030 [ 171.270703][T10935] ? vma_start_read+0x1c7/0x2c0 [ 171.270740][T10935] do_user_addr_fault+0x62f/0x1050 [ 171.270776][T10935] ? ksys_mmap_pgoff+0xc1/0x310 [ 171.270801][T10935] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 171.270832][T10935] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 171.270914][T10935] ? irqentry_exit+0x3c/0x520 [ 171.271022][T10935] exc_page_fault+0x62/0xa0 [ 171.271089][T10935] asm_exc_page_fault+0x26/0x30 [ 171.271114][T10935] RIP: 0033:0x7f1c0cde37e3 [ 171.271193][T10935] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 171.271212][T10935] RSP: 002b:00007f1c0b97e470 EFLAGS: 00010206 [ 171.271230][T10935] RAX: 0000000000006000 RBX: 00007f1c0b97e530 RCX: 00007f1c0355f000 [ 171.271247][T10935] RDX: 00007f1c0b97e6d0 RSI: 0000000000000015 RDI: 00007f1c0b97e5d0 [ 171.271283][T10935] RBP: 00000000000000d2 R08: 0000000000000009 R09: 00000000000001d2 [ 171.271299][T10935] R10: 00000000000001dc R11: 00007f1c0b97e530 R12: 0000000000000001 [ 171.271315][T10935] R13: 00007f1c0cfe1ea0 R14: 000000000000002e R15: 00007f1c0b97e5d0 [ 171.271338][T10935] [ 171.302810][ T28] audit: type=1326 audit(1770833551.276:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.6.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 171.304225][T10935] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 171.309352][ T28] audit: type=1326 audit(1770833551.276:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.6.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 171.323940][T10935] loop6: detected capacity change from 0 to 256 [ 171.375366][ T28] audit: type=1326 audit(1770833551.276:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.6.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 171.710914][T10953] : renamed from bond_slave_0 [ 171.818170][ T28] audit: type=1326 audit(1770833551.276:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.6.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 171.918281][ T28] audit: type=1326 audit(1770833551.276:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.6.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 171.918337][ T28] audit: type=1326 audit(1770833551.276:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.6.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 171.918383][ T28] audit: type=1326 audit(1770833551.276:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10914 comm="syz.6.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0cf2bf79 code=0x7ffc0000 [ 172.265805][T11010] team0: Caught tx_queue_len zero misconfig [ 172.303803][ T8640] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.304379][ T8640] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.304412][ T8640] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.304505][ T8640] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.332649][T11013] lo: Caught tx_queue_len zero misconfig [ 172.768752][T11027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.892606][ T3480] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 173.010798][T11044] loop2: detected capacity change from 0 to 1024 [ 173.017944][T11044] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.038318][T11044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.074145][T11044] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 173.313808][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.701319][T11109] xfrm0 speed is unknown, defaulting to 1000 [ 173.722622][ T3480] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 174.020837][T11152] __nla_validate_parse: 16 callbacks suppressed [ 174.020857][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2537'. [ 174.062892][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2537'. [ 174.071991][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2537'. [ 174.083293][T11162] loop3: detected capacity change from 0 to 512 [ 174.218564][T11177] netlink: 'syz.6.2545': attribute type 1 has an invalid length. [ 174.358377][T11190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2547'. [ 174.406981][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2547'. [ 174.420453][T11192] syzkaller0: entered promiscuous mode [ 174.426010][T11192] syzkaller0: entered allmulticast mode [ 174.602306][T11203] netlink: 'syz.5.2555': attribute type 1 has an invalid length. [ 174.623690][T11203] 8021q: adding VLAN 0 to HW filter on device bond8 [ 174.638600][T11203] vlan0: entered allmulticast mode [ 174.648598][T11203] bond8: (slave vlan0): Opening slave failed [ 174.719916][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2560'. [ 174.774175][T11222] loop6: detected capacity change from 0 to 512 [ 174.812880][T11222] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 174.977964][T11239] loop6: detected capacity change from 0 to 512 [ 174.989179][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2572'. [ 175.013971][T11239] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.014431][T11249] loop7: detected capacity change from 0 to 512 [ 175.056869][T11249] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 175.061684][T11239] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 175.075479][T11249] EXT4-fs (loop7): group descriptors corrupted! [ 175.106473][T11239] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2569: bg 0: block 248: padding at end of block bitmap is not set [ 175.124542][T11239] loop6: lost filesystem error report for type 5 error -117 [ 175.149624][T11239] EXT4-fs error (device loop6): ext4_acquire_dquot:6991: comm syz.6.2569: Failed to acquire dquot type 1 [ 175.193360][T11239] loop6: lost filesystem error report for type 5 error -117 [ 175.196141][T11263] loop7: detected capacity change from 0 to 164 [ 175.222185][T11239] EXT4-fs (loop6): 1 truncate cleaned up [ 175.228290][T11239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 175.251207][T11263] isofs_fill_super: get root inode failed [ 175.303830][T11270] loop3: detected capacity change from 0 to 512 [ 175.328501][ T7631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 175.351884][T11270] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2580: ea_inode with extended attributes [ 175.382538][T11270] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 175.392884][T11270] EXT4-fs (loop3): Remounting filesystem read-only [ 175.416855][T11270] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 175.426311][T11270] EXT4-fs (loop3): 1 orphan inode deleted [ 175.432704][T11270] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.445726][T11270] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 175.458009][T11283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2585'. [ 175.486911][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2585'. [ 175.503291][T11283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2585'. [ 175.672642][T11307] xt_hashlimit: size too large, truncated to 1048576 [ 175.773568][T11310] loop2: detected capacity change from 0 to 2048 [ 175.806297][T11310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.958865][T11327] 9p: Bad value for 'wfdno' [ 176.096526][T11341] FAULT_INJECTION: forcing a failure. [ 176.096526][T11341] name failslab, interval 1, probability 0, space 0, times 0 [ 176.109753][T11341] CPU: 1 UID: 0 PID: 11341 Comm: syz.3.2605 Tainted: G W syzkaller #0 PREEMPT(full) [ 176.109861][T11341] Tainted: [W]=WARN [ 176.109870][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 176.109884][T11341] Call Trace: [ 176.109900][T11341] [ 176.109909][T11341] __dump_stack+0x1d/0x30 [ 176.109933][T11341] dump_stack_lvl+0x95/0xd0 [ 176.109954][T11341] dump_stack+0x15/0x1b [ 176.109976][T11341] should_fail_ex+0x263/0x280 [ 176.110076][T11341] should_failslab+0x8c/0xb0 [ 176.110130][T11341] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 176.110165][T11341] ? __alloc_skb+0x2f0/0x4b0 [ 176.110281][T11341] ? __list_del_entry_valid_or_report+0x65/0x130 [ 176.110306][T11341] __alloc_skb+0x2f0/0x4b0 [ 176.110460][T11341] ? __alloc_skb+0x219/0x4b0 [ 176.110493][T11341] sock_omalloc+0x81/0xf0 [ 176.110514][T11341] msg_zerocopy_realloc+0x84/0x420 [ 176.110537][T11341] ? __rcu_read_unlock+0x4e/0x70 [ 176.110573][T11341] tcp_sendmsg_locked+0x2578/0x2c40 [ 176.110857][T11341] ? __rcu_read_unlock+0x4e/0x70 [ 176.110910][T11341] ? avc_has_perm_noaudit+0xab/0x130 [ 176.110938][T11341] ? avc_has_perm+0x101/0x190 [ 176.111071][T11341] ? _raw_spin_lock_bh+0x56/0xb0 [ 176.111098][T11341] ? __pfx_tcp_sendmsg+0x10/0x10 [ 176.111128][T11341] tcp_sendmsg+0x2f/0x50 [ 176.111157][T11341] inet_sendmsg+0x76/0xd0 [ 176.111229][T11341] ____sys_sendmsg+0x53a/0x600 [ 176.111251][T11341] ___sys_sendmsg+0x195/0x1e0 [ 176.111269][T11341] ? path_openat+0x1b01/0x2050 [ 176.111308][T11341] __sys_sendmmsg+0x185/0x320 [ 176.111346][T11341] __x64_sys_sendmmsg+0x57/0x70 [ 176.111366][T11341] x64_sys_call+0x27aa/0x3020 [ 176.111389][T11341] do_syscall_64+0x12c/0x370 [ 176.111425][T11341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.111519][T11341] RIP: 0033:0x7f3bbbe5bf79 [ 176.111589][T11341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.111612][T11341] RSP: 002b:00007f3bba8af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 176.111637][T11341] RAX: ffffffffffffffda RBX: 00007f3bbc0d5fa0 RCX: 00007f3bbbe5bf79 [ 176.111655][T11341] RDX: 0000000000000001 RSI: 0000200000002000 RDI: 0000000000000005 [ 176.111671][T11341] RBP: 00007f3bba8af090 R08: 0000000000000000 R09: 0000000000000000 [ 176.111684][T11341] R10: 000000002400c040 R11: 0000000000000246 R12: 0000000000000001 [ 176.111765][T11341] R13: 00007f3bbc0d6038 R14: 00007f3bbc0d5fa0 R15: 00007fffd9c85998 [ 176.111836][T11341] [ 176.446709][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 176.446726][ T28] audit: type=1400 audit(1770833556.607:2721): avc: denied { ioctl } for pid=11356 comm="syz.7.2610" path="socket:[33704]" dev="sockfs" ino=33704 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 176.573487][T11368] loop7: detected capacity change from 0 to 512 [ 176.583510][T11368] EXT4-fs: Ignoring removed bh option [ 176.605773][T11373] __vm_enough_memory: pid: 11373, comm: syz.5.2616, bytes: 4503599627366400 not enough memory for the allocation [ 176.627502][T11368] EXT4-fs: Ignoring removed i_version option [ 176.639026][ T28] audit: type=1400 audit(1770833556.797:2722): avc: denied { getopt } for pid=11372 comm="syz.5.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.641447][T11373] sctp: [Deprecated]: syz.5.2616 (pid 11373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.641447][T11373] Use struct sctp_sack_info instead [ 176.692283][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.747420][T11368] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.760974][T11377] loop2: detected capacity change from 0 to 512 [ 176.803234][T11377] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 176.842312][T11368] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.890967][T11377] EXT4-fs (loop2): 1 truncate cleaned up [ 176.904473][ T28] audit: type=1400 audit(1770833557.067:2723): avc: denied { connect } for pid=11386 comm="syz.6.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.910027][T11377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.961174][T11377] ipvlan0: entered allmulticast mode [ 176.968281][ T9974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.003777][ T28] audit: type=1400 audit(1770833557.147:2724): avc: denied { getopt } for pid=11386 comm="syz.6.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 177.087097][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.174461][T11404] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 177.181114][T11404] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.220636][T11411] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 177.227281][T11411] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.235056][T11404] vhci_hcd vhci_hcd.0: Device attached [ 177.253708][T11411] vhci_hcd vhci_hcd.0: Device attached [ 177.253790][T11410] loop6: detected capacity change from 0 to 2048 [ 177.265773][T11411] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 177.272389][T11411] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 177.333443][T11404] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 177.340130][T11404] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.348586][T11410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.360841][T11411] vhci_hcd vhci_hcd.0: Device attached [ 177.393044][T11422] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(22) [ 177.399716][T11422] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.421957][T11411] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(19) [ 177.428583][T11411] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.442167][ T3398] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 177.468859][T11404] vhci_hcd vhci_hcd.0: Device attached [ 177.476814][T11429] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.485143][T11422] vhci_hcd vhci_hcd.0: Device attached [ 177.494253][T11411] vhci_hcd vhci_hcd.0: Device attached [ 177.504330][ T3398] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 177.524979][T11404] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.535677][T11404] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.568649][T11423] vhci_hcd: connection closed [ 177.568874][ T8655] vhci_hcd vhci_hcd.2: stop threads [ 177.572140][T11425] vhci_hcd: connection closed [ 177.573839][ T8655] vhci_hcd vhci_hcd.2: release socket [ 177.590366][T11405] vhci_hcd: connection reset by peer [ 177.591495][T11418] vhci_hcd: connection closed [ 177.595776][T11414] vhci_hcd: connection closed [ 177.595879][T11412] vhci_hcd: connection closed [ 177.607547][ T8655] vhci_hcd vhci_hcd.2: disconnect device [ 177.630488][ T8655] vhci_hcd vhci_hcd.2: stop threads [ 177.633340][T11435] FAULT_INJECTION: forcing a failure. [ 177.633340][T11435] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 177.641432][ T8655] vhci_hcd vhci_hcd.2: release socket [ 177.653481][T11435] CPU: 0 UID: 0 PID: 11435 Comm: syz.7.2631 Tainted: G W syzkaller #0 PREEMPT(full) [ 177.653516][T11435] Tainted: [W]=WARN [ 177.653524][T11435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 177.653536][T11435] Call Trace: [ 177.653543][T11435] [ 177.653551][T11435] __dump_stack+0x1d/0x30 [ 177.653630][T11435] dump_stack_lvl+0x95/0xd0 [ 177.653703][T11435] dump_stack+0x15/0x1b [ 177.653725][T11435] should_fail_ex+0x263/0x280 [ 177.653754][T11435] should_fail_alloc_page+0xf2/0x100 [ 177.653817][T11435] __alloc_frozen_pages_noprof+0x108/0x350 [ 177.653869][T11435] alloc_pages_mpol+0xb3/0x260 [ 177.653889][T11435] ? css_rstat_updated+0xbb/0x280 [ 177.653991][T11435] vma_alloc_folio_noprof+0x1a9/0x300 [ 177.654016][T11435] handle_mm_fault+0x111f/0x3030 [ 177.654041][T11435] ? vma_start_read+0x1c7/0x2c0 [ 177.654076][T11435] do_user_addr_fault+0x62f/0x1050 [ 177.654235][T11435] ? ksys_mmap_pgoff+0xc1/0x310 [ 177.654255][T11435] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 177.654283][T11435] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 177.654318][T11435] ? irqentry_exit+0x3c/0x520 [ 177.654401][T11435] exc_page_fault+0x62/0xa0 [ 177.654427][T11435] asm_exc_page_fault+0x26/0x30 [ 177.654449][T11435] RIP: 0033:0x7f1a338737e3 [ 177.654517][T11435] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 177.654537][T11435] RSP: 002b:00007f1a3240e470 EFLAGS: 00010202 [ 177.654588][T11435] RAX: 000000000000a000 RBX: 00007f1a3240e530 RCX: 00007f1a29fef000 [ 177.654604][T11435] RDX: 00007f1a3240e6d0 RSI: 0000000000000007 RDI: 00007f1a3240e5d0 [ 177.654633][T11435] RBP: 00000000000000ff R08: 0000000000000008 R09: 00000000000000cd [ 177.654647][T11435] R10: 00000000000000da R11: 00007f1a3240e530 R12: 0000000000000001 [ 177.654662][T11435] R13: 00007f1a33a71ea0 R14: 0000000000000073 R15: 00007f1a3240e5d0 [ 177.654710][T11435] [ 177.654720][T11435] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 177.702929][ T8655] vhci_hcd vhci_hcd.2: disconnect device [ 177.712644][T11435] loop7: detected capacity change from 0 to 256 [ 178.013587][ T8655] vhci_hcd vhci_hcd.2: stop threads [ 178.025078][ T8655] vhci_hcd vhci_hcd.2: release socket [ 178.035762][ T8655] vhci_hcd vhci_hcd.2: disconnect device [ 178.090631][ T8655] vhci_hcd vhci_hcd.2: stop threads [ 178.100091][T10880] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 178.115090][ T8655] vhci_hcd vhci_hcd.2: release socket [ 178.138262][ T8655] vhci_hcd vhci_hcd.2: disconnect device [ 178.176849][ T8655] vhci_hcd vhci_hcd.2: stop threads [ 178.187140][ T7631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.199459][ T8655] vhci_hcd vhci_hcd.2: release socket [ 178.202431][T11441] support for the xor transformation has been removed. [ 178.205358][ T8655] vhci_hcd vhci_hcd.2: disconnect device [ 178.222346][ T8655] vhci_hcd vhci_hcd.2: stop threads [ 178.227604][ T8655] vhci_hcd vhci_hcd.2: release socket [ 178.233762][ T8655] vhci_hcd vhci_hcd.2: disconnect device [ 178.252245][T11444] loop6: detected capacity change from 0 to 128 [ 178.258758][T11444] ext4: Unknown parameter 'hash' [ 178.297738][ T28] audit: type=1326 audit(1770833558.457:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.7.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a339bbf79 code=0x7ffc0000 [ 178.335937][ T28] audit: type=1326 audit(1770833558.457:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.7.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1a339bbf79 code=0x7ffc0000 [ 178.359775][ T28] audit: type=1326 audit(1770833558.457:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.7.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a339bbf79 code=0x7ffc0000 [ 178.383963][ T28] audit: type=1326 audit(1770833558.457:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.7.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a3397c84e code=0x7ffc0000 [ 178.408013][ T28] audit: type=1326 audit(1770833558.457:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.7.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1a339bd297 code=0x7ffc0000 [ 178.446630][ T28] audit: type=1326 audit(1770833558.457:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.7.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a339bbf79 code=0x7ffc0000 [ 178.521551][T11456] loop2: detected capacity change from 0 to 1024 [ 178.537834][T11461] tipc: Enabling of bearer rejected, failed to enable media [ 178.596554][T11456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.617318][T11467] lo: left promiscuous mode [ 178.621852][T11467] lo: left allmulticast mode [ 178.656153][T11467] tunl0: left promiscuous mode [ 178.660948][T11467] tunl0: left allmulticast mode [ 178.683731][T11467] gre0: left promiscuous mode [ 178.699435][T11467] gre0: left allmulticast mode [ 178.716749][T11467] gretap0: left promiscuous mode [ 178.722253][T11453] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.2637: missing EA_INODE flag [ 178.736002][T11453] EXT4-fs (loop2): Remounting filesystem read-only [ 178.744881][T11467] gretap0: left allmulticast mode [ 178.753937][T11467] erspan0: left promiscuous mode [ 178.758933][T11467] erspan0: left allmulticast mode [ 178.765127][T11467] ip_vti0: left promiscuous mode [ 178.770126][T11467] ip_vti0: left allmulticast mode [ 178.776350][T11467] ip6_vti0: left promiscuous mode [ 178.781418][T11467] ip6_vti0: left allmulticast mode [ 178.787809][T11467] sit0: left promiscuous mode [ 178.793071][T11467] sit0: left allmulticast mode [ 178.802615][T11467] ip6tnl0: left promiscuous mode [ 178.807594][T11467] ip6tnl0: left allmulticast mode [ 178.814597][T11479] loop6: detected capacity change from 0 to 256 [ 178.829921][T11467] ip6gre0: left promiscuous mode [ 178.839907][T11467] ip6gre0: left allmulticast mode [ 178.854860][T11467] syz_tun: left promiscuous mode [ 178.859970][T11467] syz_tun: left allmulticast mode [ 178.866848][T11467] bridge0: left promiscuous mode [ 178.872144][T11467] bridge0: left allmulticast mode [ 178.898857][T11467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.935652][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.052079][T11493] __nla_validate_parse: 12 callbacks suppressed [ 179.052096][T11493] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2654'. [ 179.070144][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2654'. [ 179.070279][T11493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.107496][T11493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.115961][T11498] loop7: detected capacity change from 0 to 512 [ 179.127022][T11498] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.127173][T11498] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.314335][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2659'. [ 179.390178][T11520] openvswitch: netlink: Missing key (keys=40, expected=100) [ 179.412750][T11522] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2664'. [ 179.531250][T11532] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2667'. [ 179.538233][T11532] wg2 speed is unknown, defaulting to 1000 [ 179.546274][T11532] wg2 speed is unknown, defaulting to 1000 [ 179.546552][T11532] wg2 speed is unknown, defaulting to 1000 [ 179.558967][T11532] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 179.562934][T11532] wg2 speed is unknown, defaulting to 1000 [ 179.573485][T11532] wg2 speed is unknown, defaulting to 1000 [ 179.573827][T11532] wg2 speed is unknown, defaulting to 1000 [ 179.585602][T11532] wg2 speed is unknown, defaulting to 1000 [ 179.585996][T11532] wg2 speed is unknown, defaulting to 1000 [ 179.694020][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2668'. [ 179.694038][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2668'. [ 179.694059][T11535] netlink: 'syz.5.2668': attribute type 11 has an invalid length. [ 179.694074][T11535] netlink: 'syz.5.2668': attribute type 13 has an invalid length. [ 179.823789][ T9974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.991993][T11557] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.992137][T11557] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.056163][T11561] IPVS: Error connecting to the multicast addr [ 180.092011][T11565] loop3: detected capacity change from 0 to 512 [ 180.115758][T11565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.145973][T11565] ext4 filesystem being mounted at /529/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.174916][T11574] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2684'. [ 180.193591][T11565] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.2681: corrupted inode contents [ 180.193713][T11565] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #4: comm syz.3.2681: mark_inode_dirty error [ 180.218290][T11565] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.2681: corrupted inode contents [ 180.218382][T11565] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.2681: mark_inode_dirty error [ 180.287992][T11565] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.2681: Failed to acquire dquot type 1 [ 180.299426][T11577] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.2681: corrupted inode contents [ 180.323474][T11577] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #4: comm syz.3.2681: mark_inode_dirty error [ 180.350472][T11582] netlink: 'syz.7.2686': attribute type 1 has an invalid length. [ 180.357959][T11577] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #4: comm syz.3.2681: corrupted inode contents [ 180.371023][T11577] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.2681: mark_inode_dirty error [ 180.376605][T11586] loop6: detected capacity change from 0 to 2048 [ 180.394657][T11582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.395652][T11577] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.2681: Failed to acquire dquot type 1 [ 180.410507][T11582] vlan3: entered allmulticast mode [ 180.427098][T11582] bond2: (slave vlan3): making interface the new active one [ 180.444499][T11582] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 180.452430][T11586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.453551][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.486468][ T7631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.527879][T11597] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 180.582738][T11605] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2695'. [ 180.635171][T11612] dummy0: entered promiscuous mode [ 180.641904][T11612] dummy0: entered allmulticast mode [ 180.652368][T11612] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.684897][T11612] EXT4-fs error (device loop7): ext4_acquire_dquot:6991: comm syz.7.2698: Failed to acquire dquot type 1 [ 180.709963][T11612] loop7: lost filesystem error report for type 5 error -117 [ 180.712855][T11612] EXT4-fs (loop7): 1 truncate cleaned up [ 180.726414][T11612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 180.753188][ T9974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 180.814571][T11628] xfrm0 speed is unknown, defaulting to 1000 [ 180.859277][T11635] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2707'. [ 180.893077][T11636] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2049 sclass=netlink_audit_socket pid=11636 comm=syz.7.2708 [ 180.913909][T11628] wg2 speed is unknown, defaulting to 1000 [ 180.954945][T11644] 9p: Bad value for 'rfdno' [ 180.983577][T11642] netlink: 'syz.5.2710': attribute type 1 has an invalid length. [ 181.059160][T11642] 8021q: adding VLAN 0 to HW filter on device bond9 [ 181.081445][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 181.177745][T11660] xt_hashlimit: size too large, truncated to 1048576 [ 181.305501][T11668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.362085][ T9974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.451915][T11681] x_tables: duplicate underflow at hook 1 [ 181.591518][T11671] set_capacity_and_notify: 3 callbacks suppressed [ 181.591563][T11671] loop2: detected capacity change from 0 to 1024 [ 181.630081][T11671] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 181.638999][T11671] System zones: 0-1, 3-36 [ 181.645926][T11671] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2720: bad orphan inode 134217728 [ 181.657033][T11671] loop2: lost filesystem error report for type 5 error -117 [ 181.660242][T11671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.690824][T11695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.700385][T11695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.710392][T11695] netlink: 'syz.6.2727': attribute type 13 has an invalid length. [ 181.793442][T11695] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.800779][T11695] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.819821][T11714] sctp: [Deprecated]: syz.3.2734 (pid 11714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.819821][T11714] Use struct sctp_sack_info instead [ 181.843101][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.883833][T11720] loop2: detected capacity change from 0 to 1024 [ 181.902706][T11695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.920982][T11720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.940531][T11720] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.2735: missing EA_INODE flag [ 182.001715][T11720] EXT4-fs (loop2): Remounting filesystem read-only [ 182.027087][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 182.027106][ T28] audit: type=1400 audit(1770833562.188:2776): avc: denied { link } for pid=11717 comm="syz.2.2735" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 182.080037][ T3480] xfrm0 speed is unknown, defaulting to 1000 [ 182.086477][ T8636] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.101358][ T3480] syz1: Port: 1 Link DOWN [ 182.101746][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.114972][ T8636] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.141558][ T8636] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.162946][ T8636] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.174287][ T3480] xfrm0 speed is unknown, defaulting to 1000 [ 182.180900][T11738] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 182.191909][T11738] netlink: 'syz.3.2742': attribute type 2 has an invalid length. [ 182.199823][ T8636] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.244003][ T8636] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.269144][ T8636] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.311751][ T8636] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.345937][T11753] netlink: 'syz.3.2748': attribute type 4 has an invalid length. [ 182.375525][T11753] netlink: 'syz.3.2748': attribute type 4 has an invalid length. [ 182.442328][T11765] netlink: 'syz.2.2753': attribute type 1 has an invalid length. [ 182.488148][T11765] 8021q: adding VLAN 0 to HW filter on device bond7 [ 182.509844][T11765] loop2: detected capacity change from 0 to 512 [ 182.539055][T11765] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.582123][T11765] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 182.601148][ T3398] usb 5-1: enqueue for inactive port 0 [ 182.606712][ T3398] usb 5-1: enqueue for inactive port 0 [ 182.622623][T11765] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 182.644102][T11765] EXT4-fs error (device loop2): ext4_acquire_dquot:6991: comm syz.2.2753: Failed to acquire dquot type 1 [ 182.655583][T11765] loop2: lost filesystem error report for type 5 error -5 [ 182.657430][T11765] EXT4-fs (loop2): 1 truncate cleaned up [ 182.689033][T11765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 182.702374][ T3398] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 182.747555][T11765] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 182.779609][T11765] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 182.823753][T11791] loop3: detected capacity change from 0 to 512 [ 182.827789][T11765] EXT4-fs error (device loop2): ext4_acquire_dquot:6991: comm syz.2.2753: Failed to acquire dquot type 1 [ 182.856108][T11791] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 182.864133][T11791] EXT4-fs (loop3): orphan cleanup on readonly fs [ 182.870830][T11791] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 182.879488][T11791] EXT4-fs warning (device loop3): ext4_enable_quotas:7226: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 182.894023][T11791] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 182.902214][T11791] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2763: corrupted inode contents [ 182.914093][T11791] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 182.914480][T11791] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.2763: mark_inode_dirty error [ 182.934967][T11791] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 182.935262][T11791] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2763: corrupted inode contents [ 182.956353][T11791] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 182.956549][T11791] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2763: mark_inode_dirty error [ 182.976995][T11791] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 182.977215][T11791] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2763: corrupted inode contents [ 182.998244][T11791] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 182.998413][T11791] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 182.998440][ T28] audit: type=1400 audit(1770833563.158:2777): avc: denied { setattr } for pid=11797 comm="syz.7.2766" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 182.998470][ T28] audit: type=1400 audit(1770833563.158:2778): avc: denied { ioctl } for pid=11797 comm="syz.7.2766" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 183.007626][T11791] loop3: lost filesystem error report for type 5 error -117 [ 183.074826][T11791] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2763: corrupted inode contents [ 183.094091][T11791] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 183.094396][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 183.124489][T11791] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.2763: mark_inode_dirty error [ 183.135585][T11791] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 183.135885][T11791] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 183.153894][T11791] loop3: lost filesystem error report for type 5 error -117 [ 183.154341][T11791] EXT4-fs (loop3): 1 truncate cleaned up [ 183.167846][T11791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.199959][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.239528][T11801] FAULT_INJECTION: forcing a failure. [ 183.239528][T11801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 183.286629][T11801] CPU: 0 UID: 0 PID: 11801 Comm: syz.7.2768 Tainted: G W syzkaller #0 PREEMPT(full) [ 183.286670][T11801] Tainted: [W]=WARN [ 183.286679][T11801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 183.286694][T11801] Call Trace: [ 183.286700][T11801] [ 183.286709][T11801] __dump_stack+0x1d/0x30 [ 183.286753][T11801] dump_stack_lvl+0x95/0xd0 [ 183.286777][T11801] dump_stack+0x15/0x1b [ 183.286863][T11801] should_fail_ex+0x263/0x280 [ 183.286907][T11801] should_fail_alloc_page+0xf2/0x100 [ 183.286963][T11801] __alloc_frozen_pages_noprof+0x108/0x350 [ 183.287075][T11801] alloc_pages_mpol+0xb3/0x260 [ 183.287096][T11801] ? css_rstat_updated+0xbb/0x280 [ 183.287125][T11801] vma_alloc_folio_noprof+0x1a9/0x300 [ 183.287220][T11801] handle_mm_fault+0x111f/0x3030 [ 183.287251][T11801] ? vma_start_read+0x1c7/0x2c0 [ 183.287293][T11801] do_user_addr_fault+0x62f/0x1050 [ 183.287360][T11801] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 183.287430][T11801] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 183.287464][T11801] ? irqentry_exit+0x3c/0x520 [ 183.287539][T11801] exc_page_fault+0x62/0xa0 [ 183.287568][T11801] asm_exc_page_fault+0x26/0x30 [ 183.287592][T11801] RIP: 0033:0x7f1a33873898 [ 183.287615][T11801] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 183.287637][T11801] RSP: 002b:00007f1a3240e470 EFLAGS: 00010202 [ 183.287670][T11801] RAX: 000000000000e000 RBX: 00007f1a3240e530 RCX: 0000000000000009 [ 183.287761][T11801] RDX: 0000000000000bfd RSI: 0000000000003bfe RDI: 00007f1a3240e5d0 [ 183.287774][T11801] RBP: 000000000000000a R08: 00007f1a29fef000 R09: 0000000000000073 [ 183.287835][T11801] R10: 0000200000000742 R11: 00000000000002cf R12: 0000000000003001 [ 183.287851][T11801] R13: 00007f1a33a71ea0 R14: 000000000000001b R15: 00007f1a3240e5d0 [ 183.287872][T11801] [ 183.459328][T11801] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 183.493770][T11801] loop7: detected capacity change from 0 to 256 [ 183.691412][T11825] tipc: Enabling of bearer rejected, failed to enable media [ 183.853675][T11830] team_slave_0: entered promiscuous mode [ 183.859417][T11830] team_slave_1: entered promiscuous mode [ 183.867148][T11830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.870260][T11829] team_slave_0: left promiscuous mode [ 183.883796][T11829] team_slave_1: left promiscuous mode [ 184.036991][T11832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.050716][T11832] team0: left promiscuous mode [ 184.055652][T11832] team_slave_0: left promiscuous mode [ 184.061366][T11832] team_slave_1: left promiscuous mode [ 184.067439][T11832] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.079627][T11832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.133052][T11837] loop7: detected capacity change from 0 to 512 [ 184.147719][ T4792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 184.210260][T11837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.233090][T11837] ext4 filesystem being mounted at /120/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.237098][T11848] openvswitch: netlink: Missing key (keys=40, expected=100) [ 184.253841][T11837] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #4: comm syz.7.2779: corrupted inode contents [ 184.270962][T11850] support for cryptoloop has been removed. Use dm-crypt instead. [ 184.280741][T11837] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #4: comm syz.7.2779: mark_inode_dirty error [ 184.307588][ T28] audit: type=1400 audit(1770833564.468:2779): avc: denied { setattr } for pid=11836 comm="syz.7.2779" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 184.330495][T11837] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #4: comm syz.7.2779: corrupted inode contents [ 184.360198][T11837] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #4: comm syz.7.2779: mark_inode_dirty error [ 184.388896][T11855] xfrm0: entered promiscuous mode [ 184.400804][T11837] Quota error (device loop7): write_blk: dquota write failed [ 184.405763][T11855] __nla_validate_parse: 10 callbacks suppressed [ 184.405778][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2779'. [ 184.409118][T11837] EXT4-fs error (device loop7): ext4_acquire_dquot:6991: comm syz.7.2779: Failed to acquire dquot type 1 [ 184.438065][T11866] 9p: Bad value for 'wfdno' [ 184.443870][T11857] 8021q: adding VLAN 0 to HW filter on device bond5 [ 184.454851][T11867] loop3: detected capacity change from 0 to 512 [ 184.486998][T11867] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.501776][T11867] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.2790: Failed to acquire dquot type 1 [ 184.513411][T11867] loop3: lost filesystem error report for type 5 error -5 [ 184.513877][T11867] EXT4-fs (loop3): 1 truncate cleaned up [ 184.528268][ T9974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.528319][T11867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 184.561074][T11857] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.2790: Failed to acquire dquot type 1 [ 184.590823][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2795'. [ 184.618632][T11877] vlan1: entered promiscuous mode [ 184.638025][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 184.755739][T11891] xfrm0 speed is unknown, defaulting to 1000 [ 184.881089][T11891] wg2 speed is unknown, defaulting to 1000 [ 184.920969][ T8654] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 184.966964][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2802'. [ 185.033486][T11905] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2805'. [ 185.086655][T11903] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2804'. [ 185.160922][ T4792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 185.260704][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 185.278471][T11925] loop7: detected capacity change from 0 to 512 [ 185.287812][T11925] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.288466][T11927] validate_nla: 2 callbacks suppressed [ 185.288481][T11927] netlink: 'syz.6.2815': attribute type 1 has an invalid length. [ 185.312357][T11925] EXT4-fs error (device loop7): ext4_acquire_dquot:6991: comm syz.7.2814: Failed to acquire dquot type 1 [ 185.312383][T11925] loop7: lost filesystem error report for type 5 error -117 [ 185.330919][T11925] EXT4-fs (loop7): 1 truncate cleaned up [ 185.331323][T11925] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 185.371664][T11932] loop6: detected capacity change from 0 to 1024 [ 185.379334][ T9974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 185.423989][T11932] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.467435][ T7631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.518506][T11943] dummy0: left allmulticast mode [ 185.576548][T11943] vlan3: left allmulticast mode [ 185.619877][T11943] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2820'. [ 185.699375][T11959] netlink: 'syz.3.2826': attribute type 1 has an invalid length. [ 185.722795][T11959] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.733610][T11962] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 185.742296][T11962] team0: Port device batadv1 added [ 185.747902][T11959] loop3: detected capacity change from 0 to 512 [ 185.755980][T11959] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.775319][T11959] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.2826: Failed to acquire dquot type 1 [ 185.788861][T11959] loop3: lost filesystem error report for type 5 error -5 [ 185.789543][T11959] EXT4-fs (loop3): 1 truncate cleaned up [ 185.805953][T11959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 185.820951][T11959] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.2826: Failed to acquire dquot type 1 [ 185.851845][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 185.895090][T11973] netlink: 'syz.6.2831': attribute type 1 has an invalid length. [ 186.066063][T11973] 8021q: adding VLAN 0 to HW filter on device bond7 [ 186.114961][ T8636] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 186.142818][ T8636] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 186.152184][T11984] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2833'. [ 186.162664][T11984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2833'. [ 186.201101][ T3405] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 186.370743][T12005] xt_CT: No such helper "pptp" [ 186.397004][T12013] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2841'. [ 186.504262][T11975] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.535765][T11975] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.548568][T12026] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2845'. [ 186.668455][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.679923][T12037] netlink: 'syz.5.2850': attribute type 1 has an invalid length. [ 186.688986][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 186.701681][T12037] netlink: 'syz.5.2850': attribute type 2 has an invalid length. [ 186.748415][T12044] netlink: 'syz.3.2854': attribute type 21 has an invalid length. [ 186.782973][T12048] xfrm0 speed is unknown, defaulting to 1000 [ 186.867622][T12048] wg2 speed is unknown, defaulting to 1000 [ 186.881403][T12054] program syz.5.2856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.989582][T12069] set_capacity_and_notify: 1 callbacks suppressed [ 186.989601][T12069] loop7: detected capacity change from 0 to 764 [ 187.019336][T12043] loop2: detected capacity change from 0 to 32768 [ 187.048060][T12075] loop7: detected capacity change from 0 to 2048 [ 187.063497][ T3299] loop2: p1 p3 < > [ 187.064554][T12075] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.089993][T12043] loop2: p1 p3 < > [ 187.114989][ T9974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.165440][T12086] loop7: detected capacity change from 0 to 512 [ 187.186204][T12086] EXT4-fs: Ignoring removed oldalloc option [ 187.200636][T12086] EXT4-fs: quotafile must be on filesystem root [ 187.332706][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 187.342803][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 187.384122][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 187.384324][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 187.419905][T12098] netlink: 'syz.2.2871': attribute type 4 has an invalid length. [ 187.427911][T12098] netlink: 'syz.2.2871': attribute type 4 has an invalid length. [ 187.499121][ T8654] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.513725][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 187.525159][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 187.546576][ T8654] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.577260][ T8654] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.621213][ T8654] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.637278][ T8654] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.671211][ T8654] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.699995][ T8654] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.718405][ T8654] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.829426][T12105] netlink: 'syz.5.2873': attribute type 1 has an invalid length. [ 187.897939][T12105] 8021q: adding VLAN 0 to HW filter on device bond10 [ 188.091012][T12128] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 188.115852][T12126] xfrm0 speed is unknown, defaulting to 1000 [ 188.124008][T12128] ref_ctr increment failed for inode: 0x867 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810b684a40 [ 188.147116][T12127] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 188.163674][T12127] ref_ctr decrement failed for inode: 0x867 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810b684a40 [ 188.182169][T12127] uprobe: syz.5.2882:12127 failed to unregister, leaking uprobe [ 188.219960][T12126] wg2 speed is unknown, defaulting to 1000 [ 188.650172][T12142] loop7: detected capacity change from 0 to 8192 [ 189.392630][ T9974] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 189.400757][ T9974] FAT-fs (loop7): Filesystem has been set read-only [ 189.563801][T12175] FAULT_INJECTION: forcing a failure. [ 189.563801][T12175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.578855][T12175] CPU: 0 UID: 0 PID: 12175 Comm: syz.6.2898 Tainted: G W syzkaller #0 PREEMPT(full) [ 189.578935][T12175] Tainted: [W]=WARN [ 189.578944][T12175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 189.578959][T12175] Call Trace: [ 189.578967][T12175] [ 189.578976][T12175] __dump_stack+0x1d/0x30 [ 189.579028][T12175] dump_stack_lvl+0x95/0xd0 [ 189.579053][T12175] dump_stack+0x15/0x1b [ 189.579077][T12175] should_fail_ex+0x263/0x280 [ 189.579174][T12175] should_fail+0xb/0x20 [ 189.579253][T12175] should_fail_usercopy+0x1a/0x20 [ 189.579287][T12175] _copy_to_user+0x20/0xa0 [ 189.579422][T12175] __x64_sys_clock_adjtime+0x167/0x1d0 [ 189.579457][T12175] x64_sys_call+0x2794/0x3020 [ 189.579486][T12175] do_syscall_64+0x12c/0x370 [ 189.579530][T12175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.579630][T12175] RIP: 0033:0x7f1c0cf2bf79 [ 189.579650][T12175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.579670][T12175] RSP: 002b:00007f1c0b95e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 189.579691][T12175] RAX: ffffffffffffffda RBX: 00007f1c0d1a6090 RCX: 00007f1c0cf2bf79 [ 189.579705][T12175] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000000 [ 189.579745][T12175] RBP: 00007f1c0b95e090 R08: 0000000000000000 R09: 0000000000000000 [ 189.579759][T12175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.579771][T12175] R13: 00007f1c0d1a6128 R14: 00007f1c0d1a6090 R15: 00007fff042a04a8 [ 189.579791][T12175] [ 189.767967][T12181] loop3: detected capacity change from 0 to 512 [ 189.780085][T12185] __nla_validate_parse: 5 callbacks suppressed [ 189.780102][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2903'. [ 189.801740][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 189.828973][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2905'. [ 189.845045][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 189.845061][ T28] audit: type=1400 audit(1770833570.007:2781): avc: denied { map } for pid=12190 comm="syz.3.2906" path="socket:[37045]" dev="sockfs" ino=37045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.910945][ T59] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.923286][ T59] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.949922][T12200] loop6: detected capacity change from 0 to 128 [ 189.954013][ T28] audit: type=1326 audit(1770833570.117:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12205 comm="syz.3.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bbbe5bf79 code=0x7ffc0000 [ 189.987869][T12200] vfat: Unknown parameter 'nfme' [ 189.995000][ T59] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.015008][ T59] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.057030][T12169] Process accounting resumed [ 190.070397][T12200] syz_tun: entered allmulticast mode [ 190.070573][T12199] syz_tun: left allmulticast mode [ 190.120963][T12216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.136745][ T4792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 190.137466][ T59] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.137545][ T59] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.195105][ T59] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.195140][ T59] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.311980][T12210] xfrm0 speed is unknown, defaulting to 1000 [ 190.360290][ T59] bridge_slave_1: left allmulticast mode [ 190.360326][ T59] bridge_slave_1: left promiscuous mode [ 190.360441][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.367623][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2922'. [ 190.369193][ T59] bridge_slave_0: left allmulticast mode [ 190.369215][ T59] bridge_slave_0: left promiscuous mode [ 190.369365][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.428296][T12257] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2922'. [ 190.468375][T12257] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2922'. [ 190.615855][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.626223][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.636075][ T59] bond0 (unregistering): Released all slaves [ 190.637998][ T59] bond1 (unregistering): Released all slaves [ 190.651475][ T59] bond2 (unregistering): (slave vlan3): Releasing active interface [ 190.653462][ T59] bond2 (unregistering): Released all slaves [ 190.668200][T12210] wg2 speed is unknown, defaulting to 1000 [ 190.713648][ T59] tipc: Left network mode [ 190.760182][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2924'. [ 190.760205][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2924'. [ 190.841182][ T59] hsr_slave_0: left promiscuous mode [ 190.841540][ T59] hsr_slave_1: left promiscuous mode [ 190.843424][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.843445][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.843757][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.843774][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.866147][ T59] veth1_macvtap: left promiscuous mode [ 190.866225][ T59] veth0_macvtap: left promiscuous mode [ 190.866275][ T59] veth1_vlan: left promiscuous mode [ 190.866389][ T59] veth0_vlan: left promiscuous mode [ 190.950569][ T59] pimreg3 (unregistering): left allmulticast mode [ 191.002117][ T4789] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 191.011081][ T59] team0 (unregistering): Port device team_slave_1 removed [ 191.018457][ T59] team0 (unregistering): Port device team_slave_0 removed [ 191.069431][T12295] syzkaller0: entered promiscuous mode [ 191.069452][T12295] syzkaller0: entered allmulticast mode [ 191.110112][T12210] chnl_net:caif_netlink_parms(): no params data found [ 191.194583][T12210] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.194619][T12210] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.194754][T12210] bridge_slave_0: entered allmulticast mode [ 191.223944][T12210] bridge_slave_0: entered promiscuous mode [ 191.232068][T12210] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.232166][T12210] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.232231][T12210] bridge_slave_1: entered allmulticast mode [ 191.232846][T12210] bridge_slave_1: entered promiscuous mode [ 191.238432][T12310] loop6: detected capacity change from 0 to 512 [ 191.241022][T12310] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.256492][T12310] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 191.256520][T12310] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 191.256602][T12310] EXT4-fs error (device loop6): ext4_acquire_dquot:6991: comm syz.6.2930: Failed to acquire dquot type 1 [ 191.256628][T12310] loop6: lost filesystem error report for type 5 error -5 [ 191.257024][T12310] EXT4-fs (loop6): 1 truncate cleaned up [ 191.257548][T12310] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 191.258020][T12210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.258585][T12310] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 191.258606][T12310] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 191.258637][T12310] EXT4-fs error (device loop6): ext4_acquire_dquot:6991: comm syz.6.2930: Failed to acquire dquot type 1 [ 191.259405][T12210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.271612][T12210] team0: Port device team_slave_0 added [ 191.272985][T12210] team0: Port device team_slave_1 added [ 191.283440][T12210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.283453][T12210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.283479][T12210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.284231][T12210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.284244][T12210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.284275][T12210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.301391][ T7631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 191.333832][T12210] hsr_slave_0: entered promiscuous mode [ 191.602083][T12210] hsr_slave_1: entered promiscuous mode [ 191.608036][T12210] debugfs: 'hsr0' already exists in 'hsr' [ 191.608054][T12210] Cannot create hsr debugfs directory [ 191.653185][T12339] loop2: detected capacity change from 0 to 512 [ 191.660735][T12339] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 191.678440][T12335] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2935'. [ 191.690177][ T28] audit: type=1400 audit(1770833571.857:2783): avc: denied { search } for pid=12340 comm="syz.3.2937" name="/" dev="configfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.690230][T12341] sctp: [Deprecated]: syz.3.2937 (pid 12341) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.690230][T12341] Use struct sctp_sack_info instead [ 191.703986][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2935'. [ 191.725538][ T28] audit: type=1400 audit(1770833571.857:2784): avc: denied { search } for pid=12340 comm="syz.3.2937" name="/" dev="configfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.743045][T12339] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2936: bg 0: block 393: padding at end of block bitmap is not set [ 191.760314][ T28] audit: type=1400 audit(1770833571.857:2785): avc: denied { read open } for pid=12340 comm="syz.3.2937" path="/" dev="configfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.807424][T12210] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 191.814355][T12339] loop2: lost filesystem error report for type 5 error -117 [ 191.814546][T12339] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 191.830632][T12339] loop2: lost filesystem error report for type 5 error -117 [ 191.830880][T12339] EXT4-fs (loop2): 2 truncates cleaned up [ 191.846460][T12210] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 191.855191][T12210] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 191.862345][T12339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.876690][T12210] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 191.898339][T12339] lo speed is unknown, defaulting to 1000 [ 191.906868][T12339] lo speed is unknown, defaulting to 1000 [ 191.921115][T12339] lo speed is unknown, defaulting to 1000 [ 191.959314][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2936'. [ 191.995034][T12364] hsr_slave_0: left promiscuous mode [ 192.006630][T12364] hsr_slave_1: left promiscuous mode [ 192.033749][T12210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.050008][T12339] infiniband syz0: set down [ 192.055071][T12339] infiniband syz0: added lo [ 192.067634][ T3480] lo speed is unknown, defaulting to 1000 [ 192.075910][T12210] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.099732][T12382] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 192.117530][ T3480] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 192.134600][T12339] RDS/IB: syz0: added [ 192.141748][ T8637] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.148846][ T8637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.151276][T12339] smc: adding ib device syz0 with port count 1 [ 192.163575][T12339] smc: ib device syz0 port 1 has no pnetid [ 192.176657][ T4792] lo speed is unknown, defaulting to 1000 [ 192.177748][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.189675][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.200314][T12339] lo speed is unknown, defaulting to 1000 [ 192.208730][T12210] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.239401][T12210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.259999][T12339] lo speed is unknown, defaulting to 1000 [ 192.356471][T12210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.366925][T12339] lo speed is unknown, defaulting to 1000 [ 192.436564][T12339] lo speed is unknown, defaulting to 1000 [ 192.477655][T12339] lo speed is unknown, defaulting to 1000 [ 192.525654][T12210] veth0_vlan: entered promiscuous mode [ 192.532392][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.535446][T12210] veth1_vlan: entered promiscuous mode [ 192.566037][T12210] veth0_macvtap: entered promiscuous mode [ 192.578839][T12210] veth1_macvtap: entered promiscuous mode [ 192.588305][T12422] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.607631][T12210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.617494][ T28] audit: type=1400 audit(1770833572.767:2786): avc: denied { create } for pid=12407 comm="syz.5.2948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 192.647985][T12210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.665398][ T8654] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.682184][ T8654] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.692950][ T3480] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 192.704362][ T8654] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.718490][ T8654] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.755462][T12430] netlink: 'syz.2.2952': attribute type 4 has an invalid length. [ 192.765019][T12430] netlink: 'syz.2.2952': attribute type 4 has an invalid length. [ 192.774172][ T3480] lo speed is unknown, defaulting to 1000 [ 192.779978][ T3480] syz0: Port: 1 Link ACTIVE [ 192.785356][ T3405] lo speed is unknown, defaulting to 1000 [ 192.788353][T12430] pim6reg: entered allmulticast mode [ 192.797705][T12430] pim6reg: left allmulticast mode [ 192.851152][ T3480] lo speed is unknown, defaulting to 1000 [ 192.854624][T12439] tipc: Started in network mode [ 192.859514][ T3480] syz0: Port: 1 Link DOWN [ 192.861806][T12439] tipc: Node identity 4, cluster identity 4711 [ 192.872601][T12439] tipc: Node number set to 4 [ 192.877348][ T3405] lo speed is unknown, defaulting to 1000 [ 192.884646][T12430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=12430 comm=syz.2.2952 [ 193.075277][T12454] loop3: detected capacity change from 0 to 164 [ 193.169943][T12459] 9p: Bad value for 'rfdno' [ 193.412719][ T3586] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 193.490585][T12470] netlink: 'syz.3.2966': attribute type 1 has an invalid length. [ 193.602035][T12482] loop3: detected capacity change from 0 to 512 [ 193.623324][T12482] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.652043][T12485] openvswitch: netlink: Missing key (keys=40, expected=100) [ 193.682296][T12482] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.2972: Failed to acquire dquot type 1 [ 193.705313][T12482] loop3: lost filesystem error report for type 5 error -5 [ 193.710169][T12482] EXT4-fs (loop3): 1 truncate cleaned up [ 193.724785][T12492] 9pnet_fd: Insufficient options for proto=fd [ 193.737931][T12482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 193.752182][T12482] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.2972: Failed to acquire dquot type 1 [ 193.763606][T12493] geneve2: entered promiscuous mode [ 193.769733][ T8638] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 43460 - 0 [ 193.807452][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 193.816707][ T8638] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 43460 - 0 [ 193.839116][ T8638] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 43460 - 0 [ 193.878016][T12504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.902912][T12504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.053369][T12521] 9pnet_fd: Insufficient options for proto=fd [ 194.156300][T12531] tmpfs: Bad value for 'mpol' [ 194.318613][T12549] 9pnet_fd: Insufficient options for proto=fd [ 194.474141][T12558] FAULT_INJECTION: forcing a failure. [ 194.474141][T12558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.014699][T12571] loop8: detected capacity change from 0 to 512 [ 195.046635][T12571] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.046663][T12558] CPU: 1 UID: 0 PID: 12558 Comm: syz.6.3002 Tainted: G W syzkaller #0 PREEMPT(full) [ 195.046696][T12558] Tainted: [W]=WARN [ 195.046702][T12558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 195.046715][T12558] Call Trace: [ 195.046722][T12558] [ 195.046730][T12558] __dump_stack+0x1d/0x30 [ 195.046796][T12558] dump_stack_lvl+0x95/0xd0 [ 195.046862][T12558] dump_stack+0x15/0x1b [ 195.046884][T12558] should_fail_ex+0x263/0x280 [ 195.046931][T12558] should_fail+0xb/0x20 [ 195.046957][T12558] should_fail_usercopy+0x1a/0x20 [ 195.047004][T12558] _copy_to_user+0x20/0xa0 [ 195.047037][T12558] __x64_sys_clock_adjtime+0x167/0x1d0 [ 195.047158][T12558] x64_sys_call+0x2794/0x3020 [ 195.047260][T12558] do_syscall_64+0x12c/0x370 [ 195.047335][T12558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.047358][T12558] RIP: 0033:0x7f1c0cf2bf79 [ 195.047375][T12558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.047395][T12558] RSP: 002b:00007f1c0b97f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 195.047442][T12558] RAX: ffffffffffffffda RBX: 00007f1c0d1a5fa0 RCX: 00007f1c0cf2bf79 [ 195.047462][T12558] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000000 [ 195.047477][T12558] RBP: 00007f1c0b97f090 R08: 0000000000000000 R09: 0000000000000000 [ 195.047597][T12558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.047611][T12558] R13: 00007f1c0d1a6038 R14: 00007f1c0d1a5fa0 R15: 00007fff042a04a8 [ 195.047649][T12558] [ 195.189988][T12563] xfrm0 speed is unknown, defaulting to 1000 [ 195.284175][T12493] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 43460 - 0 [ 195.300764][T12571] __quota_error: 7 callbacks suppressed [ 195.300781][T12571] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 195.301570][T12582] __nla_validate_parse: 12 callbacks suppressed [ 195.301583][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3009'. [ 195.307001][T12571] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 195.341704][T12571] EXT4-fs error (device loop8): ext4_acquire_dquot:6991: comm syz.8.3006: Failed to acquire dquot type 1 [ 195.353337][T12571] loop8: lost filesystem error report for type 5 error -5 [ 195.353989][T12571] EXT4-fs (loop8): 1 truncate cleaned up [ 195.367389][T12571] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 195.387260][T12571] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 195.397778][T12571] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 195.407327][T12571] EXT4-fs error (device loop8): ext4_acquire_dquot:6991: comm syz.8.3006: Failed to acquire dquot type 1 [ 195.423154][T12563] wg2 speed is unknown, defaulting to 1000 [ 195.429449][T12563] lo speed is unknown, defaulting to 1000 [ 195.436878][T12210] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 195.447115][T12493] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 43460 - 0 [ 195.471253][T12588] 9pnet_fd: Insufficient options for proto=fd [ 195.556125][T12493] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 43460 - 0 [ 195.582273][T12563] chnl_net:caif_netlink_parms(): no params data found [ 195.623422][T12600] rdma_rxe: rxe_newlink: failed to add lo [ 195.648223][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3015'. [ 195.664416][ T8638] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 43460 - 0 [ 195.664554][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3015'. [ 195.681961][ T8638] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 43460 - 0 [ 195.690855][T12563] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.698318][T12563] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.705780][T12563] bridge_slave_0: entered allmulticast mode [ 195.712436][T12563] bridge_slave_0: entered promiscuous mode [ 195.719257][ T8638] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 43460 - 0 [ 195.731455][ T8638] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 43460 - 0 [ 195.750106][T12563] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.757377][T12563] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.764710][T12563] bridge_slave_1: entered allmulticast mode [ 195.771341][T12563] bridge_slave_1: entered promiscuous mode [ 195.793365][T12563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.805055][T12563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.829936][T12616] 9pnet_fd: Insufficient options for proto=fd [ 195.833394][T12563] team0: Port device team_slave_0 added [ 195.850471][T12563] team0: Port device team_slave_1 added [ 195.878415][T12563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.885968][T12563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.923823][T12563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.932885][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3025'. [ 195.946262][T12627] xfrm0 speed is unknown, defaulting to 1000 [ 195.959619][T12563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.964120][ T28] audit: type=1400 audit(1770833832.130:2790): avc: denied { name_connect } for pid=12623 comm="syz.8.3025" dest=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 195.974406][T12563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.014848][T12563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.025832][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3025'. [ 196.034905][T12627] wg2 speed is unknown, defaulting to 1000 [ 196.046293][T12627] lo speed is unknown, defaulting to 1000 [ 196.068808][T12632] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3027'. [ 196.070917][T12563] hsr_slave_0: entered promiscuous mode [ 196.084404][T12563] hsr_slave_1: entered promiscuous mode [ 196.090491][T12563] debugfs: 'hsr0' already exists in 'hsr' [ 196.096504][T12563] Cannot create hsr debugfs directory [ 196.114221][T12634] loop8: detected capacity change from 0 to 512 [ 196.151097][T12634] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 196.170091][T12634] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 196.201548][T12634] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #11: comm syz.8.3028: corrupted inode contents [ 196.213974][T12634] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 196.217809][T12634] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #11: comm syz.8.3028: mark_inode_dirty error [ 196.241275][T12634] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 196.249663][T12634] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3028: invalid indirect mapped block 1 (level 1) [ 196.272029][T12634] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 196.276062][T12563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.277583][T12634] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #11: comm syz.8.3028: corrupted inode contents [ 196.308065][T12563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.318479][T12634] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 196.318718][T12634] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 196.336609][T12634] loop8: lost filesystem error report for type 5 error -117 [ 196.336785][T12634] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #11: comm syz.8.3028: corrupted inode contents [ 196.356158][T12634] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 196.356313][T12634] EXT4-fs error (device loop8): ext4_truncate:4635: inode #11: comm syz.8.3028: mark_inode_dirty error [ 196.376910][T12634] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 196.377085][T12634] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 196.395313][T12634] loop8: lost filesystem error report for type 5 error -117 [ 196.395560][T12634] EXT4-fs (loop8): 1 truncate cleaned up [ 196.409303][T12634] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.409444][T12563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.432344][T12563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.439229][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3031'. [ 196.477582][T12654] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.485259][T12654] bridge_slave_1: left allmulticast mode [ 196.491085][T12654] bridge_slave_1: left promiscuous mode [ 196.496773][T12654] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.506394][T12654] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 196.523602][T12563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.534030][T12563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.583576][T12563] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.594605][T12563] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.698581][T12563] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.717204][T12563] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.734246][T12563] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.736761][T12563] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.839603][T12563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.861401][T12563] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.876092][ T28] audit: type=1400 audit(1770833833.048:2791): avc: denied { map } for pid=12692 comm="syz.5.3044" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 196.893620][ T8640] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.906406][ T8640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.930126][ T8640] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.937293][ T8640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.947819][T12693] xfrm0 speed is unknown, defaulting to 1000 [ 196.980794][T12210] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.001352][T12563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.028295][ T28] audit: type=1400 audit(1770833833.199:2792): avc: denied { connect } for pid=12704 comm="syz.2.3050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 197.118192][T12714] bridge_slave_0: left allmulticast mode [ 197.124574][T12714] bridge_slave_0: left promiscuous mode [ 197.130265][T12714] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.140315][T12722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.149478][T12722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.157721][T12714] bond0: (slave bridge_slave_1): Releasing backup interface [ 197.167593][T12714] bond0: (slave bond_slave_0): Releasing backup interface [ 197.177306][T12714] bond0: (slave bond_slave_1): Releasing backup interface [ 197.189627][T12714] team0: Port device team_slave_0 removed [ 197.198365][T12714] team0: Port device team_slave_1 removed [ 197.205113][T12714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.212757][T12714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.221047][T12714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.228574][T12714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.238837][T12714] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.261227][T12693] wg2 speed is unknown, defaulting to 1000 [ 197.271864][T12693] lo speed is unknown, defaulting to 1000 [ 197.280184][T12563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.448898][T12563] veth0_vlan: entered promiscuous mode [ 197.457985][T12563] veth1_vlan: entered promiscuous mode [ 197.481488][T12563] veth0_macvtap: entered promiscuous mode [ 197.493372][T12563] veth1_macvtap: entered promiscuous mode [ 197.505729][T12563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.535636][T12563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.556148][ T8638] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.572162][ T8638] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.588268][T12742] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3058'. [ 197.599974][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3058'. [ 197.609011][T12742] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3058'. [ 197.628274][ T8638] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.640830][T12740] xfrm0 speed is unknown, defaulting to 1000 [ 197.661470][ T8638] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.717170][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 197.743474][T12763] FAULT_INJECTION: forcing a failure. [ 197.743474][T12763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.751195][T12740] wg2 speed is unknown, defaulting to 1000 [ 197.765419][T12740] lo speed is unknown, defaulting to 1000 [ 197.784446][T12768] loop8: detected capacity change from 0 to 512 [ 197.791569][T12763] CPU: 1 UID: 0 PID: 12763 Comm: syz.6.3064 Tainted: G W syzkaller #0 PREEMPT(full) [ 197.791607][T12763] Tainted: [W]=WARN [ 197.791616][T12763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 197.791630][T12763] Call Trace: [ 197.791698][T12763] [ 197.791706][T12763] __dump_stack+0x1d/0x30 [ 197.791783][T12763] dump_stack_lvl+0x95/0xd0 [ 197.791809][T12763] dump_stack+0x15/0x1b [ 197.791831][T12763] should_fail_ex+0x263/0x280 [ 197.791857][T12763] should_fail+0xb/0x20 [ 197.791881][T12763] should_fail_usercopy+0x1a/0x20 [ 197.792072][T12763] copy_folio_from_iter_atomic+0x269/0x1170 [ 197.792111][T12763] ? shmem_write_begin+0xfc/0x1f0 [ 197.792171][T12763] ? shmem_write_begin+0x135/0x1f0 [ 197.792195][T12763] generic_perform_write+0x2c1/0x490 [ 197.792222][T12763] shmem_file_write_iter+0xc5/0xf0 [ 197.792245][T12763] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 197.792311][T12763] vfs_write+0x5a6/0x9f0 [ 197.792348][T12763] ksys_write+0xdc/0x1a0 [ 197.792412][T12763] __x64_sys_write+0x40/0x50 [ 197.792442][T12763] x64_sys_call+0x27e1/0x3020 [ 197.792472][T12763] do_syscall_64+0x12c/0x370 [ 197.792509][T12763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.792589][T12763] RIP: 0033:0x7f1c0ceec84e [ 197.792605][T12763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 197.792627][T12763] RSP: 002b:00007f1c0b97eda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.792652][T12763] RAX: ffffffffffffffda RBX: 00007f1c0b97f6c0 RCX: 00007f1c0ceec84e [ 197.792667][T12763] RDX: 0000000000020000 RSI: 00007f1c0355f000 RDI: 0000000000000006 [ 197.792680][T12763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.792740][T12763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 197.792756][T12763] R13: 00007f1c0b97eee0 R14: 00007f1c0b97eea0 R15: 00007f1c0355f000 [ 197.792778][T12763] [ 197.793646][T12763] loop6: detected capacity change from 0 to 256 [ 197.946264][T12768] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 198.004787][T12768] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 198.012809][T12768] System zones: 0-1, 15-15, 18-18, 34-34 [ 198.031795][T12768] EXT4-fs (loop8): orphan cleanup on readonly fs [ 198.041778][T12768] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 198.052733][T12768] EXT4-fs warning (device loop8): ext4_enable_quotas:7226: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 198.132464][T12768] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 198.142072][T12768] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3066: bg 0: block 40: padding at end of block bitmap is not set [ 198.166139][T12768] loop8: lost filesystem error report for type 5 error -117 [ 198.166566][T12768] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 198.183175][T12768] loop8: lost filesystem error report for type 5 error -117 [ 198.183437][T12768] EXT4-fs (loop8): 1 truncate cleaned up [ 198.197629][T12768] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.307830][T12768] netlink: 'syz.8.3066': attribute type 8 has an invalid length. [ 198.325861][T12787] netlink: 'syz.2.3068': attribute type 1 has an invalid length. [ 198.363953][ T28] audit: type=1326 audit(1770833834.540:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.5.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765d27bf79 code=0x7ffc0000 [ 198.391793][ T28] audit: type=1326 audit(1770833834.540:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.5.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765d27bf79 code=0x7ffc0000 [ 198.392614][T12779] EXT4-fs error (device loop8): ext4_lookup:1785: inode #15: comm syz.8.3066: iget: bad i_size value: 360287970189639690 [ 198.445393][T12784] netlink: 'syz.2.3068': attribute type 1 has an invalid length. [ 198.457441][T12768] EXT4-fs error (device loop8): ext4_encrypted_get_link:46: inode #16: comm syz.8.3066: bad symlink. [ 198.469268][T12768] EXT4-fs error (device loop8): ext4_encrypted_get_link:46: inode #16: comm syz.8.3066: bad symlink. [ 198.525880][T12210] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 198.557584][T12210] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 198.575235][T12804] xfrm0 speed is unknown, defaulting to 1000 [ 198.583011][T12809] geneve2: entered promiscuous mode [ 198.589855][ T8638] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.619049][ T8638] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.635182][ T8638] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.644323][ T8638] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.681215][T12804] wg2 speed is unknown, defaulting to 1000 [ 198.702414][T12804] lo speed is unknown, defaulting to 1000 [ 198.897252][T12824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.915915][T12824] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.936983][T12824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.970753][ T4792] lo speed is unknown, defaulting to 1000 [ 198.998012][ T4792] syz0: Port: 1 Link ACTIVE [ 199.007842][ T4792] lo speed is unknown, defaulting to 1000 [ 199.062756][T12829] loop2: detected capacity change from 0 to 1024 [ 199.104358][T12829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.117973][T12628] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.420105][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.448162][ T8637] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.546710][ T8637] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.571318][T12860] netlink: 'syz.2.3094': attribute type 4 has an invalid length. [ 199.586030][T12862] IPVS: Error connecting to the multicast addr [ 199.598055][ T4789] lo speed is unknown, defaulting to 1000 [ 199.607222][T12860] netlink: 'syz.2.3094': attribute type 4 has an invalid length. [ 199.615949][ T4789] syz0: Port: 1 Link DOWN [ 199.627963][ T8637] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.666835][ T4792] lo speed is unknown, defaulting to 1000 [ 199.679229][ T10] lo speed is unknown, defaulting to 1000 [ 199.682048][T12848] xfrm0 speed is unknown, defaulting to 1000 [ 199.705195][ T10] syz0: Port: 1 Link ACTIVE [ 199.723912][ T8637] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.768416][T12878] vlan2: entered promiscuous mode [ 199.778795][T12878] dummy0: entered promiscuous mode [ 199.798548][T12880] netlink: 'syz.5.3101': attribute type 1 has an invalid length. [ 199.805241][T12848] wg2 speed is unknown, defaulting to 1000 [ 199.812750][T12848] lo speed is unknown, defaulting to 1000 [ 200.070458][ T8637] bond0 (unregistering): Released all slaves [ 200.132835][ T8637] tipc: Left network mode [ 200.261485][T12934] loop3: detected capacity change from 0 to 256 [ 200.293922][T12848] chnl_net:caif_netlink_parms(): no params data found [ 200.313374][T12938] ip6_vti0: entered allmulticast mode [ 200.322074][T12938] SELinux: failed to load policy [ 200.398532][ T8637] hsr_slave_0: left promiscuous mode [ 200.415493][ T8637] hsr_slave_1: left promiscuous mode [ 200.429770][ T8637] veth1_macvtap: left promiscuous mode [ 200.435323][ T8637] veth0_macvtap: left promiscuous mode [ 200.440903][ T8637] veth1_vlan: left promiscuous mode [ 200.446461][ T8637] veth0_vlan: left promiscuous mode [ 200.481402][T12964] loop6: detected capacity change from 0 to 256 [ 200.615045][T12848] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.626990][T12848] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.634487][T12848] bridge_slave_0: entered allmulticast mode [ 200.640950][T12848] bridge_slave_0: entered promiscuous mode [ 200.657778][T12848] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.666132][T12848] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.673496][T12848] bridge_slave_1: entered allmulticast mode [ 200.680089][T12848] bridge_slave_1: entered promiscuous mode [ 200.698703][T12848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.709569][T12848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.729814][T12848] team0: Port device team_slave_0 added [ 200.736590][T12848] team0: Port device team_slave_1 added [ 200.751899][T12848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.758988][T12848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.785121][T12848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.804168][T12973] netlink: 'syz.3.3120': attribute type 4 has an invalid length. [ 200.816584][T12848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.832629][T12973] netlink: 'syz.3.3120': attribute type 4 has an invalid length. [ 200.840734][T12848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.869864][T12848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.085123][T12848] hsr_slave_0: entered promiscuous mode [ 201.087431][T12848] hsr_slave_1: entered promiscuous mode [ 201.102189][T12848] debugfs: 'hsr0' already exists in 'hsr' [ 201.102206][T12848] Cannot create hsr debugfs directory [ 201.224970][T12999] __nla_validate_parse: 8 callbacks suppressed [ 201.224986][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3124'. [ 201.552913][T12848] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 201.581913][T13007] bond8: entered allmulticast mode [ 201.597827][T13011] loop6: detected capacity change from 0 to 2048 [ 201.615837][T12848] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 201.627478][T13011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.648181][T12848] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 201.703950][T12848] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 201.746151][T13007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3127'. [ 201.765682][ T7631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.867364][T12848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.880346][T12848] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.922206][ T8640] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.929350][ T8640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.931912][T13054] loop6: detected capacity change from 0 to 512 [ 201.949872][T13054] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.955237][T13056] loop3: detected capacity change from 0 to 512 [ 201.960003][ T8640] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.972284][ T8640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.982208][T13056] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.999580][T13054] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 202.035641][T13056] __quota_error: 60 callbacks suppressed [ 202.035657][T13056] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 202.036449][T13054] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3136: bg 0: block 248: padding at end of block bitmap is not set [ 202.062384][T13056] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 202.066733][T13054] loop6: lost filesystem error report for type 5 error -117 [ 202.075721][T13054] Quota error (device loop6): write_blk: dquota write failed [ 202.090730][T13054] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 202.098921][T12848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.100953][T13054] EXT4-fs error (device loop6): ext4_acquire_dquot:6991: comm syz.6.3136: Failed to acquire dquot type 1 [ 202.108171][T13056] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.3137: Failed to acquire dquot type 1 [ 202.118956][T13054] loop6: lost filesystem error report for type 5 error -117 [ 202.131660][T13056] loop3: lost filesystem error report for type 5 error -5 [ 202.143822][T13056] EXT4-fs (loop3): 1 truncate cleaned up [ 202.151786][T13054] EXT4-fs (loop6): 1 truncate cleaned up [ 202.163082][T13054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 202.167440][T13056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 202.224594][ T7631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 202.263074][T12563] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 202.285042][ T2996] ================================================================== [ 202.293158][ T2996] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 202.301163][ T2996] [ 202.303490][ T2996] write to 0xffff88811b319870 of 8 bytes by task 3296 on cpu 1: [ 202.311121][ T2996] dentry_unlink_inode+0x65/0x260 [ 202.316159][ T2996] d_delete+0xc8/0xe0 [ 202.320142][ T2996] d_delete_notify+0x32/0x100 [ 202.324829][ T2996] vfs_unlink+0x289/0x490 [ 202.329171][ T2996] filename_unlinkat+0x1e2/0x410 [ 202.334124][ T2996] __se_sys_unlink+0x2b/0xe0 [ 202.338723][ T2996] __x64_sys_unlink+0x1f/0x30 [ 202.343409][ T2996] x64_sys_call+0x2eb6/0x3020 [ 202.348095][ T2996] do_syscall_64+0x12c/0x370 [ 202.352696][ T2996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.358600][ T2996] [ 202.360934][ T2996] read to 0xffff88811b319870 of 8 bytes by task 2996 on cpu 0: [ 202.368480][ T2996] step_into_slowpath+0x12c/0x4c0 [ 202.373512][ T2996] path_lookupat+0x330/0x500 [ 202.378106][ T2996] filename_lookup+0x190/0x390 [ 202.382875][ T2996] do_readlinkat+0x74/0x2f0 [ 202.387385][ T2996] __x64_sys_readlink+0x47/0x60 [ 202.392242][ T2996] x64_sys_call+0x2b51/0x3020 [ 202.396939][ T2996] do_syscall_64+0x12c/0x370 [ 202.401540][ T2996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.407440][ T2996] [ 202.409764][ T2996] value changed: 0xffff888105354368 -> 0x0000000000000000 [ 202.416872][ T2996] [ 202.419191][ T2996] Reported by Kernel Concurrency Sanitizer on: [ 202.425344][ T2996] CPU: 0 UID: 0 PID: 2996 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 202.435765][ T2996] Tainted: [W]=WARN [ 202.439564][ T2996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 202.449621][ T2996] ================================================================== [ 202.466296][T13083] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 202.517018][T12848] veth0_vlan: entered promiscuous mode [ 202.524760][T12848] veth1_vlan: entered promiscuous mode [ 202.540372][T12848] veth0_macvtap: entered promiscuous mode [ 202.547698][T12848] veth1_macvtap: entered promiscuous mode [ 202.559280][T12848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.572077][T12848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.583938][ T8654] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.602193][ T8654] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.615081][ T8654] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.625248][ T8654] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0